$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/8524e59d-5e38-334d-8eee-83935264b119.roa File: 8524e59d-5e38-334d-8eee-83935264b119.roa (raw, json) Hash identifier: hlt+BD37/He88B8+frUYDkXBGfsicuhkg8h5z3mlo7o= Subject key identifier: C3:28:08:F0:6A:E1:CC:6F:12:82:BE:D1:CF:BB:BF:B9:6A:20:53:A4 Certificate issuer: /CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Certificate serial: 010D0C9F4328584EEEB77E44ECAE0CAC54CF8FF0 Authority key identifier: E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/8524e59d-5e38-334d-8eee-83935264b119.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 63448 IP address blocks: 206.109.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:7e:44:ec:ae:0c:ac:54:cf:8f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=17614d6e-312f-4b7c-889a-a1d33d29e365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3c:4d:3b:70:e9:62:b0:89:d0:77:f6:4b:e0: e5:c2:b4:c8:f1:da:03:73:f7:6b:62:df:bf:a0:8f: 8a:47:2a:8d:06:79:73:ee:a3:1c:f2:79:91:58:1e: 5f:e3:29:a6:27:9f:2c:f3:e8:8a:6d:74:71:03:2e: 2c:08:bb:48:17:80:f9:5e:d3:08:e0:b8:24:9f:a2: 4b:8f:a3:07:4b:0a:74:d6:bd:20:2a:8a:c4:46:f4: 33:ad:1a:a5:35:83:53:69:68:0b:d8:1a:6b:15:2b: 6c:4d:4e:8c:18:70:84:1b:b4:16:e5:2d:c7:f0:79: 95:07:48:7e:5b:c4:4a:22:40:3f:0d:e5:18:26:87: b1:38:8b:5d:d6:3e:ba:85:da:2d:d2:71:07:92:84: 06:92:7c:8a:e8:29:2b:0b:1e:31:df:c4:08:91:fb: 1a:27:d1:a3:43:22:4d:e5:5e:62:e3:a0:12:94:9b: 2e:cc:bc:72:67:74:b0:ff:00:dd:bc:07:b7:9d:ae: a7:3d:bb:dc:b0:8f:02:15:5b:ea:ab:aa:f3:83:96: d2:7a:2e:35:ad:61:63:9f:54:fc:53:35:22:bf:e9: fc:d7:8b:e9:87:3c:3f:69:a4:af:4f:5a:15:a4:d6: 8c:b8:e2:7a:22:c4:21:09:e9:a7:ff:97:35:ed:d1: ee:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:28:08:F0:6A:E1:CC:6F:12:82:BE:D1:CF:BB:BF:B9:6A:20:53:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/8524e59d-5e38-334d-8eee-83935264b119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl X509v3 Authority Key Identifier: keyid:E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer sbgp-ipAddrBlock: critical IPv4: 206.109.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:aa:68:1c:b7:c6:53:c5:69:2e:de:2f:d3:b6:60:09:a6:22: 20:b1:fb:19:d0:89:3f:8a:7c:13:7c:8f:16:eb:d8:bf:17:12: 80:f3:44:f8:4b:5d:0c:7e:40:c1:7c:bb:4b:69:14:d2:48:66: 3e:01:7d:84:25:e5:9a:fa:d7:e3:e7:b6:86:c4:92:38:86:fe: 10:82:30:85:0a:08:6e:a6:5d:fa:fc:f3:a0:2b:ce:f9:99:9b: b3:7e:6b:8d:3a:da:ba:34:e8:0e:07:20:c3:82:b6:98:98:51: a7:6a:f6:ff:6e:37:26:18:e6:12:50:16:65:06:64:3c:7b:60: 15:97:09:d1:46:2f:2f:9c:49:58:dc:b5:b2:15:92:a8:0c:09: 3d:7e:9a:5b:c5:9c:1e:d7:54:70:32:ab:36:f2:64:c1:a3:a0: e7:e5:09:4c:c7:83:03:a1:6d:4f:07:ed:d0:46:cc:b2:83:48: 96:75:cb:48:a9:5f:32:2d:ab:bb:c0:29:f4:3f:57:d7:b4:ea: bd:f4:ad:8b:61:2d:db:e4:7f:e3:b5:ce:3c:a3:7a:6f:15:47: fe:f0:10:57:ea:a6:41:f7:3c:cc:23:5d:54:d0:ea:5e:f5:05: ab:42:91:b5:ca:f0:c1:58:a1:df:bd:e6:78:03:b0:fe:78:3e: 32:97:d5:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut35E7K4MrFTPj/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ0ZjZlNDYtZDljNS00MjIxLWExZTUtMGY4NzIyYWZl ZjIxMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk MTc2MTRkNmUtMzEyZi00YjdjLTg4OWEtYTFkMzNkMjllMzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zxNO3DpYrCJ0Hf2S+DlwrTI8doDc/drYt+/ oI+KRyqNBnlz7qMc8nmRWB5f4ymmJ58s8+iKbXRxAy4sCLtIF4D5XtMI4Lgkn6JL j6MHSwp01r0gKorERvQzrRqlNYNTaWgL2BprFStsTU6MGHCEG7QW5S3H8HmVB0h+ W8RKIkA/DeUYJoexOItd1j66hdot0nEHkoQGknyK6CkrCx4x38QIkfsaJ9GjQyJN 5V5i46ASlJsuzLxyZ3Sw/wDdvAe3na6nPbvcsI8CFVvqq6rzg5bSei41rWFjn1T8 UzUiv+n814vphzw/aaSvT1oVpNaMuOJ6IsQhCemn/5c17dHu4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMoCPBq4cxvEoK+0c+7v7lqIFOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xZDRm NmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3MjJhZmVmMjEvODUyNGU1OWQtNWUzOC0z MzRkLThlZWUtODM5MzUyNjRiMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWQ0ZjZlNDYtZDljNS00MjIxLWEx ZTUtMGY4NzIyYWZlZjIxLzFkNGY2ZTQ2LWQ5YzUtNDIyMS1hMWU1LTBmODcyMmFm ZWYyMS5jcmwwHwYDVR0jBBgwFoAU4nfIxkNwCuM5P69UqCneqpdXysEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xZDRmNmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3 MjJhZmVmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzm3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2qaBy3xlPFaS7eL9O2YAmmIiCx+xnQiT+KfBN8jxbr2L8XEoDzRPhL XQx+QMF8u0tpFNJIZj4BfYQl5Zr61+PntobEkjiG/hCCMIUKCG6mXfr886ArzvmZ m7N+a4062ro06A4HIMOCtpiYUadq9v9uNyYY5hJQFmUGZDx7YBWXCdFGLy+cSVjc tbIVkqgMCT1+mlvFnB7XVHAyqzbyZMGjoOflCUzHgwOhbU8H7dBGzLKDSJZ1y0ip XzItq7vAKfQ/V9e06r30rYthLdvkf+O1zjyjem8VR/7wEFfqpkH3PMwjXVTQ6l71 BatCkbXK8MFYod+95ngDsP54PjKX1Vg= -----END CERTIFICATE-----Generated at Sat Sep 5 03:08:50 2026 by rpki-client