$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/1a3867f1-c270-3c9c-a033-c26bb00a910e.roa File: 1a3867f1-c270-3c9c-a033-c26bb00a910e.roa (raw, json) Hash identifier: Mvl793AUXbdQ/V6JwqWKtwQWpRUeR8JhyEXk+6AMa4U= Subject key identifier: 50:0B:EC:B8:CC:3D:25:BF:4B:1E:17:E6:FE:DA:2C:60:1E:F2:47:CE Certificate issuer: /CN=590468a2-be81-410c-b887-a35157322fb1 Certificate serial: 010D0C9F4328584F63F81CAC3758C61FA9D23300 Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/1a3867f1-c270-3c9c-a033-c26bb00a910e.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 393891 IP address blocks: 207.229.98.0/24 maxlen: 24 207.229.110.0/24 maxlen: 24 207.229.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:1c:ac:37:58:c6:1f:a9:d2:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590468a2-be81-410c-b887-a35157322fb1 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=ff8696a7-4bfd-4479-84a4-deb458a9cc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:d2:32:ce:56:86:47:1b:ec:14:15:67:b2: a5:56:8c:03:5e:a6:ac:64:a2:ec:1f:27:a4:6b:09: f3:fa:09:b3:0c:e8:53:9e:17:91:03:a3:8f:5c:82: 8b:32:fb:83:23:0e:f0:fd:04:a1:a2:80:09:a8:77: 6d:de:36:c2:c7:5f:54:06:f8:20:c9:4e:3a:a5:cf: 41:31:17:5e:a5:1e:ec:02:e2:4c:65:91:e5:1f:7d: 8e:cf:e3:f6:8a:bb:09:dd:12:f8:38:77:ba:3a:48: 13:be:5b:c0:29:e7:d5:1f:8d:65:e4:b5:ac:5a:9c: 44:08:49:87:72:41:d4:98:22:7d:62:e5:5b:bb:37: 0c:db:a5:05:7c:ad:0d:73:2e:df:e5:07:7d:ce:5f: e8:3a:95:59:32:59:54:38:ac:1d:9f:5f:98:d9:c2: 5a:14:2d:90:ae:6b:f4:22:b1:3b:da:fb:29:48:8a: 5b:9b:ac:2b:13:ff:72:6f:98:9c:54:3b:ff:43:26: 55:32:99:f8:43:30:ac:8c:5e:e1:4a:ca:1a:1e:56: 70:2f:f6:31:c0:6b:5f:2f:4b:ac:69:7c:72:ff:13: e6:45:c8:3d:ad:91:54:f4:b8:91:e1:b7:ee:99:f7: 67:10:88:10:87:a0:ac:5c:9b:c7:f0:a7:ab:2f:a0: c8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0B:EC:B8:CC:3D:25:BF:4B:1E:17:E6:FE:DA:2C:60:1E:F2:47:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/1a3867f1-c270-3c9c-a033-c26bb00a910e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl X509v3 Authority Key Identifier: keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer sbgp-ipAddrBlock: critical IPv4: 207.229.98.0/24 207.229.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d0:98:20:05:b9:78:a1:5a:5a:0e:e1:52:9c:be:d4:1d:b4: 95:61:51:f3:84:df:15:ea:69:8b:cf:dd:74:0d:63:33:18:81: 49:5d:01:d4:81:d4:42:52:55:df:fa:75:93:ca:f4:73:44:52: 8c:e8:92:29:d8:70:1d:f3:5b:da:6a:64:16:c2:f0:2d:5e:9a: b2:9e:42:d5:4a:b4:60:c4:cf:c2:d1:5d:de:1d:e0:15:42:80: 45:af:d3:fb:9c:ac:89:cf:07:91:e9:4b:72:84:9e:2f:11:92: e4:2b:12:67:32:b6:16:c4:19:8f:c5:14:4d:ee:41:70:4c:64: 38:f2:cc:5c:b6:0b:ff:9e:79:c2:dc:12:34:56:ed:91:b8:31: 28:3f:da:81:f2:0e:c3:3d:d0:48:3f:75:ef:55:24:20:ce:fb: 51:e3:40:3c:6e:ee:e1:af:a6:7d:33:02:39:07:62:03:f1:37: c8:3f:e5:96:5e:68:2f:fd:a2:b8:d7:c0:be:7e:9b:e7:4e:36: 7f:97:78:2a:6d:00:83:c2:98:83:62:60:dd:b9:1d:3d:bd:45: f9:af:25:41:b5:17:f6:72:99:76:0c:45:a4:04:50:2b:2f:f5: e3:fe:2a:5b:7e:d3:b9:95:40:f9:3a:d0:c1:17:5c:b6:39:0f: 9f:a8:d4:20 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9j+BysN1jGH6nSMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwNDY4YTItYmU4MS00MTBjLWI4ODctYTM1MTU3MzIy ZmIxMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZmY4Njk2YTctNGJmZC00NDc5LTg0YTQtZGViNDU4YTljYzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP/SMs5Whkcb7BQVZ7KlVowDXqasZKLsHyek awnz+gmzDOhTnheRA6OPXIKLMvuDIw7w/QShooAJqHdt3jbCx19UBvggyU46pc9B MRdepR7sAuJMZZHlH32Oz+P2irsJ3RL4OHe6OkgTvlvAKefVH41l5LWsWpxECEmH ckHUmCJ9YuVbuzcM26UFfK0Ncy7f5Qd9zl/oOpVZMllUOKwdn1+Y2cJaFC2Qrmv0 IrE72vspSIpbm6wrE/9yb5icVDv/QyZVMpn4QzCsjF7hSsoaHlZwL/YxwGtfL0us aXxy/xPmRcg9rZFU9LiR4bfumfdnEIgQh6CsXJvH8KerL6DICQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFAL7LjMPSW/Sx4X5v7aLGAe8kfOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0 NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUxNTczMjJmYjEvMWEzODY3ZjEtYzI3MC0z YzljLWEwMzMtYzI2YmIwMGE5MTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTkwNDY4YTItYmU4MS00MTBjLWI4 ODctYTM1MTU3MzIyZmIxLzU5MDQ2OGEyLWJlODEtNDEwYy1iODg3LWEzNTE1NzMy MmZiMS5jcmwwHwYDVR0jBBgwFoAUz9+cv10n/WlBCOCkwLzC2qnoDokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81OTA0NjhhMi1iZTgxLTQxMGMtYjg4Ny1hMzUx NTczMjJmYjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAz+ViAwQB z+VuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACDQmCAFuXihWloO4VKcvtQdtJVhUfOE3xXqaYvP3XQNYzMY gUldAdSB1EJSVd/6dZPK9HNEUozokinYcB3zW9pqZBbC8C1emrKeQtVKtGDEz8LR Xd4d4BVCgEWv0/ucrInPB5HpS3KEni8RkuQrEmcythbEGY/FFE3uQXBMZDjyzFy2 C/+eecLcEjRW7ZG4MSg/2oHyDsM90Eg/de9VJCDO+1HjQDxu7uGvpn0zAjkHYgPx N8g/5ZZeaC/9orjXwL5+m+dONn+XeCptAIPCmINiYN25HT29RfmvJUG1F/ZymXYM RaQEUCsv9eP+Klt+07mVQPk60MEXXLY5D5+o1CA= -----END CERTIFICATE-----Generated at Tue Oct 13 17:44:56 2026 by rpki-client