$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/ed0b605e-d662-35e3-ad2b-6aa473eb9547.roa File: ed0b605e-d662-35e3-ad2b-6aa473eb9547.roa (raw, json) Hash identifier: zHEhCtYmd7GWHqSyJ1iZyaGEleRr5DH4tpHZ1ipt7dw= Subject key identifier: FF:FE:8E:94:D6:AF:1A:7B:04:AB:58:E9:8A:A5:AD:13:7A:99:50:F0 Certificate issuer: /CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Certificate serial: 010D0C9F4328584F4973A17386360041A07D2D80 Authority key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/ed0b605e-d662-35e3-ad2b-6aa473eb9547.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32140 IP address blocks: 206.225.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a1:73:86:36:00:41:a0:7d:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ffd33a2d-ecf8-4739-a769-db9e021e7251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1f:96:c8:c7:41:4f:fa:74:21:5a:cb:34:ad: 92:44:7a:d8:f6:b5:93:1a:b7:a8:44:f4:4b:80:06: 50:85:df:2c:9c:37:0c:21:0c:29:e1:b6:46:06:a7: 5f:83:d9:1d:9f:9c:13:87:7c:b2:08:3d:e7:81:43: 1e:41:93:56:b4:c5:1e:21:71:03:d2:1e:c2:2e:85: 04:b5:75:fc:ae:b1:17:98:95:f3:27:7a:2f:08:ac: f8:f5:e4:52:17:64:6a:b4:c7:5c:5c:f9:58:ae:2e: 0a:61:e4:56:20:bb:66:5c:c1:12:5b:ad:11:45:70: ac:37:6a:38:3f:d8:d1:3e:86:db:64:fe:f6:ae:78: 39:85:ca:01:9c:01:7c:46:7d:8c:37:7a:69:e3:29: c5:bc:84:c9:be:9a:fa:fd:96:31:0a:17:cf:24:a8: 27:9e:7f:28:28:df:35:64:6c:74:7b:b5:12:d6:38: 07:ef:63:36:b7:58:75:96:15:68:b7:b3:3c:d8:ee: 93:13:3e:bc:b5:31:b7:6f:d9:1c:4b:75:f3:b1:5a: b1:43:d6:dd:03:24:47:34:99:11:f5:b0:24:d0:26: d2:a2:8a:7b:82:08:f4:17:cd:41:6a:9d:91:30:8b: ab:cd:94:8c:46:2e:9b:4f:a3:c0:34:2d:41:2f:01: bc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FE:8E:94:D6:AF:1A:7B:04:AB:58:E9:8A:A5:AD:13:7A:99:50:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/ed0b605e-d662-35e3-ad2b-6aa473eb9547.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.crl X509v3 Authority Key Identifier: keyid:58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer sbgp-ipAddrBlock: critical IPv4: 206.225.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:e3:22:26:5b:ae:1f:9c:25:31:59:44:5b:39:75:31:ca:ea: c9:86:af:a0:43:ae:c9:38:0b:3b:e1:26:cd:f0:d9:85:22:4a: d7:fb:3a:d9:28:53:70:9a:28:c1:70:7e:c9:6b:cc:dc:98:2f: 2b:2b:ff:d4:07:25:b9:7c:41:3a:81:7b:2d:5c:dd:84:95:6f: ba:0a:78:3b:ca:92:5f:79:0d:da:ea:37:7f:d1:ee:cc:c9:b9: 9e:cb:83:8c:9e:f6:16:6d:e1:b4:00:86:db:b8:a7:58:f8:fb: 39:2c:a0:6e:6e:5f:6e:6e:3d:05:e3:2e:83:2b:62:04:f9:9c: 3b:ef:2b:a8:b0:52:c4:f8:89:46:f7:8a:33:92:68:c3:a0:c4: d8:5b:b3:8b:ec:0e:40:d8:ec:84:78:c2:88:2d:6b:9e:de:0c: 82:a7:72:9d:6f:d6:cc:81:35:f2:ab:f5:91:ca:c3:e0:72:9d: e9:ec:09:31:d6:bb:24:16:a1:f1:7d:2e:0c:59:52:c8:c6:3a: 76:b0:33:5e:4b:7a:39:32:33:88:0b:d4:0c:b7:ee:64:61:b1: cd:86:14:9c:81:6f:93:bf:4d:09:47:0d:34:e3:f0:52:47:f9: d4:6d:64:c3:3b:3a:6d:39:e6:bf:8d:2e:fc:96:89:8f:8a:51: 8d:ab:9b:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6FzhjYAQaB9LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJh OTNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmZkMzNhMmQtZWNmOC00NzM5LWE3NjktZGI5ZTAyMWU3MjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR+WyMdBT/p0IVrLNK2SRHrY9rWTGreoRPRL gAZQhd8snDcMIQwp4bZGBqdfg9kdn5wTh3yyCD3ngUMeQZNWtMUeIXED0h7CLoUE tXX8rrEXmJXzJ3ovCKz49eRSF2RqtMdcXPlYri4KYeRWILtmXMESW60RRXCsN2o4 P9jRPobbZP72rng5hcoBnAF8Rn2MN3pp4ynFvITJvpr6/ZYxChfPJKgnnn8oKN81 ZGx0e7US1jgH72M2t1h1lhVot7M82O6TEz68tTG3b9kcS3XzsVqxQ9bdAyRHNJkR 9bAk0CbSoop7ggj0F81Bap2RMIurzZSMRi6bT6PANC1BLwG8EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/+jpTWrxp7BKtY6YqlrRN6mVDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3 OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvZWQwYjYwNWUtZDY2Mi0z NWUzLWFkMmItNmFhNDczZWI5NTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE4Nzk0ZDktZWIxNi00YjNjLWI4 NjktOTY5NzFiNzJhOTNiLzFhODc5NGQ5LWViMTYtNGIzYy1iODY5LTk2OTcxYjcy YTkzYi5jcmwwHwYDVR0jBBgwFoAUWGSrqLbG9Ghvh86IX/GHzHvf2y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3 MWI3MmE5M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzuEcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrjIiZbrh+cJTFZRFs5dTHK6smGr6BDrsk4CzvhJs3w2YUiStf7Otko U3CaKMFwfslrzNyYLysr/9QHJbl8QTqBey1c3YSVb7oKeDvKkl95DdrqN3/R7szJ uZ7Lg4ye9hZt4bQAhtu4p1j4+zksoG5uX25uPQXjLoMrYgT5nDvvK6iwUsT4iUb3 ijOSaMOgxNhbs4vsDkDY7IR4wogta57eDIKncp1v1syBNfKr9ZHKw+BynensCTHW uyQWofF9LgxZUsjGOnawM15LejkyM4gL1Ay37mRhsc2GFJyBb5O/TQlHDTTj8FJH +dRtZMM7Om055r+NLvyWiY+KUY2rm2o= -----END CERTIFICATE-----Generated at Tue Oct 13 08:23:12 2026 by rpki-client