$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4453f8e2-9611-35b8-9d88-6dfe066bef9c.roa File: 4453f8e2-9611-35b8-9d88-6dfe066bef9c.roa (raw, json) Hash identifier: 4B7LI8w1UJ7R/+zOfIelnGv/gHYyKaNx/7r8TD/XpD0= Subject key identifier: 1B:32:6C:59:9D:1A:DB:1A:D2:9A:DD:0C:24:EF:14:C6:0A:D1:F4:53 Certificate issuer: /CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Certificate serial: 010D0C9F4328584F3E47CAF3D5C4920FB0978C80 Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4453f8e2-9611-35b8-9d88-6dfe066bef9c.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 400196 IP address blocks: 207.22.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:ca:f3:d5:c4:92:0f:b0:97:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=b951f107-99ff-4b6e-b143-261e021763fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:64:2c:48:5e:91:aa:13:06:90:61:b5:b4:f4: d2:89:5b:cb:79:a1:4e:63:89:40:28:82:9b:9f:33: 8a:27:af:67:47:56:ea:e3:9d:4b:74:fa:d7:b2:f1: 6a:a6:bf:fa:48:18:77:f3:cb:11:1c:9a:45:fc:93: 98:42:bc:30:9a:51:60:08:8b:1d:54:de:28:2c:2f: 28:58:cb:61:20:d2:28:3d:b6:5b:c0:e7:b7:ef:fd: a0:1b:45:c8:b5:97:fc:32:61:76:fe:8d:cb:4a:3f: 41:8b:9f:49:32:3b:27:8b:f0:e7:14:4f:62:60:65: ae:74:7e:04:75:d4:eb:86:c9:7b:c7:6d:50:43:35: 1e:0b:b5:21:c6:32:81:56:73:69:86:5a:0a:59:3c: da:d3:30:ba:a1:23:8d:15:21:ce:2e:42:7a:35:a1: b5:bb:81:f0:61:b7:fd:db:70:d1:0a:12:a1:70:20: 81:b1:14:3d:24:2b:f5:68:e1:e0:bc:54:b8:22:1a: 83:df:f5:fd:1f:aa:86:77:68:67:9f:80:6f:c6:82: 07:42:bf:76:80:78:43:73:3c:80:cb:13:01:a0:e5: 5d:e2:89:04:c4:17:04:8f:57:85:ad:bb:b1:0a:16: ea:a4:6d:e3:c7:13:ed:9e:4c:64:89:f0:94:4e:65: 35:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:32:6C:59:9D:1A:DB:1A:D2:9A:DD:0C:24:EF:14:C6:0A:D1:F4:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/4453f8e2-9611-35b8-9d88-6dfe066bef9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl X509v3 Authority Key Identifier: keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer sbgp-ipAddrBlock: critical IPv4: 207.22.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:23:50:aa:61:2f:b5:f6:fd:33:2e:c7:fe:80:06:d8:73:89: 14:ba:48:af:6f:a3:fd:d7:ae:68:cb:f3:62:75:92:f1:bd:b2: 49:24:0f:ea:14:e0:42:61:43:1e:b1:57:f5:1c:da:2e:f5:64: c2:a0:ca:ec:6b:95:be:c4:f2:cc:b0:31:4e:2a:fc:3f:fa:14: 96:e8:53:dc:6d:7d:f0:45:0c:2b:eb:d0:5e:fb:b2:4a:69:ea: c6:6a:14:82:04:ee:45:d2:93:09:99:04:fe:8d:a2:b7:d3:30: b1:55:e4:df:3f:6f:46:68:7b:bd:4f:67:d0:ae:60:c2:b7:fb: 44:3a:79:ed:37:36:db:13:f4:6e:e8:d3:2f:f2:09:10:83:12: a9:f3:2c:6f:47:62:d8:76:ee:19:13:6d:ba:ed:d9:a4:40:03: 41:b1:19:11:26:bf:f5:a9:0a:04:96:1f:0d:5e:60:2e:d3:b5: 04:34:27:dc:47:9e:ef:0e:1b:6e:08:26:95:e1:e7:35:d3:f0: d9:08:36:4d:1d:0c:70:74:3e:0b:45:65:c1:20:30:b2:ae:0d: 47:90:c7:a5:63:c4:69:d9:c6:14:b9:39:e2:ab:54:c8:ee:06: b4:e4:32:c8:b3:f2:ff:54:03:7b:6d:49:4e:eb:ea:a8:00:d5: 47:31:fc:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R8rz1cSSD7CXjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj MTY4MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk Yjk1MWYxMDctOTlmZi00YjZlLWIxNDMtMjYxZTAyMTc2M2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2QsSF6RqhMGkGG1tPTSiVvLeaFOY4lAKIKb nzOKJ69nR1bq451LdPrXsvFqpr/6SBh388sRHJpF/JOYQrwwmlFgCIsdVN4oLC8o WMthINIoPbZbwOe37/2gG0XItZf8MmF2/o3LSj9Bi59JMjsni/DnFE9iYGWudH4E ddTrhsl7x21QQzUeC7UhxjKBVnNphloKWTza0zC6oSONFSHOLkJ6NaG1u4HwYbf9 23DRChKhcCCBsRQ9JCv1aOHgvFS4IhqD3/X9H6qGd2hnn4BvxoIHQr92gHhDczyA yxMBoOVd4okExBcEj1eFrbuxChbqpG3jxxPtnkxkifCUTmU1swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsybFmdGtsa0prdDCTvFMYK0fRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1 ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvNDQ1M2Y4ZTItOTYxMS0z NWI4LTlkODgtNmRmZTA2NmJlZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4 ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk N2VjZmMxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgjUKphL7X2/TMux/6ABthziRS6SK9vo/3XrmjL82J1kvG9skkkD+oU 4EJhQx6xV/Uc2i71ZMKgyuxrlb7E8sywMU4q/D/6FJboU9xtffBFDCvr0F77skpp 6sZqFIIE7kXSkwmZBP6NorfTMLFV5N8/b0Zoe71PZ9CuYMK3+0Q6ee03NtsT9G7o 0y/yCRCDEqnzLG9HYth27hkTbbrt2aRAA0GxGREmv/WpCgSWHw1eYC7TtQQ0J9xH nu8OG24IJpXh5zXT8NkINk0dDHB0PgtFZcEgMLKuDUeQx6VjxGnZxhS5OeKrVMju BrTkMsiz8v9UA3ttSU7r6qgA1Ucx/JU= -----END CERTIFICATE-----Generated at Fri Sep 25 23:19:34 2026 by rpki-client