$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/d7b0cdce-ca43-34d2-8f77-091e1f3e1718.roa File: d7b0cdce-ca43-34d2-8f77-091e1f3e1718.roa (raw, json) Hash identifier: KITcgpEdcsnWSHNkLAb3co7Fw49Y3/CxLR2fktxwd/s= Subject key identifier: 61:99:98:CD:01:A1:5A:45:E9:91:56:65:F6:C2:B3:CC:56:99:CF:00 Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e Certificate serial: 010D0C9F4328584EC20C7015C994F790373B9F30 Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/d7b0cdce-ca43-34d2-8f77-091e1f3e1718.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 33211 IP address blocks: 206.41.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:70:15:c9:94:f7:90:37:3b:9f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=bca52cbb-a537-472a-919e-2e6a92a8c322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0a:9a:43:ac:da:1b:5c:8c:1c:64:37:24:e7: 04:42:32:77:e9:eb:88:de:08:22:ed:25:59:ed:18: d9:02:f4:c4:d0:50:62:84:dc:02:2c:b0:2e:cc:ad: 70:fb:ad:1f:32:52:ba:ac:e6:85:7a:cd:24:70:37: 57:f8:ae:ab:2d:ec:4a:34:b5:6e:47:af:05:f7:a6: 98:25:82:bf:0a:32:47:73:21:53:68:ce:e6:ab:aa: b9:ad:2b:06:38:6d:2f:9b:e7:bf:15:23:9b:38:1e: 3c:55:63:0d:79:59:22:5b:0a:7a:39:4d:12:71:a0: 50:ca:ef:87:8f:38:a3:bb:33:cf:4a:df:17:d1:c6: 68:d4:98:30:96:ee:b1:c6:90:cc:54:46:8b:b3:af: 17:1a:2f:ce:f6:38:b9:e4:cf:32:14:d2:01:14:82: 16:86:fe:fa:45:fb:c5:85:c8:a2:ce:b7:f3:df:af: a7:b2:cb:28:36:38:16:9a:54:c2:11:5f:aa:a3:56: c5:f5:30:b0:4e:56:b3:a5:d2:e7:a5:99:24:1a:5b: f1:fe:8d:45:c8:1b:49:54:23:84:23:2d:53:5a:cf: 2f:0d:41:f5:01:c7:18:c8:59:16:27:5e:a4:8b:3c: a0:13:fc:fc:d6:0b:40:cb:ad:5e:60:4c:2a:9a:83: 69:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:99:98:CD:01:A1:5A:45:E9:91:56:65:F6:C2:B3:CC:56:99:CF:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/d7b0cdce-ca43-34d2-8f77-091e1f3e1718.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl X509v3 Authority Key Identifier: keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer sbgp-ipAddrBlock: critical IPv4: 206.41.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:e7:fb:37:60:59:39:62:5c:29:1e:82:8c:1b:7a:67:e9:da: b6:fa:fe:45:08:6d:da:5c:5d:3c:2d:93:44:5d:dd:f5:a5:95: 0a:b9:b0:a2:f1:1c:57:a2:7b:08:8b:2c:9c:98:86:82:3d:c5: 98:c1:eb:2a:64:4a:4e:eb:35:fd:aa:48:00:7c:53:a2:c9:50: 48:7e:05:3c:a6:85:ee:a4:e7:0c:3c:53:2c:a6:c3:98:8a:44: 9b:c5:ff:bc:29:29:b9:c5:6d:bb:5a:5f:d8:13:e5:0a:38:ab: ff:39:b2:53:fe:77:d3:3e:31:f5:2f:fc:01:9b:d9:3a:b7:3c: cb:6b:63:fc:7e:e2:a5:93:24:35:c3:6d:10:fd:f8:39:87:f0: 97:bf:76:8e:61:fb:62:85:b2:3f:cd:d5:2b:28:4b:da:19:33: 8d:6b:d8:3e:bf:52:3f:c4:dc:23:ae:3e:41:c6:fa:63:f9:86: 88:11:06:3c:50:b0:93:4a:04:f5:a3:41:7c:d6:9e:47:1d:c2: 50:00:1d:38:92:49:70:4d:32:8d:58:9f:03:12:4b:9a:47:30: 16:59:7a:b5:c3:ca:72:60:61:be:17:be:73:4e:a7:cc:5a:3c: ec:00:52:13:1a:c6:b0:7a:b6:53:82:b2:74:04:62:32:a1:f5: 70:50:1c:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDHAVyZT3kDc7nzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0 ZDZlMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk YmNhNTJjYmItYTUzNy00NzJhLTkxOWUtMmU2YTkyYThjMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QqaQ6zaG1yMHGQ3JOcEQjJ36euI3ggi7SVZ 7RjZAvTE0FBihNwCLLAuzK1w+60fMlK6rOaFes0kcDdX+K6rLexKNLVuR68F96aY JYK/CjJHcyFTaM7mq6q5rSsGOG0vm+e/FSObOB48VWMNeVkiWwp6OU0ScaBQyu+H jzijuzPPSt8X0cZo1Jgwlu6xxpDMVEaLs68XGi/O9ji55M8yFNIBFIIWhv76RfvF hciizrfz36+nsssoNjgWmlTCEV+qo1bF9TCwTlazpdLnpZkkGlvx/o1FyBtJVCOE Iy1TWs8vDUH1AccYyFkWJ16kizygE/z81gtAy61eYEwqmoNpxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGZmM0BoVpF6ZFWZfbCs8xWmc8AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvZDdiMGNkY2UtY2E0My0z NGQyLThmNzctMDkxZTFmM2UxNzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy MDJhZTRkNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzil6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrn+zdgWTliXCkegowbemfp2rb6/kUIbdpcXTwtk0Rd3fWllQq5sKLx HFeiewiLLJyYhoI9xZjB6ypkSk7rNf2qSAB8U6LJUEh+BTymhe6k5ww8Uyymw5iK RJvF/7wpKbnFbbtaX9gT5Qo4q/85slP+d9M+MfUv/AGb2Tq3PMtrY/x+4qWTJDXD bRD9+DmH8Je/do5h+2KFsj/N1SsoS9oZM41r2D6/Uj/E3COuPkHG+mP5hogRBjxQ sJNKBPWjQXzWnkcdwlAAHTiSSXBNMo1YnwMSS5pHMBZZerXDynJgYb4XvnNOp8xa POwAUhMaxrB6tlOCsnQEYjKh9XBQHHM= -----END CERTIFICATE-----Generated at Wed Aug 26 20:26:32 2026 by rpki-client