$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/991eca60-b420-37c2-92a4-3a053c9970bb.roa File: 991eca60-b420-37c2-92a4-3a053c9970bb.roa (raw, json) Hash identifier: iZ4HefOTx9OVh+JUykQD7WQj8z9E+/6C2MPYfDrcB7k= Subject key identifier: 23:26:95:B6:C8:C6:CE:3D:03:B2:2C:87:3D:0C:EE:A6:B0:A4:EF:B5 Certificate issuer: /CN=d06852c4-a6c0-43d5-ba94-22fab637697a Certificate serial: 010D0C9F4328584F4C3D5C5D2FEEB717E45A28C0 Authority key identifier: 30:01:74:AA:E6:45:3E:F4:B4:CD:2F:99:D7:6A:DE:37:8D:43:11:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/991eca60-b420-37c2-92a4-3a053c9970bb.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 7029 IP address blocks: 206.72.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5c:5d:2f:ee:b7:17:e4:5a:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d06852c4-a6c0-43d5-ba94-22fab637697a Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=430ac6d0-54f2-4b11-a8af-d310ebe4debf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0b:b4:68:d1:98:17:dc:5a:c3:99:a0:51:89: 8e:c5:b4:24:32:7c:13:35:86:02:66:79:eb:bf:68: 31:45:d6:37:4a:65:66:e3:03:23:ce:83:60:70:b7: a7:97:4b:af:40:ab:1e:44:f9:82:b9:e3:6e:b5:b8: 7d:f7:e8:2b:35:47:ed:3e:4e:3e:74:aa:37:24:0a: 28:a4:8b:78:d7:5e:0a:3f:f6:85:62:57:9d:1a:a7: 2d:6c:65:08:b7:5b:b1:51:21:5f:b5:e5:ce:c4:b2: cf:9d:cf:b9:a2:28:d6:14:5a:e9:2e:19:e9:d9:64: a5:07:f3:35:9b:1a:ff:4e:16:7e:b4:d4:da:e2:28: 75:08:c4:2f:55:e0:89:13:5a:49:bb:e8:91:35:f2: 4a:5c:b3:62:d6:1d:4b:40:9f:6b:09:5e:37:af:7c: 7a:30:da:b0:ba:bb:8c:c1:6e:62:24:8e:58:95:44: 43:7e:1b:9b:21:52:48:85:e4:48:46:e3:62:16:0c: 88:86:0c:7e:9a:53:88:25:5a:41:00:ac:d5:3f:de: 71:6f:67:dd:7f:ab:9c:80:5a:39:5c:cc:94:62:04: 0b:5a:88:a2:e5:a9:76:5c:1b:4e:86:dc:54:b7:05: ec:04:eb:78:b3:39:da:de:2d:25:35:9a:4d:9a:45: ac:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:26:95:B6:C8:C6:CE:3D:03:B2:2C:87:3D:0C:EE:A6:B0:A4:EF:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/991eca60-b420-37c2-92a4-3a053c9970bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.crl X509v3 Authority Key Identifier: keyid:30:01:74:AA:E6:45:3E:F4:B4:CD:2F:99:D7:6A:DE:37:8D:43:11:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer sbgp-ipAddrBlock: critical IPv4: 206.72.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:6d:33:49:9d:16:65:16:db:82:18:12:60:26:a1:83:5f:1b: 7b:d9:0e:e0:28:a2:12:b3:55:9e:66:26:5f:96:cf:a9:75:14: 46:e7:7c:d0:1c:79:10:4e:39:d9:10:b9:25:d3:e7:92:ae:04: 59:a6:37:94:25:66:cb:42:ac:6c:46:45:b5:82:e4:d3:7a:09: 17:d1:db:40:40:83:5e:c6:e1:c8:10:dd:43:d5:c3:e8:e7:ea: 33:99:cb:ba:16:2a:c3:1a:12:0d:d2:67:47:67:d6:78:be:54: 39:80:3e:36:0c:0b:52:95:32:9a:a6:43:f3:68:07:ef:3d:cf: c1:8b:e3:b6:f5:a7:72:00:ad:58:8c:67:1d:5a:d3:97:22:3a: 0d:09:6a:e9:6c:36:64:12:aa:08:e9:39:a4:aa:43:fd:1d:d6: 0e:33:94:fc:7b:6e:24:04:a3:65:1a:dc:3a:94:04:e7:1d:19: 68:94:ad:af:93:2c:0d:d2:41:63:6c:ee:92:67:d1:94:94:ed: c2:e6:75:0a:b1:3c:66:47:af:49:26:55:1d:94:59:c5:25:07: d5:ac:e2:28:e2:5a:4a:7b:b3:66:33:0d:d4:df:8a:34:9d:ce: b7:4a:ee:d7:6b:8a:34:44:89:ab:20:28:cb:bc:8b:5a:26:b8: 9b:4f:6e:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVxdL+63F+RaKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA2ODUyYzQtYTZjMC00M2Q1LWJhOTQtMjJmYWI2Mzc2 OTdhMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NDMwYWM2ZDAtNTRmMi00YjExLWE4YWYtZDMxMGViZTRkZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAu0aNGYF9xaw5mgUYmOxbQkMnwTNYYCZnnr v2gxRdY3SmVm4wMjzoNgcLenl0uvQKseRPmCueNutbh99+grNUftPk4+dKo3JAoo pIt4114KP/aFYledGqctbGUIt1uxUSFfteXOxLLPnc+5oijWFFrpLhnp2WSlB/M1 mxr/ThZ+tNTa4ih1CMQvVeCJE1pJu+iRNfJKXLNi1h1LQJ9rCV43r3x6MNqwuruM wW5iJI5YlURDfhubIVJIheRIRuNiFgyIhgx+mlOIJVpBAKzVP95xb2fdf6ucgFo5 XMyUYgQLWoii5al2XBtOhtxUtwXsBOt4szna3i0lNZpNmkWs6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMmlbbIxs49A7Ishz0M7qawpO+1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMDY4 NTJjNC1hNmMwLTQzZDUtYmE5NC0yMmZhYjYzNzY5N2EvOTkxZWNhNjAtYjQyMC0z N2MyLTkyYTQtM2EwNTNjOTk3MGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDA2ODUyYzQtYTZjMC00M2Q1LWJh OTQtMjJmYWI2Mzc2OTdhL2QwNjg1MmM0LWE2YzAtNDNkNS1iYTk0LTIyZmFiNjM3 Njk3YS5jcmwwHwYDVR0jBBgwFoAUMAF0quZFPvS0zS+Z12reN41DEdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMDY4NTJjNC1hNmMwLTQzZDUtYmE5NC0yMmZh YjYzNzY5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzkjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADptM0mdFmUW24IYEmAmoYNfG3vZDuAoohKzVZ5mJl+Wz6l1FEbnfNAc eRBOOdkQuSXT55KuBFmmN5QlZstCrGxGRbWC5NN6CRfR20BAg17G4cgQ3UPVw+jn 6jOZy7oWKsMaEg3SZ0dn1ni+VDmAPjYMC1KVMpqmQ/NoB+89z8GL47b1p3IArViM Zx1a05ciOg0JaulsNmQSqgjpOaSqQ/0d1g4zlPx7biQEo2Ua3DqUBOcdGWiUra+T LA3SQWNs7pJn0ZSU7cLmdQqxPGZHr0kmVR2UWcUlB9Ws4ijiWkp7s2YzDdTfijSd zrdK7tdrijREiasgKMu8i1omuJtPbgQ= -----END CERTIFICATE-----Generated at Sun Oct 4 08:51:10 2026 by rpki-client