$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/5149c977-bf40-3694-ab8c-e127542381a4.roa File: 5149c977-bf40-3694-ab8c-e127542381a4.roa (raw, json) Hash identifier: udRc1JUhP/ChELe4zxVWtvJeieyM5+m1i7lTVdDyeE4= Subject key identifier: 84:C6:B7:72:3F:0E:2B:D7:85:B4:3A:1E:2E:45:88:7E:E2:C0:15:34 Certificate issuer: /CN=8da2ab18-c7fe-481a-a5e3-31579c83e101 Certificate serial: 010D0C9F4328584F456FA988DBDEE8B70DC37700 Authority key identifier: 5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/5149c977-bf40-3694-ab8c-e127542381a4.roa Signing time: Wed 23 Sep 2026 14:31:13 +0000 ROA not before: Wed 23 Sep 2026 14:31:13 +0000 ROA not after: Tue 22 Dec 2026 15:31:13 +0000 asID: 46606 IP address blocks: 206.188.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:6f:a9:88:db:de:e8:b7:0d:c3:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da2ab18-c7fe-481a-a5e3-31579c83e101 Validity Not Before: Sep 23 14:31:13 2026 GMT Not After : Dec 22 15:31:13 2026 GMT Subject: CN=e9c1b8c5-8412-4d38-9f00-1a7641d0c4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0c:89:c9:bf:50:58:82:dc:41:dd:2c:e9:17: d2:64:b8:c7:f9:f2:dd:45:b5:eb:c3:fb:78:70:42: 1c:34:4a:26:d6:1c:7d:85:1e:d5:e0:64:af:e0:0c: 94:cc:ea:73:71:e6:b5:e8:d1:a9:6b:81:9b:95:c8: f6:43:66:c4:99:1e:5b:3a:a0:1f:57:43:f6:c7:c5: 5a:b5:b7:85:aa:9f:83:ed:06:5c:ee:b5:13:c8:55: aa:9b:5a:8c:d3:16:dd:24:db:2f:5a:e1:cb:32:c2: 9f:93:b9:4f:10:fa:a2:64:7a:f6:64:da:64:95:8c: 17:31:07:96:77:a6:93:3b:ca:ad:9f:76:fc:99:ba: 03:7f:fa:09:35:43:02:22:c2:cb:3c:25:e9:40:02: 30:6c:f5:3d:75:37:ff:14:80:ae:83:2c:a0:ab:24: 0f:d6:f2:d1:c5:10:33:84:ac:0b:66:67:10:2a:08: 3b:c9:f3:51:ae:d1:b7:6e:d9:fd:e7:f6:89:31:77: 1d:29:d5:b2:ea:98:99:67:b0:b0:22:1b:44:12:d5: e6:be:e4:75:c7:6a:5e:c2:bf:8c:45:a4:cb:30:ea: 10:7f:4f:9f:9f:29:3e:7a:cf:42:67:bb:02:24:6f: ab:e6:11:8e:a4:8b:fc:9d:ae:8f:aa:f6:c2:ea:99: 12:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C6:B7:72:3F:0E:2B:D7:85:B4:3A:1E:2E:45:88:7E:E2:C0:15:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/5149c977-bf40-3694-ab8c-e127542381a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.crl X509v3 Authority Key Identifier: keyid:5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101.cer sbgp-ipAddrBlock: critical IPv4: 206.188.