$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbb455cc-b889-4ddc-b495-5643312968f5/390e4faf-aea1-3e83-bac4-5bc21f376b80.roa File: 390e4faf-aea1-3e83-bac4-5bc21f376b80.roa (raw, json) Hash identifier: VPuqMZV0PlOZbckVlz7MO2+F2VUkujIemzRoRDSMhYw= Subject key identifier: E3:E2:CF:B3:7E:C7:F5:5A:0B:0B:D5:D3:CC:56:CF:D4:2B:0D:AE:87 Certificate issuer: /CN=cbb455cc-b889-4ddc-b495-5643312968f5 Certificate serial: 010D0C9F4328584F6FD422DF040E24CC0C7D5D00 Authority key identifier: FF:5E:1E:29:1E:AE:1D:01:A4:EB:6E:51:BD:C0:A2:85:00:FB:D1:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbb455cc-b889-4ddc-b495-5643312968f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbb455cc-b889-4ddc-b495-5643312968f5/390e4faf-aea1-3e83-bac4-5bc21f376b80.roa Signing time: Thu 08 Oct 2026 18:57:36 +0000 ROA not before: Thu 08 Oct 2026 18:57:36 +0000 ROA not after: Wed 06 Jan 2027 19:57:36 +0000 asID: 53973 IP address blocks: 205.196.202.0/23 maxlen: 23 205.196.202.0/24 maxlen: 24 205.196.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbb455cc-b889-4ddc-b495-5643312968f5/cbb455cc-b889-4ddc-b495-5643312968f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbb455cc-b889-4ddc-b495-5643312968f5/cbb455cc-b889-4ddc-b495-5643312968f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbb455cc-b889-4ddc-b495-5643312968f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:d4:22:df:04:0e:24:cc:0c:7d:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbb455cc-b889-4ddc-b495-5643312968f5 Validity Not Before: Oct 8 18:57:36 2026 GMT Not After : Jan 6 19:57:36 2027 GMT Subject: CN=2a95f3b7-e856-4f63-b944-caf591d1f167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:77:ee:cf:ed:8e:ec:1f:7e:a4:f2:3e:8d: 3d:b7:6c:e0:cd:b3:60:1d:4f:b7:63:a0:88:0d:87: 56:66:ce:02:b7:23:8d:be:40:68:c6:91:b4:6a:3f: b8:5e:31:06:f6:ce:90:f1:e0:8a:f6:bc:b7:a1:e0: e4:d6:60:e8:8e:b9:bb:e5:32:10:a5:3b:7d:5d:09: d3:9c:fe:a1:09:4c:b7:1c:a6:d0:a7:dd:4b:58:dc: 83:c9:4f:c7:58:b9:0d:e4:92:50:39:8c:b6:fc:f1: 9f:fc:6f:67:d4:46:0a:9a:02:a9:57:20:8a:b2:ce: 2c:eb:84:72:cc:6e:c1:94:87:0f:7d:a0:20:aa:73: fa:c2:8c:48:0c:01:0f:a5:9e:4c:95:6d:2f:f7:cd: 3f:d6:3d:80:7a:00:06:b3:86:18:f8:1f:c7:19:23: fa:df:39:7c:ed:42:83:de:ac:df:46:55:d3:41:9f: cb:88:f3:37:b0:0e:52:75:28:43:0c:74:6b:ff:a6: 8e:39:a8:3f:40:04:73:f9:65:eb:a2:0c:b6:6f:c2: b3:98:bc:f5:7d:63:99:d4:08:7f:ea:ba:5d:80:15: 28:64:d0:a5:38:a0:3f:fb:7c:b8:cb:cb:26:b5:5d: 77:27:e4:22:fd:26:32:72:b4:19:d1:16:e3:5d:e5: f4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E2:CF:B3:7E:C7:F5:5A:0B:0B:D5:D3:CC:56:CF:D4:2B:0D:AE:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbb455cc-b889-4ddc-b495-5643312968f5/390e4faf-aea1-3e83-bac4-5bc21f376b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbb455cc-b889-4ddc-b495-5643312968f5/cbb455cc-b889-4ddc-b495-5643312968f5.crl X509v3 Authority Key Identifier: keyid:FF:5E:1E:29:1E:AE:1D:01:A4:EB:6E:51:BD:C0:A2:85:00:FB:D1:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbb455cc-b889-4ddc-b495-5643312968f5.cer sbgp-ipAddrBlock: critical IPv4: 205.196.