$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa File: afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa (raw, json) Hash identifier: J4Mj1BybEYi5/lwEo2vdvhYWW9R7Hj1QfD5e5gPz6qQ= Subject key identifier: 70:CA:D4:DD:6A:E1:CE:66:F6:58:62:91:E3:6B:39:5E:ED:AC:5E:55 Certificate issuer: /CN=3cd40041-6571-4f30-b76a-4746a4c2d957 Certificate serial: 010D0C9F4328584F698D7DD0C4523E50A090A700 Authority key identifier: 0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 11051 IP address blocks: 205.207.255.0/24 maxlen: 24 2620:13e:500a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:7d:d0:c4:52:3e:50:a0:90:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd40041-6571-4f30-b76a-4746a4c2d957 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=909bc236-3468-4427-a640-8e0d811efcc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4b:74:ae:7c:71:1e:72:87:4c:1d:e1:98:f7: f4:74:ef:89:cd:53:58:74:99:90:86:32:ac:36:e1: 0a:d5:4b:2e:c4:31:dc:8e:c9:91:0e:10:7b:f1:d5: d4:e8:59:91:be:8c:04:6f:84:89:34:1a:be:f5:f5: 3b:d3:bf:7e:81:17:19:36:19:05:de:9a:37:e4:98: d2:45:66:61:40:05:14:29:1b:93:86:11:f0:ea:15: 24:16:32:35:d1:05:0d:02:1c:1e:bb:4f:b2:fb:70: 02:a1:68:dd:8b:a4:10:0e:8c:72:83:5c:08:2d:64: d2:f3:9a:dc:c6:48:6e:bd:63:78:f8:f6:87:9d:da: 9e:3c:6d:ec:9c:75:5c:16:bd:58:ed:8e:ad:c2:6e: 5f:de:ac:6b:e6:05:f1:d3:e9:5e:ca:cc:c0:34:c4: 47:33:b3:14:a6:d3:60:3b:91:04:91:ee:93:71:ac: 7a:88:85:d9:2a:64:ae:07:e2:f1:b2:02:68:e4:5f: e9:6c:aa:dc:bc:dc:9d:b3:3b:31:18:4e:42:be:4b: 07:e9:fe:07:3f:4c:00:bd:64:be:a7:7d:1c:11:c4: 68:86:0a:92:56:61:8f:83:63:e0:ce:26:64:8e:b7: eb:50:e5:e8:46:54:ce:ff:01:22:5d:ee:3f:ba:5d: 8f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CA:D4:DD:6A:E1:CE:66:F6:58:62:91:E3:6B:39:5E:ED:AC:5E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/afd95a3a-c8cd-3ee4-9feb-bc336ea49d74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl X509v3 Authority Key Identifier: keyid:0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer sbgp-ipAddrBlock: critical IPv4: 205.207.255.0/24 IPv6: 2620:13e:500a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:17:a5:78:09:ed:61:74:f6:2d:69:af:05:26:0d:c2:62:2c: 1c:d4:7a:fc:f0:2c:6f:04:95:7e:39:20:fc:59:26:3d:5f:e8: e8:ac:ef:53:66:b2:b3:6e:e6:ed:ea:13:85:ee:9b:42:3d:a6: c8:29:54:da:ba:46:61:e2:da:7b:70:96:dd:1a:08:87:5e:12: d5:36:10:b6:6c:44:b1:ab:20:44:ba:3b:7c:77:8d:05:b8:41: 8e:91:e0:d2:9d:a9:e4:45:c8:42:d3:76:83:21:80:98:c1:c7: 92:a7:e6:62:e1:07:1e:b9:c3:0e:73:b7:0b:96:35:15:60:81: a9:8b:b1:9e:bd:9c:c5:e4:19:fe:a6:96:4e:52:6d:03:7b:e6: 60:ba:28:14:a0:eb:41:fa:29:f2:f9:d8:df:5d:f4:72:80:d8: fb:0b:17:4b:98:59:93:60:45:66:77:10:95:7c:c9:a7:5e:f0: 75:c9:a0:31:15:dc:c2:7b:de:7e:4e:6f:7f:4d:6d:b8:f2:4e: 99:90:ca:23:4f:04:29:de:2e:81:d2:1c:6f:05:28:b6:18:e5: 03:46:88:f8:3c:7d:49:ba:08:79:22:ae:80:b5:6e:ef:a9:8e: 4f:85:5f:9d:ee:6b:71:77:55:d4:d6:ae:de:d4:71:81:6c:b2: 78:47:82:03 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9pjX3QxFI+UKCQpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NkNDAwNDEtNjU3MS00ZjMwLWI3NmEtNDc0NmE0YzJk OTU3MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk OTA5YmMyMzYtMzQ2OC00NDI3LWE2NDAtOGUwZDgxMWVmY2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikt0rnxxHnKHTB3hmPf0dO+JzVNYdJmQhjKs NuEK1UsuxDHcjsmRDhB78dXU6FmRvowEb4SJNBq+9fU7079+gRcZNhkF3po35JjS RWZhQAUUKRuThhHw6hUkFjI10QUNAhweu0+y+3ACoWjdi6QQDoxyg1wILWTS85rc xkhuvWN4+PaHndqePG3snHVcFr1Y7Y6twm5f3qxr5gXx0+leyszANMRHM7MUptNg O5EEke6Tcax6iIXZKmSuB+LxsgJo5F/pbKrcvNydszsxGE5CvksH6f4HP0wAvWS+ p30cEcRohgqSVmGPg2PgziZkjrfrUOXoRlTO/wEiXe4/ul2PtQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFHDK1N1q4c5m9lhikeNrOV7trF5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zY2Q0 MDA0MS02NTcxLTRmMzAtYjc2YS00NzQ2YTRjMmQ5NTcvYWZkOTVhM2EtYzhjZC0z ZWU0LTlmZWItYmMzMzZlYTQ5ZDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2NkNDAwNDEtNjU3MS00ZjMwLWI3 NmEtNDc0NmE0YzJkOTU3LzNjZDQwMDQxLTY1NzEtNGYzMC1iNzZhLTQ3NDZhNGMy ZDk1Ny5jcmwwHwYDVR0jBBgwFoAUC3dIwZueWstRL5acM8C2yILbDiEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zY2Q0MDA0MS02NTcxLTRmMzAtYjc2YS00NzQ2 YTRjMmQ5NTcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzc//MA8E AgACMAkDBwAmIAE+UAowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAExeleAntYXT2LWmvBSYNwmIsHNR6/PAs bwSVfjkg/FkmPV/o6KzvU2ays27m7eoThe6bQj2myClU2rpGYeLae3CW3RoIh14S 1TYQtmxEsasgRLo7fHeNBbhBjpHg0p2p5EXIQtN2gyGAmMHHkqfmYuEHHrnDDnO3 C5Y1FWCBqYuxnr2cxeQZ/qaWTlJtA3vmYLooFKDrQfop8vnY3130coDY+wsXS5hZ k2BFZncQlXzJp17wdcmgMRXcwnvefk5vf01tuPJOmZDKI08EKd4ugdIcbwUothjl A0aI+Dx9SboIeSKugLVu76mOT4Vfne5rcXdV1Nau3tRxgWyyeEeCAw== -----END CERTIFICATE-----Generated at Tue Oct 6 18:58:27 2026 by rpki-client