$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bf5e410-b67d-3988-8f69-110c8d4da3ea.roa File: 1bf5e410-b67d-3988-8f69-110c8d4da3ea.roa (raw, json) Hash identifier: pLmyEcxrbibg9M4Ku5TDd+LmFMvalYRpYu96R0CJJlY= Subject key identifier: DE:37:BC:6C:17:20:21:94:6E:B8:7A:9A:D7:B7:A1:0C:17:44:88:75 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584EF6BE7568477168BAE27A0260 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bf5e410-b67d-3988-8f69-110c8d4da3ea.roa Signing time: Wed 26 Aug 2026 10:01:07 +0000 ROA not before: Wed 26 Aug 2026 10:01:07 +0000 ROA not after: Tue 24 Nov 2026 11:01:07 +0000 asID: 3257 IP address blocks: 206.135.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f6:be:75:68:47:71:68:ba:e2:7a:02:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 26 10:01:07 2026 GMT Not After : Nov 24 11:01:07 2026 GMT Subject: CN=2ff366a3-6177-4a6a-aa31-4e4520d12b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:79:91:2b:a7:d1:a1:f7:b2:7f:ae:ad:7e:a6: 08:33:14:b6:f9:a2:b8:d9:68:8a:7e:5a:93:ba:b1: 1f:9e:e6:b6:d4:b2:88:57:b8:24:5e:b1:76:9e:45: 88:27:5d:57:d0:42:25:5b:09:51:31:15:5c:1a:26: c7:c8:dd:58:22:ee:a0:6e:c4:65:7d:e6:a6:2f:31: e4:09:89:cd:d4:66:82:4f:12:08:0a:60:6a:12:68: 44:73:d4:26:c5:47:24:28:b2:ac:30:4a:3f:e3:2a: 49:56:e7:2d:c1:9d:56:6a:4d:6d:44:8a:6e:de:49: be:d0:c3:53:7f:bd:75:a6:a2:f8:44:87:77:d4:bc: 21:92:59:ff:70:01:ad:40:25:b8:e1:f5:1b:f4:23: 4b:5d:39:25:a8:16:3b:aa:77:2f:00:78:44:f3:bd: c0:fb:f5:3b:53:98:af:57:a4:de:49:22:07:85:a4: d8:ce:db:eb:40:4d:1b:70:eb:16:22:82:d0:6d:a0: f8:29:86:9c:fd:6f:67:c0:10:d7:01:9f:18:86:24: 81:ae:ce:f1:db:81:66:3a:cf:ea:df:1e:90:b4:04: 9d:8f:12:1b:4f:c0:a7:d4:1c:ae:3d:98:c5:6e:5a: 01:c4:91:21:1b:28:d4:17:15:5a:33:81:9a:41:4e: 2c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:37:BC:6C:17:20:21:94:6E:B8:7A:9A:D7:B7:A1:0C:17:44:88:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1bf5e410-b67d-3988-8f69-110c8d4da3ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 206.135.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:5c:f7:5d:16:5c:f6:ea:9c:39:62:ee:51:37:0a:a1:56:c2: 8f:5e:d9:8f:9a:8e:b1:e2:ba:30:d3:a3:02:37:e5:3b:66:8d: f7:77:5d:94:94:70:dc:d2:fa:a3:04:e8:7a:9e:a9:2c:84:e0: 84:49:d9:cc:4c:96:cf:6f:aa:d3:30:5e:c9:cb:df:37:d0:aa: c9:a0:df:6c:2d:c9:57:ea:5c:6c:1c:95:ae:a3:f1:c6:66:9e: 15:5c:d8:85:33:8e:4e:f1:e3:11:87:82:da:fe:89:78:ab:ed: 7f:31:7b:eb:82:71:48:b0:d8:09:09:a0:85:58:0d:d0:36:05: 75:06:7a:77:f2:58:85:fd:51:ca:95:9e:18:58:ea:bd:56:2a: 2c:07:d1:98:08:9b:c4:ee:ed:ef:0b:15:4c:16:da:21:df:66: 16:8c:f4:02:69:5a:4f:96:50:76:53:ad:d1:16:08:e7:8c:e2: 4f:37:a6:b3:55:56:e1:20:83:95:b5:99:40:a4:94:0f:f8:35: 7b:88:1e:1f:35:4f:ef:d7:83:d1:99:f1:a2:e9:13:b7:0d:89: 1e:8f:2c:c6:b6:08:44:16:85:1c:2f:13:c5:1f:63:16:77:77: 65:cf:9f:17:99:7e:c5:91:ec:04:76:16:c7:4c:c4:04:c5:4b: 90:ad:a5:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE72vnVoR3FouuJ6AmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDgyNjEwMDEwN1oXDTI2MTEyNDExMDEwN1owLzEtMCsGA1UEAxMk MmZmMzY2YTMtNjE3Ny00YTZhLWFhMzEtNGU0NTIwZDEyYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXmRK6fRofeyf66tfqYIMxS2+aK42WiKflqT urEfnua21LKIV7gkXrF2nkWIJ11X0EIlWwlRMRVcGibHyN1YIu6gbsRlfeamLzHk CYnN1GaCTxIICmBqEmhEc9QmxUckKLKsMEo/4ypJVuctwZ1Wak1tRIpu3km+0MNT f711pqL4RId31Lwhkln/cAGtQCW44fUb9CNLXTklqBY7qncvAHhE873A+/U7U5iv V6TeSSIHhaTYztvrQE0bcOsWIoLQbaD4KYac/W9nwBDXAZ8YhiSBrs7x24FmOs/q 3x6QtASdjxIbT8Cn1ByuPZjFbloBxJEhGyjUFxVaM4GaQU4s2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN43vGwXICGUbrh6mte3oQwXRIh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvMWJmNWU0MTAtYjY3ZC0z OTg4LThmNjktMTEwYzhkNGRhM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzoeUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFc910WXPbqnDli7lE3CqFWwo9e2Y+ajrHiujDTowI35Ttmjfd3XZSU cNzS+qME6HqeqSyE4IRJ2cxMls9vqtMwXsnL3zfQqsmg32wtyVfqXGwcla6j8cZm nhVc2IUzjk7x4xGHgtr+iXir7X8xe+uCcUiw2AkJoIVYDdA2BXUGenfyWIX9UcqV nhhY6r1WKiwH0ZgIm8Tu7e8LFUwW2iHfZhaM9AJpWk+WUHZTrdEWCOeM4k83prNV VuEgg5W1mUCklA/4NXuIHh81T+/Xg9GZ8aLpE7cNiR6PLMa2CEQWhRwvE8UfYxZ3 d2XPnxeZfsWR7AR2FsdMxATFS5CtpSA= -----END CERTIFICATE-----Generated at Tue Sep 1 03:14:29 2026 by rpki-client