$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/21fb9a2e-76fd-3812-afa3-df0becfe6ae0.roa File: 21fb9a2e-76fd-3812-afa3-df0becfe6ae0.roa (raw, json) Hash identifier: Plr+Y3Xdi3SF8FEwky32NJNCEREv+3hMiAVPxR4wVhQ= Subject key identifier: D1:E4:98:C4:C2:A2:6D:E5:03:C1:01:A2:F6:82:87:F0:A4:69:8F:57 Certificate issuer: /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc Certificate serial: 010D0C9F4328584ED2CC7428971C0866DE592400 Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/21fb9a2e-76fd-3812-afa3-df0becfe6ae0.roa Signing time: Thu 13 Aug 2026 13:00:12 +0000 ROA not before: Thu 13 Aug 2026 13:00:12 +0000 ROA not after: Wed 11 Nov 2026 14:00:12 +0000 asID: 53454 IP address blocks: 206.209.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:cc:74:28:97:1c:08:66:de:59:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc Validity Not Before: Aug 13 13:00:12 2026 GMT Not After : Nov 11 14:00:12 2026 GMT Subject: CN=9c3155c1-b9e3-472a-b793-74129456cb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:71:2e:48:e8:e9:4d:6f:64:d2:33:be:b0:97: 24:57:9d:20:de:a4:3d:0e:f5:75:75:e8:97:35:4d: b0:b9:56:50:c6:bb:5f:7d:94:4f:2f:9b:7a:c8:80: 7e:9a:81:0d:9f:35:52:ba:c4:9a:d1:01:73:0d:93: 32:87:f8:d0:96:94:78:f2:99:84:b5:ac:8b:4e:fb: 2e:27:de:11:89:56:33:e2:de:fd:c6:cb:eb:e6:36: 84:8e:23:f3:7d:a6:b1:49:26:f9:f7:5f:12:bf:b9: 49:0f:6a:f9:ce:16:04:bd:d7:d8:7c:6e:b3:3e:d2: 6d:c0:c9:95:7a:8d:75:07:3e:a3:dd:1b:da:67:9c: 14:4b:60:ad:b8:24:b3:c8:53:66:77:82:6d:58:24: ab:56:29:fd:00:6a:b9:ec:96:95:ea:32:a7:97:78: 90:4f:6a:c8:a8:85:a2:33:d8:49:58:9d:64:52:cc: e5:57:63:1d:83:b5:4c:43:e0:c4:06:d4:67:5a:97: ab:c1:63:b3:df:55:54:e2:17:83:ab:ca:9d:d9:e2: 1f:2c:c0:24:22:78:df:5f:fa:14:89:4b:70:ff:e9: da:47:19:7b:f9:0b:88:30:a0:2d:9f:a3:ea:3f:26: e5:9f:4c:55:09:7e:4b:03:d9:30:44:bd:ab:2a:51: 41:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E4:98:C4:C2:A2:6D:E5:03:C1:01:A2:F6:82:87:F0:A4:69:8F:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/21fb9a2e-76fd-3812-afa3-df0becfe6ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl X509v3 Authority Key Identifier: keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer sbgp-ipAddrBlock: critical IPv4: 206.209.