$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa File: 3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa (raw, json) Hash identifier: vXkBhUWHmT8ujqYIK5LlcyW825VWlobAJfqUcskWHlE= Subject key identifier: 06:1A:6A:78:45:E8:D9:85:AF:D5:50:88:42:35:76:90:66:A7:5B:93 Certificate issuer: /CN=207c40f4-33c4-478b-ae61-d3f51358881b Certificate serial: 010D0C9F4328584FB3A66B0E20FBB39684FAB560 Authority key identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 40091 IP address blocks: 76.9.224.0/20 maxlen: 24 216.115.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:6b:0e:20:fb:b3:96:84:fa:b5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207c40f4-33c4-478b-ae61-d3f51358881b Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=880341e1-f597-4d56-aa40-3fee2a1b7f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e8:b8:55:65:f9:d0:82:67:30:00:6e:78:8c: 5a:c0:71:09:bd:34:bf:66:13:6a:ac:e3:c9:ca:50: 52:c4:d2:5d:cc:48:6d:2b:1c:22:43:54:03:7c:8f: 94:5f:6f:06:ff:82:fa:89:37:ff:20:ec:76:8f:14: c3:8c:09:17:70:0c:b1:e2:21:ab:a4:0f:0c:77:2e: 83:70:61:db:7d:af:d8:3a:68:df:3c:37:ec:2b:d2: 86:d7:fe:54:2d:d3:68:37:e0:bf:4a:bf:de:e5:96: 89:74:d2:41:da:74:04:18:42:25:0d:04:0f:ef:1d: 1e:19:a9:25:f3:e0:60:43:e6:47:94:1d:02:41:f0: e0:a2:2a:95:10:2a:0a:fc:f5:6e:1d:f4:ac:d4:1e: 9e:d3:2e:53:c5:27:a4:84:a4:5c:16:3d:af:d2:a1: 2d:ac:79:44:1a:38:2c:ef:77:a1:44:b6:26:e2:36: 57:f7:5e:e7:c1:75:f4:dc:0a:c8:82:39:2b:02:11: 3d:d1:fc:84:67:db:a7:b9:20:19:bc:26:26:03:94: 12:d1:60:e9:91:50:d5:9c:06:c7:c1:7a:85:bb:85: cd:a7:aa:1d:7d:40:8a:ca:0c:4a:c1:43:85:10:92: c2:9f:8e:89:39:06:7b:58:8f:66:f9:ad:b5:85:f7: 09:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1A:6A:78:45:E8:D9:85:AF:D5:50:88:42:35:76:90:66:A7:5B:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/3c5f4e1a-4be7-37f7-b861-991da50f57bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.crl X509v3 Authority Key Identifier: keyid:52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer sbgp-ipAddrBlock: critical IPv4: 76.9.224.0/20 216.115.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0b:c7:1c:1d:9c:79:d3:83:67:2f:df:2e:30:dc:cc:67:73: 73:c6:ca:ad:cb:ba:d7:eb:dd:fd:ba:3b:77:a4:5f:5f:e9:f1: be:2d:ee:75:8a:fd:10:c5:72:47:56:ac:b9:9a:41:c8:f1:fb: 64:7a:bc:4b:33:05:36:ce:62:5c:fc:4f:55:30:e9:14:cb:03: 44:53:9e:66:c7:a8:d7:bb:77:77:de:87:f1:9d:26:33:4e:67: 57:79:f5:3b:ba:74:f1:b6:33:9a:bc:23:e5:e9:f6:8d:90:6b: a6:a3:18:ad:d1:39:88:ee:e1:ca:d6:09:bd:ac:ac:87:53:b7: d9:c4:c0:85:4c:a4:4d:38:29:75:3c:c2:76:06:91:28:08:53: 4c:4d:e0:9f:e9:57:37:e1:56:59:d6:74:10:1f:79:6c:38:98: 5b:73:2e:f8:f5:16:44:1c:31:5a:59:e4:95:8d:9a:8d:85:83: 5c:cd:3d:8c:04:26:3b:9c:59:b8:4c:0f:aa:93:4f:9a:15:4c: 29:16:07:51:37:ff:2c:cd:68:4d:1c:65:8d:77:00:75:bd:12: 70:24:fc:61:dd:ff:a2:cb:9a:41:64:a2:9c:1e:38:a5:6b:b4: 99:c0:c1:78:a2:b0:d1:d6:6b:8e:28:01:31:56:aa:52:7d:85: 32:af:2f:eb -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+zpmsOIPuzloT6tWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA3YzQwZjQtMzNjNC00NzhiLWFlNjEtZDNmNTEzNTg4 ODFiMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk ODgwMzQxZTEtZjU5Ny00ZDU2LWFhNDAtM2ZlZTJhMWI3ZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApui4VWX50IJnMABueIxawHEJvTS/ZhNqrOPJ ylBSxNJdzEhtKxwiQ1QDfI+UX28G/4L6iTf/IOx2jxTDjAkXcAyx4iGrpA8Mdy6D cGHbfa/YOmjfPDfsK9KG1/5ULdNoN+C/Sr/e5ZaJdNJB2nQEGEIlDQQP7x0eGakl 8+BgQ+ZHlB0CQfDgoiqVECoK/PVuHfSs1B6e0y5TxSekhKRcFj2v0qEtrHlEGjgs 73ehRLYm4jZX917nwXX03ArIgjkrAhE90fyEZ9unuSAZvCYmA5QS0WDpkVDVnAbH wXqFu4XNp6odfUCKygxKwUOFEJLCn46JOQZ7WI9m+a21hfcJaQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAYaanhF6NmFr9VQiEI1dpBmp1uTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdj NDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1ODg4MWIvM2M1ZjRlMWEtNGJlNy0z N2Y3LWI4NjEtOTkxZGE1MGY1N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMjA3YzQwZjQtMzNjNC00NzhiLWFl NjEtZDNmNTEzNTg4ODFiLzIwN2M0MGY0LTMzYzQtNDc4Yi1hZTYxLWQzZjUxMzU4 ODgxYi5jcmwwHwYDVR0jBBgwFoAUUgLOwO2kMddTSMx22Ig8dhzR7ewwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yMDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1 MTM1ODg4MWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQETAngAwQE 2HPAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGULxxwdnHnTg2cv3y4w3Mxnc3PGyq3Lutfr3f26O3ekX1/p 8b4t7nWK/RDFckdWrLmaQcjx+2R6vEszBTbOYlz8T1Uw6RTLA0RTnmbHqNe7d3fe h/GdJjNOZ1d59Tu6dPG2M5q8I+Xp9o2Qa6ajGK3ROYju4crWCb2srIdTt9nEwIVM pE04KXU8wnYGkSgIU0xN4J/pVzfhVlnWdBAfeWw4mFtzLvj1FkQcMVpZ5JWNmo2F g1zNPYwEJjucWbhMD6qTT5oVTCkWB1E3/yzNaE0cZY13AHW9EnAk/GHd/6LLmkFk opweOKVrtJnAwXiisNHWa44oATFWqlJ9hTKvL+s= -----END CERTIFICATE-----Generated at Mon Nov 2 17:07:18 2026 by rpki-client