$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/becd6c94-7e7f-380b-915b-50732603abf7.roa File: becd6c94-7e7f-380b-915b-50732603abf7.roa (raw, json) Hash identifier: miyHc0tfGAhthls3N6Sj6FkECXf9VkU7oYW2VfObCyQ= Subject key identifier: 53:7F:85:60:82:7E:53:37:6E:92:20:B4:FD:4E:B2:E9:CF:32:A8:E8 Certificate issuer: /CN=3a9bc447-67f9-40d1-8f3d-b84cca94c493 Certificate serial: 010D0C9F4328584EFA125446B1B1DB3BE9414E00 Authority key identifier: E0:19:17:69:7C:85:36:41:5C:F4:63:73:4E:D9:EF:AC:7D:5D:82:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/becd6c94-7e7f-380b-915b-50732603abf7.roa Signing time: Thu 27 Aug 2026 14:37:32 +0000 ROA not before: Thu 27 Aug 2026 14:37:32 +0000 ROA not after: Wed 25 Nov 2026 15:37:32 +0000 asID: 14374 IP address blocks: 206.168.120.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fa:12:54:46:b1:b1:db:3b:e9:41:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a9bc447-67f9-40d1-8f3d-b84cca94c493 Validity Not Before: Aug 27 14:37:32 2026 GMT Not After : Nov 25 15:37:32 2026 GMT Subject: CN=b434ae46-3548-4fc1-87af-f248e13c85e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:66:69:89:ab:e3:df:74:c5:09:f9:ae:d3:bd: b5:f5:f6:48:9a:ce:7e:c7:1d:35:8c:6c:1d:b4:a2: 4c:6c:89:6b:26:b0:1f:86:e2:f6:cb:50:9d:dc:2f: 3a:1c:16:7f:87:b0:99:19:7d:24:60:1d:f5:76:ff: af:00:08:3b:1e:30:e6:a0:e5:2f:16:48:ff:41:0e: 28:5e:e1:76:2c:83:86:1a:17:3c:1c:ae:48:86:81: 0f:58:36:ee:33:88:bd:d2:35:63:20:3d:8c:3c:ae: 9a:18:2c:46:bf:f6:95:58:45:38:0c:6d:3a:da:79: 26:0b:5e:04:6b:27:84:56:9a:e7:72:9b:bc:e2:7b: 36:e8:76:88:87:cf:45:8a:90:df:73:20:18:d7:b7: 3e:04:73:d4:7a:dd:6b:1e:1f:c8:99:36:e3:e0:9c: d5:2b:a6:28:3b:84:eb:e0:85:a4:d2:e2:19:ca:ca: f4:a4:9a:5a:54:08:1a:0d:d9:ce:d0:1f:8d:7d:b5: 26:a0:39:b2:df:60:d3:45:4d:ae:e8:57:c3:b7:40: 4a:6b:b4:d6:92:46:88:4d:01:14:6b:18:21:b6:e9: 74:20:ef:64:af:c6:00:2b:1d:e3:a0:77:00:10:04: 7b:0f:e9:23:a4:7e:14:8f:66:90:0d:c3:a4:58:33: bc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7F:85:60:82:7E:53:37:6E:92:20:B4:FD:4E:B2:E9:CF:32:A8:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/becd6c94-7e7f-380b-915b-50732603abf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.crl X509v3 Authority Key Identifier: keyid:E0:19:17:69:7C:85:36:41:5C:F4:63:73:4E:D9:EF:AC:7D:5D:82:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer sbgp-ipAddrBlock: critical IPv4: 206.168.