$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/3a2c937e-43a7-3104-9c15-c14d170576fa.roa File: 3a2c937e-43a7-3104-9c15-c14d170576fa.roa (raw, json) Hash identifier: x+2lGkh/rzLmZ7pxMhbw9UyDxW6amzsBkdkmSlKmu6k= Subject key identifier: 4E:92:18:A2:31:D2:91:9D:C2:F6:AD:C2:40:F3:43:29:C3:8A:3B:8D Certificate issuer: /CN=7ba533d7-0e29-41f6-8679-d93c39c3b1d6 Certificate serial: 010D0C9F4328584F067240954B6704E5B5D10530 Authority key identifier: 61:4E:15:BE:98:2C:A8:10:20:8C:51:DC:A4:DD:75:86:C3:4F:90:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/3a2c937e-43a7-3104-9c15-c14d170576fa.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 376 IP address blocks: 206.167.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:40:95:4b:67:04:e5:b5:d1:05:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba533d7-0e29-41f6-8679-d93c39c3b1d6 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=08bd3d38-2b92-4861-876d-f3e5252c5808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7b:ee:b2:ba:f9:63:df:11:53:b7:53:36:e8: b0:a1:f6:75:23:64:56:d2:80:f0:7f:4d:07:dc:ba: 68:12:6e:3a:6e:d0:7d:29:df:df:28:91:a9:9d:20: ec:6a:6d:06:92:23:42:b4:9d:f6:ff:45:ea:59:96: 4c:0a:7d:12:20:47:b7:63:67:3f:71:7d:3a:32:91: a9:6d:70:d0:ad:f1:cd:e2:70:05:50:31:6f:34:da: 5a:cb:8f:95:6d:f3:6f:b8:2f:1f:ee:7a:5d:18:a8: f7:cf:a0:4a:36:19:66:b8:d9:a9:c1:cc:78:78:79: 0d:bb:35:16:e0:3e:c7:03:cd:fd:ce:7f:aa:77:fe: 95:6a:1b:29:ff:66:9a:c3:35:7a:ca:f4:f2:01:49: e8:bc:a0:7f:34:e0:a9:03:12:84:4c:4c:e8:c3:01: 12:ce:00:5f:21:cf:09:06:00:50:b4:f2:a0:43:e0: 9c:2c:2d:da:85:0d:60:9a:69:26:d7:4f:0a:6d:3c: ee:10:a7:a3:92:ad:c9:b2:2d:51:36:8a:33:6f:a8: 0b:4f:0b:de:9c:f0:a7:ee:f9:8e:55:2f:2b:5a:6b: 2c:6e:76:f1:5d:83:a2:06:7b:c9:a0:6c:69:2f:15: 69:ac:1b:de:07:b1:e0:35:de:57:7a:b1:62:9b:0a: 86:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:92:18:A2:31:D2:91:9D:C2:F6:AD:C2:40:F3:43:29:C3:8A:3B:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/3a2c937e-43a7-3104-9c15-c14d170576fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.crl X509v3 Authority Key Identifier: keyid:61:4E:15:BE:98:2C:A8:10:20:8C:51:DC:A4:DD:75:86:C3:4F:90:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.cer sbgp-ipAddrBlock: critical IPv4: 206.167.