$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa File: ced604c6-99bb-30aa-8483-52ecd57799da.roa (raw, json) Hash identifier: U2EkMn0rgOdw5sRuw9TpqrLEyKoQzeRr42V0nD6LeJY= Subject key identifier: 2B:A0:3D:BB:02:F2:6C:39:0F:1D:C9:70:D1:1A:C8:13:D4:7B:6F:10 Certificate issuer: /CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Certificate serial: 010D0C9F4328584FD68BE9BC6DF904C6F0461FA0 Authority key identifier: AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa Signing time: Sat 14 Nov 2026 14:00:12 +0000 ROA not before: Sat 14 Nov 2026 14:00:12 +0000 ROA not after: Fri 12 Feb 2027 14:00:12 +0000 asID: 16276 IP address blocks: 206.168.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d6:8b:e9:bc:6d:f9:04:c6:f0:46:1f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0aa7836e-22e9-444b-9d13-5d11358bd6ab Validity Not Before: Nov 14 14:00:12 2026 GMT Not After : Feb 12 14:00:12 2027 GMT Subject: CN=3a916bc9-e228-4a7d-935b-4a84879b93a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:bd:85:59:f9:78:29:26:65:e8:8e:22:5b: a5:df:1b:de:e0:15:be:5d:0c:34:93:f0:51:79:62: 8d:c6:9b:35:ef:71:8e:12:9f:14:78:55:a2:8b:89: f5:9b:73:c1:62:9f:ea:a9:2d:bb:12:c2:79:72:7d: 4f:2a:c6:24:6e:d4:61:47:86:3b:96:54:50:c0:6c: 9c:21:8d:55:f4:3e:81:01:63:38:13:96:3b:d4:9e: dc:c2:69:4d:6a:aa:8d:15:94:9f:92:cc:b6:0d:25: dd:c8:40:a2:8e:04:d6:88:b4:3e:24:c4:f4:19:05: 31:ea:96:aa:20:6a:9f:d9:c7:d4:d0:47:01:9a:26: 2c:03:ab:98:65:ff:ac:b0:50:d3:59:5c:0f:1a:dc: 87:77:ec:56:fe:da:d3:cc:9f:d8:1a:79:fe:6c:c8: 09:2e:05:6b:73:97:2d:e7:df:ea:a2:d9:fc:4c:0a: 9b:3c:3e:1f:b5:8f:ad:fd:1b:fd:48:63:b2:27:fb: 1b:ad:e1:c7:e0:69:fb:90:e2:98:39:01:05:9c:e2: 33:84:84:3c:4f:0b:c2:b8:2d:a7:9a:c7:8c:a4:5c: 3c:00:6d:0d:53:0b:e0:0a:58:8e:aa:26:c0:32:45: 23:cb:f2:3a:f9:56:be:cf:89:fa:26:12:ac:a6:08: 1d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A0:3D:BB:02:F2:6C:39:0F:1D:C9:70:D1:1A:C8:13:D4:7B:6F:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/ced604c6-99bb-30aa-8483-52ecd57799da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab/0aa7836e-22e9-444b-9d13-5d11358bd6ab.crl X509v3 Authority Key Identifier: keyid:AA:57:C4:29:E5:6A:1D:D4:AF:56:9E:A4:6D:45:98:0D:26:7D:E9:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0aa7836e-22e9-444b-9d13-5d11358bd6ab.cer sbgp-ipAddrBlock: critical IPv4: 206.168.