$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa File: bf485a80-ca0b-337a-ab13-dda71416c121.roa (raw, json) Hash identifier: iDZnOoko8Z5QcvfgL1xDW1XiD2QsgcJGi5XQC7UifWk= Subject key identifier: F3:BC:E7:36:30:C3:CE:3D:AD:E9:41:FA:D8:13:A0:C5:98:BA:F4:49 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584F35E7C9D0962D5606C9851B40 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 9009 IP address blocks: 207.230.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:c9:d0:96:2d:56:06:c9:85:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=f268718e-cba2-49a2-ac83-3523f86362e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:24:cd:40:ca:77:2a:62:73:50:0b:7a:39:b1: b1:d9:34:7b:b1:69:97:a7:e7:dd:6c:0a:b4:3c:13: 50:60:2e:64:b9:31:0b:c2:1f:03:50:f6:81:82:58: be:09:bd:bf:fb:ce:00:51:40:b0:b6:c5:31:c3:f2: 69:e1:08:df:93:28:ca:d1:13:17:c6:78:c1:4e:08: 4f:3a:fd:b4:e8:73:98:d1:fa:fc:33:93:5d:a6:53: 3d:d8:f9:4e:74:2a:fb:dc:d6:5a:51:4b:2c:9a:15: 33:dd:6c:d5:71:85:20:03:6a:b4:d1:5b:27:6b:7a: e3:47:16:d2:fc:b1:ba:89:0e:57:99:40:24:79:3b: 77:94:53:0e:f3:95:2c:44:84:24:96:0a:26:dc:8c: a1:f3:3f:88:ce:d3:89:a8:bc:f4:87:71:61:8d:56: bf:e5:fd:d7:da:4a:f5:c5:50:d0:a0:f8:cb:85:cb: 60:d9:d7:c6:32:be:df:81:92:32:fe:c9:62:7b:4f: a5:73:9e:05:4b:ae:48:8f:3c:a3:ee:6e:93:04:df: fd:81:39:5b:9c:10:4c:ef:4f:8d:2b:bf:8d:26:25: f7:1e:b9:55:63:a7:a2:66:fd:90:4a:7f:41:a4:7d: 4b:f1:15:14:ac:e4:52:f0:ea:74:66:9f:61:e3:07: ee:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BC:E7:36:30:C3:CE:3D:AD:E9:41:FA:D8:13:A0:C5:98:BA:F4:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/bf485a80-ca0b-337a-ab13-dda71416c121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 207.230.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:8c:5c:84:9c:b1:33:b7:15:bd:cf:2c:af:db:a4:e2:f9:3e: 22:ab:fe:4b:1a:0d:84:ef:18:dd:b3:4a:57:4d:90:fe:8a:1e: 09:54:76:bd:c2:02:ae:13:d8:91:98:53:15:bb:a3:3b:c4:7e: 7f:52:e0:1f:d2:52:75:e7:8e:40:5a:bd:35:d3:89:d2:8d:f4: 1f:5d:7e:13:d3:a3:98:62:7c:f7:a6:a0:50:86:e2:67:48:02: 05:ac:72:60:5e:de:d6:8e:29:0f:48:3b:34:71:76:be:43:71: 4d:35:78:26:24:95:da:9d:a9:fc:4b:2f:98:3a:78:fa:d7:f0: 0e:11:a7:32:45:57:a0:c3:a6:b4:dc:05:ef:c7:48:71:61:d5: 0e:dc:28:eb:0e:54:f6:4d:43:b5:4d:84:c9:4d:20:b2:54:bd: e8:d2:ce:44:08:a7:03:06:a3:13:74:3a:79:d6:c3:1f:f9:47: 4c:6f:76:7f:5f:35:f6:26:2b:83:f0:9b:28:48:49:b9:51:e2: 38:ca:d7:31:8c:a8:42:c3:fb:7b:86:7c:0a:44:bb:1f:15:c9: f1:fa:50:18:33:f8:a6:f4:ac:af:d3:6a:f1:13:bd:b3:54:02: 2b:cf:ec:42:a4:e4:a1:2e:e9:cb:04:21:db:32:2f:57:34:fa: 6a:ff:49:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158nQli1WBsmFG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk ZjI2ODcxOGUtY2JhMi00OWEyLWFjODMtMzUyM2Y4NjM2MmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCTNQMp3KmJzUAt6ObGx2TR7sWmXp+fdbAq0 PBNQYC5kuTELwh8DUPaBgli+Cb2/+84AUUCwtsUxw/Jp4QjfkyjK0RMXxnjBTghP Ov206HOY0fr8M5NdplM92PlOdCr73NZaUUssmhUz3WzVcYUgA2q00Vsna3rjRxbS /LG6iQ5XmUAkeTt3lFMO85UsRIQklgom3Iyh8z+IztOJqLz0h3FhjVa/5f3X2kr1 xVDQoPjLhctg2dfGMr7fgZIy/slie0+lc54FS65Ijzyj7m6TBN/9gTlbnBBM70+N K7+NJiX3HrlVY6eiZv2QSn9BpH1L8RUUrORS8Op0Zp9h4wfuUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPO85zYww849relB+tgToMWYuvRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYmY0ODVhODAtY2EwYi0z MzdhLWFiMTMtZGRhNzE0MTZjMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz+Z4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCMXIScsTO3Fb3PLK/bpOL5PiKr/ksaDYTvGN2zSldNkP6KHglUdr3C Aq4T2JGYUxW7ozvEfn9S4B/SUnXnjkBavTXTidKN9B9dfhPTo5hifPemoFCG4mdI AgWscmBe3taOKQ9IOzRxdr5DcU01eCYkldqdqfxLL5g6ePrX8A4RpzJFV6DDprTc Be/HSHFh1Q7cKOsOVPZNQ7VNhMlNILJUvejSzkQIpwMGoxN0OnnWwx/5R0xvdn9f NfYmK4PwmyhISblR4jjK1zGMqELD+3uGfApEux8VyfH6UBgz+Kb0rK/TavETvbNU AivP7EKk5KEu6csEIdsyL1c0+mr/Seg= -----END CERTIFICATE-----Generated at Sun Sep 20 19:57:46 2026 by rpki-client