$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/7d829c50-260d-3b4a-b0b4-cce919acce32.roa File: 7d829c50-260d-3b4a-b0b4-cce919acce32.roa (raw, json) Hash identifier: so9Hqnrjm/aQe3Dmp1f4Xk6uPldlC6JGje6CP5T4oNE= Subject key identifier: F2:D2:07:51:EA:90:A6:EE:38:E6:4A:CB:FA:D2:F8:F8:34:54:6A:41 Certificate issuer: /CN=02df9026-5ea2-4718-a55c-d46da7505348 Certificate serial: 010D0C9F4328584F4974E72D8969AA521B1DDF00 Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/7d829c50-260d-3b4a-b0b4-cce919acce32.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14291 IP address blocks: 206.198.248.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:e7:2d:89:69:aa:52:1b:1d:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=664a9e6f-1cfe-4588-be79-ad2c1fbb5a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:88:8f:c5:da:75:7c:55:98:63:17:37:54:b3: 5b:27:b0:1f:4e:1b:55:af:2d:ee:d6:b9:a0:80:35: 67:a8:a6:6b:d8:e4:da:97:77:65:78:b3:1b:d6:54: c9:b8:d5:38:49:cf:b4:24:99:0c:ee:67:c3:e5:40: ba:85:e5:ae:1d:a1:00:97:86:f0:b4:07:dc:9a:a6: 95:d6:d2:c1:e5:8e:3d:63:6d:7b:ba:ee:37:ae:cb: 70:b8:cb:92:81:9f:b5:8f:65:96:40:da:88:ab:81: 38:81:fd:37:96:a3:e2:75:2e:1f:1c:73:bc:4b:d7: fd:4c:eb:91:2e:1e:6b:07:c0:b9:c6:eb:97:89:f0: fa:a0:85:4d:5f:21:f2:49:f5:7e:21:b3:04:ab:50: 36:f0:56:e9:b6:83:2c:47:09:29:6f:37:fe:4c:88: 24:64:4a:4f:2e:a3:f7:01:c0:76:33:d5:10:94:f4: 2e:8d:c2:c9:9d:99:52:8b:c7:a3:8c:b7:7d:20:89: bc:d4:a5:0f:51:ad:b2:c8:b1:ea:5d:9f:ff:e1:cf: fc:92:07:fc:bd:bd:d7:46:61:a1:7a:a4:31:a2:17: 61:8c:9f:14:f9:95:0b:bb:95:07:23:ee:10:1e:f1: d7:28:da:25:17:a5:a7:f3:42:74:01:bd:4c:18:a1: 10:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D2:07:51:EA:90:A6:EE:38:E6:4A:CB:FA:D2:F8:F8:34:54:6A:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/7d829c50-260d-3b4a-b0b4-cce919acce32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl X509v3 Authority Key Identifier: keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer sbgp-ipAddrBlock: critical IPv4: 206.198.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:72:d4:c8:08:80:3a:2a:1a:16:93:cd:dc:7c:27:ad:3e:f4: ff:27:6c:0a:2c:83:8e:c7:56:d3:d0:da:b8:0d:42:a7:5b:8b: 52:40:d0:fe:5f:89:05:6b:cd:21:27:d8:c2:d4:88:76:51:45: 0e:e8:b8:40:d4:a9:53:78:6b:04:71:52:ff:b3:8e:f8:5a:fa: a6:03:d3:e4:86:e4:d6:80:41:95:f9:cd:d7:98:5b:9c:3a:6d: 6c:b4:94:1b:f1:05:02:74:4f:8d:58:7a:36:54:29:76:99:fa: 16:2d:96:2f:58:a4:98:81:c5:24:12:d0:0c:0b:3f:da:c0:77: 4b:18:37:ce:91:19:56:61:6c:6b:2a:78:f0:74:27:af:0b:99: 35:0e:2c:37:0f:c8:11:fc:f6:bd:4c:91:32:e9:54:1f:84:41: 77:ce:44:c5:24:80:13:32:53:39:cb:ad:77:46:27:62:4c:51: ad:5b:c6:e8:a2:7c:57:d3:5f:ee:44:b8:60:99:a8:9b:b3:39: 98:bc:f4:6b:a9:81:16:b9:6b:96:be:08:fd:29:9c:07:6c:65: ea:41:60:8d:69:de:7c:08:1e:df:ac:a5:cd:5d:0a:ce:f9:ff: 1c:bf:20:a4:47:12:cf:24:d7:28:d9:24:1e:de:a2:ba:67:ba: e1:75:25:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdOctiWmqUhsd3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1 MzQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjY0YTllNmYtMWNmZS00NTg4LWJlNzktYWQyYzFmYmI1YTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYiPxdp1fFWYYxc3VLNbJ7AfThtVry3u1rmg gDVnqKZr2OTal3dleLMb1lTJuNU4Sc+0JJkM7mfD5UC6heWuHaEAl4bwtAfcmqaV 1tLB5Y49Y217uu43rstwuMuSgZ+1j2WWQNqIq4E4gf03lqPidS4fHHO8S9f9TOuR Lh5rB8C5xuuXifD6oIVNXyHySfV+IbMEq1A28FbptoMsRwkpbzf+TIgkZEpPLqP3 AcB2M9UQlPQujcLJnZlSi8ejjLd9IIm81KUPUa2yyLHqXZ//4c/8kgf8vb3XRmGh eqQxohdhjJ8U+ZULu5UHI+4QHvHXKNolF6Wn80J0Ab1MGKEQ4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLSB1HqkKbuOOZKy/rS+Pg0VGpBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvN2Q4MjljNTAtMjYwZC0z YjRhLWIwYjQtY2NlOTE5YWNjZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1 NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzsb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1y1MgIgDoqGhaTzdx8J60+9P8nbAosg47HVtPQ2rgNQqdbi1JA0P5f iQVrzSEn2MLUiHZRRQ7ouEDUqVN4awRxUv+zjvha+qYD0+SG5NaAQZX5zdeYW5w6 bWy0lBvxBQJ0T41YejZUKXaZ+hYtli9YpJiBxSQS0AwLP9rAd0sYN86RGVZhbGsq ePB0J68LmTUOLDcPyBH89r1MkTLpVB+EQXfORMUkgBMyUznLrXdGJ2JMUa1bxuii fFfTX+5EuGCZqJuzOZi89GupgRa5a5a+CP0pnAdsZepBYI1p3nwIHt+spc1dCs75 /xy/IKRHEs8k1yjZJB7eorpnuuF1Jdo= -----END CERTIFICATE-----Generated at Sat Sep 26 08:03:30 2026 by rpki-client