$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f56ce3e0-d9d7-3d79-9c58-21fa8e65c30e.roa File: f56ce3e0-d9d7-3d79-9c58-21fa8e65c30e.roa (raw, json) Hash identifier: 9R6+GGc6uHGr3UKTR4m9xmqW0D4lPS/SeFtk5AcB5ps= Subject key identifier: 90:C4:D6:BE:0C:CE:17:64:73:A2:2D:60:6D:82:20:62:99:34:F0:D0 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584EA793F283F652BA634530B680 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f56ce3e0-d9d7-3d79-9c58-21fa8e65c30e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 53959 IP address blocks: 207.171.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:f2:83:f6:52:ba:63:45:30:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ecaf958c-4a4b-452d-ae7c-5219ac1f1346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:57:58:09:09:fa:b7:3a:a4:4d:b0:17:e0:8f: d5:d6:b5:06:80:ad:73:d6:1c:ce:ef:dd:50:dc:9e: 6a:f0:b3:a5:d5:9d:ef:6a:66:34:b2:ca:08:de:86: bb:82:85:d4:5d:ed:6a:fe:17:b2:0e:08:85:15:e3: d8:89:4d:ac:83:5b:90:25:04:b3:bc:23:c0:08:68: 52:ec:f9:92:62:36:22:58:3c:a4:87:19:e6:6a:96: 25:fe:e7:16:59:c0:17:aa:55:c5:5f:cf:37:cc:c4: a9:2a:cd:8e:ae:16:b3:68:34:a7:03:0a:62:51:55: 9b:46:ba:08:14:c2:5b:85:e1:2c:a0:de:db:83:3c: d2:70:ff:2c:b0:cc:48:cd:d2:db:99:84:ac:6d:b6: 67:d9:cf:b0:05:31:9a:a9:77:54:0f:20:60:8e:75: 17:8b:45:03:ab:64:3d:15:46:2a:19:5b:01:78:84: 0c:93:e1:a8:5f:f1:99:6b:78:36:1f:fd:99:8f:e8: 54:93:1e:9f:57:78:91:40:52:a0:78:6f:04:ee:8f: 9a:80:3f:03:28:32:69:51:93:c3:0d:6f:8c:9b:50: 1c:91:35:33:20:48:d9:3a:a6:98:5c:b9:be:52:87: a7:8c:f1:c9:67:56:12:80:5d:97:59:5d:bd:e3:ae: 74:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C4:D6:BE:0C:CE:17:64:73:A2:2D:60:6D:82:20:62:99:34:F0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/f56ce3e0-d9d7-3d79-9c58-21fa8e65c30e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 207.171.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c1:61:36:82:ae:0f:18:ca:5f:50:eb:b6:56:81:db:4a:5a: 94:64:0c:80:6b:b1:54:77:7b:24:91:a2:d9:fc:d3:c7:ee:2b: 33:be:cd:10:28:50:2d:5c:3f:4a:10:82:77:42:8c:82:55:78: 29:a8:69:66:e6:5d:1c:ba:f4:14:53:76:0a:5d:a1:89:5d:82: ad:c8:0c:d9:70:98:69:fd:b4:d0:b5:7e:a5:c2:6a:b2:e2:10: 31:fe:d4:7a:45:d3:08:19:d7:8f:6e:ce:89:52:b2:62:e5:b5: 5f:ad:f8:e5:8e:55:cd:9a:89:c3:3a:ad:0c:fb:39:db:9b:32: 13:83:85:84:a9:50:b9:88:3b:4d:7b:ad:80:75:7d:85:2e:d2: 50:5a:43:36:35:ff:59:a2:a7:58:b0:fa:2e:c9:5e:ef:f6:54: bb:c1:65:39:e6:ae:15:ad:01:2f:bb:bb:57:f6:3b:3a:dd:7c: 74:ea:93:f1:d3:22:8b:b7:02:64:d8:05:80:60:b0:8e:3f:d0: c8:ce:22:a4:1b:0a:f4:c5:0a:04:2e:1d:a4:71:e3:1e:a8:79: b0:b2:80:59:8b:c9:31:2e:29:49:09:61:65:cb:66:08:59:19: 0a:91:0e:ef:3e:4c:a3:1b:1c:0e:cc:af:20:78:f6:78:ce:9e: ad:0f:90:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk/KD9lK6Y0UwtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWNhZjk1OGMtNGE0Yi00NTJkLWFlN2MtNTIxOWFjMWYxMzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ldYCQn6tzqkTbAX4I/V1rUGgK1z1hzO791Q 3J5q8LOl1Z3vamY0ssoI3oa7goXUXe1q/heyDgiFFePYiU2sg1uQJQSzvCPACGhS 7PmSYjYiWDykhxnmapYl/ucWWcAXqlXFX883zMSpKs2OrhazaDSnAwpiUVWbRroI FMJbheEsoN7bgzzScP8ssMxIzdLbmYSsbbZn2c+wBTGaqXdUDyBgjnUXi0UDq2Q9 FUYqGVsBeIQMk+GoX/GZa3g2H/2Zj+hUkx6fV3iRQFKgeG8E7o+agD8DKDJpUZPD DW+Mm1AckTUzIEjZOqaYXLm+UoenjPHJZ1YSgF2XWV294650QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDE1r4Mzhdkc6ItYG2CIGKZNPDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvZjU2Y2UzZTAtZDlkNy0z ZDc5LTljNTgtMjFmYThlNjVjMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6vNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7BYTaCrg8Yyl9Q67ZWgdtKWpRkDIBrsVR3eySRotn808fuKzO+zRAo UC1cP0oQgndCjIJVeCmoaWbmXRy69BRTdgpdoYldgq3IDNlwmGn9tNC1fqXCarLi EDH+1HpF0wgZ149uzolSsmLltV+t+OWOVc2aicM6rQz7OdubMhODhYSpULmIO017 rYB1fYUu0lBaQzY1/1mip1iw+i7JXu/2VLvBZTnmrhWtAS+7u1f2OzrdfHTqk/HT Iou3AmTYBYBgsI4/0MjOIqQbCvTFCgQuHaRx4x6oebCygFmLyTEuKUkJYWXLZghZ GQqRDu8+TKMbHA7MryB49njOnq0PkBw= -----END CERTIFICATE-----Generated at Fri Sep 11 14:27:06 2026 by rpki-client