$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa File: 2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa (raw, json) Hash identifier: DXfXy6i304Zzhi3ZEYICe7pFtT+dCdaBddBUTSmUUgw= Subject key identifier: BE:49:05:74:AB:AB:23:B4:8F:1D:80:09:24:69:BF:ED:6A:00:BC:82 Certificate issuer: /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Certificate serial: 010D0C9F4328584F3E47E143F037B24BE20C3F40 Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 16509 IP address blocks: 170.200.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e1:43:f0:37:b2:4b:e2:0c:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=6708aade-f6f2-4225-8022-435beb4ebec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:89:c9:38:96:bb:81:d4:d4:75:66:83:35: a3:8f:c1:f0:48:07:a9:ff:2f:ab:89:73:00:19:3c: f5:16:71:c3:45:01:db:21:dd:87:18:29:a5:e2:72: ce:8b:9b:b9:a2:7e:2e:08:39:29:fc:54:bd:c4:fc: 58:ae:45:7d:48:57:c6:a0:0f:55:c7:74:f5:1c:87: f9:c5:2d:af:5c:68:ab:51:e0:d0:8c:e7:93:3b:29: 77:e4:28:95:70:c9:1d:09:a6:e1:98:0e:6b:4b:f2: f3:cf:f9:71:14:1a:3d:f1:c7:f2:47:82:82:c4:ef: 7d:2a:76:9f:cc:09:38:78:4b:06:06:7b:3e:9d:a5: b7:e9:09:be:75:53:0a:2e:79:b6:63:d3:0c:26:c5: 45:fc:e9:22:d8:c2:df:6a:fb:dc:71:0c:9f:4a:63: 45:4c:6f:97:3f:91:03:50:90:e8:98:6c:d7:cd:8e: 4a:81:9c:2b:36:d3:7c:6a:e6:6a:a0:15:db:a6:41: 3b:cd:53:98:ff:6a:66:28:d8:ae:09:b3:76:64:00: e9:91:ff:21:86:8e:1d:f3:f5:1b:9d:88:ae:f2:7b: 04:a8:d4:03:ac:7f:60:a5:4d:18:33:8f:77:7b:35: 1f:3a:19:88:57:74:1a:58:ce:85:62:c0:4c:74:de: fd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:49:05:74:AB:AB:23:B4:8F:1D:80:09:24:69:BF:ED:6A:00:BC:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2005d58a-8b58-35a2-bbfb-dda3e02e4490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl X509v3 Authority Key Identifier: keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer sbgp-ipAddrBlock: critical IPv4: 170.200.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:cf:7b:f1:27:ca:83:a7:20:21:21:9d:9b:b7:84:16:d3:3b: 60:e3:ab:29:16:dc:53:b6:30:aa:e6:08:80:2f:9c:46:3f:06: 27:0a:a4:7e:83:4c:75:bd:59:f8:4e:9f:36:54:2f:24:69:2a: 32:63:67:e6:ac:a0:4b:3b:66:40:8a:cd:f2:8e:ad:b1:6d:2f: 06:2f:8d:00:aa:75:13:c7:3d:fe:49:75:12:2f:cc:71:0b:96: 65:94:49:c7:55:71:b0:cd:7a:9e:e2:60:74:e9:b2:fd:16:91: 02:90:70:67:da:33:33:fc:9c:ff:3b:95:02:a9:f9:15:de:88: 12:62:d2:0a:95:e3:0f:4c:12:aa:a6:cd:6d:09:ec:8b:bd:6d: 5b:35:43:17:ec:a5:2e:af:18:87:6a:ce:46:a6:2a:fd:bc:f1: bc:8e:b3:28:34:e4:d9:f0:1e:96:7a:64:d6:0d:87:d2:42:81: 57:4a:35:f4:ae:ca:a1:fe:52:4d:54:6b:0e:23:5b:55:ee:71: 49:67:74:17:e0:5a:05:3a:e2:10:43:44:2d:75:19:cb:04:70: ec:39:d2:df:67:47:bf:54:38:68:3c:5d:97:3e:49:c8:b6:b8: 1e:77:6e:54:84:fc:0f:4c:7d:f3:28:45:03:ed:a7:91:bc:de: 0b:68:87:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+FD8DeyS+IMP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk MGJkMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NjcwOGFhZGUtZjZmMi00MjI1LTgwMjItNDM1YmViNGViZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySqJyTiWu4HU1HVmgzWjj8HwSAep/y+riXMA GTz1FnHDRQHbId2HGCml4nLOi5u5on4uCDkp/FS9xPxYrkV9SFfGoA9Vx3T1HIf5 xS2vXGirUeDQjOeTOyl35CiVcMkdCabhmA5rS/Lzz/lxFBo98cfyR4KCxO99Knaf zAk4eEsGBns+naW36Qm+dVMKLnm2Y9MMJsVF/Oki2MLfavvccQyfSmNFTG+XP5ED UJDomGzXzY5KgZwrNtN8auZqoBXbpkE7zVOY/2pmKNiuCbN2ZADpkf8hho4d8/Ub nYiu8nsEqNQDrH9gpU0YM493ezUfOhmIV3QaWM6FYsBMdN79OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5JBXSrqyO0jx2ACSRpv+1qALyCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvMjAwNWQ1OGEtOGI1OC0z NWEyLWJiZmItZGRhM2UwMmU0NDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsj3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnPe/EnyoOnICEhnZu3hBbTO2DjqykW3FO2MKrmCIAvnEY/BicKpH6D THW9WfhOnzZULyRpKjJjZ+asoEs7ZkCKzfKOrbFtLwYvjQCqdRPHPf5JdRIvzHEL lmWUScdVcbDNep7iYHTpsv0WkQKQcGfaMzP8nP87lQKp+RXeiBJi0gqV4w9MEqqm zW0J7Iu9bVs1QxfspS6vGIdqzkamKv288byOsyg05NnwHpZ6ZNYNh9JCgVdKNfSu yqH+Uk1Uaw4jW1XucUlndBfgWgU64hBDRC11GcsEcOw50t9nR79UOGg8XZc+Sci2 uB53blSE/A9MffMoRQPtp5G83gtohyk= -----END CERTIFICATE-----Generated at Tue Sep 29 15:18:21 2026 by rpki-client