$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/00b80ae7-7f91-3873-9d7b-8caa3775d067.roa File: 00b80ae7-7f91-3873-9d7b-8caa3775d067.roa (raw, json) Hash identifier: 2fJp6st3gJKyet9IaND/ygV+Z8bX36YYHb9Yp9Yx+D0= Subject key identifier: 89:B3:F1:E4:50:2C:14:1E:AC:9B:7D:09:D8:50:27:B0:AA:B6:27:32 Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e Certificate serial: 010D0C9F4328584EFE1227FDC39E62D60EB09080 Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/00b80ae7-7f91-3873-9d7b-8caa3775d067.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 33211 IP address blocks: 206.41.112.0/22 maxlen: 22 206.41.124.0/23 maxlen: 23 206.41.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:27:fd:c3:9e:62:d6:0e:b0:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=b2e57e7c-9ca7-4b42-b034-182a72d5dd19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:86:18:61:3e:db:cb:4c:c8:94:29:10:f1: 49:fb:2d:17:32:b0:e6:95:35:92:7f:12:16:a4:44: 35:d7:69:7c:c9:02:04:68:0b:b4:ad:3e:41:53:e3: c2:8d:68:14:74:a6:d7:4c:4d:4a:67:51:a2:2d:c5: 12:a3:3d:71:1d:eb:e0:e7:7b:c0:5a:de:6c:8f:a6: 5e:13:d0:29:ff:81:4e:21:f8:78:cb:64:17:32:18: ce:b6:61:f1:c0:8d:c9:f4:8e:d7:5d:ac:8a:dd:ed: ca:ef:b1:b0:6d:d1:be:68:64:11:6a:db:22:20:af: 1f:f8:93:73:6c:de:d9:13:a3:9e:06:94:15:bd:66: e6:45:8a:6a:0e:02:00:90:ee:97:f1:e5:3a:89:8f: 68:3c:bc:a1:d9:71:7b:d0:6d:f6:9a:19:1c:a8:c5: 28:de:15:91:35:3f:04:b9:ee:1a:6d:b1:0f:68:53: b6:82:f0:a4:02:74:f5:0d:67:52:4c:ee:ba:8f:6c: b3:4f:83:17:91:34:c4:4b:a3:42:d6:fa:8a:89:7c: c1:8a:fc:59:83:e7:16:0c:fe:d5:a1:67:4c:b2:b3: 34:76:01:bc:c7:b3:15:33:ba:e4:28:61:13:97:a1: 21:e6:5c:e1:a8:7f:fb:18:5a:cd:c3:02:47:cd:2b: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B3:F1:E4:50:2C:14:1E:AC:9B:7D:09:D8:50:27:B0:AA:B6:27:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/00b80ae7-7f91-3873-9d7b-8caa3775d067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl X509v3 Authority Key Identifier: keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer sbgp-ipAddrBlock: critical IPv4: 206.41.112.0/22 206.41.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:25:3d:b4:52:2b:c2:67:1e:aa:5b:fb:c9:1d:69:fa:63:e4: d2:ba:04:f8:bd:4c:aa:d3:3e:ae:4f:66:b5:32:77:d9:e2:9a: 7a:6a:bb:46:ec:19:b4:42:f9:90:f1:6d:b3:b6:0e:da:4b:23: c4:75:0b:2a:b3:04:8e:2d:2e:a2:d6:39:f8:f6:ce:2e:e0:08: 4f:21:f5:2c:e3:ca:a1:3b:bd:58:2d:df:8c:6b:ea:ea:e9:ff: 31:2e:7e:a4:0b:f7:9a:50:2c:cf:b2:4d:9e:a7:b5:15:85:81: 28:b6:b9:5e:03:bc:c3:a4:6f:83:c9:0b:42:a3:35:b7:fe:5b: f7:e1:c1:b0:dc:6c:9c:c3:c7:d6:2d:3e:25:62:0f:56:42:77: e6:e8:b3:a7:d8:90:4e:26:17:77:03:9c:52:92:eb:f3:55:01: 81:f1:8e:10:43:4e:e6:e3:86:68:2c:85:5c:10:bc:43:41:10: fa:8f:5c:f0:65:c2:32:5c:53:34:86:a3:d3:41:43:e5:d6:bc: b7:64:49:f4:f6:11:36:91:e4:24:1d:42:c1:3e:4d:f1:59:5c: 3e:63:25:0d:0c:f8:85:fd:1e:81:53:56:81:ef:11:6b:5b:d5: b5:31:d9:63:99:f3:3c:52:51:11:33:25:7e:90:ab:f7:e7:cc: d7:0e:b2:b1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7+Eif9w55i1g6wkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0 ZDZlMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk YjJlNTdlN2MtOWNhNy00YjQyLWIwMzQtMTgyYTcyZDVkZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+uGGGE+28tMyJQpEPFJ+y0XMrDmlTWSfxIW pEQ112l8yQIEaAu0rT5BU+PCjWgUdKbXTE1KZ1GiLcUSoz1xHevg53vAWt5sj6Ze E9Ap/4FOIfh4y2QXMhjOtmHxwI3J9I7XXayK3e3K77GwbdG+aGQRatsiIK8f+JNz bN7ZE6OeBpQVvWbmRYpqDgIAkO6X8eU6iY9oPLyh2XF70G32mhkcqMUo3hWRNT8E ue4abbEPaFO2gvCkAnT1DWdSTO66j2yzT4MXkTTES6NC1vqKiXzBivxZg+cWDP7V oWdMsrM0dgG8x7MVM7rkKGETl6Eh5lzhqH/7GFrNwwJHzSvXGQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFImz8eRQLBQerJt9CdhQJ7CqticyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvMDBiODBhZTctN2Y5MS0z ODczLTlkN2ItOGNhYTM3NzVkMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy MDJhZTRkNmUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCzilwAwQC zil8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJklPbRSK8JnHqpb+8kdafpj5NK6BPi9TKrTPq5PZrUyd9ni mnpqu0bsGbRC+ZDxbbO2DtpLI8R1CyqzBI4tLqLWOfj2zi7gCE8h9SzjyqE7vVgt 34xr6urp/zEufqQL95pQLM+yTZ6ntRWFgSi2uV4DvMOkb4PJC0KjNbf+W/fhwbDc bJzDx9YtPiViD1ZCd+bos6fYkE4mF3cDnFKS6/NVAYHxjhBDTubjhmgshVwQvENB EPqPXPBlwjJcUzSGo9NBQ+XWvLdkSfT2ETaR5CQdQsE+TfFZXD5jJQ0M+IX9HoFT VoHvEWtb1bUx2WOZ8zxSUREzJX6Qq/fnzNcOsrE= -----END CERTIFICATE-----Generated at Tue Oct 13 16:18:57 2026 by rpki-client