$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ab60957e-425d-31b6-a8d5-119901be3c90.roa File: ab60957e-425d-31b6-a8d5-119901be3c90.roa (raw, json) Hash identifier: 7IUroa3UUAcKAJ03OtlyrKH0Ntcz+ndbXNXPuBZdsmU= Subject key identifier: BB:F7:3A:A4:8D:98:5E:B7:E6:91:D0:DE:85:09:03:3A:15:D4:4E:D3 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584EFE122016A3D2A72B566E7780 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ab60957e-425d-31b6-a8d5-119901be3c90.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 271 IP address blocks: 206.12.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:20:16:a3:d2:a7:2b:56:6e:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=4f2bb00c-bf99-45d0-b827-512f247840ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:19:f9:e6:7d:4c:17:f9:0c:03:1c:00:4e:61: 3d:ac:37:02:97:2a:4b:0a:2d:19:eb:61:a6:db:96: 4a:1c:2c:97:8f:b7:12:95:10:13:0b:f2:7f:00:c2: 8a:4d:6c:9c:a8:8e:10:b8:ee:7e:a2:f7:72:70:bd: 40:14:2c:be:8f:4b:4d:32:26:93:9d:13:9b:2f:f9: 78:ca:02:12:d5:c7:5c:cc:54:9a:a9:a8:ef:c4:69: 6e:56:fb:f7:a6:b8:32:3b:d1:cb:98:81:17:4c:10: f0:e7:40:bc:f4:3c:48:07:19:28:df:71:08:50:07: eb:97:b7:04:da:ef:c7:7b:4f:8d:e4:41:af:bd:23: 4c:82:f4:45:a7:e6:52:a0:01:79:ad:14:67:c1:b2: 66:9c:99:9a:24:59:36:ef:5d:e9:0c:38:2d:93:cc: 71:32:40:cf:0c:e6:ec:7b:72:07:59:0e:67:64:e1: 4a:d1:f9:93:69:3a:41:f5:10:85:a3:e7:4c:2a:4f: 25:94:b4:a6:35:fa:39:ce:f6:1f:87:83:91:16:08: 74:74:c3:e3:ef:05:d7:32:2e:83:b8:1d:61:c5:a8: 8d:14:78:84:60:dd:0a:77:3f:7f:9b:e4:ec:26:dc: da:f5:ea:00:77:92:38:ff:04:60:d7:e6:f3:65:29: 26:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F7:3A:A4:8D:98:5E:B7:E6:91:D0:DE:85:09:03:3A:15:D4:4E:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ab60957e-425d-31b6-a8d5-119901be3c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.12.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:4d:17:04:86:6f:11:2c:0a:e7:a1:ca:b4:04:d6:f7:5f:11: 53:3c:1a:0c:5b:a4:3d:ea:60:95:04:d7:a9:7f:fb:e6:59:58: 06:32:22:a7:b7:7e:b9:50:d5:3d:67:96:4c:f5:f6:cf:8b:e7: ed:b1:6f:8f:06:66:91:bb:39:64:c0:25:de:00:33:0b:21:c9: 95:8c:ee:84:8a:1b:0d:83:8d:ca:9b:f5:49:87:47:26:ce:10: 93:c4:d0:af:23:fc:f9:cd:47:35:4b:57:93:d1:59:62:ec:20: a0:d9:30:1e:d0:fb:93:ae:5b:1f:7b:cb:e7:aa:bf:be:d8:be: 3b:eb:8e:1c:d5:4e:e3:30:36:e8:d3:c9:ca:71:97:28:43:c7: 62:98:8a:5d:41:17:4a:fc:c3:5b:3f:61:1d:fa:bc:d6:f2:29: 26:f3:1a:13:eb:32:cd:de:4f:91:21:a9:e1:25:dc:07:04:c2: ad:06:d7:b5:18:5d:09:a3:04:a7:12:7a:db:67:92:55:07:49: c5:68:ae:10:92:45:18:09:24:5f:44:75:b3:0f:db:9d:84:f3: 55:c5:7d:3c:05:87:81:7d:92:dd:7f:fe:82:b2:52:a1:6d:86: b0:25:ff:e9:b4:01:1a:8c:20:d3:24:f8:c4:39:5b:1c:24:e3: 67:f8:a7:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EiAWo9KnK1Zud4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk NGYyYmIwMGMtYmY5OS00NWQwLWI4MjctNTEyZjI0Nzg0MGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRn55n1MF/kMAxwATmE9rDcClypLCi0Z62Gm 25ZKHCyXj7cSlRATC/J/AMKKTWycqI4QuO5+ovdycL1AFCy+j0tNMiaTnRObL/l4 ygIS1cdczFSaqajvxGluVvv3prgyO9HLmIEXTBDw50C89DxIBxko33EIUAfrl7cE 2u/He0+N5EGvvSNMgvRFp+ZSoAF5rRRnwbJmnJmaJFk2713pDDgtk8xxMkDPDObs e3IHWQ5nZOFK0fmTaTpB9RCFo+dMKk8llLSmNfo5zvYfh4ORFgh0dMPj7wXXMi6D uB1hxaiNFHiEYN0Kdz9/m+TsJtza9eoAd5I4/wRg1+bzZSkmUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLv3OqSNmF635pHQ3oUJAzoV1E7TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYWI2MDk1N2UtNDI1ZC0z MWI2LWE4ZDUtMTE5OTAxYmUzYzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzgyVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhNFwSGbxEsCuehyrQE1vdfEVM8GgxbpD3qYJUE16l/++ZZWAYyIqe3 frlQ1T1nlkz19s+L5+2xb48GZpG7OWTAJd4AMwshyZWM7oSKGw2Djcqb9UmHRybO EJPE0K8j/PnNRzVLV5PRWWLsIKDZMB7Q+5OuWx97y+eqv77YvjvrjhzVTuMwNujT ycpxlyhDx2KYil1BF0r8w1s/YR36vNbyKSbzGhPrMs3eT5EhqeEl3AcEwq0G17UY XQmjBKcSettnklUHScVorhCSRRgJJF9EdbMP252E81XFfTwFh4F9kt1//oKyUqFt hrAl/+m0ARqMINMk+MQ5Wxwk42f4p/U= -----END CERTIFICATE-----Generated at Fri Oct 9 21:30:30 2026 by rpki-client