$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/235d627e-25ce-37e1-af58-b2ed49e00b07.roa File: 235d627e-25ce-37e1-af58-b2ed49e00b07.roa (raw, json) Hash identifier: pFdjBoBl/vOYb77QER4djnHzhd/ZgEOtf9iW1otshrY= Subject key identifier: 18:B0:25:70:33:97:23:D1:22:E6:1E:61:B4:E9:2A:5C:23:92:DE:67 Certificate issuer: /CN=d4df721f-f1d3-488f-a11f-24012ecf96ce Certificate serial: 010D0C9F4328584F74AA2C8DC3433DD788DCD280 Authority key identifier: 25:6F:77:DA:DD:0B:B5:8B:D9:56:94:F4:EE:F4:EF:F3:6C:F3:19:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/235d627e-25ce-37e1-af58-b2ed49e00b07.roa Signing time: Sat 10 Oct 2026 12:32:06 +0000 ROA not before: Sat 10 Oct 2026 12:32:06 +0000 ROA not after: Fri 08 Jan 2027 13:32:06 +0000 asID: 200260 IP address blocks: 206.208.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/d4df721f-f1d3-488f-a11f-24012ecf96ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/d4df721f-f1d3-488f-a11f-24012ecf96ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:aa:2c:8d:c3:43:3d:d7:88:dc:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4df721f-f1d3-488f-a11f-24012ecf96ce Validity Not Before: Oct 10 12:32:06 2026 GMT Not After : Jan 8 13:32:06 2027 GMT Subject: CN=c9439807-74c4-4f2e-a20f-eb95eab2a143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b0:59:87:d4:fd:69:a6:38:fa:76:58:57:a1: 81:0c:c3:ca:d3:f9:a8:a6:5b:2b:47:62:46:eb:7e: 38:4c:b1:f5:d7:7a:31:dd:0a:ca:1a:8c:09:9e:ab: 6f:40:92:0d:6c:38:19:e2:72:91:f6:18:d6:b0:f8: ab:18:71:79:76:ec:43:f3:4f:00:98:80:17:c5:e2: 4a:a2:5d:e3:27:a8:84:09:d0:ef:44:1e:e6:6b:f7: b3:21:7f:24:04:db:e4:c2:ba:29:e3:3b:f0:c8:26: 3a:04:39:4d:91:b7:ca:1c:75:cb:fb:3d:d1:c7:6c: 9e:03:13:86:b0:33:20:e1:ad:02:6c:49:d7:f7:16: 9e:ff:fd:84:a4:1c:80:c8:91:aa:9e:e3:19:b8:4f: d6:4d:3d:2d:28:d2:76:18:62:81:e0:7b:f7:40:10: da:92:26:a7:e6:84:a5:d9:69:db:bc:d1:3c:78:df: 77:06:3a:7a:ae:4a:8f:e8:fb:31:b3:79:32:34:a6: e8:1e:97:83:ae:1f:28:8a:0f:37:47:a6:5a:bd:53: 9d:03:5f:62:27:a7:5d:4d:38:f1:38:65:34:21:b9: f1:44:a0:4a:62:70:ee:bd:94:68:2b:e3:41:37:15: db:40:6c:4f:c5:8a:77:63:56:b2:fa:8b:84:9a:ac: 1e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B0:25:70:33:97:23:D1:22:E6:1E:61:B4:E9:2A:5C:23:92:DE:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/235d627e-25ce-37e1-af58-b2ed49e00b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce/d4df721f-f1d3-488f-a11f-24012ecf96ce.crl X509v3 Authority Key Identifier: keyid:25:6F:77:DA:DD:0B:B5:8B:D9:56:94:F4:EE:F4:EF:F3:6C:F3:19:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d4df721f-f1d3-488f-a11f-24012ecf96ce.cer sbgp-ipAddrBlock: critical IPv4: 206.208.