$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/21fb9a2e-76fd-3812-afa3-df0becfe6ae0.roa File: 21fb9a2e-76fd-3812-afa3-df0becfe6ae0.roa (raw, json) Hash identifier: pI6eLMGIRhmNIV+Jtxeeaqhao5QQxmf3RYyIgv86e6M= Subject key identifier: 40:51:2B:2D:EE:28:3D:95:04:29:C3:00:13:59:D1:36:0C:18:93:05 Certificate issuer: /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc Certificate serial: 010D0C9F4328584F74B82D3906B1DBB3E4E49380 Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/21fb9a2e-76fd-3812-afa3-df0becfe6ae0.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 53454 IP address blocks: 206.209.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:2d:39:06:b1:db:b3:e4:e4:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=b16c5a1e-b304-418e-ba0f-4f24963d9c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:25:69:b8:58:1d:1d:61:04:51:32:64:eb:d8: f7:70:fe:aa:3d:0d:86:3c:bd:6b:ee:54:77:fd:78: 36:a3:9c:b6:cf:8a:8a:2a:3e:62:7f:4c:7e:e6:ce: 60:45:ea:2e:d3:91:7b:81:67:73:74:ef:c2:b1:7b: cd:0f:3f:a3:55:41:4e:7b:e7:67:c4:93:4a:2e:9e: a0:8b:8c:70:48:80:4c:21:13:44:57:af:55:1f:c6: 1a:8e:d9:c6:01:d2:37:bd:e2:31:a2:e1:4f:72:32: c8:ad:4e:ee:d9:fe:59:8b:42:03:09:08:c5:7c:4e: e7:e7:fb:26:cc:80:d8:36:fb:44:c4:04:e5:36:fc: db:ea:00:1c:5a:e7:fd:ef:f3:1d:2c:11:76:37:a4: 50:88:9f:e4:fc:bc:98:6e:35:ea:5a:e0:1b:a5:d1: f2:22:f0:2d:52:f7:eb:2c:54:ea:2f:3d:92:48:e4: 21:3b:15:24:9b:b1:53:7e:20:d6:83:c3:53:68:57: 98:c9:29:24:d4:27:76:76:ae:00:ca:85:7f:86:22: 18:3f:2e:68:9f:73:6d:74:d8:45:0a:c5:13:fb:1f: aa:54:ec:b8:1c:b6:e3:de:4d:a7:eb:f4:ae:75:9c: 4d:a5:61:bd:0a:22:39:26:76:5f:8a:b2:62:8b:09: ad:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:51:2B:2D:EE:28:3D:95:04:29:C3:00:13:59:D1:36:0C:18:93:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/21fb9a2e-76fd-3812-afa3-df0becfe6ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl X509v3 Authority Key Identifier: keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer sbgp-ipAddrBlock: critical IPv4: 206.209.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:0d:1f:69:98:29:d0:50:d4:7a:a4:b6:0f:ad:ec:5e:a3:9a: 9f:71:04:ff:71:6f:c7:60:75:f6:ad:34:98:4d:91:a0:e7:af: dd:c3:39:be:df:1c:75:3a:b0:ff:e2:6c:48:28:c4:fd:2e:3a: 3b:25:2c:83:11:d9:72:a5:18:cc:36:49:77:66:03:57:78:6a: 59:bf:63:a4:48:01:14:73:31:f7:f8:a3:a2:2b:ff:0e:e7:5f: b7:de:95:7a:d7:45:50:2d:28:19:e7:e0:50:16:c0:58:09:a6: 44:60:a1:14:f4:4a:27:f9:56:78:c9:8a:bc:45:06:fc:40:bc: af:a7:e8:6d:b0:10:05:b9:97:b0:f6:1b:cc:28:25:e5:17:46: ba:7b:a9:e5:fa:bf:20:e5:ed:c0:4f:2a:f8:f0:8f:4f:d1:ac: 12:f8:58:92:6f:c5:d6:4b:24:e9:dc:3a:07:9d:c8:d2:d3:a7: 3e:db:46:bb:93:be:90:b1:e0:09:59:0d:48:d8:db:34:9a:6e: e2:62:eb:5b:1b:a4:f0:09:61:f1:f5:a5:f2:c8:51:af:49:85: 65:80:49:37:7f:41:a5:ac:97:84:e0:24:60:aa:81:bc:5e:4b: f7:72:98:a5:93:b8:59:41:be:1d:a9:1c:28:21:85:10:fb:a2: 90:76:12:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uC05BrHbs+Tkk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmMGMwNDItY2YzNi00ZDZmLTk1NGEtYmVlNjFhNWIz ZGNjMB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk YjE2YzVhMWUtYjMwNC00MThlLWJhMGYtNGYyNDk2M2Q5YzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiVpuFgdHWEEUTJk69j3cP6qPQ2GPL1r7lR3 /Xg2o5y2z4qKKj5if0x+5s5gReou05F7gWdzdO/CsXvNDz+jVUFOe+dnxJNKLp6g i4xwSIBMIRNEV69VH8YajtnGAdI3veIxouFPcjLIrU7u2f5Zi0IDCQjFfE7n5/sm zIDYNvtExATlNvzb6gAcWuf97/MdLBF2N6RQiJ/k/LyYbjXqWuAbpdHyIvAtUvfr LFTqLz2SSOQhOxUkm7FTfiDWg8NTaFeYySkk1Cd2dq4AyoV/hiIYPy5on3NtdNhF CsUT+x+qVOy4HLbj3k2n6/SudZxNpWG9CiI5JnZfirJiiwmtXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBRKy3uKD2VBCnDABNZ0TYMGJMFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZmYw YzA0Mi1jZjM2LTRkNmYtOTU0YS1iZWU2MWE1YjNkY2MvMjFmYjlhMmUtNzZmZC0z ODEyLWFmYTMtZGYwYmVjZmU2YWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWZmMGMwNDItY2YzNi00ZDZmLTk1 NGEtYmVlNjFhNWIzZGNjL2FmZjBjMDQyLWNmMzYtNGQ2Zi05NTRhLWJlZTYxYTVi M2RjYy5jcmwwHwYDVR0jBBgwFoAUYMltwESmb70vbssD6msX/LpsLokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hZmYwYzA0Mi1jZjM2LTRkNmYtOTU0YS1iZWU2 MWE1YjNkY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCztHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUNH2mYKdBQ1Hqktg+t7F6jmp9xBP9xb8dgdfatNJhNkaDnr93DOb7f HHU6sP/ibEgoxP0uOjslLIMR2XKlGMw2SXdmA1d4alm/Y6RIARRzMff4o6Ir/w7n X7felXrXRVAtKBnn4FAWwFgJpkRgoRT0Sif5VnjJirxFBvxAvK+n6G2wEAW5l7D2 G8woJeUXRrp7qeX6vyDl7cBPKvjwj0/RrBL4WJJvxdZLJOncOgedyNLTpz7bRruT vpCx4AlZDUjY2zSabuJi61sbpPAJYfH1pfLIUa9JhWWASTd/QaWsl4TgJGCqgbxe S/dymKWTuFlBvh2pHCghhRD7opB2EmI= -----END CERTIFICATE-----Generated at Fri Oct 30 18:10:15 2026 by rpki-client