$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7285b1a1-ccbc-3639-a962-652ca4939af8.roa File: 7285b1a1-ccbc-3639-a962-652ca4939af8.roa (raw, json) Hash identifier: 1A0/8lbRb5yOrizIGNiODBzOrTKpIX5mvST4s3HFaLA= Subject key identifier: 09:B5:62:F8:ED:8C:8F:1F:F7:36:BC:BC:96:8B:AE:DE:1B:32:48:32 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584F146794EB62285C8685368440 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7285b1a1-ccbc-3639-a962-652ca4939af8.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 46261 IP address blocks: 206.127.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:94:eb:62:28:5c:86:85:36:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=a39164fe-7f2f-472c-ba48-389e2f5301d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d3:88:ba:d7:68:29:17:ba:f1:ca:c3:2d:b5: 39:45:5e:57:ae:cc:da:89:42:c3:6c:2c:ad:7f:3b: ab:b5:e0:63:75:26:e7:70:18:e4:fb:fb:7b:d8:ca: 7e:ba:c2:86:8d:18:40:ec:12:e4:85:97:f0:d1:1a: da:c0:37:d5:e4:f9:10:8d:3d:ee:a3:d6:e7:da:bf: 7f:68:c3:c7:3d:5a:3a:f4:d0:3f:88:44:04:ae:81: e6:2f:13:6a:65:1c:8e:50:52:ea:1e:d1:8f:3d:e3: ed:5e:e5:09:b4:a7:38:26:31:5f:06:13:3e:5e:05: 6e:7a:11:d7:05:c3:c6:3b:ad:bc:e0:58:d8:4b:42: dc:85:37:ec:cc:a7:df:ee:e3:e7:16:bb:3a:0e:10: 2b:90:10:b0:3c:31:96:e1:82:d5:c3:c0:19:44:be: 27:74:e5:b3:a2:9e:76:21:35:61:08:80:ce:05:50: 59:cb:d4:c3:b8:7f:3f:6d:2a:4d:34:15:b3:45:11: 41:fe:ac:89:fd:07:09:51:5b:86:32:67:a9:13:ae: ed:9b:16:f3:15:3e:2e:97:7f:52:0c:9f:41:43:5d: f1:1a:47:a8:0b:e5:63:88:77:7f:f6:d9:96:29:aa: b3:c9:6a:cd:bf:0b:45:d0:a7:d1:66:86:e2:9b:5f: f2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B5:62:F8:ED:8C:8F:1F:F7:36:BC:BC:96:8B:AE:DE:1B:32:48:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/7285b1a1-ccbc-3639-a962-652ca4939af8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 206.127.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5d:97:47:f1:41:e6:11:53:a9:9f:00:6d:71:98:61:44:88: 69:36:11:5a:51:c0:ad:bb:b9:16:e8:d6:08:02:97:7c:00:8f: 6b:a5:3a:99:67:45:18:53:e0:69:cb:ad:3c:57:14:48:42:db: a5:5a:12:17:2a:ea:bf:78:dc:43:a2:c7:30:e2:0c:eb:42:8b: 43:b2:fd:1e:e2:34:90:e3:5d:74:41:9e:e3:f5:08:fc:21:39: b2:b4:ac:12:ac:4c:99:1d:f4:74:12:56:e0:4c:34:62:24:45: 61:36:02:8c:26:1b:b3:95:51:a5:9e:21:a3:e0:4d:bf:06:b9: 74:62:d2:ac:df:cd:1d:aa:f2:0a:4f:f4:d9:43:df:2d:c1:9b: 9c:14:97:86:72:7c:39:c2:45:ac:74:82:ea:3a:f2:be:12:3e: 77:61:c9:20:8e:c6:9a:ab:37:f2:17:b4:f3:9b:ab:f7:71:e6: 27:fa:c2:36:19:e1:8a:8c:d1:4c:de:c2:02:6c:48:60:9f:fc: ce:bb:d6:b0:43:d3:55:af:db:2b:41:a0:b1:ab:67:56:09:b2: 67:52:7f:15:0a:93:6c:a5:91:e5:8e:6e:20:ac:39:6a:2b:68: 56:ef:d8:a7:ec:a4:9e:bf:3d:eb:50:2f:86:ad:92:31:53:ac: 98:49:53:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5TrYihchoU2hEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YTM5MTY0ZmUtN2YyZi00NzJjLWJhNDgtMzg5ZTJmNTMwMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktOIutdoKRe68crDLbU5RV5XrszaiULDbCyt fzurteBjdSbncBjk+/t72Mp+usKGjRhA7BLkhZfw0RrawDfV5PkQjT3uo9bn2r9/ aMPHPVo69NA/iEQEroHmLxNqZRyOUFLqHtGPPePtXuUJtKc4JjFfBhM+XgVuehHX BcPGO6284FjYS0LchTfszKff7uPnFrs6DhArkBCwPDGW4YLVw8AZRL4ndOWzop52 ITVhCIDOBVBZy9TDuH8/bSpNNBWzRRFB/qyJ/QcJUVuGMmepE67tmxbzFT4ul39S DJ9BQ13xGkeoC+VjiHd/9tmWKaqzyWrNvwtF0KfRZobim1/yCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAm1YvjtjI8f9za8vJaLrt4bMkgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNzI4NWIxYTEtY2NiYy0z NjM5LWE5NjItNjUyY2E0OTM5YWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzn/aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFdl0fxQeYRU6mfAG1xmGFEiGk2EVpRwK27uRbo1ggCl3wAj2ulOpln RRhT4GnLrTxXFEhC26VaEhcq6r943EOixzDiDOtCi0Oy/R7iNJDjXXRBnuP1CPwh ObK0rBKsTJkd9HQSVuBMNGIkRWE2AowmG7OVUaWeIaPgTb8GuXRi0qzfzR2q8gpP 9NlD3y3Bm5wUl4ZyfDnCRax0guo68r4SPndhySCOxpqrN/IXtPObq/dx5if6wjYZ 4YqM0UzewgJsSGCf/M671rBD01Wv2ytBoLGrZ1YJsmdSfxUKk2ylkeWObiCsOWor aFbv2KfspJ6/PetQL4atkjFTrJhJU8s= -----END CERTIFICATE-----Generated at Sun Sep 20 23:40:47 2026 by rpki-client