$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/dbcebc37-e1e6-358d-be23-3223f9383787.roa File: dbcebc37-e1e6-358d-be23-3223f9383787.roa (raw, json) Hash identifier: xdYgJo3iGEcaYbVfJYIK4o6n7suFkKCWCQDjF8BXNY4= Subject key identifier: 38:74:62:B2:FC:CD:90:38:86:75:C4:44:16:56:1B:22:87:EF:D5:A3 Certificate issuer: /CN=9b8e9198-44df-424d-bfd4-9a91c9fbc7de Certificate serial: 010D0C9F4328584ECBD1D823D8A22BF40F729580 Authority key identifier: 33:31:3E:A7:53:B7:F2:38:1E:E1:C7:1A:96:53:45:25:49:78:CF:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/dbcebc37-e1e6-358d-be23-3223f9383787.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 394485 IP address blocks: 206.130.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:d8:23:d8:a2:2b:f4:0f:72:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b8e9198-44df-424d-bfd4-9a91c9fbc7de Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=93dcfabf-e187-4b56-99fb-af2594b776a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2d:ba:07:09:7c:90:95:b9:67:02:68:24:34: 7f:80:a1:e9:3e:01:0e:57:07:15:9f:2e:06:c8:7a: 57:2a:0f:be:50:9c:7d:af:0a:1e:6e:6a:ca:c2:ef: e6:a4:09:25:5b:c9:bb:b5:ff:cd:b1:4b:87:c9:8e: f3:b1:13:59:4a:6a:4b:5e:24:44:5a:95:c4:a4:6a: ed:8f:12:0c:25:ab:1f:c4:b0:d5:89:b7:c4:bf:76: ca:a3:50:e7:14:46:bc:c5:de:23:1e:33:fe:bb:8d: 95:f2:6e:f6:69:e3:34:f7:58:43:76:ac:8e:8d:43: 1a:f5:a0:bd:ba:05:b9:d4:e3:9a:89:61:6b:01:d2: 65:c8:6b:01:07:e0:75:9c:8b:56:a1:37:55:e5:32: 24:ee:eb:4b:12:5d:ba:82:08:15:dc:bd:0e:c8:55: df:81:84:01:09:00:4a:17:60:ca:28:fb:1c:19:7b: d0:49:79:1b:67:7a:16:a0:b7:37:c7:d2:64:5d:e0: 83:49:9b:be:1f:00:9d:84:31:d6:d2:a1:bc:a0:fa: 8b:2d:df:f7:14:2a:66:5f:cd:f1:37:f5:1d:5a:0b: 4a:a7:27:cd:3d:67:36:11:a0:7b:93:1b:2e:c2:24: d2:a2:5f:64:04:cd:fb:af:86:8e:08:08:b8:37:5f: 20:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:74:62:B2:FC:CD:90:38:86:75:C4:44:16:56:1B:22:87:EF:D5:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/dbcebc37-e1e6-358d-be23-3223f9383787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.crl X509v3 Authority Key Identifier: keyid:33:31:3E:A7:53:B7:F2:38:1E:E1:C7:1A:96:53:45:25:49:78:CF:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer sbgp-ipAddrBlock: critical IPv4: 206.130.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:31:46:e5:e0:a5:9a:92:15:2b:44:4a:ed:e5:4a:db:04:ac: 5c:c6:e7:72:f5:7d:fa:59:6b:af:65:19:3b:a2:ce:c6:91:64: 8f:db:7c:69:3c:6e:aa:94:8c:76:91:d3:56:15:68:72:4b:96: 4c:df:be:f4:d1:89:26:47:16:6e:0c:36:fa:e7:2a:ca:af:3f: fb:1c:48:1b:be:e4:7a:b7:12:2c:33:60:d0:53:e5:4d:27:26: 21:4c:36:2d:09:f9:59:77:a0:b2:35:66:0c:99:d4:a7:f7:71: 37:90:d6:ad:21:5f:b0:64:55:7f:7b:0a:47:b3:26:71:c9:ed: 7e:ee:1d:11:00:70:40:29:51:48:07:e9:02:a2:bd:70:57:21: e5:76:46:74:fe:30:be:50:36:3a:b7:f9:84:22:5c:be:ec:53: 41:42:3e:ac:53:5f:d9:47:71:a0:7c:d2:d5:8b:24:5d:f4:21: a8:0e:da:b8:de:84:40:23:3c:18:c1:76:65:ac:ae:d3:1f:9e: 0c:cb:9f:c4:b5:f8:ed:df:87:81:ee:b6:d0:86:c1:b7:78:8a: b9:5f:bb:f6:0c:fd:9f:fe:a9:38:d3:f6:60:8e:2d:9d:ee:c5: 2d:dd:aa:2a:67:87:1d:9d:31:96:f3:0b:4b:66:63:44:fb:b5: 1b:d7:3b:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0dgj2KIr9A9ylYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI4ZTkxOTgtNDRkZi00MjRkLWJmZDQtOWE5MWM5ZmJj N2RlMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk OTNkY2ZhYmYtZTE4Ny00YjU2LTk5ZmItYWYyNTk0Yjc3NmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S26Bwl8kJW5ZwJoJDR/gKHpPgEOVwcVny4G yHpXKg++UJx9rwoebmrKwu/mpAklW8m7tf/NsUuHyY7zsRNZSmpLXiREWpXEpGrt jxIMJasfxLDVibfEv3bKo1DnFEa8xd4jHjP+u42V8m72aeM091hDdqyOjUMa9aC9 ugW51OOaiWFrAdJlyGsBB+B1nItWoTdV5TIk7utLEl26gggV3L0OyFXfgYQBCQBK F2DKKPscGXvQSXkbZ3oWoLc3x9JkXeCDSZu+HwCdhDHW0qG8oPqLLd/3FCpmX83x N/UdWgtKpyfNPWc2EaB7kxsuwiTSol9kBM37r4aOCAi4N18gkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDh0YrL8zZA4hnXERBZWGyKH79WjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Yjhl OTE5OC00NGRmLTQyNGQtYmZkNC05YTkxYzlmYmM3ZGUvZGJjZWJjMzctZTFlNi0z NThkLWJlMjMtMzIyM2Y5MzgzNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWI4ZTkxOTgtNDRkZi00MjRkLWJm ZDQtOWE5MWM5ZmJjN2RlLzliOGU5MTk4LTQ0ZGYtNDI0ZC1iZmQ0LTlhOTFjOWZi YzdkZS5jcmwwHwYDVR0jBBgwFoAUMzE+p1O38jge4ccallNFJUl4z6UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjhlOTE5OC00NGRmLTQyNGQtYmZkNC05YTkx YzlmYmM3ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzoLkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkxRuXgpZqSFStESu3lStsErFzG53L1ffpZa69lGTuizsaRZI/bfGk8 bqqUjHaR01YVaHJLlkzfvvTRiSZHFm4MNvrnKsqvP/scSBu+5Hq3EiwzYNBT5U0n JiFMNi0J+Vl3oLI1ZgyZ1Kf3cTeQ1q0hX7BkVX97CkezJnHJ7X7uHREAcEApUUgH 6QKivXBXIeV2RnT+ML5QNjq3+YQiXL7sU0FCPqxTX9lHcaB80tWLJF30IagO2rje hEAjPBjBdmWsrtMfngzLn8S1+O3fh4HuttCGwbd4irlfu/YM/Z/+qTjT9mCOLZ3u xS3dqipnhx2dMZbzC0tmY0T7tRvXOy0= -----END CERTIFICATE-----Generated at Fri Aug 21 22:43:07 2026 by rpki-client