$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa File: 0670fa0c-1c69-3756-85a2-81fa79b0198b.roa (raw, json) Hash identifier: hs08KSx8YxyY7Cj7D1UuzGOC+5BCqaayRmZuzau8Xk8= Subject key identifier: F7:95:24:3F:00:FF:0C:0E:CB:ED:17:31:2C:D7:74:A8:03:3E:1E:D0 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F3CE28776F7B8231F8A4D8200 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22781 IP address blocks: 207.204.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:87:76:f7:b8:23:1f:8a:4d:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=f0993ef3-3d6f-40aa-bfc6-06ddc02ce140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:16:cb:21:da:1d:8b:1c:b1:6d:73:35:90: 76:0a:8b:4e:79:22:5f:b2:0c:0c:87:d6:c6:a0:bf: f0:0a:8d:0e:a8:2d:df:1a:7d:ac:d9:b7:a0:15:d5: 1f:91:4a:b9:6f:43:8f:55:48:ee:83:80:e2:28:b9: fb:38:6f:9a:ff:0d:a0:c4:82:33:49:8a:d1:44:97: b2:23:f7:b5:d7:42:de:09:dd:11:70:17:c0:d4:1c: 75:2a:6e:d6:aa:d4:b6:5c:73:8f:6d:8f:86:a7:31: 5b:74:f6:09:9e:be:4d:4b:58:86:17:23:6b:01:d1: f2:55:bd:86:9a:a2:7a:c9:39:28:14:cb:1e:16:59: de:00:89:ec:4c:47:cc:dd:c3:66:05:30:7f:0a:06: 82:e7:72:82:9c:85:09:2b:8d:cb:5b:5e:05:4a:dd: 5a:c4:f8:82:3f:5b:b5:72:02:69:bb:55:7a:d2:19: 0f:2c:50:95:6f:28:cb:7c:ed:fe:dc:ae:da:fc:c5: f2:bd:80:57:c6:4b:cb:fd:72:ea:45:eb:90:79:92: db:77:8c:f0:d2:7e:0c:85:a1:f3:3e:b3:ca:d4:29: f0:6e:79:e8:5f:c6:d5:58:41:e5:18:21:e9:8a:4e: fb:6c:dc:c9:6a:3e:4a:e0:d7:1d:ff:11:02:63:e9: ec:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:95:24:3F:00:FF:0C:0E:CB:ED:17:31:2C:D7:74:A8:03:3E:1E:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0670fa0c-1c69-3756-85a2-81fa79b0198b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:5b:f5:1f:cc:51:40:aa:32:47:81:96:a9:89:18:81:81:b0: 2f:f6:0c:62:9b:4c:c7:6f:44:90:e6:67:d2:5c:17:1f:c1:90: 0b:d9:ba:3e:8a:87:68:45:1c:b6:8d:3e:46:90:30:f8:21:4c: 04:eb:eb:6b:0c:ed:17:c2:90:3e:9a:43:e1:5b:45:a3:f6:1b: be:23:65:d7:46:e9:95:d5:a1:b5:39:23:fe:7b:00:b5:04:8c: 87:ed:f6:b9:21:f8:11:2d:9a:d1:75:2d:98:c5:26:7d:c8:e7: cb:53:5c:3e:62:fa:b5:e0:b5:90:c2:0d:bb:74:79:fb:4d:fc: fb:d4:07:7c:99:36:ad:a2:bb:c4:98:2a:96:17:e8:8b:3b:9d: 49:d3:84:18:3b:18:dd:a5:23:82:35:1d:c5:4c:ae:45:ae:c2: 89:18:ae:db:93:57:66:58:4f:88:bf:41:46:2c:95:d3:58:dd: 8d:a1:08:e6:a2:22:ee:f2:f3:a5:21:53:5f:c5:4c:41:28:fe: 23:2c:92:0c:f6:4a:b1:84:1f:58:3c:bd:24:d2:be:a8:72:27: bc:06:56:99:2d:36:40:5f:e2:c2:c4:a5:be:49:a7:73:22:db: 71:fc:1e:01:7b:4b:16:1e:36:95:83:85:d2:99:0d:66:ec:c8: cf:cc:76:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884od297gjH4pNggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjA5OTNlZjMtM2Q2Zi00MGFhLWJmYzYtMDZkZGMwMmNlMTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgUWyyHaHYscsW1zNZB2CotOeSJfsgwMh9bG oL/wCo0OqC3fGn2s2begFdUfkUq5b0OPVUjug4DiKLn7OG+a/w2gxIIzSYrRRJey I/e110LeCd0RcBfA1Bx1Km7WqtS2XHOPbY+GpzFbdPYJnr5NS1iGFyNrAdHyVb2G mqJ6yTkoFMseFlneAInsTEfM3cNmBTB/CgaC53KCnIUJK43LW14FSt1axPiCP1u1 cgJpu1V60hkPLFCVbyjLfO3+3K7a/MXyvYBXxkvL/XLqReuQeZLbd4zw0n4MhaHz PrPK1CnwbnnoX8bVWEHlGCHpik77bNzJaj5K4Ncd/xECY+nsIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeVJD8A/wwOy+0XMSzXdKgDPh7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDY3MGZhMGMtMWM2OS0z NzU2LTg1YTItODFmYTc5YjAxOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8zgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtb9R/MUUCqMkeBlqmJGIGBsC/2DGKbTMdvRJDmZ9JcFx/BkAvZuj6K h2hFHLaNPkaQMPghTATr62sM7RfCkD6aQ+FbRaP2G74jZddG6ZXVobU5I/57ALUE jIft9rkh+BEtmtF1LZjFJn3I58tTXD5i+rXgtZDCDbt0eftN/PvUB3yZNq2iu8SY KpYX6Is7nUnThBg7GN2lI4I1HcVMrkWuwokYrtuTV2ZYT4i/QUYsldNY3Y2hCOai Iu7y86UhU1/FTEEo/iMskgz2SrGEH1g8vSTSvqhyJ7wGVpktNkBf4sLEpb5Jp3Mi 23H8HgF7SxYeNpWDhdKZDWbsyM/MdpA= -----END CERTIFICATE-----Generated at Tue Oct 13 08:34:59 2026 by rpki-client