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3a:3e:e5:33:e0:93:9d:98:25:59:b3:8d:63:ed:97:1b:8f: 15:fc:ff:13:9d:c8:73:bd:d6:09:dc:bb:16:72:e8:a2:a3:2e: 05:97:16:f3:0e:39:fc:0a:53:06:32:a8:24:d2:1b:26:18:3d: 45:65:e0:f6:83:f7:84:9c:3c:b4:80:1f:92:0c:32:7c:ef:e4: 87:2e:1d:83:cd:fc:e7:2e:ea:5a:bd:fd:ba:af:64:ac:fe:4d: ea:7c:77:91:50:a4:c9:41:27:4b:ee:24:ec:ef:88:89:b4:d1: 91:1b:a5:6e:c1:e3:5b:1e:f9:4a:ad:34:23:21:83:27:d1:a1: 78:7a:b4:4a:a8:b8:9b:f3:df:22:73:da:d5:ed:09:1c:9e:78: 39:05:ef:31:6a:fd:d5:7c:06:5c:da:52:7a:23:72:d1:06:a1: fa:50:cc:63:88:63:59:e3:35:ef:c0:fe:02:b9:99:45:a7:ac: c9:46:4a:18:3a:8f:8b:6e:0f:33:fd:9e:c8:c6:70:69:96:5a: 05:9e:be:fa:91:3a:a7:e9:67:ce:07:ed:56:98:b3:e2:b4:1f: aa:57:9a:70:05:b0:65:72:e4:40:f5:8b:d4:15:62:c6:87:ed: 25:d0:9f:65:a7:1b:d7:bd:80:a6:54:54:a4:24:f4:8f:06:e2: 5a:f0:70:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9v1CLfBA4kzAx9XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JiNDU1Y2MtYjg4OS00ZGRjLWI0OTUtNTY0MzMxMjk2 OGY1MB4XDTI2MTAwODE4NTczNloXDTI3MDEwNjE5NTczNlowLzEtMCsGA1UEAxMk MmE5NWYzYjctZTg1Ni00ZjYzLWI5NDQtY2FmNTkxZDFmMTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKx37s/tjuwffqTyPo09t2zgzbNgHU+3Y6CI DYdWZs4CtyONvkBoxpG0aj+4XjEG9s6Q8eCK9ry3oeDk1mDojrm75TIQpTt9XQnT nP6hCUy3HKbQp91LWNyDyU/HWLkN5JJQOYy2/PGf/G9n1EYKmgKpVyCKss4s64Ry zG7BlIcPfaAgqnP6woxIDAEPpZ5MlW0v980/1j2AegAGs4YY+B/HGSP63zl87UKD 3qzfRlXTQZ/LiPM3sA5SdShDDHRr/6aOOag/QARz+WXrogy2b8KzmLz1fWOZ1Ah/ 6rpdgBUoZNClOKA/+3y4y8smtV13J+Qi/SYycrQZ0RbjXeX0JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPiz7N+x/VaCwvV08xWz9QrDa6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9jYmI0 NTVjYy1iODg5LTRkZGMtYjQ5NS01NjQzMzEyOTY4ZjUvMzkwZTRmYWYtYWVhMS0z ZTgzLWJhYzQtNWJjMjFmMzc2YjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvY2JiNDU1Y2MtYjg4OS00ZGRjLWI0 OTUtNTY0MzMxMjk2OGY1L2NiYjQ1NWNjLWI4ODktNGRkYy1iNDk1LTU2NDMzMTI5 NjhmNS5jcmwwHwYDVR0jBBgwFoAU/14eKR6uHQGk625RvcCihQD70SswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9jYmI0NTVjYy1iODg5LTRkZGMtYjQ5NS01NjQz MzEyOTY4ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzcTKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF86PuUz4JOdmCVZs41j7ZcbjxX8/xOdyHO91gncuxZy6KKjLgWXFvMO OfwKUwYyqCTSGyYYPUVl4PaD94ScPLSAH5IMMnzv5IcuHYPN/Ocu6lq9/bqvZKz+ Tep8d5FQpMlBJ0vuJOzviIm00ZEbpW7B41se+UqtNCMhgyfRoXh6tEqouJvz3yJz 2tXtCRyeeDkF7zFq/dV8BlzaUnojctEGofpQzGOIY1njNe/A/gK5mUWnrMlGShg6 j4tuDzP9nsjGcGmWWgWevvqROqfpZ84H7VaYs+K0H6pXmnAFsGVy5ED1i9QVYsaH 7SXQn2WnG9e9gKZUVKQk9I8G4lrwcBE= -----END CERTIFICATE-----Generated at Tue Nov 3 15:11:44 2026 by rpki-client