$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af1b3aef-2699-30a3-a772-17f88062186f.roa File: af1b3aef-2699-30a3-a772-17f88062186f.roa (raw, json) Hash identifier: FZ54d/uod+KZLquGpixqtpGCxdykR1uRGSwNlIeQ/gc= Subject key identifier: A9:0E:37:CF:0D:7F:F9:24:19:74:C0:D3:15:18:0D:D4:F2:4F:03:0D Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584F86DDA2F2FB865B4B08A6BD20 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af1b3aef-2699-30a3-a772-17f88062186f.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 3561 IP address blocks: 206.100.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:a2:f2:fb:86:5b:4b:08:a6:bd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=d89cc52f-b376-40e2-865f-885536664094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b6:d4:a7:b0:0d:ff:89:21:71:ac:2b:e7:81: 99:f1:34:ea:5b:0e:a9:53:07:a8:c0:66:08:bb:ee: 08:10:49:78:65:f2:fd:02:ee:9f:5d:f9:b0:4e:54: a0:fd:56:61:8b:ae:b1:22:6f:e7:f7:5b:49:d8:dd: 20:ac:14:ba:e1:b6:bc:68:75:ed:1f:ec:8f:7c:e4: cd:20:fe:c8:dd:29:48:70:7e:f3:03:92:71:ed:86: c8:e9:56:5a:a4:07:6d:c1:76:f0:09:f9:1b:d4:45: 2c:a3:11:5e:31:f8:f2:c0:04:1d:c4:ec:87:21:70: 1e:2a:44:79:61:24:8d:cc:8f:7c:5c:96:3b:7c:e8: 73:d1:a9:e9:ca:40:01:27:d3:c8:06:d0:d7:32:09: 2a:0b:43:95:01:75:55:15:3b:b3:4a:11:44:6c:d0: d1:e6:41:f4:5a:49:cd:2a:7e:19:96:8a:bc:a9:a2: 90:d9:2f:de:4c:61:7c:dc:5c:d0:d1:5d:b5:dc:d9: 93:02:69:a5:60:56:01:0c:99:72:a3:bc:cb:1b:0b: 94:92:f9:84:b7:15:4d:3b:dd:43:f6:ba:3b:ca:94: 69:14:46:45:94:0b:d0:0d:81:83:bb:f8:16:e1:30: 2c:bf:78:c5:ef:db:08:b0:0d:86:fc:9e:5c:51:f5: a8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0E:37:CF:0D:7F:F9:24:19:74:C0:D3:15:18:0D:D4:F2:4F:03:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af1b3aef-2699-30a3-a772-17f88062186f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 206.100.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f0:30:bb:63:be:3c:e0:89:4c:03:97:36:d2:bb:9c:d0:23: 7e:b0:cd:97:8e:b1:65:5a:21:81:ac:23:ea:53:4f:88:c2:a7: 71:20:87:31:81:4a:6b:12:e5:15:cd:a5:1a:18:78:a7:ed:d4: dc:1b:2a:bd:67:68:2b:86:8a:04:b0:96:21:e8:27:1f:f4:84: 83:1d:bd:5d:ce:10:21:e9:f2:90:0b:7d:bc:45:d8:73:04:4c: 9b:ce:f1:da:ff:81:71:ce:9a:c9:53:21:85:cc:b8:51:d1:6a: 9b:dd:60:c3:03:1f:10:47:f6:6c:04:6d:64:7d:5e:ca:9b:f3: e4:c4:3c:f2:93:4c:c4:22:5c:45:2c:21:d5:38:d4:64:cf:f9: c9:5f:51:de:e8:fd:96:cb:e7:62:9b:d6:1b:2a:89:0a:8c:2a: 00:b3:24:1c:7e:29:52:5f:c4:7f:71:8d:a8:60:b4:a2:0f:1b: e7:43:cf:81:69:83:e5:e8:c4:84:8b:78:2e:29:6e:5b:9c:5e: 3d:82:78:08:bf:26:9f:6e:60:ea:a4:a0:cb:46:f8:f2:50:a4: c5:12:c2:d4:13:a9:d7:e9:4c:58:ad:45:8f:3c:54:11:1f:cf: 75:33:31:29:fd:1b:c1:78:82:71:46:7c:cd:6d:82:59:02:49: 6f:a7:32:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+G3aLy+4ZbSwimvSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDg5Y2M1MmYtYjM3Ni00MGUyLTg2NWYtODg1NTM2NjY0MDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibbUp7AN/4khcawr54GZ8TTqWw6pUweowGYI u+4IEEl4ZfL9Au6fXfmwTlSg/VZhi66xIm/n91tJ2N0grBS64ba8aHXtH+yPfOTN IP7I3SlIcH7zA5Jx7YbI6VZapAdtwXbwCfkb1EUsoxFeMfjywAQdxOyHIXAeKkR5 YSSNzI98XJY7fOhz0anpykABJ9PIBtDXMgkqC0OVAXVVFTuzShFEbNDR5kH0WknN Kn4Zloq8qaKQ2S/eTGF83FzQ0V213NmTAmmlYFYBDJlyo7zLGwuUkvmEtxVNO91D 9ro7ypRpFEZFlAvQDYGDu/gW4TAsv3jF79sIsA2G/J5cUfWoFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkON88Nf/kkGXTA0xUYDdTyTwMNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYWYxYjNhZWYtMjY5OS0z MGEzLWE3NzItMTdmODgwNjIxODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzmQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnwMLtjvjzgiUwDlzbSu5zQI36wzZeOsWVaIYGsI+pTT4jCp3EghzGB SmsS5RXNpRoYeKft1NwbKr1naCuGigSwliHoJx/0hIMdvV3OECHp8pALfbxF2HME TJvO8dr/gXHOmslTIYXMuFHRapvdYMMDHxBH9mwEbWR9Xsqb8+TEPPKTTMQiXEUs IdU41GTP+clfUd7o/ZbL52Kb1hsqiQqMKgCzJBx+KVJfxH9xjahgtKIPG+dDz4Fp g+XoxISLeC4pblucXj2CeAi/Jp9uYOqkoMtG+PJQpMUSwtQTqdfpTFitRY88VBEf z3UzMSn9G8F4gnFGfM1tglkCSW+nMtM= -----END CERTIFICATE-----Generated at Sat Oct 31 02:30:06 2026 by rpki-client