$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/7a3fab05-5536-3433-876a-c36586909e9a.roa File: 7a3fab05-5536-3433-876a-c36586909e9a.roa (raw, json) Hash identifier: 98zzghLl8W6XZ/3nqsXFZIA8f7PYRtfDvnS3sgjLNMU= Subject key identifier: B7:92:C8:85:1E:5F:29:9B:D7:99:F2:2C:31:E1:31:FC:C9:6B:D1:88 Certificate issuer: /CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279 Certificate serial: 010D0C9F4328584F3B7D25650A5DBC10CA560A80 Authority key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/7a3fab05-5536-3433-876a-c36586909e9a.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 5650 IP address blocks: 206.251.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:25:65:0a:5d:bc:10:ca:56:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=bc29346b-4b74-477b-a171-7475b0d920c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0b:c2:d9:24:e3:c3:79:69:28:98:1e:4a:cf: d8:58:3b:f3:f8:d1:cf:32:30:b3:77:d6:26:61:fc: 24:e7:3a:ab:7a:38:3c:c5:86:f5:f1:3f:dc:d6:9e: f2:7e:29:99:ce:cd:13:9e:3b:6b:60:86:6b:df:c8: 8d:9e:8d:e7:75:21:50:42:f2:0d:7f:d0:dd:e4:5a: 6f:10:84:77:f2:93:b2:2f:16:b1:5d:9e:39:f5:9f: 7d:7b:95:45:23:74:13:1f:02:8a:3b:45:5e:cc:be: c7:c1:ec:d7:2c:d3:98:2c:4a:8e:9f:59:68:02:93: 35:41:a4:37:67:cb:d2:9f:4f:52:56:36:b7:1d:43: f2:2a:dc:45:1a:81:5a:17:30:6c:4f:17:e3:33:ec: 3a:77:b3:b3:e4:b8:e7:49:a8:26:5d:cd:d3:b5:dc: 93:ab:3e:f6:46:db:dd:37:b4:8c:89:7a:cc:90:06: aa:5a:aa:48:bf:ac:2b:58:4b:0c:ff:fb:05:70:93: e9:83:40:84:e3:04:7b:c7:08:a8:f3:f0:7b:f8:e1: 87:30:0e:52:20:58:1b:40:48:50:be:1a:e3:72:55: fd:d8:be:54:b0:34:b9:10:b4:39:70:ac:c1:46:41: 53:99:7e:d2:94:9c:2c:77:94:80:e8:61:7c:6a:29: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:92:C8:85:1E:5F:29:9B:D7:99:F2:2C:31:E1:31:FC:C9:6B:D1:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/7a3fab05-5536-3433-876a-c36586909e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl X509v3 Authority Key Identifier: keyid:0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer sbgp-ipAddrBlock: critical IPv4: 206.251.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:ac:d4:0b:de:e5:9e:9c:d3:35:e5:65:a0:5e:5d:80:e2:c4: d9:97:50:a8:4a:06:33:61:d4:2e:ef:11:8e:8d:a4:70:6f:89: 5e:18:18:55:99:95:e8:95:ad:44:01:50:69:ea:9e:d9:a6:c6: 7d:c2:58:6e:be:59:54:4e:18:3c:b4:8d:7a:06:0e:cd:29:56: 7e:03:1a:94:64:69:c0:5e:d4:1d:6a:26:07:c8:6b:cb:d9:56: 18:0d:4e:10:9f:82:bf:46:24:96:45:85:76:c7:34:24:00:ec: fe:13:ec:e8:ec:7b:3a:a5:e9:a3:3d:5a:a5:89:28:9a:b3:f5: 45:65:83:93:0e:79:62:52:88:8d:32:1b:18:91:ba:91:b7:1c: 6e:92:c4:78:c0:94:09:1a:bb:4c:9f:98:c7:7b:9f:8c:7b:e6: 05:03:10:0a:55:14:61:52:6f:5e:5f:15:9d:b6:ac:f0:47:e1: a3:34:ad:e9:fa:96:aa:26:fb:86:aa:a4:00:5f:c3:4b:29:8f: 13:d2:2e:8b:88:30:37:13:f4:b0:47:87:78:bc:a0:ef:da:4b: 32:7e:ee:40:a5:7a:e1:d8:46:d9:33:5b:41:d1:1c:c7:62:5d: 2b:76:a6:0d:1c:0e:1c:3f:ca:ab:ea:0f:79:df:f6:55:c6:9d: 34:87:7b:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fSVlCl28EMpWCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM4YTFkZGUtYjdmYi00YmZjLTlmM2MtY2Q4NDAwM2Iw Mjc5MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk YmMyOTM0NmItNGI3NC00NzdiLWExNzEtNzQ3NWIwZDkyMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQvC2STjw3lpKJgeSs/YWDvz+NHPMjCzd9Ym Yfwk5zqrejg8xYb18T/c1p7yfimZzs0TnjtrYIZr38iNno3ndSFQQvINf9Dd5Fpv EIR38pOyLxaxXZ459Z99e5VFI3QTHwKKO0VezL7HwezXLNOYLEqOn1loApM1QaQ3 Z8vSn09SVja3HUPyKtxFGoFaFzBsTxfjM+w6d7Oz5LjnSagmXc3TtdyTqz72Rtvd N7SMiXrMkAaqWqpIv6wrWEsM//sFcJPpg0CE4wR7xwio8/B7+OGHMA5SIFgbQEhQ vhrjclX92L5UsDS5ELQ5cKzBRkFTmX7SlJwsd5SA6GF8aimgwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeSyIUeXymb15nyLDHhMfzJa9GIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMzhh MWRkZS1iN2ZiLTRiZmMtOWYzYy1jZDg0MDAzYjAyNzkvN2EzZmFiMDUtNTUzNi0z NDMzLTg3NmEtYzM2NTg2OTA5ZTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTM4YTFkZGUtYjdmYi00YmZjLTlm M2MtY2Q4NDAwM2IwMjc5L2EzOGExZGRlLWI3ZmItNGJmYy05ZjNjLWNkODQwMDNi MDI3OS5jcmwwHwYDVR0jBBgwFoAUDfE36maClMPXvqaAW70dht0U4YMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMzhhMWRkZS1iN2ZiLTRiZmMtOWYzYy1jZDg0 MDAzYjAyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzvsYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAus1Ave5Z6c0zXlZaBeXYDixNmXUKhKBjNh1C7vEY6NpHBviV4YGFWZ leiVrUQBUGnqntmmxn3CWG6+WVROGDy0jXoGDs0pVn4DGpRkacBe1B1qJgfIa8vZ VhgNThCfgr9GJJZFhXbHNCQA7P4T7Ojsezql6aM9WqWJKJqz9UVlg5MOeWJSiI0y GxiRupG3HG6SxHjAlAkau0yfmMd7n4x75gUDEApVFGFSb15fFZ22rPBH4aM0ren6 lqom+4aqpABfw0spjxPSLouIMDcT9LBHh3i8oO/aSzJ+7kCleuHYRtkzW0HRHMdi XSt2pg0cDhw/yqvqD3nf9lXGnTSHe48= -----END CERTIFICATE-----Generated at Sun Sep 20 16:03:33 2026 by rpki-client