$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/af790f3e-4881-3862-9037-383784ac4438.roa File: af790f3e-4881-3862-9037-383784ac4438.roa (raw, json) Hash identifier: XUp6SYvdS0UAa4Wg4mqUOaqvmAhup2/prnC2rcai880= Subject key identifier: 90:0E:1C:18:18:69:E7:5D:5E:0C:52:0E:A7:87:B9:08:87:CF:6C:C6 Certificate issuer: /CN=d06852c4-a6c0-43d5-ba94-22fab637697a Certificate serial: 010D0C9F4328584EF2E784A5CDBA272E87E6A128 Authority key identifier: 30:01:74:AA:E6:45:3E:F4:B4:CD:2F:99:D7:6A:DE:37:8D:43:11:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/af790f3e-4881-3862-9037-383784ac4438.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 206.72.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:84:a5:cd:ba:27:2e:87:e6:a1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d06852c4-a6c0-43d5-ba94-22fab637697a Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=82d76435-32b8-41b1-b43e-3de4745a6d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d2:5a:cc:7c:74:71:0b:63:68:af:a2:2c:78: d9:e7:08:9b:ed:f7:c7:7b:02:ab:cb:e6:fb:43:18: 46:1f:d7:d3:61:9f:44:c5:ed:a7:fc:29:b6:d3:e5: d5:ce:4d:ff:92:cf:10:6d:ed:5e:a3:12:ff:a9:27: 09:a2:d9:17:f9:ae:ca:30:28:b9:0f:f8:6c:d6:dd: 7d:e0:33:e7:d5:2b:06:22:2d:53:7c:16:d6:dd:29: 39:3c:21:07:33:17:b4:03:db:24:bf:b3:83:9e:cb: 73:a2:9a:30:72:e0:c9:a6:15:ec:98:6b:b2:1e:6f: b4:15:68:4a:1e:f3:81:9f:bb:a0:35:52:18:7e:78: ed:96:26:70:23:7a:50:2f:72:09:1b:37:da:c2:4b: db:e8:34:58:1f:d4:9a:68:06:ae:25:de:bd:5f:f1: 88:89:f0:78:02:0e:7d:70:2a:c4:14:72:90:f9:6d: 2d:d4:ac:ea:1b:50:ed:cc:85:fe:6d:49:6d:f0:92: 78:ca:e4:0b:8e:e2:d4:3a:d3:07:e1:44:cc:e7:88: 49:8c:b6:df:c9:e7:a9:56:cf:bc:a2:ba:03:76:9f: b7:93:14:5a:1a:d3:aa:a7:c6:0b:d2:e6:67:87:28: 19:6d:4c:1b:de:db:3e:cd:77:7a:9e:3f:05:3a:c5: 15:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0E:1C:18:18:69:E7:5D:5E:0C:52:0E:A7:87:B9:08:87:CF:6C:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/af790f3e-4881-3862-9037-383784ac4438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.crl X509v3 Authority Key Identifier: keyid:30:01:74:AA:E6:45:3E:F4:B4:CD:2F:99:D7:6A:DE:37:8D:43:11:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer sbgp-ipAddrBlock: critical IPv4: 206.72.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:ab:5a:05:3a:8d:44:e3:71:e9:60:07:c2:c6:91:5e:06:19: e4:45:ea:81:56:49:e4:37:31:9a:0f:5c:c6:63:96:80:04:38: 3f:76:60:37:06:60:fd:92:87:b1:44:54:07:29:f1:e0:d6:86: 84:b0:51:59:ad:33:39:c9:ae:16:97:8f:e0:b5:71:e7:ba:68: 74:8d:3e:24:f6:08:6b:62:28:1c:81:fe:e9:fd:34:8f:03:05: df:99:b3:73:b1:3e:be:40:d1:72:13:78:ed:ba:d5:4c:a0:a4: b4:62:03:e6:23:92:3e:f4:8e:ea:3c:38:ed:60:6e:07:ce:8e: 39:f2:6e:0c:a6:6b:e0:8c:64:f1:ef:7c:be:5c:39:aa:85:74: c1:d3:70:72:ee:c2:a1:a1:da:07:6d:82:5f:0f:8e:06:79:05: 41:53:e0:d2:c5:08:93:2e:41:80:63:da:bf:fd:b3:98:a4:1a: 98:2f:62:2a:3d:06:2a:de:4b:ee:e0:93:a5:e8:30:aa:87:f1: 7e:28:ac:15:12:63:3a:aa:26:7e:e5:db:6e:77:67:57:49:5a: 26:49:6a:bb:6a:7f:3d:78:2d:96:3d:6d:9a:5d:d5:fe:f3:22: 0c:cd:bd:61:d6:5a:29:df:10:fe:6a:2d:b1:fb:1b:af:80:d7: 27:55:a6:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y54SlzbonLofmoSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA2ODUyYzQtYTZjMC00M2Q1LWJhOTQtMjJmYWI2Mzc2 OTdhMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ODJkNzY0MzUtMzJiOC00MWIxLWI0M2UtM2RlNDc0NWE2ZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdJazHx0cQtjaK+iLHjZ5wib7ffHewKry+b7 QxhGH9fTYZ9Exe2n/Cm20+XVzk3/ks8Qbe1eoxL/qScJotkX+a7KMCi5D/hs1t19 4DPn1SsGIi1TfBbW3Sk5PCEHMxe0A9skv7ODnstzopowcuDJphXsmGuyHm+0FWhK HvOBn7ugNVIYfnjtliZwI3pQL3IJGzfawkvb6DRYH9SaaAauJd69X/GIifB4Ag59 cCrEFHKQ+W0t1KzqG1DtzIX+bUlt8JJ4yuQLjuLUOtMH4UTM54hJjLbfyeepVs+8 oroDdp+3kxRaGtOqp8YL0uZnhygZbUwb3ts+zXd6nj8FOsUVHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAOHBgYaeddXgxSDqeHuQiHz2zGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMDY4 NTJjNC1hNmMwLTQzZDUtYmE5NC0yMmZhYjYzNzY5N2EvYWY3OTBmM2UtNDg4MS0z ODYyLTkwMzctMzgzNzg0YWM0NDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDA2ODUyYzQtYTZjMC00M2Q1LWJh OTQtMjJmYWI2Mzc2OTdhL2QwNjg1MmM0LWE2YzAtNDNkNS1iYTk0LTIyZmFiNjM3 Njk3YS5jcmwwHwYDVR0jBBgwFoAUMAF0quZFPvS0zS+Z12reN41DEdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMDY4NTJjNC1hNmMwLTQzZDUtYmE5NC0yMmZh YjYzNzY5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzkjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMarWgU6jUTjcelgB8LGkV4GGeRF6oFWSeQ3MZoPXMZjloAEOD92YDcG YP2Sh7FEVAcp8eDWhoSwUVmtMznJrhaXj+C1cee6aHSNPiT2CGtiKByB/un9NI8D Bd+Zs3OxPr5A0XITeO261UygpLRiA+Yjkj70juo8OO1gbgfOjjnybgyma+CMZPHv fL5cOaqFdMHTcHLuwqGh2gdtgl8PjgZ5BUFT4NLFCJMuQYBj2r/9s5ikGpgvYio9 BireS+7gk6XoMKqH8X4orBUSYzqqJn7l2253Z1dJWiZJartqfz14LZY9bZpd1f7z IgzNvWHWWinfEP5qLbH7G6+A1ydVplw= -----END CERTIFICATE-----Generated at Tue Sep 1 04:55:36 2026 by rpki-client