$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/1a489783-c59d-345c-9f9f-a611b9f72a2e.roa File: 1a489783-c59d-345c-9f9f-a611b9f72a2e.roa (raw, json) Hash identifier: g1ixeTF05fwc0belyw0R9HOSGgLMRVH7Z2zU3KBT8zU= Subject key identifier: C7:BD:A1:7A:07:1B:A0:AF:03:68:62:63:24:4B:EF:08:F4:B9:75:06 Certificate issuer: /CN=38e5faa8-b7d1-4835-a5a0-b17158745b3e Certificate serial: 010D0C9F4328584F75D89B15722D01BFA5104380 Authority key identifier: 87:E8:DE:48:38:97:AE:AF:1A:F8:10:69:1B:1C:A7:9F:CD:DC:FD:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/1a489783-c59d-345c-9f9f-a611b9f72a2e.roa Signing time: Sat 10 Oct 2026 22:41:28 +0000 ROA not before: Sat 10 Oct 2026 22:41:28 +0000 ROA not after: Fri 08 Jan 2027 23:41:28 +0000 asID: 6079 IP address blocks: 206.220.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/38e5faa8-b7d1-4835-a5a0-b17158745b3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/38e5faa8-b7d1-4835-a5a0-b17158745b3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:75:d8:9b:15:72:2d:01:bf:a5:10:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38e5faa8-b7d1-4835-a5a0-b17158745b3e Validity Not Before: Oct 10 22:41:28 2026 GMT Not After : Jan 8 23:41:28 2027 GMT Subject: CN=9d0a44f0-6f16-462d-b7e7-8267bc1dce7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:24:73:2f:ee:7e:65:85:43:94:a3:6b:fc:28: 3d:1b:75:e4:85:53:2c:20:b9:12:3e:c9:08:22:c7: 21:a1:af:3c:2b:4f:6c:5b:8b:a0:cc:14:73:a9:43: 94:3a:38:da:39:4a:fc:e5:1c:1b:c1:06:07:b4:f2: 57:92:01:92:1d:92:b2:f0:e2:ef:fa:4b:73:59:af: 60:35:c4:1d:50:0a:50:b8:48:44:12:9d:51:68:84: 23:ba:62:26:d5:8d:61:96:4b:41:1d:eb:9c:82:bd: 03:1f:17:3f:ec:51:2b:57:9c:d6:15:15:a4:a5:40: b5:c0:0b:e9:1e:a2:93:c2:be:3b:69:58:02:d1:29: 66:26:bd:be:ab:ab:fd:66:a7:7b:65:00:04:d3:54: cd:d6:d8:8d:28:8e:67:6b:9b:fd:3e:1f:87:d8:89: 0e:fa:0c:0c:88:c2:fe:f8:b6:31:25:1c:a3:09:42: e0:a6:f2:d5:f8:ea:50:81:d6:f0:9f:01:86:1e:27: e1:58:1a:f6:6d:b4:8a:15:ca:0e:7a:f2:af:21:1a: 1e:6d:04:69:41:d3:0b:44:1a:e2:98:62:ac:6a:ba: 93:14:ec:8b:11:16:ff:15:53:f9:95:e8:07:ba:5b: a6:35:c9:d3:7e:76:29:b3:34:d1:ae:34:53:2f:56: 7a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:BD:A1:7A:07:1B:A0:AF:03:68:62:63:24:4B:EF:08:F4:B9:75:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/1a489783-c59d-345c-9f9f-a611b9f72a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e/38e5faa8-b7d1-4835-a5a0-b17158745b3e.crl X509v3 Authority Key Identifier: keyid:87:E8:DE:48:38:97:AE:AF:1A:F8:10:69:1B:1C:A7:9F:CD:DC:FD:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/38e5faa8-b7d1-4835-a5a0-b17158745b3e.cer sbgp-ipAddrBlock: critical IPv4: 206.220.