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fb:b2:13:66:78:af:cf:6f:8b:b6:7e:c2:ac:03:46:51:9b: 8b:0f:34:25:29:9c:75:6c:08:aa:6f:bd:99:d1:a6:5d:3a:f7: 82:a7:5c:0b:38:23:ea:0e:79:0d:65:f2:74:35:35:eb:2b:97: cc:48:50:01:07:9f:02:1c:14:d4:46:53:17:46:5e:32:88:b2: 42:e8:e8:57:87:ed:6d:3f:69:24:6d:9e:a1:e9:29:a6:b7:06: 08:53:b5:a7:6d:1a:ba:32:1c:cc:4a:16:22:bc:72:fc:86:fa: bb:73:09:d1:89:1c:e4:d2:c8:f1:24:96:56:74:1f:e2:91:a0: cf:56:96:c0:df:0a:13:f5:67:58:86:4b:a8:7e:dc:59:30:3a: af:d4:4b:ed:9e:ce:f9:d2:c5:aa:8f:93:24:f6:92:92:f6:f0: bd:35:57:52:0f:4d:57:4d:80:5a:82:c2:56:79:88:b0:fe:6d: c5:5d:61:55:0b:3f:d7:e1:fc:72:d7:f0:ed:65:3f:1b:f6:fd: 4a:14:e6:cd:b8:d7:7f:fd:b5:7e:33:5f:c6:48:2d:a1:5d:4b: d4:c4:a8:05:33:91:3f:80:3d:d7:de:35:fa:0b:d5:d4:a3:7b: 85:fc:9b:76:6c:9e:0a:fe:ea:4c:72:a8:10:fd:9f:8a:c6:66: 7f:de:e0:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Fb6mI297otw3DdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRhMmFiMTgtYzdmZS00ODFhLWE1ZTMtMzE1NzljODNl MTAxMB4XDTI2MDkyMzE0MzExM1oXDTI2MTIyMjE1MzExM1owLzEtMCsGA1UEAxMk ZTljMWI4YzUtODQxMi00ZDM4LTlmMDAtMWE3NjQxZDBjNGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQyJyb9QWILcQd0s6RfSZLjH+fLdRbXrw/t4 cEIcNEom1hx9hR7V4GSv4AyUzOpzcea16NGpa4Gblcj2Q2bEmR5bOqAfV0P2x8Va tbeFqp+D7QZc7rUTyFWqm1qM0xbdJNsvWuHLMsKfk7lPEPqiZHr2ZNpklYwXMQeW d6aTO8qtn3b8mboDf/oJNUMCIsLLPCXpQAIwbPU9dTf/FICugyygqyQP1vLRxRAz hKwLZmcQKgg7yfNRrtG3btn95/aJMXcdKdWy6piZZ7CwIhtEEtXmvuR1x2pewr+M RaTLMOoQf0+fnyk+es9CZ7sCJG+r5hGOpIv8na6PqvbC6pkSwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITGt3I/DivXhbQ6Hi5FiH7iwBU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZGEy YWIxOC1jN2ZlLTQ4MWEtYTVlMy0zMTU3OWM4M2UxMDEvNTE0OWM5NzctYmY0MC0z Njk0LWFiOGMtZTEyNzU0MjM4MWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGRhMmFiMTgtYzdmZS00ODFhLWE1 ZTMtMzE1NzljODNlMTAxLzhkYTJhYjE4LWM3ZmUtNDgxYS1hNWUzLTMxNTc5Yzgz ZTEwMS5jcmwwHwYDVR0jBBgwFoAUXfxc16zs9CSJq/DdCrYaxv8mtucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZGEyYWIxOC1jN2ZlLTQ4MWEtYTVlMy0zMTU3 OWM4M2UxMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzrzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT7shNmeK/Pb4u2fsKsA0ZRm4sPNCUpnHVsCKpvvZnRpl0694KnXAs4 I+oOeQ1l8nQ1Nesrl8xIUAEHnwIcFNRGUxdGXjKIskLo6FeH7W0/aSRtnqHpKaa3 BghTtadtGroyHMxKFiK8cvyG+rtzCdGJHOTSyPEkllZ0H+KRoM9WlsDfChP1Z1iG S6h+3FkwOq/US+2ezvnSxaqPkyT2kpL28L01V1IPTVdNgFqCwlZ5iLD+bcVdYVUL P9fh/HLX8O1lPxv2/UoU5s2413/9tX4zX8ZILaFdS9TEqAUzkT+APdfeNfoL1dSj e4X8m3Zsngr+6kxyqBD9n4rGZn/e4Ho= -----END CERTIFICATE-----Generated at Thu Sep 24 18:23:02 2026 by rpki-client