$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4230aaf4-ca02-336b-837f-c5e5297bb0f0.roa File: 4230aaf4-ca02-336b-837f-c5e5297bb0f0.roa (raw, json) Hash identifier: 1ZMb6F5+3Z3criyQh3gmiAQEYngcm88ru41EMtJcHzE= Subject key identifier: 83:1E:96:EF:46:6B:29:5A:92:29:3B:F0:78:5C:F2:61:D8:C8:4A:57 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584EF4D8EF4C9E8316F5A01F0300 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4230aaf4-ca02-336b-837f-c5e5297bb0f0.roa Signing time: Tue 25 Aug 2026 17:42:51 +0000 ROA not before: Tue 25 Aug 2026 17:42:51 +0000 ROA not after: Mon 23 Nov 2026 18:42:51 +0000 asID: 20473 IP address blocks: 209.137.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:d8:ef:4c:9e:83:16:f5:a0:1f:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Aug 25 17:42:51 2026 GMT Not After : Nov 23 18:42:51 2026 GMT Subject: CN=06f591d2-8c01-4929-b9f8-6e799a42f592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:17:fe:a3:61:1d:8e:1f:f0:bd:61:17:53:43: 2e:f1:ac:8f:f0:8c:ea:73:99:44:88:5b:57:49:5a: 4c:8c:4f:9d:3a:06:63:91:e7:f7:71:23:df:83:44: 60:e4:2f:6b:5e:61:a3:e4:8c:9c:71:72:3c:3f:db: 48:7e:d8:b5:13:50:dc:40:b1:75:94:69:ca:92:db: cb:79:c0:02:23:a9:2c:d1:df:0e:a7:56:23:85:e3: 9f:f7:64:05:be:01:49:f3:91:a8:52:90:0a:5e:81: 3b:a1:62:da:b7:43:34:ba:0b:ff:f3:b0:40:15:dd: ac:00:8d:29:65:df:9f:12:9f:54:6e:12:1e:89:56: 19:3a:f8:bb:87:5f:fe:e3:1b:66:bb:7b:ee:96:aa: ef:e3:67:6b:ed:46:33:71:1f:f1:6d:15:ca:e1:d3: d4:9d:e9:02:2c:cb:6c:bd:1a:df:d6:31:a2:f6:7c: df:48:7a:84:8b:f3:0b:df:22:6c:81:3c:39:48:97: e2:7d:67:d8:6b:6a:f8:78:9d:fb:90:a8:13:1e:b4: a5:d2:fc:5a:79:2d:9c:c9:9f:03:3f:ea:8b:7f:7f: c4:78:d0:5c:24:b5:d9:56:6d:3e:3c:70:e6:47:67: e0:9a:fc:63:7c:fd:6f:c1:f2:33:fd:4c:7c:1f:1e: 75:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1E:96:EF:46:6B:29:5A:92:29:3B:F0:78:5C:F2:61:D8:C8:4A:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4230aaf4-ca02-336b-837f-c5e5297bb0f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 209.137.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:92:ea:72:11:84:55:e1:17:82:e9:65:9a:03:81:03:80:1e: 2b:2e:c9:85:77:70:3b:10:8c:91:00:0a:96:67:c2:09:8e:ab: 74:90:98:b7:db:7e:ad:e1:3c:bd:48:91:bb:f2:e7:8f:cd:6f: 9e:d4:57:01:a0:d8:68:51:e6:c9:41:5c:e7:f7:45:e3:16:63: 48:3e:15:2a:15:6a:f0:19:ae:fa:90:3a:01:17:35:a0:2b:45: 8d:f9:63:2e:87:44:3e:61:f1:07:24:a6:85:3b:4e:a3:4e:14: 97:1f:a1:d3:2d:8d:02:e1:de:53:d0:47:72:eb:92:e1:68:ea: 29:71:84:40:6f:69:a3:81:8d:14:ce:54:30:8a:18:21:f2:fb: 95:1b:fb:9d:96:87:9d:b0:b8:3c:18:b4:20:71:7b:ea:a0:9d: 39:de:4a:e5:10:8c:fc:a4:32:56:f1:67:ec:22:43:1d:e1:35: cf:a0:ef:b8:b9:55:90:10:f5:3d:1c:16:1b:4e:09:26:98:4d: a7:bd:86:b9:d7:5d:4c:eb:94:4b:f9:d8:7c:e4:9b:a7:f1:d3: fa:cc:30:01:61:76:09:cc:a4:7b:32:b4:95:4e:8f:c3:f4:c1: fb:9e:6d:b0:31:7d:25:54:0b:04:3c:01:ad:6f:54:0e:02:47: a9:26:c5:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE702O9MnoMW9aAfAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MDgyNTE3NDI1MVoXDTI2MTEyMzE4NDI1MVowLzEtMCsGA1UEAxMk MDZmNTkxZDItOGMwMS00OTI5LWI5ZjgtNmU3OTlhNDJmNTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hf+o2Edjh/wvWEXU0Mu8ayP8Izqc5lEiFtX SVpMjE+dOgZjkef3cSPfg0Rg5C9rXmGj5IyccXI8P9tIfti1E1DcQLF1lGnKktvL ecACI6ks0d8Op1YjheOf92QFvgFJ85GoUpAKXoE7oWLat0M0ugv/87BAFd2sAI0p Zd+fEp9UbhIeiVYZOvi7h1/+4xtmu3vulqrv42dr7UYzcR/xbRXK4dPUnekCLMts vRrf1jGi9nzfSHqEi/ML3yJsgTw5SJfifWfYa2r4eJ37kKgTHrSl0vxaeS2cyZ8D P+qLf3/EeNBcJLXZVm0+PHDmR2fgmvxjfP1vwfIz/Ux8Hx51jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMelu9Gaylakik78Hhc8mHYyEpXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNDIzMGFhZjQtY2EwMi0z MzZiLTgzN2YtYzVlNTI5N2JiMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Ym6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyS6nIRhFXhF4LpZZoDgQOAHisuyYV3cDsQjJEACpZnwgmOq3SQmLfb fq3hPL1Ikbvy54/Nb57UVwGg2GhR5slBXOf3ReMWY0g+FSoVavAZrvqQOgEXNaAr RY35Yy6HRD5h8QckpoU7TqNOFJcfodMtjQLh3lPQR3LrkuFo6ilxhEBvaaOBjRTO VDCKGCHy+5Ub+52Wh52wuDwYtCBxe+qgnTneSuUQjPykMlbxZ+wiQx3hNc+g77i5 VZAQ9T0cFhtOCSaYTae9hrnXXUzrlEv52Hzkm6fx0/rMMAFhdgnMpHsytJVOj8P0 wfuebbAxfSVUCwQ8Aa1vVA4CR6kmxcE= -----END CERTIFICATE-----Generated at Wed Aug 26 13:57:24 2026 by rpki-client