$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/670f7549-918a-333e-adb6-aee59c75f7d3.roa File: 670f7549-918a-333e-adb6-aee59c75f7d3.roa (raw, json) Hash identifier: 1C3TWbO7vPnufDks84RfZjxBddpE7Jk+7uI/7AiREWM= Subject key identifier: A9:C0:44:43:D1:1C:F2:CC:69:09:C0:0E:28:FF:84:31:C5:58:4C:41 Certificate issuer: /CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4 Certificate serial: 010D0C9F4328584F94D30B670A0730F329E6E700 Authority key identifier: 78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/670f7549-918a-333e-adb6-aee59c75f7d3.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 8002 IP address blocks: 207.251.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:0b:67:0a:07:30:f3:29:e6:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=31ec996a-72fb-4492-b622-f00fcfe734b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cf:3c:15:a3:cd:63:bc:ff:7e:4a:71:d6:1d: 76:94:45:f0:1c:49:64:6c:63:bf:17:0b:bb:e8:db: f8:90:51:19:53:0a:79:d8:46:93:10:6c:ac:aa:a8: e9:8a:29:66:da:f8:18:f1:bd:13:01:a6:0e:07:16: 5a:16:fd:e3:2d:b5:c1:a4:71:83:b7:4d:b7:4f:ea: 64:0b:ef:d7:64:f3:1a:c1:3b:4a:f7:3b:57:85:bb: e3:12:07:1c:44:9c:1f:c2:b7:61:af:e4:c7:bb:e8: 24:30:00:34:c7:81:58:5b:32:49:0c:d8:d9:3a:56: fa:4c:9e:22:be:7d:62:29:75:ad:ec:11:45:9e:14: 75:13:9a:40:82:69:ee:f7:d8:38:86:29:02:8a:7d: 68:8e:81:a1:00:88:ae:1b:45:9e:68:9d:d6:4f:d2: 5d:4f:1a:02:5d:26:cd:d7:ce:24:34:61:ac:61:b7: 60:e8:f2:27:9d:26:6e:65:a0:21:71:8a:20:e4:04: 2a:06:20:35:ae:12:ad:e0:00:dc:7c:79:a8:11:7c: bd:70:a9:b3:bd:91:df:5b:26:12:d6:09:86:86:3f: 29:7c:2e:9b:7b:5b:5b:84:dd:e7:a3:4d:34:24:59: 4e:3f:ef:e5:0d:08:6e:9d:83:b2:0f:76:d7:03:2b: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C0:44:43:D1:1C:F2:CC:69:09:C0:0E:28:FF:84:31:C5:58:4C:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/670f7549-918a-333e-adb6-aee59c75f7d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl X509v3 Authority Key Identifier: keyid:78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer sbgp-ipAddrBlock: critical IPv4: 207.251.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:dc:e1:57:be:2f:ec:5b:02:93:e2:49:39:7d:04:31:da:21: 7f:9e:77:e2:ec:2d:62:f1:72:80:e6:de:a5:a5:b4:3b:a4:af: 9b:19:8f:8b:5d:d0:51:16:b4:11:64:15:8f:9b:96:c1:04:30: 2a:6e:39:1b:0d:a2:45:61:fc:c8:8e:cf:68:a7:cf:a4:e1:ff: aa:6b:27:7f:6e:da:bc:80:61:06:01:62:81:b8:69:85:9b:5e: 17:dd:26:53:77:7f:4c:68:90:12:51:eb:a9:de:05:f5:97:e3: de:25:de:c9:13:ce:61:4c:97:11:8a:91:b0:f1:9a:89:e8:cf: 40:c4:2e:2f:c5:5f:ee:89:1d:11:1d:27:a6:fd:90:28:61:78: aa:50:2a:a0:61:32:4a:0e:8b:12:7c:30:99:9d:b2:c0:fc:90: 98:28:5f:52:b3:63:a9:27:34:b2:58:e2:20:86:59:a4:98:14: 3e:34:4a:60:c1:3d:76:dd:67:f5:69:58:57:42:28:e3:92:7b: 1d:17:3d:69:f5:7f:51:73:f0:ba:f4:78:1e:3d:d1:64:e0:14: 85:fb:d2:ac:32:30:4c:45:12:c9:0b:e1:91:bb:0e:17:61:1e: 2b:15:66:94:c1:dd:6a:e9:e8:d0:64:bb:39:51:39:86:27:94: cc:fa:54:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0wtnCgcw8ynm5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNiNTNmMDEtYjlhNC00YTAxLWIzODQtMWQ0MGY1NTY4 N2I0MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MzFlYzk5NmEtNzJmYi00NDkyLWI2MjItZjAwZmNmZTczNGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3888FaPNY7z/fkpx1h12lEXwHElkbGO/Fwu7 6Nv4kFEZUwp52EaTEGysqqjpiilm2vgY8b0TAaYOBxZaFv3jLbXBpHGDt023T+pk C+/XZPMawTtK9ztXhbvjEgccRJwfwrdhr+THu+gkMAA0x4FYWzJJDNjZOlb6TJ4i vn1iKXWt7BFFnhR1E5pAgmnu99g4hikCin1ojoGhAIiuG0WeaJ3WT9JdTxoCXSbN 184kNGGsYbdg6PInnSZuZaAhcYog5AQqBiA1rhKt4ADcfHmoEXy9cKmzvZHfWyYS 1gmGhj8pfC6be1tbhN3no000JFlOP+/lDQhunYOyD3bXAyuVGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnAREPRHPLMaQnADij/hDHFWExBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wY2I1 M2YwMS1iOWE0LTRhMDEtYjM4NC0xZDQwZjU1Njg3YjQvNjcwZjc1NDktOTE4YS0z MzNlLWFkYjYtYWVlNTljNzVmN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGNiNTNmMDEtYjlhNC00YTAxLWIz ODQtMWQ0MGY1NTY4N2I0LzBjYjUzZjAxLWI5YTQtNGEwMS1iMzg0LTFkNDBmNTU2 ODdiNC5jcmwwHwYDVR0jBBgwFoAUeOpfajg4lXtIKaCxSzWYB/kQbOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wY2I1M2YwMS1iOWE0LTRhMDEtYjM4NC0xZDQw ZjU1Njg3YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz/tBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTc4Ve+L+xbApPiSTl9BDHaIX+ed+LsLWLxcoDm3qWltDukr5sZj4td 0FEWtBFkFY+blsEEMCpuORsNokVh/MiOz2inz6Th/6prJ39u2ryAYQYBYoG4aYWb XhfdJlN3f0xokBJR66neBfWX494l3skTzmFMlxGKkbDxmonoz0DELi/FX+6JHREd J6b9kChheKpQKqBhMkoOixJ8MJmdssD8kJgoX1KzY6knNLJY4iCGWaSYFD40SmDB PXbdZ/VpWFdCKOOSex0XPWn1f1Fz8Lr0eB490WTgFIX70qwyMExFEskL4ZG7Dhdh HisVZpTB3Wrp6NBkuzlROYYnlMz6VG8= -----END CERTIFICATE-----Generated at Sun Nov 1 13:06:05 2026 by rpki-client