$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/63b287bf-06fb-3517-91d3-f0207f69a676.roa File: 63b287bf-06fb-3517-91d3-f0207f69a676.roa (raw, json) Hash identifier: DXn3Le8Ky3OgExB5Vnuq0vUGKYU03bU3YcJtNfU7aO4= Subject key identifier: 20:80:B2:A3:F0:E6:B9:A2:AE:E2:CB:2C:B8:C2:72:50:DB:E3:1D:E2 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F3CE287B20E811124BF663E80 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/63b287bf-06fb-3517-91d3-f0207f69a676.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22781 IP address blocks: 207.204.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:87:b2:0e:81:11:24:bf:66:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=e81177a9-8aee-42d5-9d45-efb18e4aceb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:1b:9d:f0:ad:1b:fd:ad:11:55:d8:b5:7b: 89:1f:56:4a:91:fd:f0:b0:f2:3d:8c:38:a5:c3:15: ce:44:f5:58:40:f4:ec:7c:fe:b4:da:57:53:1b:4d: 95:ec:58:53:19:2c:11:fa:73:31:ca:9f:d5:ce:6b: ef:82:e9:2a:b7:55:76:fc:07:fe:5d:a8:83:e5:c2: dd:55:82:81:ac:09:b8:9a:88:19:09:43:c1:62:4f: 35:81:00:b3:73:22:89:54:07:8e:a8:a0:ac:a4:ad: 55:7a:67:45:cd:88:57:9e:9c:15:e0:2f:cf:bf:ab: f4:d3:38:5a:1c:b3:53:62:6d:4e:5e:70:e7:d0:2d: 28:f9:f4:bf:62:c1:39:15:4d:12:aa:24:ed:a4:93: 90:56:a0:78:5d:e3:93:ab:15:92:99:df:33:aa:1c: f5:d6:74:6d:90:f8:7c:8e:d1:3a:7a:c2:de:10:3d: 4c:68:3f:8f:30:47:18:b9:54:82:e8:53:98:e6:58: 5c:96:e1:e0:96:28:c8:27:68:af:77:cb:0d:37:6a: ff:b9:c3:59:91:cf:7e:22:2b:09:a0:3a:4b:55:05: 93:e0:60:45:23:79:2f:d7:cc:7a:eb:7b:27:9c:34: 3e:75:d5:1d:a3:db:50:9d:60:a6:18:bc:d7:6b:25: ac:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:80:B2:A3:F0:E6:B9:A2:AE:E2:CB:2C:B8:C2:72:50:DB:E3:1D:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/63b287bf-06fb-3517-91d3-f0207f69a676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:58:7b:e5:30:bb:a0:cd:ae:d5:b2:18:8e:08:61:d8:22:b4: db:15:87:2f:80:28:28:c9:57:de:04:3e:da:03:5d:d6:82:ce: c9:34:75:fc:c8:5e:a5:fa:b2:84:c1:fe:95:c8:9b:fc:7e:ae: 96:20:a1:13:37:88:f1:1d:5a:c2:c2:ac:b0:61:c8:7a:12:29: c2:df:c5:9a:02:ee:30:7f:98:dc:b1:3d:70:3c:c4:13:e7:e7: bd:a7:ec:9a:5b:21:fd:2c:e5:ba:5f:0d:90:0d:b3:53:86:d6: 8e:e1:28:94:72:94:45:d2:38:db:d3:38:95:8b:ac:a4:28:99: 72:72:6a:58:f1:0e:72:5c:04:ca:ac:39:0c:60:6a:fb:0a:67: d4:d5:42:ea:55:6b:86:cd:e0:30:2f:09:43:ae:7e:7e:72:11: a6:77:ae:11:f6:a0:73:80:30:3d:65:be:bc:18:0e:9e:4a:ec: 57:ee:75:a9:f5:31:59:c9:92:f3:1f:0a:ee:dd:36:b2:bb:54: d8:06:0e:74:0d:11:b6:c9:4a:b7:c7:48:51:bc:b1:7e:10:6c: b2:90:54:9c:0f:69:60:c5:04:3c:1d:d8:b8:49:37:01:59:23: f8:95:da:b6:c3:cd:04:0a:ad:a0:02:c0:e8:03:b0:82:3c:3c: 8f:77:86:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oeyDoERJL9mPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTgxMTc3YTktOGFlZS00MmQ1LTlkNDUtZWZiMThlNGFjZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXgbnfCtG/2tEVXYtXuJH1ZKkf3wsPI9jDil wxXORPVYQPTsfP602ldTG02V7FhTGSwR+nMxyp/Vzmvvgukqt1V2/Af+XaiD5cLd VYKBrAm4mogZCUPBYk81gQCzcyKJVAeOqKCspK1VemdFzYhXnpwV4C/Pv6v00zha HLNTYm1OXnDn0C0o+fS/YsE5FU0SqiTtpJOQVqB4XeOTqxWSmd8zqhz11nRtkPh8 jtE6esLeED1MaD+PMEcYuVSC6FOY5lhcluHglijIJ2ivd8sNN2r/ucNZkc9+IisJ oDpLVQWT4GBFI3kv18x663snnDQ+ddUdo9tQnWCmGLzXayWsSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCCAsqPw5rmiruLLLLjCclDb4x3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvNjNiMjg3YmYtMDZmYi0z NTE3LTkxZDMtZjAyMDdmNjlhNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8z8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1Ye+Uwu6DNrtWyGI4IYdgitNsVhy+AKCjJV94EPtoDXdaCzsk0dfzI XqX6soTB/pXIm/x+rpYgoRM3iPEdWsLCrLBhyHoSKcLfxZoC7jB/mNyxPXA8xBPn 572n7JpbIf0s5bpfDZANs1OG1o7hKJRylEXSONvTOJWLrKQomXJyaljxDnJcBMqs OQxgavsKZ9TVQupVa4bN4DAvCUOufn5yEaZ3rhH2oHOAMD1lvrwYDp5K7Ffudan1 MVnJkvMfCu7dNrK7VNgGDnQNEbbJSrfHSFG8sX4QbLKQVJwPaWDFBDwd2LhJNwFZ I/iV2rbDzQQKraACwOgDsII8PI93hrs= -----END CERTIFICATE-----Generated at Mon Oct 12 20:11:40 2026 by rpki-client