$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa File: 43abee32-0b0c-3284-ab75-86047f53ab34.roa (raw, json) Hash identifier: IZnv5fXNkVuBxKICsEO7eFKh75KpigsQz5dj4M1X4gg= Subject key identifier: B3:AC:F6:36:E3:68:1D:C4:23:23:8E:E5:96:00:AE:A0:6E:BA:87:53 Certificate issuer: /CN=3555956f-7142-453a-8aea-177a684dd7aa Certificate serial: 010D0C9F4328584EAA51A12709AFBF25A86DD600 Authority key identifier: 4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 13821 IP address blocks: 206.218.248.0/24 maxlen: 24 206.218.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:a1:27:09:af:bf:25:a8:6d:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3555956f-7142-453a-8aea-177a684dd7aa Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=17dd8232-06ba-490a-9e61-7023754eefe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:06:df:e7:50:6e:ab:01:1b:1a:92:6b:b6:ca: f1:3f:1f:83:32:58:e2:6c:75:67:2d:64:ad:33:2f: 59:91:2f:4b:20:79:0d:8e:35:b6:37:c2:d2:43:bc: 3f:b4:74:cf:c0:73:9d:4f:e9:d4:45:75:4f:1d:5a: 63:42:72:61:9a:ec:e8:5d:95:5b:e7:42:e5:82:15: 18:ee:51:54:73:10:c5:ad:06:aa:9c:8a:90:e3:6f: d3:ad:3c:a0:fe:22:29:48:3d:9b:12:72:8f:62:c2: 34:cc:15:0e:b1:af:51:ac:61:0e:fa:74:28:f5:bb: 5d:57:e4:a4:c4:7b:b3:48:67:0c:65:de:a4:6c:b9: bd:7a:84:a9:f0:e3:ae:73:24:05:38:22:8c:be:b8: fd:59:f5:71:c9:ff:66:dd:ae:dd:81:7c:02:01:34: 2d:3f:b6:78:24:77:04:c6:e5:37:20:53:48:af:1b: 25:1c:32:f2:9a:32:0a:72:3f:26:22:3c:a4:fa:e8: df:15:74:8f:60:f6:f6:e9:c5:a3:13:0e:fa:1c:9d: 84:83:42:f9:2e:9c:31:95:b7:61:d2:0f:e8:5f:e4: 6b:35:e8:76:c6:56:f0:41:b2:ea:00:16:67:bf:b7: 99:d5:35:f0:a4:84:53:4c:0c:6f:47:b0:dd:86:99: 8d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AC:F6:36:E3:68:1D:C4:23:23:8E:E5:96:00:AE:A0:6E:BA:87:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl X509v3 Authority Key Identifier: keyid:4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer sbgp-ipAddrBlock: critical IPv4: 206.218.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:72:1a:42:ca:2a:89:e1:81:bb:65:45:71:17:79:98:01:e8: 6a:25:37:e4:f2:87:d9:92:46:e9:a2:d1:32:cd:77:88:64:ee: ae:42:1e:6b:04:d3:ca:ad:62:4d:c7:59:a0:95:2e:f7:78:50: 69:d7:3b:81:bd:46:98:29:99:b5:5e:b2:cd:a2:da:c0:53:3d: 7b:d5:46:c9:19:fd:7e:a4:01:e7:bb:76:fd:ed:74:f6:4c:e9: 14:e1:e9:4d:15:e6:ec:46:81:6d:65:93:82:df:9b:43:07:69: 0a:dd:a3:12:b6:a2:86:a9:be:67:54:67:9a:43:f3:40:44:3d: 96:e6:49:48:f1:50:77:d1:9b:2d:08:62:d0:c3:78:6f:f4:e1: a9:f9:a0:f1:b4:76:0b:c8:4c:af:eb:36:2a:52:db:17:70:c9: f1:5a:a6:95:5c:7d:43:31:04:9b:ad:99:34:06:2f:86:dc:f2: 37:16:e1:0e:51:23:7a:bb:38:eb:bf:8e:9b:08:3b:c8:8e:82: d2:46:7a:c5:45:52:f5:5d:d1:7a:ee:b1:af:0c:12:91:2b:4f: a6:0a:9a:9a:5f:78:da:74:ff:2a:b3:a3:ce:cb:14:06:05:d9: 83:0f:e1:88:b1:b6:af:ab:d2:e7:30:05:91:aa:75:17:1b:03: b5:0c:ee:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUaEnCa+/Jaht1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzU1NTk1NmYtNzE0Mi00NTNhLThhZWEtMTc3YTY4NGRk N2FhMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk MTdkZDgyMzItMDZiYS00OTBhLTllNjEtNzAyMzc1NGVlZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQbf51BuqwEbGpJrtsrxPx+DMljibHVnLWSt My9ZkS9LIHkNjjW2N8LSQ7w/tHTPwHOdT+nURXVPHVpjQnJhmuzoXZVb50LlghUY 7lFUcxDFrQaqnIqQ42/TrTyg/iIpSD2bEnKPYsI0zBUOsa9RrGEO+nQo9btdV+Sk xHuzSGcMZd6kbLm9eoSp8OOucyQFOCKMvrj9WfVxyf9m3a7dgXwCATQtP7Z4JHcE xuU3IFNIrxslHDLymjIKcj8mIjyk+ujfFXSPYPb26cWjEw76HJ2Eg0L5Lpwxlbdh 0g/oX+RrNeh2xlbwQbLqABZnv7eZ1TXwpIRTTAxvR7DdhpmNAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOs9jbjaB3EIyOO5ZYArqBuuodTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1 OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdhNjg0ZGQ3YWEvNDNhYmVlMzItMGIwYy0z Mjg0LWFiNzUtODYwNDdmNTNhYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzU1NTk1NmYtNzE0Mi00NTNhLThh ZWEtMTc3YTY4NGRkN2FhLzM1NTU5NTZmLTcxNDItNDUzYS04YWVhLTE3N2E2ODRk ZDdhYS5jcmwwHwYDVR0jBBgwFoAUTnp2SaFOHZM02c2odqnRmGb0SA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdh Njg0ZGQ3YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBztr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhyGkLKKonhgbtlRXEXeZgB6GolN+Tyh9mSRumi0TLNd4hk7q5CHmsE 08qtYk3HWaCVLvd4UGnXO4G9RpgpmbVess2i2sBTPXvVRskZ/X6kAee7dv3tdPZM 6RTh6U0V5uxGgW1lk4Lfm0MHaQrdoxK2ooapvmdUZ5pD80BEPZbmSUjxUHfRmy0I YtDDeG/04an5oPG0dgvITK/rNipS2xdwyfFappVcfUMxBJutmTQGL4bc8jcW4Q5R I3q7OOu/jpsIO8iOgtJGesVFUvVd0Xrusa8MEpErT6YKmppfeNp0/yqzo87LFAYF 2YMP4Yixtq+r0ucwBZGqdRcbA7UM7mY= -----END CERTIFICATE-----Generated at Thu Aug 27 02:27:02 2026 by rpki-client