$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/efc469f3-53eb-3fac-b9b5-6590ec834ada.roa File: efc469f3-53eb-3fac-b9b5-6590ec834ada.roa (raw, json) Hash identifier: VO5Eesu76G9A1pcFxPOYHjCUTVSdxMgHfiY+o+4Rwn4= Subject key identifier: 6F:22:8B:91:4B:27:EB:B0:21:BB:4D:3D:68:44:3A:68:CE:3B:B9:A5 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584F506D4DAB167B39C8877210C0 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/efc469f3-53eb-3fac-b9b5-6590ec834ada.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 393878 IP address blocks: 206.109.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4d:ab:16:7b:39:c8:87:72:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=5ec229b2-995f-457f-84b5-ec4d7df2bd1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3b:59:b9:40:69:32:24:14:81:3b:21:2d:07: 90:d7:4d:39:db:f5:20:4e:e1:1e:34:a3:2d:87:f5: c8:84:3b:9a:46:f8:e3:47:f9:33:2e:6f:bd:84:45: d4:e3:26:72:21:25:ea:c3:bf:24:d6:1f:88:2f:b7: 45:fc:c7:0d:88:cf:54:9b:d3:8c:62:9f:19:fd:63: 89:ac:12:04:a7:63:1e:8b:87:7a:28:f9:67:0f:17: c0:46:1e:b2:e9:19:b7:0b:8c:58:bd:73:28:d1:da: 14:9d:0a:85:d0:82:89:f8:fd:44:8d:fb:83:4b:87: 5c:71:57:f2:6f:03:16:b7:a1:e4:64:18:95:78:92: 2b:ac:e6:5e:a9:2b:c0:aa:ad:31:70:8b:c3:34:1b: c1:7c:ba:dc:b5:52:a6:16:5e:36:05:0b:ac:92:7a: 5a:04:0d:14:80:9c:02:1c:33:8c:31:ec:16:ee:34: 06:19:cd:a3:ab:e5:96:8d:b7:88:9d:e6:d6:b4:1e: 19:47:30:1a:49:db:1a:df:5d:6d:4e:ba:76:34:24: a3:1a:9d:59:0c:98:92:3a:d9:3a:f4:86:53:71:e4: 48:d3:cf:cf:83:59:da:47:09:63:b4:d5:f0:9b:23: c7:2c:47:3b:b7:ff:1d:71:e0:e3:0c:63:17:4a:98: 1f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:22:8B:91:4B:27:EB:B0:21:BB:4D:3D:68:44:3A:68:CE:3B:B9:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/efc469f3-53eb-3fac-b9b5-6590ec834ada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 206.109.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b7:c1:73:ef:e7:17:12:71:c5:7a:c8:53:4a:23:84:4c:07: db:ac:c3:e5:9d:4d:35:16:13:25:4b:81:50:ce:e8:43:91:ee: e4:0b:e5:99:5a:cd:b7:6c:43:e9:53:2c:94:50:74:fb:8d:2e: bc:4d:b8:0d:c4:c6:76:45:31:9a:6c:05:c9:e3:53:d9:f0:92: 4e:69:a0:02:90:f8:30:c6:a0:c7:a4:53:3b:30:86:7d:08:41: 38:77:2e:4f:fb:db:09:83:76:8f:d6:aa:20:50:03:1c:8e:a5: 13:80:51:bd:bd:0b:5b:a9:1e:1b:8b:df:73:6d:0f:bf:75:58: dd:32:55:bb:fd:24:16:68:da:64:23:f4:1b:33:91:62:5c:b6: 59:4a:40:74:f3:2a:0e:18:d5:ca:5a:94:89:b0:e4:6a:1b:14: fa:e9:47:ca:3d:80:15:e8:98:0b:da:9d:8c:43:cd:c3:4e:6d: 18:d7:06:79:78:6c:b4:95:cd:07:20:d0:df:0d:b6:fe:6a:e5: 70:7a:49:05:50:91:c8:aa:1d:2d:25:b8:1c:62:38:20:b1:4b: d1:c3:8b:ee:68:31:1f:46:9b:46:5b:57:cb:a5:0f:13:13:91: 1e:dd:1b:d4:12:70:23:a4:97:19:d5:c9:2d:ec:11:1f:02:c9: 02:73:90:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbU2rFns5yIdyEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NWVjMjI5YjItOTk1Zi00NTdmLTg0YjUtZWM0ZDdkZjJiZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jtZuUBpMiQUgTshLQeQ10052/UgTuEeNKMt h/XIhDuaRvjjR/kzLm+9hEXU4yZyISXqw78k1h+IL7dF/McNiM9Um9OMYp8Z/WOJ rBIEp2Mei4d6KPlnDxfARh6y6Rm3C4xYvXMo0doUnQqF0IKJ+P1EjfuDS4dccVfy bwMWt6HkZBiVeJIrrOZeqSvAqq0xcIvDNBvBfLrctVKmFl42BQusknpaBA0UgJwC HDOMMewW7jQGGc2jq+WWjbeInebWtB4ZRzAaSdsa311tTrp2NCSjGp1ZDJiSOtk6 9IZTceRI08/Pg1naRwljtNXwmyPHLEc7t/8dceDjDGMXSpgfWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8ii5FLJ+uwIbtNPWhEOmjOO7mlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvZWZjNDY5ZjMtNTNlYi0z ZmFjLWI5YjUtNjU5MGVjODM0YWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzm3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK3wXPv5xcSccV6yFNKI4RMB9usw+WdTTUWEyVLgVDO6EOR7uQL5Zla zbdsQ+lTLJRQdPuNLrxNuA3ExnZFMZpsBcnjU9nwkk5poAKQ+DDGoMekUzswhn0I QTh3Lk/72wmDdo/WqiBQAxyOpROAUb29C1upHhuL33NtD791WN0yVbv9JBZo2mQj 9BszkWJctllKQHTzKg4Y1cpalImw5GobFPrpR8o9gBXomAvanYxDzcNObRjXBnl4 bLSVzQcg0N8Ntv5q5XB6SQVQkciqHS0luBxiOCCxS9HDi+5oMR9Gm0ZbV8ulDxMT kR7dG9QScCOklxnVyS3sER8CyQJzkK0= -----END CERTIFICATE-----Generated at Tue Sep 29 13:11:29 2026 by rpki-client