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:52:62:f5:91:56:0c:6c:b0:35:03:f7:9c:81:82:e2:5b:20: f1:bb:af:c7:85:d3:78:fe:f3:00:5d:48:35:1f:67:5c:6b:ff: ac:1c:4c:c5:8f:30:28:0d:46:7e:1e:ee:d9:97:71:f4:9e:6e: 4e:36:5c:c1:c3:ec:33:b9:b8:a2:e0:8e:75:cf:ac:15:59:83: 20:d0:45:a4:b9:1d:4e:25:90:a7:69:12:46:8a:3e:2d:5c:28: 63:d6:3d:c5:ee:07:17:ee:ac:5e:c8:b0:6d:5c:ea:82:f5:11: 74:f3:77:bc:27:60:3c:da:b7:73:34:aa:b0:48:4f:fd:73:3a: f2:ff:c4:79:9d:c4:1c:38:c9:9a:a5:c7:67:38:62:9f:8a:d8: 76:62:aa:cb:64:da:28:9a:1c:59:b6:24:55:78:8e:40:b7:f0: a7:f5:65:dc:2d:3e:c0:6c:e3:b3:f6:9e:a2:d3:f6:63:9a:3f: 49:80:a8:b7:b1:4f:59:10:e8:d3:62:a8:b0:6f:08:dc:60:ac: a9:23:4a:e9:f8:db:68:8d:f1:be:20:ff:38:98:8e:a1:f6:d2: b7:2f:7c:42:a2:7e:91:04:55:71:0f:00:e3:1a:ae:97:5c:33: 8e:7a:0e:6c:0a:fa:55:91:ae:d2:43:16:f9:64:dd:c7:b6:f5: dc:7c:4f:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GckCVS2cE5bXRBTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JhNTMzZDctMGUyOS00MWY2LTg2NzktZDkzYzM5YzNi MWQ2MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MDhiZDNkMzgtMmI5Mi00ODYxLTg3NmQtZjNlNTI1MmM1ODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3vusrr5Y98RU7dTNuiwofZ1I2RW0oDwf00H 3LpoEm46btB9Kd/fKJGpnSDsam0GkiNCtJ32/0XqWZZMCn0SIEe3Y2c/cX06MpGp bXDQrfHN4nAFUDFvNNpay4+VbfNvuC8f7npdGKj3z6BKNhlmuNmpwcx4eHkNuzUW 4D7HA839zn+qd/6Vahsp/2aawzV6yvTyAUnovKB/NOCpAxKETEzowwESzgBfIc8J BgBQtPKgQ+CcLC3ahQ1gmmkm108KbTzuEKejkq3Jsi1RNoozb6gLTwvenPCn7vmO VS8rWmssbnbxXYOiBnvJoGxpLxVprBveB7HgNd5XerFimwqGoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6SGKIx0pGdwvatwkDzQynDijuNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YmE1 MzNkNy0wZTI5LTQxZjYtODY3OS1kOTNjMzljM2IxZDYvM2EyYzkzN2UtNDNhNy0z MTA0LTljMTUtYzE0ZDE3MDU3NmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2JhNTMzZDctMGUyOS00MWY2LTg2 NzktZDkzYzM5YzNiMWQ2LzdiYTUzM2Q3LTBlMjktNDFmNi04Njc5LWQ5M2MzOWMz YjFkNi5jcmwwHwYDVR0jBBgwFoAUYU4VvpgsqBAgjFHcpN11hsNPkJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83YmE1MzNkNy0wZTI5LTQxZjYtODY3OS1kOTNj MzljM2IxZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqcXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtSYvWRVgxssDUD95yBguJbIPG7r8eF03j+8wBdSDUfZ1xr/6wcTMWP MCgNRn4e7tmXcfSebk42XMHD7DO5uKLgjnXPrBVZgyDQRaS5HU4lkKdpEkaKPi1c KGPWPcXuBxfurF7IsG1c6oL1EXTzd7wnYDzat3M0qrBIT/1zOvL/xHmdxBw4yZql x2c4Yp+K2HZiqstk2iiaHFm2JFV4jkC38Kf1ZdwtPsBs47P2nqLT9mOaP0mAqLex T1kQ6NNiqLBvCNxgrKkjSun422iN8b4g/ziYjqH20rcvfEKifpEEVXEPAOMarpdc M456DmwK+lWRrtJDFvlk3ce29dx8T2c= -----END CERTIFICATE-----Generated at Sun Oct 4 13:09:29 2026 by rpki-client