$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/8524e59d-5e38-334d-8eee-83935264b119.roa File: 8524e59d-5e38-334d-8eee-83935264b119.roa (raw, json) Hash identifier: 9ZQo57rkqEaS8h3DIDf6QqylO9FGLO4K6sGvpedLRo0= Subject key identifier: BB:74:D6:E4:61:0C:F3:3E:7D:27:C9:44:A9:F3:B6:2D:9F:1B:7F:43 Certificate issuer: /CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Certificate serial: 010D0C9F4328584F90A30717404B150C8A96F400 Authority key identifier: E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/8524e59d-5e38-334d-8eee-83935264b119.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 63448 IP address blocks: 206.109.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:07:17:40:4b:15:0c:8a:96:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=513ee1c1-6dd5-4f59-b004-0f9bcc258a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:64:3f:c3:64:ed:d3:93:13:ca:68:01:4a: 21:78:85:1d:5b:21:ab:38:3f:7f:64:15:f8:b1:87: f7:ce:47:c2:c7:52:88:e1:2f:28:96:62:80:96:0a: cd:6c:5d:ac:81:69:02:38:79:30:97:2e:7b:4f:6e: 72:da:5b:fe:8a:99:e6:b2:0d:01:31:33:06:57:b7: e6:3b:4a:55:3a:78:c8:1e:da:4a:fd:c4:c4:d0:00: 17:b2:bc:28:b5:c6:df:49:12:60:57:10:db:c2:b3: 4a:7b:06:73:c8:45:66:ff:09:62:0d:dd:b1:98:a8: 8c:0f:33:0b:00:eb:ef:42:4f:3b:69:e7:f8:b8:d7: d3:58:c1:85:16:d4:99:f1:01:48:46:6e:8e:37:f3: 64:d9:8b:ba:81:a4:1b:28:49:5f:84:d9:14:d4:9d: 89:e8:69:93:4d:0e:c2:cd:c5:b7:9d:85:4e:73:4f: a8:6e:01:85:83:57:a5:bb:69:2b:a5:2e:00:d8:18: 9f:d5:15:01:56:77:02:70:9e:a4:a5:5f:05:04:43: c5:85:e6:2c:c9:30:47:ef:54:dd:71:72:9c:3d:fb: a3:5e:d0:96:fd:91:5f:aa:84:c6:2b:63:6c:5b:a1: dc:5d:c4:03:1d:64:60:10:82:da:33:df:57:01:11: c5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:74:D6:E4:61:0C:F3:3E:7D:27:C9:44:A9:F3:B6:2D:9F:1B:7F:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/8524e59d-5e38-334d-8eee-83935264b119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl X509v3 Authority Key Identifier: keyid:E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer sbgp-ipAddrBlock: critical IPv4: 206.109.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a2:50:a3:d5:3c:06:8d:ca:82:18:5d:4d:34:9b:fc:81:d2: f3:87:2f:20:ec:81:66:c6:66:af:0e:83:b0:56:a3:ea:9e:d8: 95:72:d0:f0:26:d2:e2:91:08:f5:dd:59:e0:6f:79:3e:10:ae: a3:0d:f3:a0:c4:5a:73:e8:94:7a:e7:f7:8e:a7:0c:25:35:a1: 03:27:c3:91:df:40:fa:99:4f:1b:0a:19:de:1d:4b:55:51:fe: 47:b1:ce:4f:ff:a4:e1:85:1a:a7:06:26:1d:c3:ab:cf:ea:d7: cb:cf:ce:6c:34:fc:a0:e0:14:ba:aa:49:cd:88:30:13:c6:6f: f6:7e:57:4c:f7:4e:cc:2d:9d:30:24:db:c6:97:75:de:7d:8c: f8:d2:66:3c:f6:04:e8:a0:b2:2f:b8:5e:ef:5f:06:80:4d:11: a4:f1:33:69:f3:1d:88:10:37:fb:d9:0d:cf:1e:83:c8:1d:60: 94:d7:4a:df:df:22:d5:e3:10:c6:e7:dc:03:d1:25:96:ea:39: 20:b1:6c:e3:08:17:09:68:47:45:7a:4a:7c:9a:60:32:e6:0d: d2:bd:f3:68:5a:66:56:29:27:c1:03:e0:e2:25:3b:14:38:e0: 8d:8c:0d:73:c1:19:8e:d2:0a:15:df:d4:f3:8b:db:09:8c:28: 02:78:19:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QowcXQEsVDIqW9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ0ZjZlNDYtZDljNS00MjIxLWExZTUtMGY4NzIyYWZl ZjIxMB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk NTEzZWUxYzEtNmRkNS00ZjU5LWIwMDQtMGY5YmNjMjU4YTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrNkP8Nk7dOTE8poAUoheIUdWyGrOD9/ZBX4 sYf3zkfCx1KI4S8olmKAlgrNbF2sgWkCOHkwly57T25y2lv+ipnmsg0BMTMGV7fm O0pVOnjIHtpK/cTE0AAXsrwotcbfSRJgVxDbwrNKewZzyEVm/wliDd2xmKiMDzML AOvvQk87aef4uNfTWMGFFtSZ8QFIRm6ON/Nk2Yu6gaQbKElfhNkU1J2J6GmTTQ7C zcW3nYVOc0+obgGFg1elu2krpS4A2Bif1RUBVncCcJ6kpV8FBEPFheYsyTBH71Td cXKcPfujXtCW/ZFfqoTGK2NsW6HcXcQDHWRgEILaM99XARHFdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLt01uRhDPM+fSfJRKnzti2fG39DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xZDRm NmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3MjJhZmVmMjEvODUyNGU1OWQtNWUzOC0z MzRkLThlZWUtODM5MzUyNjRiMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWQ0ZjZlNDYtZDljNS00MjIxLWEx ZTUtMGY4NzIyYWZlZjIxLzFkNGY2ZTQ2LWQ5YzUtNDIyMS1hMWU1LTBmODcyMmFm ZWYyMS5jcmwwHwYDVR0jBBgwFoAU4nfIxkNwCuM5P69UqCneqpdXysEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xZDRmNmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3 MjJhZmVmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzm3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuiUKPVPAaNyoIYXU00m/yB0vOHLyDsgWbGZq8Og7BWo+qe2JVy0PAm 0uKRCPXdWeBveT4QrqMN86DEWnPolHrn946nDCU1oQMnw5HfQPqZTxsKGd4dS1VR /kexzk//pOGFGqcGJh3Dq8/q18vPzmw0/KDgFLqqSc2IMBPGb/Z+V0z3TswtnTAk 28aXdd59jPjSZjz2BOigsi+4Xu9fBoBNEaTxM2nzHYgQN/vZDc8eg8gdYJTXSt/f ItXjEMbn3APRJZbqOSCxbOMIFwloR0V6SnyaYDLmDdK982haZlYpJ8ED4OIlOxQ4 4I2MDXPBGY7SChXf1POL2wmMKAJ4GSw= -----END CERTIFICATE-----Generated at Tue Oct 27 20:46:10 2026 by rpki-client