$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa File: 900974d7-8989-307f-a8dd-f27fbe573f09.roa (raw, json) Hash identifier: 5ZI0uEnHTBXPJGp1Sj/mWUrQ7t/JVpRsYxtXs+huaEU= Subject key identifier: C7:44:19:DF:FA:F5:96:5D:F0:20:D7:C8:D3:EC:35:56:38:0D:F7:81 Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584F2957B29E2BDD4F80CF1535C0 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 198949 IP address blocks: 206.209.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b2:9e:2b:dd:4f:80:cf:15:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=f5396453-6e3f-4a50-bcbf-c8a93713899a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:31:79:ad:73:b8:68:db:c6:38:4d:6c:30: ec:71:20:1e:7e:66:ee:60:33:88:64:14:03:c6:8c: 28:0a:63:13:95:13:58:09:33:9d:8e:e2:ae:43:7a: bc:3d:20:4d:81:be:14:2e:d2:2d:e9:90:7b:a1:59: b0:09:17:3b:b7:fb:8b:0d:e2:d9:56:da:c5:b2:35: 88:20:d7:cf:17:5b:dd:33:1a:5b:02:04:2e:dc:21: 01:72:6c:a6:9b:f7:93:b6:eb:83:65:06:3a:2f:bc: 07:3e:d2:38:59:ad:1c:27:e9:d2:19:60:35:58:5d: a3:d3:61:33:ac:a2:3e:f0:0e:fb:bd:b3:91:f7:e9: ce:b3:7a:cb:66:cb:47:6b:4c:4d:c2:a4:e1:4c:81: 55:da:44:84:ee:f1:ec:30:b8:16:2d:7b:2d:b8:8e: 29:28:b5:f2:0e:59:89:32:cf:69:e3:be:0c:b1:53: 21:c9:e4:74:a6:c9:80:f4:96:bb:c1:d4:72:f8:ea: e0:d4:c1:ae:35:c4:3e:4f:a1:a7:32:5e:4f:c1:03: 57:32:62:6a:0d:10:3d:8a:ef:04:25:1a:65:9b:20: 33:90:51:75:44:da:b4:a4:04:4b:9f:1c:0f:39:0a: 3e:ce:96:b5:4f:7c:fb:40:cf:68:5f:37:b6:35:36: 46:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:44:19:DF:FA:F5:96:5D:F0:20:D7:C8:D3:EC:35:56:38:0D:F7:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/900974d7-8989-307f-a8dd-f27fbe573f09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: 206.209.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:45:d9:29:88:90:ff:86:21:af:92:dc:fb:49:aa:7c:41:03: ce:48:18:34:3a:82:7b:6d:75:e1:7b:3d:68:a4:06:36:68:6d: 8f:6c:ed:e5:ed:79:52:07:84:0b:af:da:ac:fb:17:11:cf:e4: 73:0a:e6:08:04:4e:a3:5f:a9:18:50:4f:9e:f9:b2:12:42:2b: a8:ce:75:e2:78:42:ce:24:74:fa:f3:c0:2f:e8:b6:44:6b:7e: f2:a4:f8:d5:76:e8:0b:4e:ca:a7:a5:68:26:37:dd:0b:04:57: ec:87:74:36:fc:e8:cb:53:53:15:62:6d:de:29:a1:2f:38:c1: 67:86:69:49:96:e1:66:79:50:8f:fa:3a:9b:41:3e:5c:9d:88: d0:30:2f:60:17:d1:ce:ae:83:f8:a3:aa:cc:05:e1:6a:27:f1: dd:b8:3a:2f:19:a3:27:1e:6b:d2:04:88:cd:7b:b5:4d:0b:05: a7:3c:80:0f:54:e4:b8:ab:22:f8:15:88:95:7c:62:86:b3:a4: f7:ad:e5:60:2d:18:e9:68:90:21:60:9e:dc:cf:76:fb:98:76: 01:92:7f:73:db:1c:4d:ae:21:d3:13:1a:68:99:fc:55:08:d5: 49:45:dc:48:03:41:12:fb:2e:58:18:93:2c:80:20:6c:a9:9c: 5a:ac:d7:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7KeK91PgM8VNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZjUzOTY0NTMtNmUzZi00YTUwLWJjYmYtYzhhOTM3MTM4OTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwsxea1zuGjbxjhNbDDscSAefmbuYDOIZBQD xowoCmMTlRNYCTOdjuKuQ3q8PSBNgb4ULtIt6ZB7oVmwCRc7t/uLDeLZVtrFsjWI INfPF1vdMxpbAgQu3CEBcmymm/eTtuuDZQY6L7wHPtI4Wa0cJ+nSGWA1WF2j02Ez rKI+8A77vbOR9+nOs3rLZstHa0xNwqThTIFV2kSE7vHsMLgWLXstuI4pKLXyDlmJ Ms9p474MsVMhyeR0psmA9Ja7wdRy+Org1MGuNcQ+T6GnMl5PwQNXMmJqDRA9iu8E JRplmyAzkFF1RNq0pARLnxwPOQo+zpa1T3z7QM9oXze2NTZGzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdEGd/69ZZd8CDXyNPsNVY4DfeBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvOTAwOTc0ZDctODk4OS0z MDdmLWE4ZGQtZjI3ZmJlNTczZjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEztEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdF2SmIkP+GIa+S3PtJqnxBA85IGDQ6gnttdeF7PWikBjZobY9s7eXt eVIHhAuv2qz7FxHP5HMK5ggETqNfqRhQT575shJCK6jOdeJ4Qs4kdPrzwC/otkRr fvKk+NV26AtOyqelaCY33QsEV+yHdDb86MtTUxVibd4poS84wWeGaUmW4WZ5UI/6 OptBPlydiNAwL2AX0c6ug/ijqswF4Won8d24Oi8Zoycea9IEiM17tU0LBac8gA9U 5LirIvgViJV8YoazpPet5WAtGOlokCFgntzPdvuYdgGSf3PbHE2uIdMTGmiZ/FUI 1UlF3EgDQRL7LlgYkyyAIGypnFqs1yY= -----END CERTIFICATE-----Generated at Sun Sep 27 11:36:41 2026 by rpki-client