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a3:5e:8a:4d:5b:0d:6a:94:69:04:be:ee:64:f7:43:57:39: 4d:b1:fe:c5:50:0b:38:28:63:ab:0a:1c:38:41:c3:38:cc:d2: af:1c:f3:f6:90:65:1b:22:67:ff:4d:9a:71:3a:83:f6:4b:2e: 84:0a:ed:a9:23:5f:0d:7a:e2:97:1a:99:8b:7a:40:4e:36:cd: 3d:51:00:0d:04:cd:73:7c:21:f5:81:09:c3:dd:6e:5d:fc:fc: 69:04:e7:2f:6f:17:ed:70:5f:50:2a:38:09:92:2d:0b:fc:88: c6:8e:2a:01:b4:64:93:1b:58:1a:ce:75:23:77:d0:11:50:95: db:95:b2:d5:0d:a6:eb:fa:c3:56:b2:3f:87:9f:16:b5:b2:e6: 7c:86:76:3c:3a:9c:a7:4f:52:86:5d:95:6a:03:31:84:40:30: b0:e9:3a:e7:bd:23:b3:28:72:50:c8:e1:43:e2:fc:ca:bd:02: 6b:36:c6:66:bf:9a:09:19:e4:d1:83:3d:a7:2b:79:da:87:a2: 4b:86:2d:c2:f3:1c:bd:3c:be:c4:34:60:44:a9:63:0d:63:08: bc:da:8e:aa:a6:50:22:99:77:4a:5b:10:f9:fb:3c:3b:c3:6f: dc:ff:d8:20:47:70:11:65:5f:bf:c6:12:c0:ac:ee:9a:f2:3c: 0c:91:6b:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7SzHQolxwIZt5ZJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmMGMwNDItY2YzNi00ZDZmLTk1NGEtYmVlNjFhNWIz ZGNjMB4XDTI2MDgxMzEzMDAxMloXDTI2MTExMTE0MDAxMlowLzEtMCsGA1UEAxMk OWMzMTU1YzEtYjllMy00NzJhLWI3OTMtNzQxMjk0NTZjYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnEuSOjpTW9k0jO+sJckV50g3qQ9DvV1deiX NU2wuVZQxrtffZRPL5t6yIB+moENnzVSusSa0QFzDZMyh/jQlpR48pmEtayLTvsu J94RiVYz4t79xsvr5jaEjiPzfaaxSSb5918Sv7lJD2r5zhYEvdfYfG6zPtJtwMmV eo11Bz6j3RvaZ5wUS2CtuCSzyFNmd4JtWCSrVin9AGq57JaV6jKnl3iQT2rIqIWi M9hJWJ1kUszlV2Mdg7VMQ+DEBtRnWperwWOz31VU4heDq8qd2eIfLMAkInjfX/oU iUtw/+naRxl7+QuIMKAtn6PqPybln0xVCX5LA9kwRL2rKlFBDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHkmMTCom3lA8EBovaCh/CkaY9XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hZmYw YzA0Mi1jZjM2LTRkNmYtOTU0YS1iZWU2MWE1YjNkY2MvMjFmYjlhMmUtNzZmZC0z ODEyLWFmYTMtZGYwYmVjZmU2YWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWZmMGMwNDItY2YzNi00ZDZmLTk1 NGEtYmVlNjFhNWIzZGNjL2FmZjBjMDQyLWNmMzYtNGQ2Zi05NTRhLWJlZTYxYTVi M2RjYy5jcmwwHwYDVR0jBBgwFoAUYMltwESmb70vbssD6msX/LpsLokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hZmYwYzA0Mi1jZjM2LTRkNmYtOTU0YS1iZWU2 MWE1YjNkY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCztHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJajXopNWw1qlGkEvu5k90NXOU2x/sVQCzgoY6sKHDhBwzjM0q8c8/aQ ZRsiZ/9NmnE6g/ZLLoQK7akjXw164pcamYt6QE42zT1RAA0EzXN8IfWBCcPdbl38 /GkE5y9vF+1wX1AqOAmSLQv8iMaOKgG0ZJMbWBrOdSN30BFQlduVstUNpuv6w1ay P4efFrWy5nyGdjw6nKdPUoZdlWoDMYRAMLDpOue9I7MoclDI4UPi/Mq9Ams2xma/ mgkZ5NGDPacredqHokuGLcLzHL08vsQ0YESpYw1jCLzajqqmUCKZd0pbEPn7PDvD b9z/2CBHcBFlX7/GEsCs7pryPAyRa3o= -----END CERTIFICATE-----Generated at Sun Sep 13 10:51:29 2026 by rpki-client