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:04:9d:34:4d:f4:96:b7:0c:19:97:15:65:04:e9:23:13:12: a6:27:89:ee:7e:bb:4c:1b:21:e3:72:a5:ef:90:2c:6c:05:94: f5:ba:76:04:b4:40:e1:21:2d:af:68:4f:a7:e2:57:24:f2:5c: e7:d0:84:3e:8c:07:3b:b0:fb:15:d9:13:06:c5:e6:b4:87:de: 8f:05:fd:ce:1d:69:c1:68:c1:4c:06:75:93:22:54:44:ec:4a: c1:79:67:e7:26:13:6f:01:c5:4f:3e:71:87:5d:48:f3:bd:74: 2d:bc:a9:5f:b4:a6:49:75:68:87:67:71:e9:73:bc:d8:6f:08: 2b:56:4c:a8:15:54:73:9d:98:2d:c9:a1:51:3c:10:a6:12:3a: 53:f2:a0:47:14:28:ff:de:a5:4a:a4:8d:53:4f:65:29:97:c3: 48:0a:5f:32:f9:6b:dd:b1:70:e8:b2:ca:a1:c3:df:b9:0d:0a: e7:f8:37:be:10:6b:f0:7e:45:14:e6:e2:69:48:2e:fa:95:f5: 75:7a:7e:fa:8c:25:3a:72:37:44:db:30:a7:61:64:06:74:c6: 22:70:ba:82:d9:ba:36:d0:b7:37:b4:0c:11:31:8b:43:53:d6: a2:b9:61:de:db:09:a0:97:ff:d5:29:6a:e6:96:d8:09:1f:bd: 86:23:9e:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE76ElRGsbHbO+lBTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5YmM0NDctNjdmOS00MGQxLThmM2QtYjg0Y2NhOTRj NDkzMB4XDTI2MDgyNzE0MzczMloXDTI2MTEyNTE1MzczMlowLzEtMCsGA1UEAxMk YjQzNGFlNDYtMzU0OC00ZmMxLTg3YWYtZjI0OGUxM2M4NWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGZpiavj33TFCfmu07219fZIms5+xx01jGwd tKJMbIlrJrAfhuL2y1Cd3C86HBZ/h7CZGX0kYB31dv+vAAg7HjDmoOUvFkj/QQ4o XuF2LIOGGhc8HK5IhoEPWDbuM4i90jVjID2MPK6aGCxGv/aVWEU4DG062nkmC14E ayeEVprncpu84ns26HaIh89FipDfcyAY17c+BHPUet1rHh/ImTbj4JzVK6YoO4Tr 4IWk0uIZysr0pJpaVAgaDdnO0B+NfbUmoDmy32DTRU2u6FfDt0BKa7TWkkaITQEU axghtul0IO9kr8YAKx3joHcAEAR7D+kjpH4Uj2aQDcOkWDO8AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFN/hWCCflM3bpIgtP1OsunPMqjoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zYTli YzQ0Ny02N2Y5LTQwZDEtOGYzZC1iODRjY2E5NGM0OTMvYmVjZDZjOTQtN2U3Zi0z ODBiLTkxNWItNTA3MzI2MDNhYmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvM2E5YmM0NDctNjdmOS00MGQxLThm M2QtYjg0Y2NhOTRjNDkzLzNhOWJjNDQ3LTY3ZjktNDBkMS04ZjNkLWI4NGNjYTk0 YzQ5My5jcmwwHwYDVR0jBBgwFoAU4BkXaXyFNkFc9GNzTtnvrH1dgt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8zYTliYzQ0Ny02N2Y5LTQwZDEtOGYzZC1iODRj Y2E5NGM0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzqh4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4EnTRN9Ja3DBmXFWUE6SMTEqYnie5+u0wbIeNype+QLGwFlPW6dgS0 QOEhLa9oT6fiVyTyXOfQhD6MBzuw+xXZEwbF5rSH3o8F/c4dacFowUwGdZMiVETs SsF5Z+cmE28BxU8+cYddSPO9dC28qV+0pkl1aIdncelzvNhvCCtWTKgVVHOdmC3J oVE8EKYSOlPyoEcUKP/epUqkjVNPZSmXw0gKXzL5a92xcOiyyqHD37kNCuf4N74Q a/B+RRTm4mlILvqV9XV6fvqMJTpyN0TbMKdhZAZ0xiJwuoLZujbQtze0DBExi0NT 1qK5Yd7bCaCX/9UpauaW2AkfvYYjnkk= -----END CERTIFICATE-----Generated at Tue Sep 22 21:25:35 2026 by rpki-client