$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/0ce31142-4d1b-3eeb-abc7-e8aca2c09fa5.roa File: 0ce31142-4d1b-3eeb-abc7-e8aca2c09fa5.roa (raw, json) Hash identifier: Yo2QBPcPiHZvLChD2dDrwfL/6tctDVaSF7+tM7hQjP4= Subject key identifier: 56:40:3F:73:22:E4:07:9A:3A:E9:28:C4:30:12:8E:EB:E5:29:AE:26 Certificate issuer: /CN=3555956f-7142-453a-8aea-177a684dd7aa Certificate serial: 010D0C9F4328584F13024B3E740A63A36D030428 Authority key identifier: 4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/0ce31142-4d1b-3eeb-abc7-e8aca2c09fa5.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 13821 IP address blocks: 206.218.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:4b:3e:74:0a:63:a3:6d:03:04:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3555956f-7142-453a-8aea-177a684dd7aa Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=538f2f11-7cea-47ed-9143-a2e715909aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:50:70:43:46:ed:56:f7:5a:31:fd:10:0d:37: d4:1a:65:76:80:20:0a:64:f0:0b:1b:99:43:a3:49: e5:e3:87:a8:87:f9:f5:e8:9a:e3:0a:ce:d5:9b:43: 70:46:1b:be:ca:05:d3:ac:c0:5e:4f:0f:18:15:a6: aa:eb:2f:d1:bc:90:0d:69:a8:fe:59:f5:d8:07:bd: 7f:90:0e:e6:6a:d1:5e:c3:37:75:9a:13:c0:65:2f: 1f:71:f8:2a:05:2b:d5:83:54:94:4e:31:88:0c:20: 7d:2e:da:a4:20:72:94:35:41:9a:2e:ea:41:61:72: 9a:e1:b7:86:18:40:bb:fe:56:66:b1:18:bc:4b:9e: db:8e:d4:b3:22:1c:f0:1f:d2:45:3b:6c:68:8e:9a: ef:a8:a7:84:c0:6f:4a:7f:8d:dd:7f:9f:65:be:40: 18:7c:11:32:2d:76:27:8a:bb:42:10:77:f3:a3:1d: cb:2e:14:78:d6:01:51:90:8a:46:6b:1b:da:9e:cd: e2:7e:3e:44:47:5e:ae:e7:ae:79:d3:50:1a:e8:9d: 28:f4:54:c0:c0:49:63:34:9f:77:f5:63:e1:5a:9a: 77:52:1a:6f:cd:85:13:b7:47:8b:f5:d1:fa:a3:af: cd:ac:29:48:f6:c1:bf:c9:44:c5:69:0a:a9:2f:d0: a2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:40:3F:73:22:E4:07:9A:3A:E9:28:C4:30:12:8E:EB:E5:29:AE:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/0ce31142-4d1b-3eeb-abc7-e8aca2c09fa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl X509v3 Authority Key Identifier: keyid:4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer sbgp-ipAddrBlock: critical IPv4: 206.218.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:bc:2e:c2:28:ba:c0:b3:ba:93:4f:25:78:73:04:7c:62:5a: 63:d6:fc:8d:6c:b3:62:2b:2f:59:8d:1b:01:5d:eb:1f:4b:32: ed:73:7c:a1:d5:98:55:5b:df:f9:f7:49:b9:15:6f:87:ec:31: be:b6:91:31:84:26:a1:df:a0:1a:0c:e7:28:91:94:8e:2f:11: 9c:9d:a7:5f:4d:f8:60:c0:54:34:97:bc:bd:ce:72:e3:70:5b: 91:92:9a:bc:66:66:b8:7f:d9:a0:ec:14:f2:35:4a:94:ee:de: 32:6b:d0:10:3b:6c:93:9a:99:1e:f1:c6:68:09:94:c2:fa:95: 7c:c2:99:ab:9c:fe:f1:82:1a:a9:d6:63:f6:70:60:1d:e8:28: eb:ca:a5:b0:d1:38:ef:97:6a:8c:80:4a:dd:f3:6c:74:81:12: e5:a5:2a:c9:83:e2:6a:02:dd:e7:13:c0:5e:84:7a:3d:7a:fc: db:4e:6e:4b:af:56:04:b8:66:cd:2b:65:c4:da:ee:f3:c5:5c: 55:1c:00:65:97:6b:d5:56:1a:ff:97:0c:05:72:bf:5a:c3:d5: b5:6c:1d:5c:ce:6d:84:7a:73:c8:52:26:ff:19:df:c3:ce:06: ac:f2:49:2c:73:8b:f3:3f:9e:da:d9:c9:1e:a1:cf:9f:79:18: df:81:e7:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAks+dApjo20DBCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzU1NTk1NmYtNzE0Mi00NTNhLThhZWEtMTc3YTY4NGRk N2FhMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk NTM4ZjJmMTEtN2NlYS00N2VkLTkxNDMtYTJlNzE1OTA5YWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlBwQ0btVvdaMf0QDTfUGmV2gCAKZPALG5lD o0nl44eoh/n16JrjCs7Vm0NwRhu+ygXTrMBeTw8YFaaq6y/RvJANaaj+WfXYB71/ kA7matFewzd1mhPAZS8fcfgqBSvVg1SUTjGIDCB9LtqkIHKUNUGaLupBYXKa4beG GEC7/lZmsRi8S57bjtSzIhzwH9JFO2xojprvqKeEwG9Kf43df59lvkAYfBEyLXYn irtCEHfzox3LLhR41gFRkIpGaxvans3ifj5ER16u565501Aa6J0o9FTAwEljNJ93 9WPhWpp3UhpvzYUTt0eL9dH6o6/NrClI9sG/yUTFaQqpL9Ci4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZAP3Mi5AeaOukoxDASjuvlKa4mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1 OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdhNjg0ZGQ3YWEvMGNlMzExNDItNGQxYi0z ZWViLWFiYzctZThhY2EyYzA5ZmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzU1NTk1NmYtNzE0Mi00NTNhLThh ZWEtMTc3YTY4NGRkN2FhLzM1NTU5NTZmLTcxNDItNDUzYS04YWVhLTE3N2E2ODRk ZDdhYS5jcmwwHwYDVR0jBBgwFoAUTnp2SaFOHZM02c2odqnRmGb0SA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdh Njg0ZGQ3YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztroMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA68LsIousCzupNPJXhzBHxiWmPW/I1ss2IrL1mNGwFd6x9LMu1zfKHV mFVb3/n3SbkVb4fsMb62kTGEJqHfoBoM5yiRlI4vEZydp19N+GDAVDSXvL3OcuNw W5GSmrxmZrh/2aDsFPI1SpTu3jJr0BA7bJOamR7xxmgJlML6lXzCmauc/vGCGqnW Y/ZwYB3oKOvKpbDROO+XaoyASt3zbHSBEuWlKsmD4moC3ecTwF6Eej16/NtObkuv VgS4Zs0rZcTa7vPFXFUcAGWXa9VWGv+XDAVyv1rD1bVsHVzObYR6c8hSJv8Z38PO BqzySSxzi/M/ntrZyR6hz595GN+B53c= -----END CERTIFICATE-----Generated at Sat Sep 26 16:52:37 2026 by rpki-client