$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/a7eaac00-2edb-3e61-b9dd-a21be06f990b.roa File: a7eaac00-2edb-3e61-b9dd-a21be06f990b.roa (raw, json) Hash identifier: VaHUXsWOC/DQ8EtKxPS9CZKH+1bCSNliCVFsGsWSal4= Subject key identifier: E8:31:81:98:0A:2B:57:4E:89:0A:46:F4:88:3E:9A:49:DC:74:8D:35 Certificate issuer: /CN=2a43a868-3d14-440f-a95a-5428c232c5d0 Certificate serial: 010D0C9F4328584F1F0365D345C1059627804880 Authority key identifier: 8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/a7eaac00-2edb-3e61-b9dd-a21be06f990b.roa Signing time: Wed 09 Sep 2026 20:12:21 +0000 ROA not before: Wed 09 Sep 2026 20:12:21 +0000 ROA not after: Tue 08 Dec 2026 21:12:21 +0000 asID: 402230 IP address blocks: 206.126.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:03:65:d3:45:c1:05:96:27:80:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a43a868-3d14-440f-a95a-5428c232c5d0 Validity Not Before: Sep 9 20:12:21 2026 GMT Not After : Dec 8 21:12:21 2026 GMT Subject: CN=e21638d9-e00a-4682-8b40-a0eb4ed10e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:94:22:84:22:0d:38:35:19:f8:8a:f7:86: a7:75:c1:d6:32:4b:18:f5:3e:89:dd:8b:1e:48:59: da:17:d7:68:8d:fe:29:f1:ab:ae:f8:27:50:2d:59: 26:9d:81:b3:20:64:b7:79:b4:64:9d:18:1f:ea:d2: 3b:a2:c1:df:d6:b2:8d:58:f3:e2:5f:73:55:59:28: ef:74:33:b6:b1:c9:7f:87:0b:66:c7:8b:73:82:59: 8c:ef:a9:60:c7:68:e0:44:70:3e:eb:0a:41:c2:34: 6c:3c:f6:f8:ba:71:f0:dc:d3:ad:51:18:78:df:16: 8e:c3:1c:e7:b1:f3:41:ea:28:fc:89:fe:b6:13:71: 1b:00:55:7e:a0:12:36:32:4a:db:fc:76:b6:0e:8b: cd:1e:02:03:ce:a8:be:d6:ef:e4:a4:c9:fe:0c:ee: c6:3c:b4:dd:48:30:18:c9:f6:d5:15:75:68:1d:51: f1:98:a2:f5:8a:94:ca:67:60:78:89:ad:69:f5:99: c1:f5:cc:7a:d1:c2:9a:63:3a:7f:b4:f1:40:e4:37: 83:39:f7:58:67:ea:fe:a3:db:c1:9e:6b:b9:1c:25: 18:26:c9:fc:f7:6f:11:84:e4:1e:9f:87:c4:12:8c: c7:fb:0b:2a:38:16:98:5f:53:43:7f:96:4a:03:10: 59:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:31:81:98:0A:2B:57:4E:89:0A:46:F4:88:3E:9A:49:DC:74:8D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/a7eaac00-2edb-3e61-b9dd-a21be06f990b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl X509v3 Authority Key Identifier: keyid:8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer sbgp-ipAddrBlock: critical IPv4: 206.126.