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:59:11:29:03:0d:c6:d1:22:78:a4:84:ea:a0:63:a0:b6:94: 7e:c5:41:79:c6:98:41:ec:24:ff:c6:27:70:1b:7c:df:c0:ee: 05:3f:5b:61:ea:97:96:0b:5f:7e:27:56:dd:13:ff:a8:5c:cb: 29:4e:95:98:e1:e9:27:c3:bf:ec:6c:b0:ed:83:cc:bc:90:12: 69:21:29:db:22:82:da:fe:da:6c:26:6c:1e:40:63:7f:08:83: 5d:6e:b9:d6:aa:d8:6c:fe:d2:45:18:89:5b:5a:b0:be:8a:ff: 65:cc:d7:8e:5d:76:90:d4:63:19:3f:03:82:2f:7a:df:fb:6e: d1:0a:9d:6c:4b:08:64:27:a3:0e:b6:06:d5:10:cd:e4:99:fa: 75:e0:63:a8:d4:c2:34:8e:d7:9c:55:fd:4e:e8:a5:39:f0:33: 3f:b6:f4:e7:29:06:db:bc:48:e9:ac:e5:3a:8f:d0:fe:66:19: b1:05:64:eb:f6:b7:57:11:92:61:b0:6b:9f:8a:93:c9:a8:2e: ff:22:6c:fd:bc:94:c9:f4:c1:c5:e0:a0:02:72:fc:8c:0f:fa: e2:9b:23:ba:88:f7:d4:90:61:03:c3:36:c4:17:fc:d0:a5:86: 1e:e1:37:9a:8e:9a:cd:f2:4a:28:cd:6c:99:54:0b:c1:7e:d5: 3a:e4:b2:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE912JsVci0Bv6UQQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlNWZhYTgtYjdkMS00ODM1LWE1YTAtYjE3MTU4NzQ1 YjNlMB4XDTI2MTAxMDIyNDEyOFoXDTI3MDEwODIzNDEyOFowLzEtMCsGA1UEAxMk OWQwYTQ0ZjAtNmYxNi00NjJkLWI3ZTctODI2N2JjMWRjZTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSRzL+5+ZYVDlKNr/Cg9G3XkhVMsILkSPskI Ischoa88K09sW4ugzBRzqUOUOjjaOUr85RwbwQYHtPJXkgGSHZKy8OLv+ktzWa9g NcQdUApQuEhEEp1RaIQjumIm1Y1hlktBHeucgr0DHxc/7FErV5zWFRWkpUC1wAvp HqKTwr47aVgC0SlmJr2+q6v9Zqd7ZQAE01TN1tiNKI5na5v9Ph+H2IkO+gwMiML+ +LYxJRyjCULgpvLV+OpQgdbwnwGGHifhWBr2bbSKFcoOevKvIRoebQRpQdMLRBri mGKsarqTFOyLERb/FVP5legHulumNcnTfnYpszTRrjRTL1Z66QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMe9oXoHG6CvA2hiYyRL7wj0uXUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zOGU1 ZmFhOC1iN2QxLTQ4MzUtYTVhMC1iMTcxNTg3NDViM2UvMWE0ODk3ODMtYzU5ZC0z NDVjLTlmOWYtYTYxMWI5ZjcyYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzhlNWZhYTgtYjdkMS00ODM1LWE1 YTAtYjE3MTU4NzQ1YjNlLzM4ZTVmYWE4LWI3ZDEtNDgzNS1hNWEwLWIxNzE1ODc0 NWIzZS5jcmwwHwYDVR0jBBgwFoAUh+jeSDiXrq8a+BBpGxynn83c/dwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zOGU1ZmFhOC1iN2QxLTQ4MzUtYTVhMC1iMTcx NTg3NDViM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCztwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1ZESkDDcbRInikhOqgY6C2lH7FQXnGmEHsJP/GJ3AbfN/A7gU/W2Hq l5YLX34nVt0T/6hcyylOlZjh6SfDv+xssO2DzLyQEmkhKdsigtr+2mwmbB5AY38I g11uudaq2Gz+0kUYiVtasL6K/2XM145ddpDUYxk/A4Ivet/7btEKnWxLCGQnow62 BtUQzeSZ+nXgY6jUwjSO15xV/U7opTnwMz+29OcpBtu8SOms5TqP0P5mGbEFZOv2 t1cRkmGwa5+Kk8moLv8ibP28lMn0wcXgoAJy/IwP+uKbI7qI99SQYQPDNsQX/NCl hh7hN5qOms3ySijNbJlUC8F+1Trksvo= -----END CERTIFICATE-----Generated at Tue Oct 20 18:36:28 2026 by rpki-client