$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa File: 0c95cc7e-347c-343b-9a60-43effbd437ce.roa (raw, json) Hash identifier: S+UVWKNkRijrxsgSvoNQICudSiDwWYhtQuNlSelHy2g= Subject key identifier: 3C:98:7B:BC:87:54:57:3D:58:5F:2E:C7:27:3D:E0:C9:B2:F4:69:C9 Certificate issuer: /CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Certificate serial: 010D0C9F4328584EA78F731DB1745E0FA271B820 Authority key identifier: BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8075 IP address blocks: 206.209.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:73:1d:b1:74:5e:0f:a2:71:b8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0afa673e-ceeb-4048-b2ab-93cad45814ac Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b67d3f3f-57c2-4f5d-bbd2-c47ae6407038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b2:4b:5c:9f:9c:12:d3:c2:91:0d:a0:74:62: 5d:93:fa:d8:2a:a1:20:a0:59:98:87:f5:54:51:5c: ce:2d:85:5f:7a:10:b1:6f:6a:3c:09:0e:dd:a9:21: 78:1b:e0:1b:f7:1e:34:a4:e8:e3:fd:a8:f8:19:07: 92:9f:82:85:05:83:91:91:25:d8:65:4c:8d:cc:00: 1d:21:50:e9:fe:19:6c:03:47:b1:76:c1:35:ab:9a: 15:73:d4:27:70:cb:80:17:c4:83:2d:86:86:6b:67: 81:42:4d:93:22:e1:54:e0:43:89:81:a0:74:c0:91: bf:e8:79:f5:26:dd:54:6e:bf:df:db:68:f1:43:b1: 54:05:5b:1f:8a:76:9c:99:a2:63:b1:3a:47:6e:2a: 72:80:78:01:0e:54:40:eb:42:82:21:78:6f:82:d6: 81:be:cf:fc:7d:7c:cb:d9:d2:2b:e0:a7:b5:f0:e2: 4b:6f:84:39:9b:73:5a:7b:32:b4:4b:56:e8:d1:35: c6:21:85:d1:fe:c3:3e:f9:c6:9b:9f:42:a0:90:92: 09:cc:59:56:d6:36:b4:87:2e:de:da:48:b3:dd:03: 0a:89:b1:8e:60:55:c1:2e:76:c3:e5:9c:dd:eb:19: d3:57:d6:de:de:db:24:ab:ee:f8:4f:fc:b2:1c:41: cf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:98:7B:BC:87:54:57:3D:58:5F:2E:C7:27:3D:E0:C9:B2:F4:69:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0c95cc7e-347c-343b-9a60-43effbd437ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac/0afa673e-ceeb-4048-b2ab-93cad45814ac.crl X509v3 Authority Key Identifier: keyid:BD:51:2F:48:B7:00:8C:2C:1B:D8:9A:33:4B:76:4E:B4:58:05:D8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0afa673e-ceeb-4048-b2ab-93cad45814ac.cer sbgp-ipAddrBlock: critical IPv4: 206.209.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5c:77:6e:4d:4c:0d:c0:ad:86:72:88:49:38:af:a4:6c:a2: 44:5a:d0:5a:b4:ba:d5:e6:23:39:8d:03:67:cf:e7:bc:b0:88: 24:90:32:9a:53:1a:35:cb:ba:b3:4a:7e:52:2d:5a:5c:a0:2c: 1e:57:1c:a0:30:f3:9b:6e:8c:72:2f:95:af:82:e6:a1:36:4f: d5:7e:11:50:89:69:8c:a5:85:ba:c9:f6:c4:9b:65:90:99:fd: 78:6f:e9:33:a4:2e:70:bb:94:b2:eb:dc:ea:dd:a1:9b:56:db: c9:71:c2:da:e2:35:09:7b:75:df:5a:6b:e4:e2:70:44:1c:95: a0:81:d2:52:4a:5d:44:81:41:4f:26:47:35:ef:b5:1d:9d:85: 07:c1:c0:a8:a1:d8:57:bf:c3:d8:57:25:ca:7c:61:b7:c2:93: 65:db:f3:b6:c3:71:ba:59:4f:47:34:69:79:93:7b:94:f6:3e: bf:17:f2:30:ac:c8:80:f1:5b:06:2f:86:3c:ae:79:98:23:04: db:9a:09:cb:06:21:5f:2e:a6:4b:04:d4:45:08:23:de:48:97: 79:da:18:fd:ce:79:1b:f9:04:b8:3b:59:15:f2:8e:52:46:b5: 8f:65:65:6b:f1:fa:29:ed:c4:bb:0f:be:a4:92:38:e0:36:48: e9:00:2a:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj3MdsXReD6JxuCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmYTY3M2UtY2VlYi00MDQ4LWIyYWItOTNjYWQ0NTgx NGFjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjY3ZDNmM2YtNTdjMi00ZjVkLWJiZDItYzQ3YWU2NDA3MDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7JLXJ+cEtPCkQ2gdGJdk/rYKqEgoFmYh/VU UVzOLYVfehCxb2o8CQ7dqSF4G+Ab9x40pOjj/aj4GQeSn4KFBYORkSXYZUyNzAAd IVDp/hlsA0exdsE1q5oVc9QncMuAF8SDLYaGa2eBQk2TIuFU4EOJgaB0wJG/6Hn1 Jt1Ubr/f22jxQ7FUBVsfinacmaJjsTpHbipygHgBDlRA60KCIXhvgtaBvs/8fXzL 2dIr4Ke18OJLb4Q5m3NaezK0S1bo0TXGIYXR/sM++cabn0KgkJIJzFlW1ja0hy7e 2kiz3QMKibGOYFXBLnbD5Zzd6xnTV9be3tskq+74T/yyHEHP9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyYe7yHVFc9WF8uxyc94Mmy9GnJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWZh NjczZS1jZWViLTQwNDgtYjJhYi05M2NhZDQ1ODE0YWMvMGM5NWNjN2UtMzQ3Yy0z NDNiLTlhNjAtNDNlZmZiZDQzN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmYTY3M2UtY2VlYi00MDQ4LWIy YWItOTNjYWQ0NTgxNGFjLzBhZmE2NzNlLWNlZWItNDA0OC1iMmFiLTkzY2FkNDU4 MTRhYy5jcmwwHwYDVR0jBBgwFoAUvVEvSLcAjCwb2JozS3ZOtFgF2GcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWZhNjczZS1jZWViLTQwNDgtYjJhYi05M2Nh ZDQ1ODE0YWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztFrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpcd25NTA3ArYZyiEk4r6RsokRa0Fq0utXmIzmNA2fP57ywiCSQMppT GjXLurNKflItWlygLB5XHKAw85tujHIvla+C5qE2T9V+EVCJaYylhbrJ9sSbZZCZ /Xhv6TOkLnC7lLLr3OrdoZtW28lxwtriNQl7dd9aa+TicEQclaCB0lJKXUSBQU8m RzXvtR2dhQfBwKih2Fe/w9hXJcp8YbfCk2Xb87bDcbpZT0c0aXmTe5T2Pr8X8jCs yIDxWwYvhjyueZgjBNuaCcsGIV8upksE1EUII95Il3naGP3OeRv5BLg7WRXyjlJG tY9lZWvx+intxLsPvqSSOOA2SOkAKiU= -----END CERTIFICATE-----Generated at Fri Sep 4 23:05:03 2026 by rpki-client