$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17f6df5c-868d-323a-8270-bd26497127b3.roa File: 17f6df5c-868d-323a-8270-bd26497127b3.roa (raw, json) Hash identifier: +lAV5ge4F3ifAGWXryeSkze7xjZ95KAirAt5Z7eZJM8= Subject key identifier: E8:5C:23:83:57:EC:9B:2B:06:1F:52:2E:44:9F:DF:28:E0:D4:86:C5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78B98F3108328C6CEA3E440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17f6df5c-868d-323a-8270-bd26497127b3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 63415 IP address blocks: 209.23.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8b:98:f3:10:83:28:c6:ce:a3:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=eea06d2b-14b5-4a00-ad2a-f010478376e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:29:9f:07:cc:b2:93:df:13:58:38:61:a6:70: 20:b2:01:ef:26:90:aa:5e:8b:c5:f3:a4:27:30:1e: e9:f6:b6:c6:ee:df:ec:5b:64:e0:2f:e6:78:3b:9f: 5e:fa:83:c8:fe:4e:32:fd:37:0b:7b:69:15:a1:38: 34:2d:e8:8e:74:28:a6:ea:1c:49:de:ca:68:6c:c4: dd:c3:1d:ca:54:02:da:a4:c5:c9:28:ac:b2:73:6b: 0d:a3:07:91:95:9b:77:74:0a:ef:80:64:33:6b:a0: 14:ea:96:69:be:43:d2:c7:e9:28:c5:12:e9:50:f9: e9:3e:56:51:4d:9a:4b:01:53:4d:13:85:57:e4:28: 20:c3:1f:22:62:fc:85:d6:71:08:cd:d2:ab:dd:e2: 1d:ba:bf:0c:c9:9e:a7:c7:b4:8c:73:6f:a5:bd:45: f0:c3:17:38:d9:5f:ac:2c:87:75:c4:07:dc:e7:d4: 0a:be:81:dd:43:88:29:17:16:8a:3d:ec:6b:20:cf: a2:85:17:0b:24:3e:5f:ad:da:0b:28:5e:b5:b5:fe: 02:96:25:73:35:2f:5d:26:77:18:a6:7b:e1:99:b2: 56:c1:9d:66:0d:22:c1:1d:ab:72:fe:6a:f8:81:43: a3:99:cd:68:1d:4d:4a:49:0b:0a:af:de:b6:5d:6c: f7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5C:23:83:57:EC:9B:2B:06:1F:52:2E:44:9F:DF:28:E0:D4:86:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17f6df5c-868d-323a-8270-bd26497127b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 209.23.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:9e:7e:1e:a5:63:5a:d7:46:cb:5b:f0:05:15:0c:70:51:17: 46:5f:d2:26:ca:38:fc:f7:15:d5:69:04:75:76:68:ed:96:08: 62:4b:ac:5c:c1:31:83:c9:c6:a7:09:cc:84:c7:d9:27:38:ce: 37:44:20:9e:c3:a4:84:a1:3f:3d:5d:78:95:52:e5:6c:18:b1: 3a:6e:b9:bf:c8:e0:88:fe:53:69:98:10:ff:7d:d9:c6:fa:d8: 30:ba:0c:73:e9:13:f4:24:3f:01:db:37:76:81:f2:33:9b:38: 0f:fa:a8:03:87:b9:7b:e0:b7:fd:86:7c:82:93:70:b2:39:1c: 66:b0:58:66:ed:98:3d:74:09:b3:98:6d:63:8f:e0:67:6f:29: 83:1f:b5:4f:70:21:13:e9:84:b3:4d:0b:ce:32:55:ba:f2:80: 5f:49:cb:40:62:4e:b9:64:b9:1e:f5:0c:17:d4:b3:1d:3e:33: f4:7d:81:82:b0:28:0c:53:a2:f8:4f:55:7f:f2:c4:1c:6f:f1: 2b:17:b6:c5:d1:4f:f6:10:e6:72:48:05:b0:27:84:da:5b:d6: 8d:35:9a:b6:98:53:47:15:bf:68:1c:d9:aa:11:5d:dd:0a:cc: 23:41:9c:a9:d3:81:a4:02:8f:3c:2d:9e:e7:4b:6d:5f:e6:35: 83:d5:b7:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ni5jzEIMoxs6j5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWVhMDZkMmItMTRiNS00YTAwLWFkMmEtZjAxMDQ3ODM3NmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjymfB8yyk98TWDhhpnAgsgHvJpCqXovF86Qn MB7p9rbG7t/sW2TgL+Z4O59e+oPI/k4y/TcLe2kVoTg0LeiOdCim6hxJ3spobMTd wx3KVALapMXJKKyyc2sNoweRlZt3dArvgGQza6AU6pZpvkPSx+koxRLpUPnpPlZR TZpLAVNNE4VX5Cggwx8iYvyF1nEIzdKr3eIdur8MyZ6nx7SMc2+lvUXwwxc42V+s LId1xAfc59QKvoHdQ4gpFxaKPexrIM+ihRcLJD5frdoLKF61tf4CliVzNS9dJncY pnvhmbJWwZ1mDSLBHaty/mr4gUOjmc1oHU1KSQsKr962XWz33wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhcI4NX7JsrBh9SLkSf3yjg1IbFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTdmNmRmNWMtODY4ZC0z MjNhLTgyNzAtYmQyNjQ5NzEyN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0RfOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6efh6lY1rXRstb8AUVDHBRF0Zf0ibKOPz3FdVpBHV2aO2WCGJLrFzB MYPJxqcJzITH2Sc4zjdEIJ7DpIShPz1deJVS5WwYsTpuub/I4Ij+U2mYEP992cb6 2DC6DHPpE/QkPwHbN3aB8jObOA/6qAOHuXvgt/2GfIKTcLI5HGawWGbtmD10CbOY bWOP4GdvKYMftU9wIRPphLNNC84yVbrygF9Jy0BiTrlkuR71DBfUsx0+M/R9gYKw KAxTovhPVX/yxBxv8SsXtsXRT/YQ5nJIBbAnhNpb1o01mraYU0cVv2gc2aoRXd0K zCNBnKnTgaQCjzwtnudLbV/mNYPVtwQ= -----END CERTIFICATE-----Generated at Wed Jul 29 11:45:33 2026 by rpki-client