$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/c0c66a70-df01-3004-85f3-ba2869be2dd2.roa File: c0c66a70-df01-3004-85f3-ba2869be2dd2.roa (raw, json) Hash identifier: ov++Am/dGZXCY9MV8FuKsYGNFvdoLlWRamrWxRWVNK0= Subject key identifier: FE:50:31:93:C3:E1:D8:A5:0E:07:95:27:D9:7A:BA:FD:C4:CD:C1:79 Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Certificate serial: 010D0C9F4328584F698D7D1EF382E0E397E59B80 Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/c0c66a70-df01-3004-85f3-ba2869be2dd2.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 22843 IP address blocks: 205.220.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:7d:1e:f3:82:e0:e3:97:e5:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=b60cb339-fe1c-4086-82a1-c501a6b74c84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e4:db:d1:67:98:f8:ac:00:1a:dc:96:39:7a: 8a:9b:b6:de:da:4d:5d:59:ea:52:7b:e5:2b:58:9a: 99:a1:16:c2:4b:f7:c4:68:74:85:7a:a3:98:69:41: a4:ea:df:91:fa:b6:b1:15:47:e4:fb:4b:00:52:67: 4f:f0:d7:d1:d6:9b:ba:cc:a8:22:db:69:cd:04:db: a4:73:2d:b9:b3:17:9a:c8:2c:23:ed:9a:f3:db:9f: 36:6c:61:59:84:d6:da:fa:58:2a:3f:4b:1d:46:a3: 46:89:53:e0:bf:e2:e7:bd:d6:59:29:ba:a9:64:36: e8:98:b3:cd:cb:c9:fa:3e:ba:31:c3:a1:de:a4:8b: 3d:0b:7c:01:de:6e:66:36:b4:8d:35:12:78:45:b2: 60:b2:bb:02:a4:e0:04:d4:c6:86:58:65:df:c6:97: 01:ba:3d:b7:ee:e2:e7:21:33:49:b9:cf:98:3c:23: 2c:15:e1:9e:03:c3:4c:f7:4e:17:75:41:0d:bf:15: cd:1f:88:4d:36:42:ae:29:55:a0:2f:80:55:73:83: 91:7c:49:3b:15:ee:05:3e:65:36:eb:42:07:af:f7: ec:c1:8a:3e:fc:27:5b:ee:b2:5e:cc:47:97:b2:59: 69:9a:57:2a:ee:79:41:dc:9b:10:65:e7:69:14:26: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:50:31:93:C3:E1:D8:A5:0E:07:95:27:D9:7A:BA:FD:C4:CD:C1:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/c0c66a70-df01-3004-85f3-ba2869be2dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl X509v3 Authority Key Identifier: keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer sbgp-ipAddrBlock: critical IPv4: 205.220.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:c6:62:42:c1:c9:84:be:f3:42:b5:dd:1c:18:a2:bc:c1:9f: 67:a0:8d:6f:fb:38:10:3c:20:52:2b:53:70:54:a1:2f:c4:b0: bb:d0:6d:83:94:a8:84:68:8d:48:06:e2:5f:79:1c:ce:13:a5: 7d:57:3a:c2:98:58:5c:a6:4f:fb:a4:9e:8e:ed:b8:78:0b:92: 43:db:11:a2:8b:8c:20:f7:68:ab:7a:b6:ce:df:41:2f:5d:20: 3f:97:fa:aa:a8:8e:e5:cd:ac:1a:13:f3:ee:a6:a0:98:68:a5: 74:5f:ad:c0:bf:41:8b:3a:a3:b8:4a:b4:7c:4c:76:08:cc:94: 4e:93:3c:e1:16:8a:82:0b:fb:99:ff:ac:42:c3:76:d2:b1:73: 0d:c9:ae:29:3c:62:aa:28:cd:e4:c9:94:b3:45:cc:84:85:fb: 03:11:0a:35:01:89:51:f2:4b:7c:fb:92:e3:f3:b9:ba:28:6a: 63:d5:1b:7b:be:6b:fd:1d:f7:42:ee:4e:78:c5:81:25:c5:f3: 13:ec:64:b4:ec:bf:9b:72:db:91:67:42:27:dc:60:a7:e4:62: 78:6b:16:d0:fa:c5:16:79:cb:79:61:1c:7a:2d:d9:a9:88:97: 10:0f:3b:fa:33:38:38:f2:83:f7:af:91:a9:a8:e6:d7:fd:ae: 45:3c:ed:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjX0e84Lg45flm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk N2M2MB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk YjYwY2IzMzktZmUxYy00MDg2LTgyYTEtYzUwMWE2Yjc0Yzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuTb0WeY+KwAGtyWOXqKm7be2k1dWepSe+Ur WJqZoRbCS/fEaHSFeqOYaUGk6t+R+raxFUfk+0sAUmdP8NfR1pu6zKgi22nNBNuk cy25sxeayCwj7Zrz2582bGFZhNba+lgqP0sdRqNGiVPgv+LnvdZZKbqpZDbomLPN y8n6Proxw6HepIs9C3wB3m5mNrSNNRJ4RbJgsrsCpOAE1MaGWGXfxpcBuj237uLn ITNJuc+YPCMsFeGeA8NM904XdUENvxXNH4hNNkKuKVWgL4BVc4ORfEk7Fe4FPmU2 60IHr/fswYo+/Cdb7rJezEeXsllpmlcq7nlB3JsQZedpFCZxTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5QMZPD4dilDgeVJ9l6uv3EzcF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvYzBjNjZhNzAtZGYwMS0z MDA0LTg1ZjMtYmEyODY5YmUyZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz MjM2M2Q3YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzdygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7GYkLByYS+80K13RwYorzBn2egjW/7OBA8IFIrU3BUoS/EsLvQbYOU qIRojUgG4l95HM4TpX1XOsKYWFymT/ukno7tuHgLkkPbEaKLjCD3aKt6ts7fQS9d ID+X+qqojuXNrBoT8+6moJhopXRfrcC/QYs6o7hKtHxMdgjMlE6TPOEWioIL+5n/ rELDdtKxcw3Jrik8YqoozeTJlLNFzISF+wMRCjUBiVHyS3z7kuPzubooamPVG3u+ a/0d90LuTnjFgSXF8xPsZLTsv5ty25FnQifcYKfkYnhrFtD6xRZ5y3lhHHot2amI lxAPO/ozODjyg/evkamo5tf9rkU87V0= -----END CERTIFICATE-----Generated at Tue Oct 13 12:20:40 2026 by rpki-client