$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa File: f5bbe177-db20-3981-a339-c4f34d572e28.roa (raw, json) Hash identifier: DKMwDfJdtMrh2zpiNyVMtUHwXMVp5/hcTQy7VLnMkW8= Subject key identifier: 31:B4:41:2E:30:71:D8:53:38:5D:91:EE:DE:2E:6F:F6:CD:EB:32:04 Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F4328584F3CE2879AC107D14EDE98D880 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22781 IP address blocks: 207.204.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:87:9a:c1:07:d1:4e:de:98:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=ef930f87-4e47-4083-940b-b9c0a794e22f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:da:d0:ab:56:0c:ff:0b:75:6f:8c:14:7d: 9b:0c:e5:50:86:c9:99:8e:13:91:4b:e4:51:0d:76: a2:01:55:c6:b8:70:90:3d:0d:0f:95:c4:b4:4c:4a: e6:4a:e0:28:f1:35:c8:cc:a7:eb:6f:21:a9:f7:85: a0:6d:59:54:d8:bc:a6:31:be:92:3d:4f:42:23:94: f7:51:0d:d5:7f:cf:25:7e:c6:08:3e:2c:5f:6e:bb: 6f:0a:bb:5c:61:aa:09:53:dc:fe:ec:3a:00:7b:e2: 88:a9:31:e0:86:51:bb:7c:e6:63:83:e4:4d:87:c6: 97:60:22:17:2e:c9:df:16:25:f9:ed:fc:5c:0b:af: 42:ed:54:81:da:f2:ba:00:27:ca:0e:d5:d2:12:9e: 36:fd:af:eb:cc:cf:db:2a:9b:9c:ae:ce:d1:f2:92: 91:fb:71:a2:0f:4e:e7:e9:4e:ad:9f:5f:d3:9f:2c: 82:63:8b:43:8c:96:3e:9e:de:3d:c9:11:e8:f6:77: a6:d6:2d:64:69:f6:0e:61:96:38:9c:df:63:e4:c5: 12:6a:d7:3a:e4:eb:f1:ec:71:a0:73:2a:9a:65:04: 4d:a6:74:1d:c8:63:dd:28:e2:ac:23:a4:04:fa:1e: 42:70:57:06:49:5a:12:78:28:1e:e5:68:3a:ef:65: 3a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B4:41:2E:30:71:D8:53:38:5D:91:EE:DE:2E:6F:F6:CD:EB:32:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/f5bbe177-db20-3981-a339-c4f34d572e28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 207.204.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:03:f2:c2:d3:74:6c:5c:19:a8:39:d2:48:a1:47:68:46:8a: 48:82:b9:a4:36:c1:90:61:3f:93:72:c6:f7:78:2e:71:d8:67: dc:27:b8:41:5c:63:cc:78:28:e0:dc:81:a5:40:08:f2:74:aa: f6:93:ba:4c:97:70:09:dd:5a:be:ee:58:01:85:a1:7a:88:98: 0e:90:06:a8:ae:65:f8:90:73:24:de:bb:3b:3d:31:0a:5b:d7: cf:5d:68:5b:53:82:0e:fd:11:d2:69:87:38:f2:46:6c:c5:bd: c1:ce:0c:cd:4a:78:d7:da:bf:04:b0:39:45:c7:ec:28:17:f5: 34:e0:c9:c8:b5:d6:9f:b5:7d:ae:71:51:a9:2f:c6:8f:5c:74: 6f:1b:1a:73:3a:9d:55:4b:f7:62:56:dd:55:78:0a:3f:77:8d: 56:cf:5b:72:29:51:1b:a3:be:c7:30:68:03:f1:7b:38:2a:fa: b6:cf:86:31:56:20:9f:56:e1:f0:54:3f:f8:34:df:b7:79:c2: d5:04:dd:bb:9a:8f:e6:a1:ed:ef:dd:9b:f4:ee:07:de:ae:4b: 44:d3:03:31:68:2c:7b:a0:39:b6:6a:58:24:1c:77:80:6c:2f: 47:49:84:a3:7c:10:8c:8a:3d:fa:62:00:16:42:60:7e:f9:05: 52:06:f4:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884oeawQfRTt6Y2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZWY5MzBmODctNGU0Ny00MDgzLTk0MGItYjljMGE3OTRlMjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquXa0KtWDP8LdW+MFH2bDOVQhsmZjhORS+RR DXaiAVXGuHCQPQ0PlcS0TErmSuAo8TXIzKfrbyGp94WgbVlU2LymMb6SPU9CI5T3 UQ3Vf88lfsYIPixfbrtvCrtcYaoJU9z+7DoAe+KIqTHghlG7fOZjg+RNh8aXYCIX LsnfFiX57fxcC69C7VSB2vK6ACfKDtXSEp42/a/rzM/bKpucrs7R8pKR+3GiD07n 6U6tn1/TnyyCY4tDjJY+nt49yRHo9nem1i1kafYOYZY4nN9j5MUSatc65Ovx7HGg cyqaZQRNpnQdyGPdKOKsI6QE+h5CcFcGSVoSeCge5Wg672U6bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG0QS4wcdhTOF2R7t4ub/bN6zIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZjViYmUxNzctZGIyMC0z OTgxLWEzMzktYzRmMzRkNTcyZTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYD8sLTdGxcGag50kihR2hGikiCuaQ2wZBhP5Nyxvd4LnHYZ9wnuEFc Y8x4KODcgaVACPJ0qvaTukyXcAndWr7uWAGFoXqImA6QBqiuZfiQcyTeuzs9MQpb 189daFtTgg79EdJphzjyRmzFvcHODM1KeNfavwSwOUXH7CgX9TTgyci11p+1fa5x Uakvxo9cdG8bGnM6nVVL92JW3VV4Cj93jVbPW3IpURujvscwaAPxezgq+rbPhjFW IJ9W4fBUP/g037d5wtUE3buaj+ah7e/dm/TuB96uS0TTAzFoLHugObZqWCQcd4Bs L0dJhKN8EIyKPfpiABZCYH75BVIG9EA= -----END CERTIFICATE-----Generated at Sun Oct 11 22:04:39 2026 by rpki-client