$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/2a92eed2-e218-3ddf-b6f8-b6596f1a8912.roa File: 2a92eed2-e218-3ddf-b6f8-b6596f1a8912.roa (raw, json) Hash identifier: NMo4dLOBBlUkBMRTHLC32ET0ETkSbWN1tmkwCCjzTd4= Subject key identifier: B0:16:3A:37:4B:BE:71:A1:6E:04:2C:E1:1E:14:C8:20:09:39:64:AB Certificate issuer: /CN=7386a5e1-ba73-408c-a7e4-df88e2f52603 Certificate serial: 010D0C9F4328584F3CE274E6E23C4696A16FB1C0 Authority key identifier: 8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/2a92eed2-e218-3ddf-b6f8-b6596f1a8912.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 26337 IP address blocks: 207.204.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:74:e6:e2:3c:46:96:a1:6f:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7386a5e1-ba73-408c-a7e4-df88e2f52603 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=8a39b8eb-abf0-4d47-b56f-4daa48cee0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c1:44:e7:cc:a5:ec:98:30:5c:66:6a:49:8a: 41:ad:e3:b5:89:c1:6b:5c:b6:4e:17:d9:2c:db:e9: 28:cd:ba:25:0f:d6:f4:ce:31:4a:31:41:12:cb:d3: 46:04:86:d7:7e:2f:72:0e:0f:e7:06:45:14:65:29: 4d:51:cf:6d:c9:ab:1e:60:e8:10:f5:6b:18:d4:8b: b9:2a:e9:f2:13:c2:10:3f:76:10:85:c2:91:ff:fc: 14:81:15:69:c7:28:5c:13:79:67:01:5d:88:af:ce: eb:74:df:86:18:39:85:92:af:4d:2f:53:60:f5:43: a5:5a:57:12:01:9c:8e:8b:e5:18:ec:06:68:ec:ac: 34:81:d7:3a:23:09:21:a5:1a:e0:02:fd:0d:68:91: 39:c7:9d:69:48:87:a0:b2:ec:3a:d9:71:8a:bb:d4: 42:96:db:e0:0a:fe:56:85:08:f5:30:a4:9c:36:3e: 1a:b5:4e:1b:0f:4b:26:02:0c:25:72:62:ef:2c:fd: 25:5b:eb:3c:0c:1f:c5:a8:f9:31:21:78:e9:08:da: 5b:0c:88:2e:22:bb:c3:4d:37:32:1d:92:36:bf:5e: 7c:c8:8b:dc:95:34:04:7e:3c:8f:b8:a4:c6:dd:49: 26:fa:9a:53:98:4d:90:92:91:3e:8b:f7:96:dc:88: 14:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:16:3A:37:4B:BE:71:A1:6E:04:2C:E1:1E:14:C8:20:09:39:64:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/2a92eed2-e218-3ddf-b6f8-b6596f1a8912.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603/7386a5e1-ba73-408c-a7e4-df88e2f52603.crl X509v3 Authority Key Identifier: keyid:8E:FA:F9:05:B8:DE:21:B0:DE:BE:1B:33:D1:1A:89:62:C3:90:04:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7386a5e1-ba73-408c-a7e4-df88e2f52603.cer sbgp-ipAddrBlock: critical IPv4: 207.204.