$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/cdbcea0c-3491-3027-a795-0208a1a37c9f.roa File: cdbcea0c-3491-3027-a795-0208a1a37c9f.roa (raw, json) Hash identifier: uhLSNBdx4dm1GKLP3Ro9yC6jtPgr43J9QHdoFeTrJyQ= Subject key identifier: 61:CD:8B:9A:89:20:B6:1F:9F:2D:0B:8A:6B:28:2B:57:DF:51:61:56 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584F49883E4F4C50444F2BD86CE0 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/cdbcea0c-3491-3027-a795-0208a1a37c9f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 53959 IP address blocks: 207.171.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:3e:4f:4c:50:44:4f:2b:d8:6c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=670cd63e-27b8-41cb-a990-a873cf584816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:71:82:73:4e:ef:5c:fe:92:b8:a4:c1:3b:14: 98:75:d2:44:cf:c4:b0:5c:35:d1:86:c3:6c:cf:68: e0:48:12:78:8e:c6:78:f3:8c:41:61:24:d0:48:49: e8:2d:25:ab:e0:5f:b4:31:77:83:57:d9:e3:78:ac: 69:40:51:fe:a5:3c:16:30:bd:fe:75:5d:24:45:87: 28:3b:e2:05:64:b2:18:35:b1:a8:aa:e3:ff:de:36: 6c:c3:f0:5f:0e:3c:3b:e2:a4:0f:5e:97:0b:93:7f: 98:91:4a:3e:6a:f3:37:8e:7d:67:db:02:63:ce:10: ea:a2:1e:11:4e:54:38:df:24:b7:85:d5:28:2b:89: 75:1a:00:d9:83:13:12:62:10:c0:9e:dd:85:bf:e4: 9c:42:f5:56:d2:1f:eb:63:fc:d6:e0:c8:8e:8f:a1: b3:2a:9e:d6:00:26:e3:99:b3:b2:50:f5:5f:9a:2c: 1d:d5:ce:65:9f:85:7e:15:1e:09:e8:f9:2b:cb:3f: ab:f7:16:3c:f9:50:c7:ed:08:e2:41:15:f9:b0:0e: 7d:b2:99:85:a8:bb:69:b8:3c:04:1b:17:3a:bb:7c: b4:ee:c5:0e:02:f8:a7:32:d1:be:a9:36:9e:71:a8: c9:6e:ad:c0:8c:53:95:10:39:15:fe:76:5d:00:60: c8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CD:8B:9A:89:20:B6:1F:9F:2D:0B:8A:6B:28:2B:57:DF:51:61:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/cdbcea0c-3491-3027-a795-0208a1a37c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 207.171.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:72:fa:51:f0:cb:40:bf:27:96:df:1a:8b:61:56:72:1a:ac: 41:53:a1:b9:b6:e0:b4:6a:d5:d3:62:21:aa:f5:9c:87:5a:b2: ec:ea:78:b3:d2:d8:a7:ec:91:c1:94:4a:ee:75:bb:da:ee:76: b3:93:62:a2:c3:99:47:f6:94:18:e4:a0:a3:5d:bd:b4:28:db: 8a:45:c0:bc:af:8f:ff:ec:91:21:e2:ec:57:10:b2:b8:0c:0f: 74:93:a7:d6:d6:28:35:a2:44:2c:60:ff:eb:34:5d:23:70:1d: fb:be:db:3a:7c:7b:b9:73:54:c8:a8:2f:5a:37:51:2a:e3:f2: 2b:a6:0d:c1:c6:84:7d:dc:22:a2:b5:19:15:42:29:87:67:8f: 27:bd:13:02:f0:b0:7b:d5:61:cf:83:f8:47:6a:18:9d:fd:c2: 97:ba:98:66:02:26:9b:a5:14:e9:fa:9f:2a:91:88:8d:4d:ac: be:8d:f1:5e:f5:dc:dd:c7:64:81:be:e6:cb:cd:92:55:60:1f: 82:0d:14:00:c4:10:ef:fd:a0:2b:c5:ed:0e:5c:8a:c7:22:bc: 5f:a2:37:dc:c8:c1:92:d3:1f:6b:26:fd:d0:21:4c:a0:51:7f: e1:0c:7d:d2:8c:d6:9c:10:bb:b1:70:1d:2d:00:1a:e0:f5:5d: 6c:85:a7:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiD5PTFBETyvYbOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjcwY2Q2M2UtMjdiOC00MWNiLWE5OTAtYTg3M2NmNTg0ODE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHGCc07vXP6SuKTBOxSYddJEz8SwXDXRhsNs z2jgSBJ4jsZ484xBYSTQSEnoLSWr4F+0MXeDV9njeKxpQFH+pTwWML3+dV0kRYco O+IFZLIYNbGoquP/3jZsw/BfDjw74qQPXpcLk3+YkUo+avM3jn1n2wJjzhDqoh4R TlQ43yS3hdUoK4l1GgDZgxMSYhDAnt2Fv+ScQvVW0h/rY/zW4MiOj6GzKp7WACbj mbOyUPVfmiwd1c5ln4V+FR4J6Pkryz+r9xY8+VDH7QjiQRX5sA59spmFqLtpuDwE Gxc6u3y07sUOAvinMtG+qTaecajJbq3AjFOVEDkV/nZdAGDIYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHNi5qJILYfny0LimsoK1ffUWFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvY2RiY2VhMGMtMzQ5MS0z MDI3LWE3OTUtMDIwOGExYTM3YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6vwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERy+lHwy0C/J5bfGothVnIarEFTobm24LRq1dNiIar1nIdasuzqeLPS 2KfskcGUSu51u9rudrOTYqLDmUf2lBjkoKNdvbQo24pFwLyvj//skSHi7FcQsrgM D3STp9bWKDWiRCxg/+s0XSNwHfu+2zp8e7lzVMioL1o3USrj8iumDcHGhH3cIqK1 GRVCKYdnjye9EwLwsHvVYc+D+EdqGJ39wpe6mGYCJpulFOn6nyqRiI1NrL6N8V71 3N3HZIG+5svNklVgH4INFADEEO/9oCvF7Q5ciscivF+iN9zIwZLTH2sm/dAhTKBR f+EMfdKM1pwQu7FwHS0AGuD1XWyFp8I= -----END CERTIFICATE-----Generated at Sun Sep 27 21:12:11 2026 by rpki-client