$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa File: 43abee32-0b0c-3284-ab75-86047f53ab34.roa (raw, json) Hash identifier: EVPbXC8TSA/00upRRqF1Z8nbNhrtMxFM4ikdYnIMo58= Subject key identifier: E5:0A:A5:4A:D2:44:BF:B6:50:2C:95:AC:4C:EA:F7:8F:3E:F4:D1:6E Certificate issuer: /CN=3555956f-7142-453a-8aea-177a684dd7aa Certificate serial: 010D0C9F4328584F4C3D78B3065DC4E6DBE4E290 Authority key identifier: 4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 13821 IP address blocks: 206.218.248.0/24 maxlen: 24 206.218.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:78:b3:06:5d:c4:e6:db:e4:e2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3555956f-7142-453a-8aea-177a684dd7aa Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=dc3b8b4b-fb99-40f1-8b91-83ab2d93b2da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b0:0e:4f:92:f3:0a:68:51:9a:01:94:9d:cf: 0d:6e:96:3b:5e:ea:2d:fa:78:4e:8c:f4:f8:4a:80: fb:21:f7:90:66:22:ce:7b:f7:2c:60:04:73:de:e7: a7:a2:2a:94:8d:f3:55:d1:09:5b:4d:d8:8e:d6:dc: 48:82:e7:3d:28:3b:b5:ea:34:08:2f:d1:52:8e:58: 03:64:f7:fe:11:21:64:85:3b:6a:b9:4f:d9:66:25: 26:a8:3f:82:b7:9b:56:28:0a:c3:21:62:01:06:c3: 2a:bd:42:10:0f:3c:22:7c:63:ed:f6:e3:0a:c0:d6: c3:54:e1:83:a9:c9:6f:ad:9b:d5:a5:dd:69:f6:56: 80:73:7c:d3:0b:41:ba:2a:95:1e:b9:91:4a:b1:f0: da:e9:d3:6e:b3:8e:a7:46:ba:49:ca:d5:fc:2c:a4: 50:5d:1e:ad:8b:22:0d:f0:b8:93:5f:cb:03:2f:bb: 9a:87:50:46:cc:5c:0c:3b:5c:72:c4:34:8e:ef:47: 27:1d:34:44:ff:b1:45:39:40:46:7e:0d:7a:e8:74: 72:57:86:69:b7:c3:de:01:94:f9:bf:34:9e:d3:1e: 6c:fd:41:5a:47:f4:84:94:df:1f:e7:82:3e:41:b7: 39:2c:e7:e2:44:e6:ec:17:a0:9b:35:39:bd:19:1f: ae:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0A:A5:4A:D2:44:BF:B6:50:2C:95:AC:4C:EA:F7:8F:3E:F4:D1:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl X509v3 Authority Key Identifier: keyid:4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer sbgp-ipAddrBlock: critical IPv4: 206.218.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:1a:03:9c:55:48:90:88:dc:e8:db:f8:35:ff:c4:89:69:50: 31:5d:cf:e5:21:44:5f:f9:5f:59:84:13:dd:b8:01:1f:74:68: 28:e4:e8:25:83:bc:d0:50:07:1a:e5:34:14:35:ab:4d:53:b2: ee:ce:8e:c0:03:88:3f:e5:bb:db:f1:a3:c8:e0:39:63:d4:4e: d6:20:c0:74:50:1c:2b:6e:e8:60:cb:e5:62:2d:be:58:a9:7e: 96:85:3a:17:47:bc:00:ca:08:9f:ca:70:6b:d5:53:d9:ce:00: cf:a1:45:3a:fb:ce:9e:f7:50:d6:2d:5e:6d:4e:bc:59:25:3b: 7e:40:23:54:77:37:cf:e1:91:02:0a:63:ba:46:19:62:c4:87: 94:0b:16:bb:63:88:27:ab:c2:a0:92:41:97:10:24:30:ab:cd: f8:df:e3:1e:f3:e8:8a:52:8f:94:a8:ec:d6:d6:84:30:30:06: 76:dc:4b:53:17:68:c4:bc:70:24:fc:fd:f6:77:cf:32:27:bf: 86:80:d0:86:ca:8d:b6:01:df:65:f6:db:b1:62:c3:1f:e6:77: 12:2e:24:7d:42:87:33:2f:99:74:94:0d:90:27:6b:56:0b:ff: cf:90:42:5f:40:73:43:72:93:19:08:8c:46:3d:3e:47:f0:9f: 0f:92:cc:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXizBl3E5tvk4pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzU1NTk1NmYtNzE0Mi00NTNhLThhZWEtMTc3YTY4NGRk N2FhMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGMzYjhiNGItZmI5OS00MGYxLThiOTEtODNhYjJkOTNiMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrAOT5LzCmhRmgGUnc8NbpY7Xuot+nhOjPT4 SoD7IfeQZiLOe/csYARz3uenoiqUjfNV0QlbTdiO1txIguc9KDu16jQIL9FSjlgD ZPf+ESFkhTtquU/ZZiUmqD+Ct5tWKArDIWIBBsMqvUIQDzwifGPt9uMKwNbDVOGD qclvrZvVpd1p9laAc3zTC0G6KpUeuZFKsfDa6dNus46nRrpJytX8LKRQXR6tiyIN 8LiTX8sDL7uah1BGzFwMO1xyxDSO70cnHTRE/7FFOUBGfg166HRyV4Zpt8PeAZT5 vzSe0x5s/UFaR/SElN8f54I+Qbc5LOfiRObsF6CbNTm9GR+uYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUKpUrSRL+2UCyVrEzq948+9NFuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1 OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdhNjg0ZGQ3YWEvNDNhYmVlMzItMGIwYy0z Mjg0LWFiNzUtODYwNDdmNTNhYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzU1NTk1NmYtNzE0Mi00NTNhLThh ZWEtMTc3YTY4NGRkN2FhLzM1NTU5NTZmLTcxNDItNDUzYS04YWVhLTE3N2E2ODRk ZDdhYS5jcmwwHwYDVR0jBBgwFoAUTnp2SaFOHZM02c2odqnRmGb0SA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdh Njg0ZGQ3YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBztr4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIaA5xVSJCI3Ojb+DX/xIlpUDFdz+UhRF/5X1mEE924AR90aCjk6CWD vNBQBxrlNBQ1q01Tsu7OjsADiD/lu9vxo8jgOWPUTtYgwHRQHCtu6GDL5WItvlip fpaFOhdHvADKCJ/KcGvVU9nOAM+hRTr7zp73UNYtXm1OvFklO35AI1R3N8/hkQIK Y7pGGWLEh5QLFrtjiCerwqCSQZcQJDCrzfjf4x7z6IpSj5So7NbWhDAwBnbcS1MX aMS8cCT8/fZ3zzInv4aA0IbKjbYB32X227Fiwx/mdxIuJH1ChzMvmXSUDZAna1YL /8+QQl9Ac0NykxkIjEY9Pkfwnw+SzF0= -----END CERTIFICATE-----Generated at Tue Oct 13 22:36:03 2026 by rpki-client