$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/b971a1ac-bd62-3fa5-a41c-49aa3d3fd8b8.roa File: b971a1ac-bd62-3fa5-a41c-49aa3d3fd8b8.roa (raw, json) Hash identifier: F/1nO8+wDAZfp/XnyqF7JIS/BaY29/sdGPR6vKBf+PI= Subject key identifier: 4F:F8:39:2D:D4:03:07:87:ED:CC:CE:2C:2F:8A:40:B3:8F:20:43:DD Certificate issuer: /CN=22b1996e-371f-42c0-b515-e2f8763ed7c5 Certificate serial: 010D0C9F4328584F9FFDC1A4A3E0E4085821DE30 Authority key identifier: A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/b971a1ac-bd62-3fa5-a41c-49aa3d3fd8b8.roa Signing time: Mon 26 Oct 2026 01:00:13 +0000 ROA not before: Mon 26 Oct 2026 01:00:13 +0000 ROA not after: Sun 24 Jan 2027 02:00:13 +0000 asID: 399955 IP address blocks: 206.168.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:fd:c1:a4:a3:e0:e4:08:58:21:de:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22b1996e-371f-42c0-b515-e2f8763ed7c5 Validity Not Before: Oct 26 01:00:13 2026 GMT Not After : Jan 24 02:00:13 2027 GMT Subject: CN=51129beb-6d7c-4807-96be-e8178799a240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8f:74:d2:a3:98:6c:d9:c2:d5:23:b7:60:05: 4d:ae:d1:2b:51:5b:3e:ca:33:3d:46:b3:23:84:04: d6:a8:68:7e:39:62:e4:59:9b:b6:e4:e9:7d:05:f7: 33:5e:81:9e:57:08:a8:78:ca:c4:7d:2f:ff:e6:d6: 53:f8:bd:34:7d:6d:38:9c:eb:b0:a7:cd:6f:af:73: 63:6b:af:e1:8a:ce:d3:84:e8:83:e8:0a:11:f3:7e: 8f:fa:d2:79:a5:8f:8c:67:bc:7a:eb:d0:c3:35:06: 02:5a:94:8e:0b:5e:2b:c7:c3:0a:6e:e6:2d:e8:5f: 40:e1:54:9d:7c:6b:16:d3:27:6e:a5:5f:ff:98:ce: be:7d:b1:67:4e:c7:75:ba:57:8d:8d:ac:fd:c3:0a: 13:a4:0e:2a:4f:42:38:bc:12:d6:4c:1b:19:a7:ea: ff:1c:ec:8d:7d:55:63:1e:d6:78:52:6c:39:b2:ae: 4f:1d:0a:9c:56:2d:a1:b5:75:b3:40:02:7d:14:96: 8c:14:b4:81:be:34:8f:61:94:8f:08:91:c2:b7:95: 04:a4:2f:8e:e4:dc:89:ef:87:93:6a:3d:28:4f:73: 2d:ae:d0:3b:f2:38:aa:f6:58:cf:82:c5:45:50:ae: a7:24:55:ac:f2:22:9d:f6:1a:89:3c:1d:89:10:f6: de:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F8:39:2D:D4:03:07:87:ED:CC:CE:2C:2F:8A:40:B3:8F:20:43:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/b971a1ac-bd62-3fa5-a41c-49aa3d3fd8b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl X509v3 Authority Key Identifier: keyid:A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer sbgp-ipAddrBlock: critical IPv4: 206.168.