$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa File: 95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa (raw, json) Hash identifier: UwJu4rBq1YpLKBh3nKUh5sp6OvvXhbszN7m8uwB/9Lo= Subject key identifier: 03:FA:40:05:00:F1:75:21:A5:C6:1C:85:12:40:A0:E6:35:DD:4F:16 Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e Certificate serial: 010D0C9F4328584EFCACCFE26ADE4CD497267F40 Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 33211 IP address blocks: 206.41.120.0/22 maxlen: 22 206.41.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:cf:e2:6a:de:4c:d4:97:26:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=8a04cf62-1d54-49b2-8622-9bfe35af469c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d3:d2:7b:57:7c:6f:ff:73:8b:ef:1c:cf:cd: 69:b3:cb:aa:a7:ad:2b:05:b5:c0:85:d3:ef:18:fa: 6f:03:2c:7a:8d:72:50:1f:c3:b0:56:a9:37:58:b1: 1c:79:d5:f7:a1:50:48:17:0d:e7:66:65:52:ea:ea: c9:da:94:78:b5:1b:92:73:0f:be:f6:e0:04:aa:d2: 91:c9:a9:20:69:f2:a0:d2:29:27:f3:aa:4a:5c:ab: 8c:49:9d:04:5c:57:71:3b:6c:e0:71:1a:06:8d:63: 90:6e:0d:48:07:55:e8:c3:86:53:0e:cd:40:97:46: 6b:20:19:7b:8a:28:55:f1:e2:81:e7:ae:2f:21:d2: ea:2b:44:12:6e:81:02:48:1e:cf:e6:3b:cc:e8:04: 2e:cf:3a:97:d4:14:fa:fa:1b:6a:17:33:b6:57:e4: 83:9c:cc:2d:f1:82:36:3e:92:69:9c:a4:9a:15:93: a5:60:cc:3b:2c:eb:e7:1c:68:ab:d8:b6:94:b4:84: 7d:a4:c3:62:64:48:96:6a:23:ca:55:31:cd:09:c3: d3:97:f4:dc:e4:03:3e:92:d1:82:91:ec:14:c8:0d: e2:b2:65:54:a2:36:0f:30:b1:22:31:dc:be:a7:e6: db:81:2f:4c:79:b4:72:3a:22:61:37:41:54:ef:16: 79:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FA:40:05:00:F1:75:21:A5:C6:1C:85:12:40:A0:E6:35:DD:4F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/95dec174-d0b2-3c77-aa70-aae3c1f8628c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl X509v3 Authority Key Identifier: keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer sbgp-ipAddrBlock: critical IPv4: 206.41.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:f3:0a:5e:4a:75:d2:2e:2c:53:0d:af:52:cb:59:65:ad:05: d8:62:37:59:53:39:cb:2c:a8:e0:5c:81:12:9d:4a:70:1b:b4: a5:dd:90:1d:8f:1e:8f:f5:a4:6b:b7:d2:3d:dd:b1:a4:a8:80: ab:72:33:f3:68:c8:78:e6:04:28:37:fb:ec:33:cf:b7:51:d3: 0e:da:70:f7:dd:3d:a1:b3:9b:cd:ba:d9:82:b7:d4:92:5d:e4: 86:4a:d9:c6:4e:f7:df:8a:8b:f1:9b:e5:0e:54:63:55:df:6b: d3:28:17:35:1c:df:5f:9e:11:7f:b2:4b:11:e2:83:fd:16:93: 7b:83:44:b0:a8:5c:4e:ac:a5:fa:bc:64:1f:fe:f9:8b:a2:3b: 2d:5d:69:1a:74:53:fa:e8:f3:6a:ec:68:33:4e:3c:95:e6:02: be:78:e2:a5:66:66:5a:dc:7c:a1:c4:9e:1f:68:b4:af:a3:c2: 34:98:02:88:09:20:08:fc:e1:00:7f:5e:53:7e:92:7f:10:df: 6e:31:fe:15:ce:20:fb:55:f1:26:ca:12:8b:d9:31:66:ec:02: 08:5f:a8:94:a3:1f:81:57:b9:71:51:b5:04:b4:96:1b:f5:bb: df:eb:60:eb:02:a3:fa:5e:67:54:5e:f4:76:9a:3c:c8:ea:3f: 62:34:65:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rM/iat5M1Jcmf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0 ZDZlMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk OGEwNGNmNjItMWQ1NC00OWIyLTg2MjItOWJmZTM1YWY0NjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9PSe1d8b/9zi+8cz81ps8uqp60rBbXAhdPv GPpvAyx6jXJQH8OwVqk3WLEcedX3oVBIFw3nZmVS6urJ2pR4tRuScw++9uAEqtKR yakgafKg0ikn86pKXKuMSZ0EXFdxO2zgcRoGjWOQbg1IB1Xow4ZTDs1Al0ZrIBl7 iihV8eKB564vIdLqK0QSboECSB7P5jvM6AQuzzqX1BT6+htqFzO2V+SDnMwt8YI2 PpJpnKSaFZOlYMw7LOvnHGir2LaUtIR9pMNiZEiWaiPKVTHNCcPTl/Tc5AM+ktGC kewUyA3ismVUojYPMLEiMdy+p+bbgS9MebRyOiJhN0FU7xZ5qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP6QAUA8XUhpcYchRJAoOY13U8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvOTVkZWMxNzQtZDBiMi0z Yzc3LWFhNzAtYWFlM2MxZjg2MjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy MDJhZTRkNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzil4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLzCl5KddIuLFMNr1LLWWWtBdhiN1lTOcssqOBcgRKdSnAbtKXdkB2P Ho/1pGu30j3dsaSogKtyM/NoyHjmBCg3++wzz7dR0w7acPfdPaGzm8262YK31JJd 5IZK2cZO99+Ki/Gb5Q5UY1Xfa9MoFzUc31+eEX+ySxHig/0Wk3uDRLCoXE6spfq8 ZB/++YuiOy1daRp0U/ro82rsaDNOPJXmAr544qVmZlrcfKHEnh9otK+jwjSYAogJ IAj84QB/XlN+kn8Q324x/hXOIPtV8SbKEovZMWbsAghfqJSjH4FXuXFRtQS0lhv1 u9/rYOsCo/peZ1Re9HaaPMjqP2I0ZcI= -----END CERTIFICATE-----Generated at Wed Oct 14 02:15:22 2026 by rpki-client