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:2e:ec:35:49:96:f6:91:63:ae:d3:58:65:1a:32:ba:7a:da: 9d:af:c0:5c:c5:13:c1:7e:15:5b:4e:c4:5b:84:36:21:45:1d: 92:33:0e:39:64:3d:7d:a6:ae:cc:47:3c:1e:1b:67:3d:08:70: 0b:40:98:c5:7c:9f:30:60:c1:09:01:49:dc:64:17:06:53:25: a7:0b:e2:0b:03:eb:dd:d1:49:27:e1:35:cd:cb:e7:3f:27:2c: ee:5e:bc:3f:16:3a:9c:2f:77:8a:f2:3a:20:f4:61:d2:33:4f: 88:31:cb:74:cd:b6:2e:8c:d6:d1:83:85:00:4f:d7:5f:92:d8: cd:1b:a8:01:8e:d3:4e:2d:b0:45:2d:72:ef:1e:2b:e8:81:87: 36:8e:1c:48:23:7a:4a:7a:14:4a:c9:15:0b:78:3a:ee:d9:46: 25:a2:67:4f:91:4d:02:e4:39:85:72:e9:9d:01:94:fc:f1:57: 12:50:a4:4a:1c:7b:29:57:aa:69:da:07:72:75:d2:b0:db:f6: 69:4d:fa:bd:92:d2:c6:60:46:9e:7a:6c:41:2a:23:b0:2d:d6: ce:a5:0d:b0:92:6e:2f:7b:b9:f6:59:06:d1:5e:00:a2:54:b5: 72:b0:b9:fe:f4:e9:ee:35:c9:d5:fb:d9:81:df:b0:e0:52:88: b9:95:8a:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884nTm4jxGlqFvscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzM4NmE1ZTEtYmE3My00MDhjLWE3ZTQtZGY4OGUyZjUy NjAzMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk OGEzOWI4ZWItYWJmMC00ZDQ3LWI1NmYtNGRhYTQ4Y2VlMGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcFE58yl7JgwXGZqSYpBreO1icFrXLZOF9ks 2+kozbolD9b0zjFKMUESy9NGBIbXfi9yDg/nBkUUZSlNUc9tyaseYOgQ9WsY1Iu5 KunyE8IQP3YQhcKR//wUgRVpxyhcE3lnAV2Ir87rdN+GGDmFkq9NL1Ng9UOlWlcS AZyOi+UY7AZo7Kw0gdc6IwkhpRrgAv0NaJE5x51pSIegsuw62XGKu9RCltvgCv5W hQj1MKScNj4atU4bD0smAgwlcmLvLP0lW+s8DB/FqPkxIXjpCNpbDIguIrvDTTcy HZI2v158yIvclTQEfjyPuKTG3Ukm+ppTmE2QkpE+i/eW3IgUKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAWOjdLvnGhbgQs4R4UyCAJOWSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83Mzg2 YTVlMS1iYTczLTQwOGMtYTdlNC1kZjg4ZTJmNTI2MDMvMmE5MmVlZDItZTIxOC0z ZGRmLWI2ZjgtYjY1OTZmMWE4OTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzM4NmE1ZTEtYmE3My00MDhjLWE3 ZTQtZGY4OGUyZjUyNjAzLzczODZhNWUxLWJhNzMtNDA4Yy1hN2U0LWRmODhlMmY1 MjYwMy5jcmwwHwYDVR0jBBgwFoAUjvr5BbjeIbDevhsz0RqJYsOQBJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83Mzg2YTVlMS1iYTczLTQwOGMtYTdlNC1kZjg4 ZTJmNTI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz8wgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAu7DVJlvaRY67TWGUaMrp62p2vwFzFE8F+FVtOxFuENiFFHZIzDjlk PX2mrsxHPB4bZz0IcAtAmMV8nzBgwQkBSdxkFwZTJacL4gsD693RSSfhNc3L5z8n LO5evD8WOpwvd4ryOiD0YdIzT4gxy3TNti6M1tGDhQBP11+S2M0bqAGO004tsEUt cu8eK+iBhzaOHEgjekp6FErJFQt4Ou7ZRiWiZ0+RTQLkOYVy6Z0BlPzxVxJQpEoc eylXqmnaB3J10rDb9mlN+r2S0sZgRp56bEEqI7At1s6lDbCSbi97ufZZBtFeAKJU tXKwuf706e41ydX72YHfsOBSiLmVit8= -----END CERTIFICATE-----Generated at Wed Sep 23 21:42:47 2026 by rpki-client