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:89:00:b7:43:98:43:17:d8:0c:33:ac:da:e0:d3:e1:c9:28: 5c:80:01:21:d6:2a:d6:15:0d:d6:44:68:f2:df:c3:eb:a8:2e: 50:a6:b6:df:ac:45:5d:73:d3:02:50:c5:fa:95:07:9c:4c:19: 36:72:8c:ff:fb:92:99:37:fa:51:f3:c5:e3:ca:05:10:45:10: f9:c2:d3:dc:35:73:b1:6c:85:57:ae:15:29:36:01:c5:b9:35: c0:f9:a0:b0:23:58:97:63:84:24:7f:c2:8a:8e:bc:71:2f:9a: 1e:ec:16:33:18:d3:30:85:27:e8:55:67:35:53:6b:1e:4b:c2: fc:30:50:da:9a:16:e0:ca:d3:5b:8e:9b:6b:e8:d9:6c:1f:fb: a0:63:5e:d2:f4:dd:75:b7:b9:bf:af:c9:32:ff:9a:bf:34:67: 28:9e:60:2b:4e:41:e2:1d:3e:90:a5:7f:6d:67:ce:25:a2:8f: 21:73:ae:45:13:1b:a1:bd:e1:b9:e6:35:d1:d9:ac:00:f2:ab: 88:a5:e2:db:92:55:25:93:8e:3f:58:09:77:05:14:09:ad:c9: c4:e5:17:e0:d3:0c:54:5c:1d:b2:89:d2:a5:a8:18:f5:be:60: fe:19:6d:59:56:7c:eb:63:b7:bd:54:b3:45:5d:c3:64:7e:3c: 82:cb:8e:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fA2XTRcEFlieASIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE0M2E4NjgtM2QxNC00NDBmLWE5NWEtNTQyOGMyMzJj NWQwMB4XDTI2MDkwOTIwMTIyMVoXDTI2MTIwODIxMTIyMVowLzEtMCsGA1UEAxMk ZTIxNjM4ZDktZTAwYS00NjgyLThiNDAtYTBlYjRlZDEwZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi2UIoQiDTg1GfiK94andcHWMksY9T6J3Yse SFnaF9dojf4p8auu+CdQLVkmnYGzIGS3ebRknRgf6tI7osHf1rKNWPPiX3NVWSjv dDO2scl/hwtmx4tzglmM76lgx2jgRHA+6wpBwjRsPPb4unHw3NOtURh43xaOwxzn sfNB6ij8if62E3EbAFV+oBI2Mkrb/Ha2DovNHgIDzqi+1u/kpMn+DO7GPLTdSDAY yfbVFXVoHVHxmKL1ipTKZ2B4ia1p9ZnB9cx60cKaYzp/tPFA5DeDOfdYZ+r+o9vB nmu5HCUYJsn8928RhOQen4fEEozH+wsqOBaYX1NDf5ZKAxBZFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgxgZgKK1dOiQpG9Ig+mkncdI01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYTQz YTg2OC0zZDE0LTQ0MGYtYTk1YS01NDI4YzIzMmM1ZDAvYTdlYWFjMDAtMmVkYi0z ZTYxLWI5ZGQtYTIxYmUwNmY5OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmE0M2E4NjgtM2QxNC00NDBmLWE5 NWEtNTQyOGMyMzJjNWQwLzJhNDNhODY4LTNkMTQtNDQwZi1hOTVhLTU0MjhjMjMy YzVkMC5jcmwwHwYDVR0jBBgwFoAUiumx2z4c45AwqsnkROKvu5fxSzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYTQzYTg2OC0zZDE0LTQ0MGYtYTk1YS01NDI4 YzIzMmM1ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzn5sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqJALdDmEMX2AwzrNrg0+HJKFyAASHWKtYVDdZEaPLfw+uoLlCmtt+s RV1z0wJQxfqVB5xMGTZyjP/7kpk3+lHzxePKBRBFEPnC09w1c7FshVeuFSk2AcW5 NcD5oLAjWJdjhCR/woqOvHEvmh7sFjMY0zCFJ+hVZzVTax5LwvwwUNqaFuDK01uO m2vo2Wwf+6BjXtL03XW3ub+vyTL/mr80ZyieYCtOQeIdPpClf21nziWijyFzrkUT G6G94bnmNdHZrADyq4il4tuSVSWTjj9YCXcFFAmtycTlF+DTDFRcHbKJ0qWoGPW+ YP4ZbVlWfOtjt71Us0Vdw2R+PILLjpc= -----END CERTIFICATE-----Generated at Thu Sep 24 22:08:18 2026 by rpki-client