$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/433f7757-53c4-301f-ac9f-9ee2037e6121.roa File: 433f7757-53c4-301f-ac9f-9ee2037e6121.roa (raw, json) Hash identifier: 0i8F6uFz11J0jezyWlXHoOI71xdn1H/KnS+jsWd2oCo= Subject key identifier: E2:C9:71:0A:A2:A6:D6:36:F3:94:F5:2E:07:4A:53:4D:FB:93:94:AB Certificate issuer: /CN=922506ab-190b-4044-a562-b1717e19da36 Certificate serial: 010D0C9F4328584F8578507DFB963A39ACE7DF60 Authority key identifier: D4:03:01:51:4E:30:68:5A:3E:2E:BD:2E:93:EB:D6:C5:A9:21:71:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/433f7757-53c4-301f-ac9f-9ee2037e6121.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 29831 IP address blocks: 206.168.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/922506ab-190b-4044-a562-b1717e19da36.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/922506ab-190b-4044-a562-b1717e19da36.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:50:7d:fb:96:3a:39:ac:e7:df:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922506ab-190b-4044-a562-b1717e19da36 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=b2feb5a9-0f62-4659-839f-ff539dbd8e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:c1:0a:54:86:20:21:85:0f:01:24:9f:f6: 2e:2e:6d:18:f9:23:41:da:d0:bb:e7:85:f7:73:10: b3:60:62:87:87:1d:33:88:93:09:ab:33:aa:98:87: 85:54:cc:57:0b:77:e9:08:26:8b:ab:8b:01:41:8a: 83:b0:f9:9b:38:65:8a:0a:8b:16:e7:fe:e0:41:e9: 45:1d:68:6b:64:eb:24:52:1b:00:d1:9c:cb:8a:91: a4:22:52:37:14:6f:ea:db:36:be:47:61:d6:03:df: 94:dd:61:49:5e:96:fe:95:70:48:dc:25:1c:47:fc: 68:7e:d9:8d:9c:54:76:ae:a6:30:88:89:4d:ab:6e: 1b:81:93:49:53:ff:fb:2e:df:c2:dd:da:b1:3c:b9: 36:2a:de:1b:12:fe:ad:f6:ec:d9:45:29:c5:d3:fc: 11:84:4f:7f:e9:1f:ae:72:fe:d9:91:7d:61:a6:8b: 2e:d9:68:25:2f:9a:4a:70:5f:ba:aa:ce:91:fa:60: e6:8d:4d:63:3a:b0:82:ee:00:e6:ef:c8:76:46:41: e8:91:e7:4c:c7:91:ce:00:91:31:8b:97:b1:e7:47: 94:8d:54:03:f9:5e:44:61:7b:1e:d7:82:75:80:a6: e3:89:9c:de:a9:2f:6e:17:10:49:3d:12:4b:12:f2: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C9:71:0A:A2:A6:D6:36:F3:94:F5:2E:07:4A:53:4D:FB:93:94:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/433f7757-53c4-301f-ac9f-9ee2037e6121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36/922506ab-190b-4044-a562-b1717e19da36.crl X509v3 Authority Key Identifier: keyid:D4:03:01:51:4E:30:68:5A:3E:2E:BD:2E:93:EB:D6:C5:A9:21:71:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/922506ab-190b-4044-a562-b1717e19da36.cer sbgp-ipAddrBlock: critical IPv4: 206.168.