$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa File: aa000e23-1120-334a-ad1d-5bf8f562f368.roa (raw, json) Hash identifier: hiRvcPMdktnHQj/CX5BXySAIUCXqdJ8gZIIGMFWU7AQ= Subject key identifier: BC:00:79:13:13:50:B7:52:48:26:40:2B:26:DD:A8:27:41:D3:14:17 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973F663391F4EF0BBFC3280 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21723 IP address blocks: 207.194.200.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f6:63:39:1f:4e:f0:bb:fc:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=312c08b0-0315-4ac1-8850-a7b65326417d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fa:87:3e:8b:43:9f:12:64:e9:8c:33:38:15: 3d:0b:06:10:7c:66:b1:90:b7:53:cf:78:dc:a4:f3: 81:5a:48:f7:f3:d7:38:88:5f:19:c0:99:9b:b4:b0: 20:c8:e6:52:bd:b2:95:bf:91:a7:c1:46:08:77:13: 36:27:ac:f6:e3:75:84:97:d9:59:53:ca:f9:2b:c3: 00:71:75:cf:a1:a3:66:25:60:4c:f7:26:3d:74:b3: 3f:b5:ae:0b:05:8c:0a:a3:cf:3b:74:89:c6:17:40: ec:48:9e:30:50:c6:db:0d:7f:8a:ba:13:59:e9:c5: 04:f1:a0:93:66:67:2c:33:a0:a6:7d:f3:d2:5a:38: 94:1c:cd:eb:5c:c1:ee:b2:bf:df:8f:b8:ea:05:e2: 33:a5:b7:e2:e7:cb:6c:73:de:ef:48:54:ee:93:35: ad:05:6a:7e:85:a5:62:83:83:93:2f:6d:dd:df:0c: 01:31:91:65:2e:da:02:4c:d9:95:52:06:53:37:c8: 46:50:a8:eb:b0:6a:49:e6:ba:56:20:26:0b:d5:7c: 80:af:3f:eb:c3:22:0f:63:a6:1b:da:21:9e:e8:0f: f3:0b:6e:00:1c:6d:35:9e:14:03:df:c4:9d:c0:91: 0a:bb:a9:cb:de:b2:56:a9:49:5a:bd:fd:d9:b5:10: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:00:79:13:13:50:B7:52:48:26:40:2B:26:DD:A8:27:41:D3:14:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.194.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:3c:ba:9d:29:f4:69:ba:9d:c1:e3:6c:a3:98:9c:b4:93:5f: 39:c5:13:73:7a:41:9e:70:4c:2d:02:59:ed:83:12:d7:67:b5: 1b:1c:ae:6a:d5:4a:9b:54:3d:ee:01:7d:1a:d9:63:7a:8f:15: 07:80:9e:2b:ce:68:8b:db:bf:ae:8c:cf:c7:23:94:5b:4b:b7: 0b:f3:0b:f3:d8:51:b7:ee:1f:9a:bc:29:1c:00:db:15:f9:28: aa:71:ec:92:56:97:4a:3d:54:75:ba:df:1d:c9:e7:14:53:a0: 45:5a:ee:c8:b5:45:b9:12:d2:f1:15:61:74:b0:43:85:0d:ed: 9f:40:51:c5:d5:bd:f9:3f:b1:71:33:a3:9b:e4:a3:89:1d:c4: c2:51:48:c2:6d:ce:3f:20:ef:19:af:ba:30:ae:1f:6c:b8:e2: 1c:64:a2:92:a8:57:d1:e0:55:fc:6d:bd:2f:3a:a5:98:62:9d: 6e:82:6f:7e:00:00:02:b7:27:1c:ee:26:e2:6a:86:2d:bc:34: 5d:1f:5e:4a:6b:04:bc:79:6f:1d:11:ad:83:32:d7:ef:ab:bb: f7:8f:a5:21:e7:aa:c3:93:aa:1d:66:8c:a1:6a:c7:86:4c:5c: 38:eb:87:d4:00:e8:d4:75:24:a1:08:fb:8a:ca:0b:50:39:a2: 1d:61:76:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/ZjOR9O8Lv8MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzEyYzA4YjAtMDMxNS00YWMxLTg4NTAtYTdiNjUzMjY0MTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/qHPotDnxJk6YwzOBU9CwYQfGaxkLdTz3jc pPOBWkj389c4iF8ZwJmbtLAgyOZSvbKVv5GnwUYIdxM2J6z243WEl9lZU8r5K8MA cXXPoaNmJWBM9yY9dLM/ta4LBYwKo887dInGF0DsSJ4wUMbbDX+KuhNZ6cUE8aCT ZmcsM6CmffPSWjiUHM3rXMHusr/fj7jqBeIzpbfi58tsc97vSFTukzWtBWp+haVi g4OTL23d3wwBMZFlLtoCTNmVUgZTN8hGUKjrsGpJ5rpWICYL1XyArz/rwyIPY6Yb 2iGe6A/zC24AHG01nhQD38SdwJEKu6nL3rJWqUlavf3ZtRDS3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwAeRMTULdSSCZAKybdqCdB0xQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYWEwMDBlMjMtMTEyMC0z MzRhLWFkMWQtNWJmOGY1NjJmMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz8LIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQ8up0p9Gm6ncHjbKOYnLSTXznFE3N6QZ5wTC0CWe2DEtdntRscrmrV SptUPe4BfRrZY3qPFQeAnivOaIvbv66Mz8cjlFtLtwvzC/PYUbfuH5q8KRwA2xX5 KKpx7JJWl0o9VHW63x3J5xRToEVa7si1RbkS0vEVYXSwQ4UN7Z9AUcXVvfk/sXEz o5vko4kdxMJRSMJtzj8g7xmvujCuH2y44hxkopKoV9HgVfxtvS86pZhinW6Cb34A AAK3JxzuJuJqhi28NF0fXkprBLx5bx0RrYMy1++ru/ePpSHnqsOTqh1mjKFqx4ZM XDjrh9QA6NR1JKEI+4rKC1A5oh1hdn8= -----END CERTIFICATE-----Generated at Tue Sep 29 16:44:29 2026 by rpki-client