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:02:ee:00:ac:30:c6:61:78:2e:c9:8c:40:95:02:e8:49:94: b1:04:9f:c7:1e:56:da:0c:fe:00:a7:0e:da:26:ad:f0:ab:d8: d6:69:42:d9:de:5f:50:fa:b5:58:7b:6f:12:a8:8e:57:75:d1: ad:1e:fd:ec:59:ec:15:e8:aa:0e:16:f3:1a:e0:bb:60:5d:a5: 80:a5:4c:d6:2b:14:28:24:bb:a7:53:68:7f:f4:7f:3c:7e:cb: d9:3a:cf:00:7d:ea:ec:65:0a:9b:96:e6:c6:bd:2e:c6:ae:c3: 24:8e:10:7e:1d:0b:f5:49:2f:42:c5:dc:97:53:1b:91:f7:a9: 0b:be:13:f0:52:c3:d1:64:db:06:df:ea:fc:07:ae:23:0a:95: 48:f4:45:74:40:d2:07:4a:03:3b:a7:6f:87:65:12:8e:67:bd: 54:a2:8d:67:f8:46:47:33:d5:31:c1:22:e1:06:fa:fe:a7:05: a0:eb:3d:02:34:2c:68:ce:39:d7:95:0c:b3:96:6a:e5:4a:0a: 6a:f8:8b:1b:7b:9c:63:a5:ae:ad:32:2f:13:72:b4:f3:13:80: c0:4e:92:07:da:58:17:8b:43:13:41:d8:fa:57:24:d6:20:3f: f7:a1:95:d7:a7:d2:16:22:b7:8a:94:00:4f:e2:2f:a7:df:fa: 62:40:c5:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90qiyNw0M914jc0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRkZjcyMWYtZjFkMy00ODhmLWExMWYtMjQwMTJlY2Y5 NmNlMB4XDTI2MTAxMDEyMzIwNloXDTI3MDEwODEzMzIwNlowLzEtMCsGA1UEAxMk Yzk0Mzk4MDctNzRjNC00ZjJlLWEyMGYtZWI5NWVhYjJhMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7BZh9T9aaY4+nZYV6GBDMPK0/moplsrR2JG 6344TLH113ox3QrKGowJnqtvQJINbDgZ4nKR9hjWsPirGHF5duxD808AmIAXxeJK ol3jJ6iECdDvRB7ma/ezIX8kBNvkwrop4zvwyCY6BDlNkbfKHHXL+z3Rx2yeAxOG sDMg4a0CbEnX9xae//2EpByAyJGqnuMZuE/WTT0tKNJ2GGKB4Hv3QBDakian5oSl 2WnbvNE8eN93Bjp6rkqP6Psxs3kyNKboHpeDrh8oig83R6ZavVOdA19iJ6ddTTjx OGU0IbnxRKBKYnDuvZRoK+NBNxXbQGxPxYp3Y1ay+ouEmqwelwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiwJXAzlyPRIuYeYbTpKlwjkt5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9kNGRm NzIxZi1mMWQzLTQ4OGYtYTExZi0yNDAxMmVjZjk2Y2UvMjM1ZDYyN2UtMjVjZS0z N2UxLWFmNTgtYjJlZDQ5ZTAwYjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZDRkZjcyMWYtZjFkMy00ODhmLWEx MWYtMjQwMTJlY2Y5NmNlL2Q0ZGY3MjFmLWYxZDMtNDg4Zi1hMTFmLTI0MDEyZWNm OTZjZS5jcmwwHwYDVR0jBBgwFoAUJW932t0LtYvZVpT07vTv82zzGf0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9kNGRmNzIxZi1mMWQzLTQ4OGYtYTExZi0yNDAx MmVjZjk2Y2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCztB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEC7gCsMMZheC7JjECVAuhJlLEEn8ceVtoM/gCnDtomrfCr2NZpQtne X1D6tVh7bxKojld10a0e/exZ7BXoqg4W8xrgu2BdpYClTNYrFCgku6dTaH/0fzx+ y9k6zwB96uxlCpuW5sa9LsauwySOEH4dC/VJL0LF3JdTG5H3qQu+E/BSw9Fk2wbf 6vwHriMKlUj0RXRA0gdKAzunb4dlEo5nvVSijWf4Rkcz1THBIuEG+v6nBaDrPQI0 LGjOOdeVDLOWauVKCmr4ixt7nGOlrq0yLxNytPMTgMBOkgfaWBeLQxNB2PpXJNYg P/ehlden0hYit4qUAE/iL6ff+mJAxZY= -----END CERTIFICATE-----Generated at Mon Nov 2 14:28:41 2026 by rpki-client