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:73:3b:dc:e6:14:25:72:6a:ab:6d:d7:56:cd:9f:64:61:f2: a3:42:f5:87:32:50:42:32:7c:39:0b:37:e9:fe:86:c3:2d:d9: f8:31:21:55:ad:d7:dc:14:6a:34:0c:40:23:5c:de:de:18:15: f0:62:22:e5:35:fc:75:00:01:bf:1b:13:97:13:71:1c:b5:34: 9a:35:f3:a4:a3:80:fc:a4:03:74:ca:c1:f8:51:6e:f1:78:ea: e3:29:3e:3e:d8:a3:2e:2a:b2:eb:8d:0c:4d:99:d2:67:c1:a7: 69:27:db:35:57:b8:43:fa:79:61:5d:f6:d7:7a:42:32:ed:d3: 8b:a4:0c:42:7b:50:a1:6f:4a:c4:00:67:25:24:15:5b:a5:50: 85:2c:4f:5b:40:c3:25:b5:4e:86:8e:ab:24:cd:d0:37:5e:cc: 9f:46:1a:80:35:e2:32:bd:f9:69:b4:3d:85:ad:6d:c8:f2:3f: 17:92:1a:50:96:72:a5:59:90:60:3c:bb:fa:f6:fa:5d:a0:41: 2c:92:5f:37:99:00:e8:2b:c3:40:4e:1a:3f:cf:bb:c5:d6:79: 28:f1:7d:1d:9c:47:9b:2a:27:4d:b9:3b:0c:0a:8d:ee:52:4a: 1b:8e:58:68:2c:96:ef:65:17:11:91:1d:73:1b:dd:e2:3d:9f: 6d:b5:fe:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+f/cGko+DkCFgh3jAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJiMTk5NmUtMzcxZi00MmMwLWI1MTUtZTJmODc2M2Vk N2M1MB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk NTExMjliZWItNmQ3Yy00ODA3LTk2YmUtZTgxNzg3OTlhMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4900qOYbNnC1SO3YAVNrtErUVs+yjM9RrMj hATWqGh+OWLkWZu25Ol9BfczXoGeVwioeMrEfS//5tZT+L00fW04nOuwp81vr3Nj a6/his7ThOiD6AoR836P+tJ5pY+MZ7x669DDNQYCWpSOC14rx8MKbuYt6F9A4VSd fGsW0ydupV//mM6+fbFnTsd1uleNjaz9wwoTpA4qT0I4vBLWTBsZp+r/HOyNfVVj HtZ4Umw5sq5PHQqcVi2htXWzQAJ9FJaMFLSBvjSPYZSPCJHCt5UEpC+O5NyJ74eT aj0oT3MtrtA78jiq9ljPgsVFUK6nJFWs8iKd9hqJPB2JEPbeVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/4OS3UAweH7czOLC+KQLOPIEPdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMmIx OTk2ZS0zNzFmLTQyYzAtYjUxNS1lMmY4NzYzZWQ3YzUvYjk3MWExYWMtYmQ2Mi0z ZmE1LWE0MWMtNDlhYTNkM2ZkOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjJiMTk5NmUtMzcxZi00MmMwLWI1 MTUtZTJmODc2M2VkN2M1LzIyYjE5OTZlLTM3MWYtNDJjMC1iNTE1LWUyZjg3NjNl ZDdjNS5jcmwwHwYDVR0jBBgwFoAUo348kCeHbN+ipm+1GmaAC06M0a0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMmIxOTk2ZS0zNzFmLTQyYzAtYjUxNS1lMmY4 NzYzZWQ3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFzO9zmFCVyaqtt11bNn2Rh8qNC9YcyUEIyfDkLN+n+hsMt2fgxIVWt 19wUajQMQCNc3t4YFfBiIuU1/HUAAb8bE5cTcRy1NJo186SjgPykA3TKwfhRbvF4 6uMpPj7Yoy4qsuuNDE2Z0mfBp2kn2zVXuEP6eWFd9td6QjLt04ukDEJ7UKFvSsQA ZyUkFVulUIUsT1tAwyW1ToaOqyTN0DdezJ9GGoA14jK9+Wm0PYWtbcjyPxeSGlCW cqVZkGA8u/r2+l2gQSySXzeZAOgrw0BOGj/Pu8XWeSjxfR2cR5sqJ025OwwKje5S ShuOWGgslu9lFxGRHXMb3eI9n221/tA= -----END CERTIFICATE-----Generated at Thu Nov 5 18:50:58 2026 by rpki-client