$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/1da5043e-166b-3b4e-9f88-d7e917854fc5.roa File: 1da5043e-166b-3b4e-9f88-d7e917854fc5.roa (raw, json) Hash identifier: ZmcDLJ7YFWv8XTKic3HKeIftKAh3LIXus/0Ae8zdpCw= Subject key identifier: D0:C5:A7:33:5D:E5:9C:57:32:D8:41:8C:B5:E4:7F:A0:EB:A4:25:E7 Certificate issuer: /CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Certificate serial: 010D0C9F4328584F698D80107689DC8886CD6B00 Authority key identifier: 2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/1da5043e-166b-3b4e-9f88-d7e917854fc5.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 40513 IP address blocks: 167.206.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:80:10:76:89:dc:88:86:cd:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=ae234757-0376-40c0-9e4a-436d3343e3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:0b:9a:5f:f4:e3:31:ab:0f:51:cc:03:05: 89:ff:2a:03:66:7e:e9:d7:42:39:ef:94:66:ed:ec: 36:f5:88:1b:4a:da:12:dd:fa:93:0e:af:3f:b1:cb: 59:1b:28:e5:54:d5:f5:aa:4e:6f:67:ae:ff:f8:80: 3e:e9:a0:5a:d8:1e:40:d4:b6:b0:d7:44:9a:6a:bf: 9d:29:24:09:3c:5e:a4:d2:f3:54:64:d9:96:44:56: ba:55:63:66:fb:50:8f:ea:49:22:37:b3:c5:67:86: 63:0d:53:b0:ce:61:bd:ee:84:b7:1e:43:5e:7f:b8: ce:11:91:6e:e3:2e:82:e2:dd:37:eb:ea:a8:56:ce: e3:2e:f7:02:42:80:16:f4:b0:e6:7f:c7:67:fc:13: da:69:d9:92:33:1f:88:da:07:00:00:7c:31:54:4a: f1:8e:84:b2:87:24:dc:4d:4d:61:c3:e0:4c:64:56: df:d3:c9:a3:83:45:38:a9:a2:b4:cb:b4:9d:1d:f0: 15:68:d7:e2:45:71:e2:d0:d2:cc:d7:26:fc:c8:fd: 7c:e7:59:0b:27:ab:2f:bc:35:49:76:c7:e3:62:99: cf:bc:2f:81:ca:26:21:03:ee:a4:7a:80:0d:da:60: a5:f0:2c:2d:7d:27:88:0f:73:35:f3:9e:56:fc:3e: 33:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C5:A7:33:5D:E5:9C:57:32:D8:41:8C:B5:E4:7F:A0:EB:A4:25:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/1da5043e-166b-3b4e-9f88-d7e917854fc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.crl X509v3 Authority Key Identifier: keyid:2D:22:70:71:EA:41:40:16:CE:85:45:3A:86:52:BE:FE:08:5C:C9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d1f1c8c2-19f9-4f62-bfe3-d1428d1a005e.cer sbgp-ipAddrBlock: critical IPv4: 167.206.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c6:1a:cc:77:05:f0:80:45:fa:73:95:d3:d5:df:29:a5:1a: fb:0c:62:33:0b:bf:65:16:f7:48:72:88:55:ae:27:a5:17:d9: 59:0e:91:80:e5:9f:c2:c2:0e:ab:23:ee:c7:f9:fa:97:a8:1c: f5:a0:41:6b:95:4a:bb:09:83:04:1f:1d:d3:ad:73:45:91:7d: 86:4b:a0:43:bf:70:36:52:4f:4c:a0:9d:a9:93:4d:cb:3c:55: f9:0e:81:ab:bd:de:13:47:96:8c:64:0a:a5:ed:37:73:78:0c: 08:ef:dc:a9:6e:80:62:05:9b:12:f4:6e:33:69:17:1a:fb:14: 95:23:ec:cd:0a:94:54:cd:5a:24:71:3b:52:35:23:fa:cb:a5: 33:ab:0d:1e:32:05:c6:f5:c8:f7:62:45:8a:d0:c5:9a:4a:4e: 40:41:34:58:11:86:39:d8:d8:23:52:eb:27:21:3a:17:ee:7a: 85:6b:53:b2:5e:b3:1f:68:28:78:7f:2e:26:30:88:a3:06:51: b2:45:27:3f:c6:c6:bf:30:c2:c0:29:ff:b4:d8:84:77:c1:0c: 09:80:e5:d6:38:07:f4:f3:dc:62:c2:59:09:26:ef:c6:ab:d8: 6c:62:ac:3e:7b:76:ae:91:39:4b:d0:e3:e4:1f:b4:f4:97:0b: a1:83:a9:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYAQdonciIbNawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmMWM4YzItMTlmOS00ZjYyLWJmZTMtZDE0MjhkMWEw MDVlMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk YWUyMzQ3NTctMDM3Ni00MGMwLTllNGEtNDM2ZDMzNDNlM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSYLml/04zGrD1HMAwWJ/yoDZn7p10I575Rm 7ew29YgbStoS3fqTDq8/sctZGyjlVNX1qk5vZ67/+IA+6aBa2B5A1Law10Saar+d KSQJPF6k0vNUZNmWRFa6VWNm+1CP6kkiN7PFZ4ZjDVOwzmG97oS3HkNef7jOEZFu 4y6C4t036+qoVs7jLvcCQoAW9LDmf8dn/BPaadmSMx+I2gcAAHwxVErxjoSyhyTc TU1hw+BMZFbf08mjg0U4qaK0y7SdHfAVaNfiRXHi0NLM1yb8yP1851kLJ6svvDVJ dsfjYpnPvC+ByiYhA+6keoAN2mCl8CwtfSeID3M1855W/D4z3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDFpzNd5ZxXMthBjLXkf6DrpCXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMWYx YzhjMi0xOWY5LTRmNjItYmZlMy1kMTQyOGQxYTAwNWUvMWRhNTA0M2UtMTY2Yi0z YjRlLTlmODgtZDdlOTE3ODU0ZmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDFmMWM4YzItMTlmOS00ZjYyLWJm ZTMtZDE0MjhkMWEwMDVlL2QxZjFjOGMyLTE5ZjktNGY2Mi1iZmUzLWQxNDI4ZDFh MDA1ZS5jcmwwHwYDVR0jBBgwFoAULSJwcepBQBbOhUU6hlK+/ghcybAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMWYxYzhjMi0xOWY5LTRmNjItYmZlMy1kMTQy OGQxYTAwNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp87RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDGGsx3BfCARfpzldPV3ymlGvsMYjMLv2UW90hyiFWuJ6UX2VkOkYDl n8LCDqsj7sf5+peoHPWgQWuVSrsJgwQfHdOtc0WRfYZLoEO/cDZST0ygnamTTcs8 VfkOgau93hNHloxkCqXtN3N4DAjv3KlugGIFmxL0bjNpFxr7FJUj7M0KlFTNWiRx O1I1I/rLpTOrDR4yBcb1yPdiRYrQxZpKTkBBNFgRhjnY2CNS6ychOhfueoVrU7Je sx9oKHh/LiYwiKMGUbJFJz/Gxr8wwsAp/7TYhHfBDAmA5dY4B/Tz3GLCWQkm78ar 2GxirD57dq6ROUvQ4+QftPSXC6GDqU0= -----END CERTIFICATE-----Generated at Wed Oct 7 14:30:50 2026 by rpki-client