$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/96da7396-baf5-38c0-8517-e3e8dd64b6f8.roa File: 96da7396-baf5-38c0-8517-e3e8dd64b6f8.roa (raw, json) Hash identifier: 1hK3S5rFm1AhZBFhC3AButVUlug5OhvPHnFCelid/J4= Subject key identifier: 48:6E:83:74:FF:F0:9C:3C:F1:F5:D3:3F:15:17:46:54:54:DB:96:CA Certificate issuer: /CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Certificate serial: 010D0C9F4328584F7782D53B02C45D38CA29E140 Authority key identifier: 6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/96da7396-baf5-38c0-8517-e3e8dd64b6f8.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 402631 IP address blocks: 206.174.134.0/23 maxlen: 24 206.174.152.0/23 maxlen: 24 206.174.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:d5:3b:02:c4:5d:38:ca:29:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fe9ed1c-dd4f-4e1e-8e26-2014334ee265 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=f295bef9-3639-4beb-8d12-c484b02d3cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9c:b9:4b:db:ed:72:ca:1c:90:8b:9a:0f:9e: e6:94:5f:23:3f:6e:7f:e9:04:7f:dc:c2:1f:2d:22: 9c:a8:4b:4e:16:34:f0:cb:cd:a5:50:33:29:71:f6: 2e:8e:a1:c8:9a:cf:43:ee:1a:a5:ca:80:42:59:c1: e9:f9:cb:bc:f5:72:94:de:bc:f3:ac:f7:48:7d:20: c5:57:10:77:f8:02:75:87:6c:58:96:19:65:48:70: 6b:03:06:f0:90:86:5e:a9:ff:8f:f5:b4:a2:5d:04: b3:dd:de:b3:ea:da:ed:44:73:c6:86:e5:fd:da:25: 0a:e4:f6:4e:05:e8:e0:41:65:95:2d:30:75:26:a5: b7:ba:4f:4c:f5:22:14:6c:6d:3c:ae:18:17:e3:43: ff:08:fb:ae:91:6c:2d:2c:42:c6:13:2a:03:fe:27: 16:1a:25:61:3d:b6:4f:5c:46:93:d0:ac:f6:33:6a: ea:f7:8b:0f:d8:15:23:42:b7:83:a6:82:90:59:06: dd:5d:4a:57:81:19:6d:cd:19:d3:99:3e:50:9a:07: 4a:7c:a4:45:ff:15:a0:da:ab:1c:91:69:eb:86:71: cb:62:4f:14:9d:2d:3d:cc:1a:df:fe:9b:e1:0c:40: d1:c2:3b:d2:97:94:be:0e:02:e0:ef:ac:2a:09:29: a1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6E:83:74:FF:F0:9C:3C:F1:F5:D3:3F:15:17:46:54:54:DB:96:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/96da7396-baf5-38c0-8517-e3e8dd64b6f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.crl X509v3 Authority Key Identifier: keyid:6D:C4:D0:89:FF:FA:B0:D6:2C:09:6A:11:2C:40:70:75:D4:63:7B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2fe9ed1c-dd4f-4e1e-8e26-2014334ee265.cer sbgp-ipAddrBlock: critical IPv4: 206.174.134.0/23 206.174.152.0/23 206.174.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f1:ff:8c:06:f7:e8:71:5f:99:2f:69:88:82:60:ad:d6:15: 0b:4a:8d:9c:22:68:6e:bb:39:9e:86:09:0e:39:56:ad:1f:61: a9:0a:cf:e0:0f:68:69:d9:63:3b:43:ea:2d:12:bf:5d:d7:65: 72:b3:0d:d8:b1:86:6f:ab:d6:bc:cd:c9:b2:87:03:23:a5:97: 74:10:7b:df:e3:53:1e:6a:76:58:a0:37:62:28:86:13:cd:7a: 79:9c:cb:de:d9:6d:c6:43:34:9d:8b:34:ce:e6:77:e9:43:3e: 88:7f:d4:74:6e:75:e4:13:35:f1:f0:cf:db:a0:c5:b8:bf:70: 78:43:07:53:48:c6:22:3b:09:53:39:75:24:32:49:d9:24:ea: 94:b3:44:f5:07:db:ca:c2:6d:07:ff:e3:00:c0:f3:06:23:f8: 0c:56:7e:ba:e0:58:7a:d2:0c:aa:b2:57:8f:14:73:30:b8:ed: fa:2d:37:83:50:ea:37:d1:1b:e1:61:c3:b8:e0:e3:0f:0c:21: 90:5b:97:fb:f1:2e:b1:ec:8e:b0:b8:51:f7:93:4f:95:7d:86: 60:82:b3:f5:e4:32:19:d9:ee:dd:5f:4e:75:d7:cb:50:c8:a4: 75:5c:9f:d9:90:61:05:0e:50:61:00:ec:30:c9:67:c7:8c:e5: d8:60:a5:41 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE93gtU7AsRdOMop4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlOWVkMWMtZGQ0Zi00ZTFlLThlMjYtMjAxNDMzNGVl MjY1MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjI5NWJlZjktMzYzOS00YmViLThkMTItYzQ4NGIwMmQzY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJy5S9vtcsockIuaD57mlF8jP25/6QR/3MIf LSKcqEtOFjTwy82lUDMpcfYujqHIms9D7hqlyoBCWcHp+cu89XKU3rzzrPdIfSDF VxB3+AJ1h2xYlhllSHBrAwbwkIZeqf+P9bSiXQSz3d6z6trtRHPGhuX92iUK5PZO BejgQWWVLTB1JqW3uk9M9SIUbG08rhgX40P/CPuukWwtLELGEyoD/icWGiVhPbZP XEaT0Kz2M2rq94sP2BUjQreDpoKQWQbdXUpXgRltzRnTmT5QmgdKfKRF/xWg2qsc kWnrhnHLYk8UnS09zBrf/pvhDEDRwjvSl5S+DgLg76wqCSmhvwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEhug3T/8Jw88fXTPxUXRlRU25bKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5 ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0MzM0ZWUyNjUvOTZkYTczOTYtYmFmNS0z OGMwLTg1MTctZTNlOGRkNjRiNmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmZlOWVkMWMtZGQ0Zi00ZTFlLThl MjYtMjAxNDMzNGVlMjY1LzJmZTllZDFjLWRkNGYtNGUxZS04ZTI2LTIwMTQzMzRl ZTI2NS5jcmwwHwYDVR0jBBgwFoAUbcTQif/6sNYsCWoRLEBwddRje9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZmU5ZWQxYy1kZDRmLTRlMWUtOGUyNi0yMDE0 MzM0ZWUyNjUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBzq6GAwQB zq6YAwQCzq6cMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADLx/4wG9+hxX5kvaYiCYK3WFQtKjZwiaG67OZ6G CQ45Vq0fYakKz+APaGnZYztD6i0Sv13XZXKzDdixhm+r1rzNybKHAyOll3QQe9/j Ux5qdligN2IohhPNenmcy97ZbcZDNJ2LNM7md+lDPoh/1HRudeQTNfHwz9ugxbi/ cHhDB1NIxiI7CVM5dSQySdkk6pSzRPUH28rCbQf/4wDA8wYj+AxWfrrgWHrSDKqy V48UczC47fotN4NQ6jfRG+Fhw7jg4w8MIZBbl/vxLrHsjrC4UfeTT5V9hmCCs/Xk MhnZ7t1fTnXXy1DIpHVcn9mQYQUOUGEA7DDJZ8eM5dhgpUE= -----END CERTIFICATE-----Generated at Tue Oct 20 08:42:29 2026 by rpki-client