$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/56526468-58fd-3dad-8de2-b0b48f352e0d.roa File: 56526468-58fd-3dad-8de2-b0b48f352e0d.roa (raw, json) Hash identifier: SIM+O914MX6vK1VrvkNrHpKzAh3f8s7V2UMGmcOuy9c= Subject key identifier: 11:51:7F:DE:1B:38:52:9D:09:97:5F:95:34:33:9F:7E:DE:BC:C8:0F Certificate issuer: /CN=4171706d-65e0-4ab5-bbb3-8d0f79345c7b Certificate serial: 010D0C9F4328584F7A8C5976F57A1B59F391B860 Authority key identifier: 64:C4:F3:81:41:41:01:CA:54:69:CB:43:47:F3:57:0F:0A:07:0A:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/56526468-58fd-3dad-8de2-b0b48f352e0d.roa Signing time: Mon 12 Oct 2026 15:06:51 +0000 ROA not before: Mon 12 Oct 2026 15:06:51 +0000 ROA not after: Sun 10 Jan 2027 16:06:51 +0000 asID: 47022 IP address blocks: 199.87.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:8c:59:76:f5:7a:1b:59:f3:91:b8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4171706d-65e0-4ab5-bbb3-8d0f79345c7b Validity Not Before: Oct 12 15:06:51 2026 GMT Not After : Jan 10 16:06:51 2027 GMT Subject: CN=ef803de5-78c7-4f4b-8315-be5afc2be909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:cc:25:d1:78:5b:55:6c:ed:61:2e:37:db: e2:19:a6:80:22:6c:83:5c:06:09:6d:e3:9c:24:80: f5:ba:f1:e6:f5:c9:51:fb:c7:2f:09:44:ce:93:8a: 54:f3:00:26:38:cf:6a:f3:36:09:79:21:30:d6:a3: c7:28:d2:cb:f3:b5:2c:5b:0c:14:c9:30:d4:6a:fa: 14:48:a2:9d:c0:19:e9:30:56:cd:6e:3c:d7:2d:ab: ff:e8:21:74:38:3e:57:4c:55:d5:38:f1:94:a2:0e: 5a:15:87:04:4d:2d:6d:26:12:0b:5a:72:a5:83:6b: d9:d1:e0:5d:b3:3a:cd:f9:f7:80:4f:af:2a:37:5b: 6b:5b:e2:a5:e0:69:78:45:23:99:0e:6a:6a:d7:55: e1:ab:1e:f6:9b:c7:76:1d:ef:89:c6:19:89:0d:88: 17:dc:c8:5b:e6:cf:e7:d9:74:21:00:a9:ea:25:28: 47:b0:5a:74:44:00:c6:b3:30:68:54:54:55:a3:04: e4:d1:93:8b:9e:33:66:3e:fe:2c:a2:55:20:5e:be: 66:d7:c2:6c:13:48:6a:47:04:f9:f0:89:13:b9:b6: a5:87:13:94:c9:ed:9e:6f:76:d5:36:53:2f:5d:1e: 80:b5:d7:af:ce:a2:3f:28:2e:81:4d:29:25:da:71: cd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:51:7F:DE:1B:38:52:9D:09:97:5F:95:34:33:9F:7E:DE:BC:C8:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/56526468-58fd-3dad-8de2-b0b48f352e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.crl X509v3 Authority Key Identifier: keyid:64:C4:F3:81:41:41:01:CA:54:69:CB:43:47:F3:57:0F:0A:07:0A:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4171706d-65e0-4ab5-bbb3-8d0f79345c7b.cer sbgp-ipAddrBlock: critical IPv4: 199.87.