$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/356bd502-68bb-3607-a737-1dd0380dea93.roa File: 356bd502-68bb-3607-a737-1dd0380dea93.roa (raw, json) Hash identifier: jh6kmpKnB7CV4AWYan66fgsvcpsKd6sfZ5s+ztK8dow= Subject key identifier: B6:F1:EA:BB:E1:FD:0A:16:98:7B:A2:2D:FA:4B:08:84:E8:DC:DB:D6 Certificate issuer: /CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b Certificate serial: 010D0C9F4328584F067232F93F2D51426A7EA200 Authority key identifier: 2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/356bd502-68bb-3607-a737-1dd0380dea93.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 21976 IP address blocks: 192.231.207.0/24 maxlen: 24 207.200.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:32:f9:3f:2d:51:42:6a:7e:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=5e48b9a2-6550-4c71-9d0d-867dd248f1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a0:89:ba:1b:f8:fa:e0:8c:d0:c9:89:33:7b: 56:82:61:ab:02:e1:d0:40:a3:6d:45:90:26:25:a3: 5e:f5:5d:a1:c3:ef:04:e2:81:79:9d:6c:ad:a1:7b: c1:7f:41:4b:ec:e6:7d:52:6a:fa:c3:ec:f7:7b:d8: bf:88:dd:d8:da:ba:30:aa:57:b6:f7:51:1e:57:fa: 23:6c:54:83:ae:5b:29:d2:8a:ae:1e:fe:7e:61:6c: d1:9e:43:55:1a:f6:1e:29:fe:1b:84:8c:79:84:ec: 6b:32:1b:57:f8:93:67:38:9a:1e:6d:98:e4:06:0f: 63:a7:c5:12:d0:30:d0:39:1a:46:d1:fa:8c:ec:0b: fd:6c:6d:3a:0d:35:de:4e:c9:ac:fe:0e:e0:14:da: 27:96:e1:70:30:d7:3e:35:e5:23:fe:1f:87:2f:65: 61:f8:6c:32:ba:d1:d0:f4:04:01:74:db:27:5a:01: a9:75:e5:0a:35:21:0d:35:5b:ac:fe:90:00:4f:7a: e4:e4:c7:1e:3e:a7:0a:f2:3f:01:c9:a7:67:56:76: 3a:b6:04:c3:eb:77:08:fa:c8:c5:6b:27:54:c3:fa: 82:0e:0c:8f:05:02:de:33:0b:90:e4:46:0f:35:8a: 32:78:8e:28:87:54:ab:63:15:64:eb:75:4f:08:71: 56:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F1:EA:BB:E1:FD:0A:16:98:7B:A2:2D:FA:4B:08:84:E8:DC:DB:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/356bd502-68bb-3607-a737-1dd0380dea93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.crl X509v3 Authority Key Identifier: keyid:2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer sbgp-ipAddrBlock: critical IPv4: 192.231.207.0/24 207.200.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:eb:35:8e:59:f4:72:74:88:38:a7:4e:1a:e4:ca:9b:9b:b4: db:48:9c:63:02:ce:9e:b2:c1:2c:fe:e9:49:f1:8e:55:52:9f: 77:da:05:45:35:3b:22:10:60:98:9b:39:e0:57:52:9a:47:17: c1:bd:96:3b:4b:15:6d:f3:4a:98:b6:1a:ed:18:74:59:9a:21: 82:cd:dc:8b:0e:d0:21:5a:ba:4f:0b:7f:b4:ce:a1:14:15:b2: 1d:fb:dd:44:03:5f:b7:63:cd:ae:4a:81:ea:ec:84:b0:0a:76: 70:ac:e3:87:78:06:08:66:b9:0b:90:ae:1e:4b:42:38:d3:31: 1d:40:a1:22:eb:b0:9c:10:3f:de:bd:5e:69:da:46:32:d4:63: 2a:40:01:b1:aa:42:4b:9a:4d:07:d5:50:3b:4c:df:38:ca:4b: 5f:ef:c9:ce:47:ac:e2:9e:16:db:6b:ae:4d:61:67:96:fe:d4: 09:21:3e:08:72:29:b1:85:61:ab:94:e3:22:86:f0:e2:de:7c: ca:00:ae:24:a7:5b:ca:28:6f:c4:da:39:b6:29:0a:40:19:b4: 22:3f:65:c6:55:af:a6:fb:b0:00:a0:7a:1e:18:65:dc:6f:87: d6:c9:29:22:ad:43:ce:c7:90:6c:84:22:fd:8b:a8:61:73:cf: ea:4f:e1:86 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8GcjL5Py1RQmp+ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE3ODQxMTItM2JiZi00MWM4LTljMzItYmRiODVhZTc2 YjFiMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NWU0OGI5YTItNjU1MC00YzcxLTlkMGQtODY3ZGQyNDhmMWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKCJuhv4+uCM0MmJM3tWgmGrAuHQQKNtRZAm JaNe9V2hw+8E4oF5nWytoXvBf0FL7OZ9Umr6w+z3e9i/iN3Y2rowqle291EeV/oj bFSDrlsp0oquHv5+YWzRnkNVGvYeKf4bhIx5hOxrMhtX+JNnOJoebZjkBg9jp8US 0DDQORpG0fqM7Av9bG06DTXeTsms/g7gFNonluFwMNc+NeUj/h+HL2Vh+GwyutHQ 9AQBdNsnWgGpdeUKNSENNVus/pAAT3rk5McePqcK8j8ByadnVnY6tgTD63cI+sjF aydUw/qCDgyPBQLeMwuQ5EYPNYoyeI4oh1SrYxVk63VPCHFWOQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLbx6rvh/QoWmHuiLfpLCITo3NvWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTc4 NDExMi0zYmJmLTQxYzgtOWMzMi1iZGI4NWFlNzZiMWIvMzU2YmQ1MDItNjhiYi0z NjA3LWE3MzctMWRkMDM4MGRlYTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE3ODQxMTItM2JiZi00MWM4LTlj MzItYmRiODVhZTc2YjFiLzFhNzg0MTEyLTNiYmYtNDFjOC05YzMyLWJkYjg1YWU3 NmIxYi5jcmwwHwYDVR0jBBgwFoAULF2EmYFdLcMooozsBRSfKeS2FzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTc4NDExMi0zYmJmLTQxYzgtOWMzMi1iZGI4 NWFlNzZiMWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwOfPAwQE z8igMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADnrNY5Z9HJ0iDinThrkypubtNtInGMCzp6ywSz+6UnxjlVS n3faBUU1OyIQYJibOeBXUppHF8G9ljtLFW3zSpi2Gu0YdFmaIYLN3IsO0CFauk8L f7TOoRQVsh373UQDX7djza5KgershLAKdnCs44d4BghmuQuQrh5LQjjTMR1AoSLr sJwQP969XmnaRjLUYypAAbGqQkuaTQfVUDtM3zjKS1/vyc5HrOKeFttrrk1hZ5b+ 1AkhPghyKbGFYauU4yKG8OLefMoAriSnW8oob8TaObYpCkAZtCI/ZcZVr6b7sACg eh4YZdxvh9bJKSKtQ87HkGyEIv2LqGFzz+pP4YY= -----END CERTIFICATE-----Generated at Tue Sep 22 20:22:18 2026 by rpki-client