$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/c71d851d-85d3-3172-9960-2bfd64241ff0.roa File: c71d851d-85d3-3172-9960-2bfd64241ff0.roa (raw, json) Hash identifier: uYRfdCmGdgmpJtk4UkLo1lNcRIVFJ1UCdb+523C3iXc= Subject key identifier: 78:DC:6D:1E:02:04:C8:16:10:3C:F3:6A:13:D3:45:41:55:D5:BE:E0 Certificate issuer: /CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259 Certificate serial: 010D0C9F4328584F2EED1C2F3824A19B6D5CBD80 Authority key identifier: 9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/c71d851d-85d3-3172-9960-2bfd64241ff0.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 14866 IP address blocks: 206.126.109.0/24 maxlen: 24 206.220.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:1c:2f:38:24:a1:9b:6d:5c:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=12136c9d-4405-4f98-a36b-2377a5cc6df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1b:8c:e0:1e:32:32:9a:88:02:f4:5f:ce:5e: b8:68:2e:13:72:3a:56:ad:9e:8f:db:40:fc:33:0f: 89:30:47:82:b4:d6:64:0e:12:df:1d:03:ea:92:9d: d8:14:59:93:a1:39:b5:7a:0e:89:08:bb:c4:46:43: d1:41:a3:ce:cc:64:b3:e8:3f:8b:3b:e5:ac:93:a8: 72:06:42:e7:c8:fb:d8:3d:83:64:94:e5:30:ff:51: 26:05:6e:ad:31:07:e3:c8:bf:db:36:f0:c6:0b:73: 7c:85:98:55:7e:eb:b1:a7:bc:d3:94:8f:b7:6e:50: 97:0f:ff:25:c3:b0:0e:f4:1f:91:aa:5d:b3:68:18: 1d:e8:d4:5b:c1:c8:1d:66:f9:53:55:5e:5c:76:2b: 61:2f:56:d7:5a:8c:02:e0:38:c8:00:9d:27:98:26: b8:fa:d2:37:11:ca:09:24:b9:39:fd:2c:57:b3:2f: 18:32:6e:22:1e:3e:55:b6:94:4f:61:96:29:e7:8c: 95:2b:6b:7a:23:76:9a:39:94:75:6c:76:34:31:40: 89:d9:74:cf:51:dd:b3:e1:10:4a:d7:49:5c:be:d5: 3d:2b:5e:e5:46:fa:9c:dc:4c:ba:b5:70:52:de:66: 6e:95:c0:88:92:0a:b5:63:ea:cd:77:70:34:c6:cf: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DC:6D:1E:02:04:C8:16:10:3C:F3:6A:13:D3:45:41:55:D5:BE:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/c71d851d-85d3-3172-9960-2bfd64241ff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl X509v3 Authority Key Identifier: keyid:9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer sbgp-ipAddrBlock: critical IPv4: 206.126.109.0/24 206.220.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:7d:91:87:9d:70:fd:22:73:6f:4f:c9:e0:dc:6a:51:45:86: 96:e8:cb:9c:ce:3d:be:6b:1c:94:67:79:b1:2c:15:17:7b:af: 55:d4:12:f1:57:ff:b5:54:f2:69:4f:c0:89:9a:f4:8c:7a:93: 02:5e:a2:3f:e8:09:b1:66:96:ae:0d:c7:9c:99:34:b3:40:13: 1a:0a:25:48:fd:a5:7b:e4:b5:58:fa:4b:43:c5:d9:17:fe:35: 7b:55:71:84:d2:16:10:74:4d:a4:23:40:cb:df:59:21:69:0f: 68:bd:df:ce:65:43:ef:b7:29:a2:e3:5d:5b:a4:0f:9a:45:3f: 8b:37:50:82:ce:01:41:4a:58:61:40:18:3c:3f:b9:ee:3e:50: 31:71:8f:74:cc:27:0d:50:73:6b:2f:da:29:0e:94:57:f2:33: 82:75:9b:53:5b:1e:3e:0c:89:48:6f:bc:f1:12:db:52:93:c1: 56:4d:67:72:36:03:25:65:02:0e:6b:67:7d:81:51:6e:50:b1: 80:17:ed:f5:ab:da:58:17:c5:61:75:50:85:3e:ac:32:8e:98: df:83:9e:38:1b:8e:1d:02:60:f2:c9:c2:a2:0a:dc:c8:30:a2: 12:00:5f:b0:91:37:8f:29:08:e5:46:02:84:f4:39:9c:37:2a: bf:84:f3:8c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8u7RwvOCShm21cvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjdhMzJjZGYtYWY0YS00N2Q1LTg2ZGMtZTljZGNmNjhj MjU5MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MTIxMzZjOWQtNDQwNS00Zjk4LWEzNmItMjM3N2E1Y2M2ZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xuM4B4yMpqIAvRfzl64aC4TcjpWrZ6P20D8 Mw+JMEeCtNZkDhLfHQPqkp3YFFmToTm1eg6JCLvERkPRQaPOzGSz6D+LO+Wsk6hy BkLnyPvYPYNklOUw/1EmBW6tMQfjyL/bNvDGC3N8hZhVfuuxp7zTlI+3blCXD/8l w7AO9B+Rql2zaBgd6NRbwcgdZvlTVV5cdithL1bXWowC4DjIAJ0nmCa4+tI3EcoJ JLk5/SxXsy8YMm4iHj5VtpRPYZYp54yVK2t6I3aaOZR1bHY0MUCJ2XTPUd2z4RBK 10lcvtU9K17lRvqc3Ey6tXBS3mZulcCIkgq1Y+rNd3A0xs9foQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHjcbR4CBMgWEDzzahPTRUFV1b7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mN2Ez MmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNkY2Y2OGMyNTkvYzcxZDg1MWQtODVkMy0z MTcyLTk5NjAtMmJmZDY0MjQxZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjdhMzJjZGYtYWY0YS00N2Q1LTg2 ZGMtZTljZGNmNjhjMjU5L2Y3YTMyY2RmLWFmNGEtNDdkNS04NmRjLWU5Y2RjZjY4 YzI1OS5jcmwwHwYDVR0jBBgwFoAUns2WOXoXY3LPoEdHHjUTuHN2FuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mN2EzMmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNk Y2Y2OGMyNTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzn5tAwQD ztzAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFx9kYedcP0ic29PyeDcalFFhpboy5zOPb5rHJRnebEsFRd7 r1XUEvFX/7VU8mlPwIma9Ix6kwJeoj/oCbFmlq4Nx5yZNLNAExoKJUj9pXvktVj6 S0PF2Rf+NXtVcYTSFhB0TaQjQMvfWSFpD2i9385lQ++3KaLjXVukD5pFP4s3UILO AUFKWGFAGDw/ue4+UDFxj3TMJw1Qc2sv2ikOlFfyM4J1m1NbHj4MiUhvvPES21KT wVZNZ3I2AyVlAg5rZ32BUW5QsYAX7fWr2lgXxWF1UIU+rDKOmN+Dnjgbjh0CYPLJ wqIK3MgwohIAX7CRN48pCOVGAoT0OZw3Kr+E84w= -----END CERTIFICATE-----Generated at Tue Sep 22 09:44:23 2026 by rpki-client