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3e:fb:76:cb:c5:a0:2b:78:4c:9a:1f:83:21:b5:00:74:35: ba:de:04:0b:7a:49:e0:f4:42:4c:7a:f7:63:d2:72:d2:30:b2: df:f7:67:30:19:a3:d6:7f:8a:90:77:1c:48:09:62:a2:22:4c: 40:de:61:8c:5d:63:70:28:1d:47:09:66:47:8f:1a:4d:7e:c2: fb:ce:2b:47:42:d3:a8:71:97:d3:5a:2c:86:fb:72:98:6d:22: bb:ba:24:50:66:74:34:47:c8:75:a1:68:a4:40:d3:bd:de:ee: 3c:6e:8d:1c:50:b6:16:8e:fa:d8:8f:f8:c2:e7:b6:4f:87:10: 0f:cf:c5:88:10:99:37:9e:97:0f:0d:b4:c4:8b:f2:b5:90:9b: be:80:a1:f1:fe:54:81:b3:42:11:ac:29:98:3e:4c:d1:5a:d9: 24:db:10:a4:7b:f7:f7:da:ff:10:c2:d4:db:24:8e:95:13:93: 46:58:55:b2:99:3d:80:05:23:37:23:00:ce:cc:5c:16:42:a6: de:4b:c4:8a:95:85:26:e9:5c:8a:7f:75:d5:57:32:79:98:95: 5c:70:69:fe:5a:de:4b:c2:b9:aa:2b:7c:76:64:33:b9:01:ba: c5:85:4b:d5:a0:7e:b2:89:8d:0e:9a:11:73:4f:b8:73:39:2b: 61:2d:03:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96jFl29XobWfORuGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE3MTcwNmQtNjVlMC00YWI1LWJiYjMtOGQwZjc5MzQ1 YzdiMB4XDTI2MTAxMjE1MDY1MVoXDTI3MDExMDE2MDY1MVowLzEtMCsGA1UEAxMk ZWY4MDNkZTUtNzhjNy00ZjRiLTgzMTUtYmU1YWZjMmJlOTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApprMJdF4W1Vs7WEuN9viGaaAImyDXAYJbeOc JID1uvHm9clR+8cvCUTOk4pU8wAmOM9q8zYJeSEw1qPHKNLL87UsWwwUyTDUavoU SKKdwBnpMFbNbjzXLav/6CF0OD5XTFXVOPGUog5aFYcETS1tJhILWnKlg2vZ0eBd szrN+feAT68qN1trW+Kl4Gl4RSOZDmpq11Xhqx72m8d2He+JxhmJDYgX3Mhb5s/n 2XQhAKnqJShHsFp0RADGszBoVFRVowTk0ZOLnjNmPv4solUgXr5m18JsE0hqRwT5 8IkTubalhxOUye2eb3bVNlMvXR6AtdevzqI/KC6BTSkl2nHNNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFRf94bOFKdCZdflTQzn37evMgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80MTcx NzA2ZC02NWUwLTRhYjUtYmJiMy04ZDBmNzkzNDVjN2IvNTY1MjY0NjgtNThmZC0z ZGFkLThkZTItYjBiNDhmMzUyZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNDE3MTcwNmQtNjVlMC00YWI1LWJi YjMtOGQwZjc5MzQ1YzdiLzQxNzE3MDZkLTY1ZTAtNGFiNS1iYmIzLThkMGY3OTM0 NWM3Yi5jcmwwHwYDVR0jBBgwFoAUZMTzgUFBAcpUactDR/NXDwoHClowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS80MTcxNzA2ZC02NWUwLTRhYjUtYmJiMy04ZDBm NzkzNDVjN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1fOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ++3bLxaAreEyaH4MhtQB0NbreBAt6SeD0Qkx692PSctIwst/3ZzAZ o9Z/ipB3HEgJYqIiTEDeYYxdY3AoHUcJZkePGk1+wvvOK0dC06hxl9NaLIb7cpht Iru6JFBmdDRHyHWhaKRA073e7jxujRxQthaO+tiP+MLntk+HEA/PxYgQmTeelw8N tMSL8rWQm76AofH+VIGzQhGsKZg+TNFa2STbEKR79/fa/xDC1NskjpUTk0ZYVbKZ PYAFIzcjAM7MXBZCpt5LxIqVhSbpXIp/ddVXMnmYlVxwaf5a3kvCuaorfHZkM7kB usWFS9WgfrKJjQ6aEXNPuHM5K2EtA8k= -----END CERTIFICATE-----Generated at Sun Nov 1 14:36:57 2026 by rpki-client