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:2f:a3:0e:d1:c5:b8:b7:75:1e:53:db:a9:b0:fd:4f:a7:f8: c5:20:19:a0:02:a9:5c:73:83:ea:cd:9b:f4:ee:6b:05:6c:b9: ce:97:c2:6a:21:32:a1:4e:41:cd:0a:36:96:0e:4b:ea:65:7f: fb:79:fd:8f:6c:76:39:0f:01:e3:8e:3c:fc:ac:fb:92:f1:51: b2:a3:14:3e:3d:1e:8b:a8:2b:02:ad:ba:53:a3:2b:eb:e6:2c: e0:83:95:73:8f:1b:0e:ee:47:de:2b:f9:22:dc:44:97:53:0c: 41:54:15:65:99:ce:5c:98:86:1d:98:9d:89:51:f9:f8:2f:e0: 30:b5:2a:ec:6f:d2:f6:38:28:1a:74:ef:7b:4b:0d:29:0c:e7: c1:34:5f:8c:9f:bb:bc:37:e5:ad:68:78:15:64:47:bc:96:3b: e7:fe:84:e9:81:43:5d:9d:3f:48:b2:e4:ec:19:d4:e0:75:a3: 41:85:5d:29:67:1f:5b:47:3d:4e:d1:76:ca:fe:fb:83:7b:db: 42:92:45:93:ab:b4:b6:88:14:4e:59:cb:73:4d:ac:f3:24:96: b6:71:88:53:60:a4:3f:1d:3b:22:fc:1e:64:e1:74:b9:d0:85: 86:ee:31:4f:a2:ca:7b:ca:c2:9b:70:0f:62:3b:f8:d6:b4:f3: 94:26:15:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeFB9+5Y6Oazn32AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIyNTA2YWItMTkwYi00MDQ0LWE1NjItYjE3MTdlMTlk YTM2MB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk YjJmZWI1YTktMGY2Mi00NjU5LTgzOWYtZmY1MzlkYmQ4ZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJLBClSGICGFDwEkn/YuLm0Y+SNB2tC754X3 cxCzYGKHhx0ziJMJqzOqmIeFVMxXC3fpCCaLq4sBQYqDsPmbOGWKCosW5/7gQelF HWhrZOskUhsA0ZzLipGkIlI3FG/q2za+R2HWA9+U3WFJXpb+lXBI3CUcR/xoftmN nFR2rqYwiIlNq24bgZNJU//7Lt/C3dqxPLk2Kt4bEv6t9uzZRSnF0/wRhE9/6R+u cv7ZkX1hposu2WglL5pKcF+6qs6R+mDmjU1jOrCC7gDm78h2RkHokedMx5HOAJEx i5ex50eUjVQD+V5EYXse14J1gKbjiZzeqS9uFxBJPRJLEvK3fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLJcQqiptY285T1LgdKU037k5SrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MjI1 MDZhYi0xOTBiLTQwNDQtYTU2Mi1iMTcxN2UxOWRhMzYvNDMzZjc3NTctNTNjNC0z MDFmLWFjOWYtOWVlMjAzN2U2MTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTIyNTA2YWItMTkwYi00MDQ0LWE1 NjItYjE3MTdlMTlkYTM2LzkyMjUwNmFiLTE5MGItNDA0NC1hNTYyLWIxNzE3ZTE5 ZGEzNi5jcmwwHwYDVR0jBBgwFoAU1AMBUU4waFo+Lr0uk+vWxakhcQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85MjI1MDZhYi0xOTBiLTQwNDQtYTU2Mi1iMTcx N2UxOWRhMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsvow7Rxbi3dR5T26mw/U+n+MUgGaACqVxzg+rNm/TuawVsuc6Xwmoh MqFOQc0KNpYOS+plf/t5/Y9sdjkPAeOOPPys+5LxUbKjFD49HouoKwKtulOjK+vm LOCDlXOPGw7uR94r+SLcRJdTDEFUFWWZzlyYhh2YnYlR+fgv4DC1Kuxv0vY4KBp0 73tLDSkM58E0X4yfu7w35a1oeBVkR7yWO+f+hOmBQ12dP0iy5OwZ1OB1o0GFXSln H1tHPU7Rdsr++4N720KSRZOrtLaIFE5Zy3NNrPMklrZxiFNgpD8dOyL8HmThdLnQ hYbuMU+iynvKwptwD2I7+Na085QmFeg= -----END CERTIFICATE-----Generated at Thu Oct 29 18:17:39 2026 by rpki-client