$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7aca890-2adc-3203-a3d0-ebbfbdd2790b.roa File: c7aca890-2adc-3203-a3d0-ebbfbdd2790b.roa (raw, json) Hash identifier: c+0wE8aqZgjjlmfUkE6/7qLYm+7cymx03xLz+IKyq2I= Subject key identifier: 41:7D:D0:CF:C4:35:A0:1E:3F:C9:8E:43:25:D3:FB:EE:24:62:B7:24 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973FA7E52292DA845FBBBC0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7aca890-2adc-3203-a3d0-ebbfbdd2790b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7861 IP address blocks: 207.167.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:fa:7e:52:29:2d:a8:45:fb:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bda249c3-5474-4898-9d35-021c757ca1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e9:e3:3b:38:f2:99:78:12:ed:a4:82:2e:fb: 4f:9a:15:a2:66:0f:c3:98:79:17:c0:f8:58:ee:9f: 7d:8f:14:5e:13:19:cc:f3:d0:74:68:05:f1:da:88: 68:d8:11:64:f9:10:e2:00:a7:0a:c5:a2:8e:e6:a0: f4:47:e1:d7:b7:cb:18:d9:0e:5d:d7:89:84:3e:96: 58:96:e2:20:98:6e:6a:71:99:be:bc:1a:e1:04:70: 46:3e:04:07:ae:a7:e2:03:38:91:8a:21:c4:2d:36: 42:b7:26:ad:d7:a7:65:77:48:ab:61:14:22:6f:2d: 11:ed:e4:61:cd:0b:96:60:46:f5:22:fb:93:69:6d: 70:ae:63:1b:df:b3:7f:f1:38:02:b8:8f:3f:3b:31: 07:4e:a0:43:df:da:55:54:c7:fa:0c:85:3c:03:79: a5:33:a8:92:e5:4e:5c:b3:9e:b1:be:80:33:d1:fa: cd:86:67:39:c4:ee:96:63:4a:98:bf:4e:08:7a:45: f6:e5:ae:16:ae:b1:6a:1a:f7:53:aa:de:1e:41:91: 14:50:b3:7d:e1:28:e1:f5:69:fa:82:77:ac:74:73: 91:f7:37:72:5c:c7:be:fb:5a:fe:ba:cb:80:68:40: 49:8e:b9:d4:ba:58:f7:2f:d9:f7:d3:eb:46:27:ac: ca:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7D:D0:CF:C4:35:A0:1E:3F:C9:8E:43:25:D3:FB:EE:24:62:B7:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c7aca890-2adc-3203-a3d0-ebbfbdd2790b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 207.167.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:cd:a4:e6:29:24:98:35:38:ae:4f:00:94:08:41:31:05:e8: b7:20:67:c1:ae:67:37:6a:83:29:5c:d5:1b:94:d9:28:7c:11: c5:43:ea:97:c5:42:8f:b2:0c:2c:74:18:05:34:07:22:13:57: fa:37:65:55:55:42:86:cc:1c:dd:52:07:25:d5:9b:9b:d7:ce: be:0c:26:85:e7:c1:d3:87:4f:75:cb:dd:d9:e6:f6:0d:3b:0f: d7:55:cf:d7:1e:99:50:43:b9:33:ca:3b:a3:6c:a2:41:ea:22: 3d:c8:fb:ac:f2:35:87:d0:0b:8b:10:17:b4:c4:15:75:56:33: f9:e2:45:b2:99:26:53:f6:fb:2d:17:93:64:73:a0:90:5b:7e: 4b:cb:54:7f:6b:72:be:6d:99:eb:27:d3:ca:b6:fd:4c:0e:f1: 25:5e:c4:71:28:92:54:48:85:21:69:79:bf:8f:67:c9:8a:40: e8:81:5a:b9:77:0b:e1:50:44:11:26:13:67:0a:53:e3:a8:f8: 87:95:89:52:f0:ba:1c:a9:1a:d8:5b:89:76:90:fa:95:2d:a2: a6:e3:3b:bf:fd:cf:0c:13:cf:22:05:fd:42:32:f4:a2:1e:71: ba:4f:80:31:0a:26:93:1c:8e:dd:51:a4:fa:41:92:0e:38:07: 79:8d:d8:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/p+UiktqEX7u8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmRhMjQ5YzMtNTQ3NC00ODk4LTlkMzUtMDIxYzc1N2NhMWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+njOzjymXgS7aSCLvtPmhWiZg/DmHkXwPhY 7p99jxReExnM89B0aAXx2oho2BFk+RDiAKcKxaKO5qD0R+HXt8sY2Q5d14mEPpZY luIgmG5qcZm+vBrhBHBGPgQHrqfiAziRiiHELTZCtyat16dld0irYRQiby0R7eRh zQuWYEb1IvuTaW1wrmMb37N/8TgCuI8/OzEHTqBD39pVVMf6DIU8A3mlM6iS5U5c s56xvoAz0frNhmc5xO6WY0qYv04IekX25a4WrrFqGvdTqt4eQZEUULN94Sjh9Wn6 gnesdHOR9zdyXMe++1r+usuAaEBJjrnUulj3L9n30+tGJ6zKRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF90M/ENaAeP8mOQyXT++4kYrckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzdhY2E4OTAtMmFkYy0z MjAzLWEzZDAtZWJiZmJkZDI3OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6foMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDNpOYpJJg1OK5PAJQIQTEF6LcgZ8GuZzdqgylc1RuU2Sh8EcVD6pfF Qo+yDCx0GAU0ByITV/o3ZVVVQobMHN1SByXVm5vXzr4MJoXnwdOHT3XL3dnm9g07 D9dVz9cemVBDuTPKO6NsokHqIj3I+6zyNYfQC4sQF7TEFXVWM/niRbKZJlP2+y0X k2RzoJBbfkvLVH9rcr5tmesn08q2/UwO8SVexHEoklRIhSFpeb+PZ8mKQOiBWrl3 C+FQRBEmE2cKU+Oo+IeViVLwuhypGthbiXaQ+pUtoqbjO7/9zwwTzyIF/UIy9KIe cbpPgDEKJpMcjt1RpPpBkg44B3mN2H0= -----END CERTIFICATE-----Generated at Mon Sep 28 18:08:09 2026 by rpki-client