$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa File: d3d52428-3366-3940-ba48-6c79fec227e0.roa (raw, json) Hash identifier: i+PYolWJo+cbNVWXPc014/tBG3yfqKmHeIkKLBoBH5M= Subject key identifier: A1:23:BB:CD:AA:3F:4E:F8:CD:1D:A4:35:7D:AE:BD:19:84:AB:D5:FA Certificate issuer: /CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Certificate serial: 010D0C9F4328584F2957B27359618070799A4840 Authority key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 11736 IP address blocks: 206.209.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b2:73:59:61:80:70:79:9a:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=a55edf0d-fd35-47ce-90fc-3ded35b066c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:be:ea:14:02:cb:e9:0e:9f:ad:c5:35:f9:e0: 6a:28:2d:0a:12:f0:80:2d:fa:e0:14:f5:66:a7:4c: 21:63:da:71:1d:15:cd:d1:b5:0b:a1:96:4d:bc:f2: 44:21:91:a2:ab:ba:98:d2:eb:f5:4c:31:27:e8:93: 33:0a:ac:00:c6:98:cb:5b:bf:ba:61:f0:10:a7:42: 09:8b:cb:d4:75:79:03:03:d9:36:bb:d7:af:2c:c1: 83:86:e1:09:57:3c:0b:53:5c:36:72:94:ed:31:e5: b8:d0:85:6e:79:30:88:52:95:44:e0:3f:ee:00:43: 8c:58:3b:9e:3f:a9:4a:d5:4a:cd:1c:83:ec:ad:c9: a5:3b:98:48:51:84:7a:d8:ca:3b:a0:bd:fd:20:46: e4:54:4d:49:01:a8:f3:e3:5f:49:92:da:6b:75:ee: fb:24:d1:25:8b:68:cf:71:1e:7a:bb:90:5a:6b:34: 50:23:2b:09:64:1b:cd:b0:31:e3:71:be:d1:51:ec: 84:f9:97:ce:c4:a6:dd:8c:b9:0a:6a:91:b4:c7:d0: dd:76:9b:bd:d3:9c:43:56:7a:6f:6a:95:b1:c2:96: e8:c0:d5:b9:9d:de:5d:a1:60:14:ee:fe:5a:03:0b: c4:5f:e0:2f:09:b6:61:6e:24:43:3f:ef:a7:d2:38: 03:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:23:BB:CD:AA:3F:4E:F8:CD:1D:A4:35:7D:AE:BD:19:84:AB:D5:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/d3d52428-3366-3940-ba48-6c79fec227e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.crl X509v3 Authority Key Identifier: keyid:F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer sbgp-ipAddrBlock: critical IPv4: 206.209.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:50:67:63:ca:dd:44:6d:df:79:8a:a9:ba:38:18:57:43:82: 45:7f:28:66:06:b1:59:42:ec:2f:ee:8a:9b:f6:a3:59:6d:25: ca:0b:4d:64:a3:bc:34:52:a2:43:03:4c:60:d8:c0:ff:f4:c9: 01:11:93:07:64:bc:f9:21:46:95:6e:4f:04:29:d3:f5:c5:67: c0:fd:1c:08:41:d1:e8:82:6e:7a:df:76:7e:38:a2:88:b5:4f: fd:8f:7c:82:94:91:c3:17:8a:a4:16:fc:ae:12:4d:b9:6f:37: 15:f6:70:b0:43:45:be:7e:50:c6:df:41:04:e5:1a:aa:f8:55: 5f:d7:b5:c6:6e:39:77:1c:71:f1:76:69:0a:60:e0:e0:aa:ec: 43:72:97:f7:8e:0f:1e:72:4b:1d:e1:71:73:e8:a3:94:e8:8d: 30:2f:f0:5b:d4:57:26:08:89:a8:7b:aa:e4:cf:2b:8b:84:c5: e3:03:f2:e3:f5:28:56:8e:2d:7b:b0:7f:24:24:e4:eb:1d:fe: 55:11:fa:bf:4b:d1:ea:e2:22:64:db:00:d7:24:17:a8:60:c1: 7f:58:13:cb:cf:40:18:7d:ad:0f:71:2c:42:9d:9a:c8:59:67: e0:f3:5e:65:06:f6:36:f9:0d:8e:72:b6:34:95:e9:1f:ce:12: 44:ad:20:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7JzWWGAcHmaSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVl NjRlMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YTU1ZWRmMGQtZmQzNS00N2NlLTkwZmMtM2RlZDM1YjA2NmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub7qFALL6Q6frcU1+eBqKC0KEvCALfrgFPVm p0whY9pxHRXN0bULoZZNvPJEIZGiq7qY0uv1TDEn6JMzCqwAxpjLW7+6YfAQp0IJ i8vUdXkDA9k2u9evLMGDhuEJVzwLU1w2cpTtMeW40IVueTCIUpVE4D/uAEOMWDue P6lK1UrNHIPsrcmlO5hIUYR62Mo7oL39IEbkVE1JAajz419Jktprde77JNEli2jP cR56u5BaazRQIysJZBvNsDHjcb7RUeyE+ZfOxKbdjLkKapG0x9Dddpu905xDVnpv apWxwpbowNW5nd5doWAU7v5aAwvEX+AvCbZhbiRDP++n0jgDewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEju82qP074zR2kNX2uvRmEq9X6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83Zjkw MGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvZDNkNTI0MjgtMzM2Ni0z OTQwLWJhNDgtNmM3OWZlYzIyN2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y5MDBlNGUtNWYwYS00YjE0LTk4 YzAtNjY0N2JmZjVlNjRlLzdmOTAwZTRlLTVmMGEtNGIxNC05OGMwLTY2NDdiZmY1 ZTY0ZS5jcmwwHwYDVR0jBBgwFoAU8+WK0rjvh9c+gIgy/nujowv1xKAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3 YmZmNWU2NGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEztEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlQZ2PK3URt33mKqbo4GFdDgkV/KGYGsVlC7C/uipv2o1ltJcoLTWSj vDRSokMDTGDYwP/0yQERkwdkvPkhRpVuTwQp0/XFZ8D9HAhB0eiCbnrfdn44ooi1 T/2PfIKUkcMXiqQW/K4STblvNxX2cLBDRb5+UMbfQQTlGqr4VV/XtcZuOXcccfF2 aQpg4OCq7ENyl/eODx5ySx3hcXPoo5TojTAv8FvUVyYIiah7quTPK4uExeMD8uP1 KFaOLXuwfyQk5Osd/lUR+r9L0eriImTbANckF6hgwX9YE8vPQBh9rQ9xLEKdmshZ Z+DzXmUG9jb5DY5ytjSV6R/OEkStIBY= -----END CERTIFICATE-----Generated at Sat Sep 26 09:40:19 2026 by rpki-client