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:43:1f:b3:ab:e8:15:59:5a:fe:67:73:4d:b8:fc:3f:78:0d: dc:08:df:78:eb:9d:af:4e:80:13:bb:47:32:bb:67:e1:a8:54: 4b:98:27:8f:e6:22:b3:83:5c:d3:10:94:9d:40:48:f9:47:26: 4d:04:03:3e:63:a2:21:0e:83:75:53:af:62:b3:bb:1c:ec:8f: ad:53:d8:13:2a:22:50:e9:1a:85:ba:52:6b:70:6e:75:01:28: c6:84:6c:96:be:31:27:ad:98:4c:67:41:a9:70:9e:ba:5c:6a: 41:a8:b9:63:df:03:c2:1e:40:8f:c1:c1:27:71:83:7c:a3:8f: f7:3c:cb:e0:8f:b9:1b:90:ba:86:3f:16:5a:c0:37:b1:98:29: 5e:9b:a1:5d:7e:26:e7:bb:88:6e:a0:cd:96:2a:0a:d2:47:8c: cc:79:07:d7:60:3c:a9:0d:57:9e:bc:e5:15:27:4d:20:93:71: 07:14:f8:ef:46:ee:8c:a6:be:84:85:53:5f:ec:d7:2e:d6:cc: 5f:3f:e2:75:95:4b:86:34:ea:de:58:e7:8a:26:1c:53:02:07: 07:3b:b1:af:34:fe:4e:d8:ce:3c:a4:33:a5:fc:4e:3b:ec:de: cc:87:d6:14:7e:61:89:38:e7:71:04:72:81:a2:25:99:4e:64: 8f:16:87:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/Wi+m8bfkExvBGH6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFhNzgzNmUtMjJlOS00NDRiLTlkMTMtNWQxMTM1OGJk NmFiMB4XDTI2MTExNDE0MDAxMloXDTI3MDIxMjE0MDAxMlowLzEtMCsGA1UEAxMk M2E5MTZiYzktZTIyOC00YTdkLTkzNWItNGE4NDg3OWI5M2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwi9hVn5eCkmZeiOIlul3xve4BW+XQw0k/BR eWKNxps173GOEp8UeFWii4n1m3PBYp/qqS27EsJ5cn1PKsYkbtRhR4Y7llRQwGyc IY1V9D6BAWM4E5Y71J7cwmlNaqqNFZSfksy2DSXdyECijgTWiLQ+JMT0GQUx6paq IGqf2cfU0EcBmiYsA6uYZf+ssFDTWVwPGtyHd+xW/trTzJ/YGnn+bMgJLgVrc5ct 59/qotn8TAqbPD4ftY+t/Rv9SGOyJ/sbreHH4Gn7kOKYOQEFnOIzhIQ8TwvCuC2n mseMpFw8AG0NUwvgCliOqibAMkUjy/I6+Va+z4n6JhKspggd2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCugPbsC8mw5Dx3JcNEayBPUe28QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3 ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDExMzU4YmQ2YWIvY2VkNjA0YzYtOTliYi0z MGFhLTg0ODMtNTJlY2Q1Nzc5OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGFhNzgzNmUtMjJlOS00NDRiLTlk MTMtNWQxMTM1OGJkNmFiLzBhYTc4MzZlLTIyZTktNDQ0Yi05ZDEzLTVkMTEzNThi ZDZhYi5jcmwwHwYDVR0jBBgwFoAUqlfEKeVqHdSvVp6kbUWYDSZ96RcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wYWE3ODM2ZS0yMmU5LTQ0NGItOWQxMy01ZDEx MzU4YmQ2YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqivMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVDH7Or6BVZWv5nc024/D94DdwI33jrna9OgBO7RzK7Z+GoVEuYJ4/m IrODXNMQlJ1ASPlHJk0EAz5joiEOg3VTr2Kzuxzsj61T2BMqIlDpGoW6UmtwbnUB KMaEbJa+MSetmExnQalwnrpcakGouWPfA8IeQI/BwSdxg3yjj/c8y+CPuRuQuoY/ FlrAN7GYKV6boV1+Jue7iG6gzZYqCtJHjMx5B9dgPKkNV5685RUnTSCTcQcU+O9G 7oymvoSFU1/s1y7WzF8/4nWVS4Y06t5Y54omHFMCBwc7sa80/k7YzjykM6X8Tjvs 3syH1hR+YYk453EEcoGiJZlOZI8Wh58= -----END CERTIFICATE-----Generated at Sun Nov 15 17:51:41 2026 by rpki-client