$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa File: f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa (raw, json) Hash identifier: krk1MFNUc5aI2+Kv2+asyjtLrLZiLrbQVVJnOMBDqjg= Subject key identifier: 10:F8:E7:61:5A:4A:18:11:1E:7E:64:E0:81:E2:0A:13:62:E9:C2:B3 Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e Certificate serial: 010D0C9F4328584EC20C70398F2C94F0A731BF86 Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 33211 IP address blocks: 206.41.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:70:39:8f:2c:94:f0:a7:31:bf:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=c98c61a5-587d-407c-8ed9-f21989df5add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:6f:25:7c:2e:fb:87:0f:e2:be:54:2d:5d: 95:63:34:77:bc:32:16:f5:3e:34:ba:c9:75:fd:44: 8b:bf:1e:0d:da:6c:a0:37:59:61:2f:cf:1c:52:9b: fe:10:9b:7c:b5:46:8c:01:86:da:6d:d9:73:f3:c6: 72:e8:46:7c:f4:d2:21:ef:87:41:cb:21:48:9d:c2: 0b:67:fc:02:1f:39:4e:9a:b6:aa:5b:a9:08:86:f0: cf:59:87:d2:9d:a7:b0:5b:fb:4f:34:de:9d:32:66: 49:d2:fc:7c:a1:f6:28:a3:2b:9f:c9:2d:7f:d0:2f: ed:44:1b:06:94:c2:39:b4:80:0a:f7:b5:df:a1:28: 9e:f8:f8:bd:f1:90:46:f4:94:89:48:fb:ea:ba:5e: da:25:15:1e:0f:6d:1e:4a:ee:e4:81:9b:1e:00:65: f3:84:b7:ca:84:c3:c8:ef:57:a0:e4:f0:26:29:5a: 80:61:f3:e4:03:6d:2f:f1:ff:62:f4:f5:9d:cc:75: b4:c8:d2:15:0a:5d:7d:b7:b6:7b:1c:b5:82:1e:1d: c7:46:03:6d:6c:a1:48:54:08:88:f9:a5:fb:a4:45: 02:7a:a8:5d:50:e2:13:6f:6d:4f:43:4d:17:67:b2: 79:65:ce:81:51:c0:bc:b6:ce:d2:7b:18:22:b7:71: a5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F8:E7:61:5A:4A:18:11:1E:7E:64:E0:81:E2:0A:13:62:E9:C2:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl X509v3 Authority Key Identifier: keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer sbgp-ipAddrBlock: critical IPv4: 206.41.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b9:50:b0:25:d3:24:13:ba:94:44:82:e7:56:15:d2:90:dc: fc:f2:92:73:80:42:fa:85:e3:2e:5d:54:18:26:84:44:43:d0: 90:1b:ec:a9:22:2b:c0:6c:f6:88:9c:2b:d7:70:9d:74:c2:b8: 42:45:17:00:56:b4:b7:a2:fe:9a:1e:5d:fc:22:54:c2:37:b3: 32:39:97:64:0a:8f:24:2b:42:96:8b:fd:d9:fe:67:94:82:dc: 02:39:aa:16:db:2c:42:ea:d9:7a:ef:35:71:4f:af:5d:06:fa: bd:71:e0:08:54:49:67:18:da:99:49:42:12:b2:58:c6:3e:5a: ed:83:0a:d6:4c:50:49:fc:7a:5d:01:94:6c:fd:a9:f6:e4:c2: 3a:47:26:b5:17:9a:76:71:e2:36:05:2d:06:8a:26:44:f1:64: 41:4d:c2:2f:c5:7a:08:8f:02:ba:c1:15:f8:a5:bb:73:76:54: 53:86:71:47:66:8a:ad:6f:13:a7:8b:5b:c1:c0:05:0c:18:79: ca:75:ec:4b:5e:69:83:6b:0d:4d:b4:18:36:11:a0:0c:33:15: 54:74:7a:a7:77:cc:51:6d:50:8a:44:e0:e8:b4:b8:5a:25:93: 2d:28:b1:d0:07:5d:d7:5a:12:c0:3e:12:10:94:bc:3a:49:34: 74:a3:d3:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDHA5jyyU8Kcxv4YwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0 ZDZlMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk Yzk4YzYxYTUtNTg3ZC00MDdjLThlZDktZjIxOTg5ZGY1YWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s9vJXwu+4cP4r5ULV2VYzR3vDIW9T40usl1 /USLvx4N2mygN1lhL88cUpv+EJt8tUaMAYbabdlz88Zy6EZ89NIh74dByyFIncIL Z/wCHzlOmraqW6kIhvDPWYfSnaewW/tPNN6dMmZJ0vx8ofYooyufyS1/0C/tRBsG lMI5tIAK97XfoSie+Pi98ZBG9JSJSPvqul7aJRUeD20eSu7kgZseAGXzhLfKhMPI 71eg5PAmKVqAYfPkA20v8f9i9PWdzHW0yNIVCl19t7Z7HLWCHh3HRgNtbKFIVAiI +aX7pEUCeqhdUOITb21PQ00XZ7J5Zc6BUcC8ts7Sexgit3Gl7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBD452FaShgRHn5k4IHiChNi6cKzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvZjQ4MWNiNWEtMGU3NC0z N2ZlLTk1ZmYtNmI4ODY3YTZmZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy MDJhZTRkNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzil/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK5ULAl0yQTupREgudWFdKQ3PzyknOAQvqF4y5dVBgmhERD0JAb7Kki K8Bs9oicK9dwnXTCuEJFFwBWtLei/poeXfwiVMI3szI5l2QKjyQrQpaL/dn+Z5SC 3AI5qhbbLELq2XrvNXFPr10G+r1x4AhUSWcY2plJQhKyWMY+Wu2DCtZMUEn8el0B lGz9qfbkwjpHJrUXmnZx4jYFLQaKJkTxZEFNwi/FegiPArrBFfilu3N2VFOGcUdm iq1vE6eLW8HABQwYecp17EteaYNrDU20GDYRoAwzFVR0eqd3zFFtUIpE4Oi0uFol ky0osdAHXddaEsA+EhCUvDpJNHSj02Q= -----END CERTIFICATE-----Generated at Wed Aug 26 18:05:53 2026 by rpki-client