$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a677148e-8e5e-3bf5-9614-c93128ae885c.roa File: a677148e-8e5e-3bf5-9614-c93128ae885c.roa (raw, json) Hash identifier: /Egiig4S0MZWZDFdb4xja+vJG70VEu3L54kRHhZLMQI= Subject key identifier: 03:FA:C3:AC:95:91:11:45:51:0A:FD:39:AC:9A:06:31:26:62:3D:09 Certificate issuer: /CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Certificate serial: 010D0C9F4328584F7782D6793FD0029B6E543280 Authority key identifier: 44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a677148e-8e5e-3bf5-9614-c93128ae885c.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 13340 IP address blocks: 206.53.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:d6:79:3f:d0:02:9b:6e:54:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1bd9d43-c127-4a9e-b038-0c436c5d905d Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=e930e8ec-0e22-49b2-9965-49c4452eb8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:28:f5:d5:28:5b:00:02:37:eb:20:f4:f8:23: a1:de:a6:96:10:db:1f:72:7f:15:7d:dc:fc:ac:a1: f6:df:3a:69:bc:cd:3d:07:e8:28:f5:9d:25:97:d1: 91:67:37:b1:a8:6b:67:80:a2:ea:a5:cf:16:86:0b: 9b:9b:09:60:8a:ef:fd:b4:1e:22:00:45:96:62:d9: 77:05:87:e0:42:a1:89:88:a6:9f:9a:c1:a3:92:72: 30:eb:1c:d3:dd:7b:eb:96:17:f4:2e:a7:92:45:c0: aa:11:4b:84:a0:e7:d9:04:61:db:b9:2c:09:35:27: e2:32:8b:fe:28:a6:b6:a8:2d:a6:a5:20:03:84:0d: 7e:1b:4a:69:eb:e8:1a:b4:8b:37:b6:98:14:7c:ea: 6d:e0:ba:77:47:43:d5:2c:9a:91:85:e0:ce:02:2b: 17:e9:cd:bd:ca:fa:53:7b:76:e3:e7:47:5b:70:f8: 2d:b6:7d:23:e0:50:c1:d8:8b:17:db:cb:ef:7b:9a: 5f:7d:2d:40:93:14:65:84:41:8d:09:99:ef:62:50: df:e2:7b:54:51:76:3b:7a:5a:9c:b0:fb:8d:65:5d: b8:52:fd:6c:fc:8d:ff:06:ce:5a:32:be:4c:8b:40: 5d:b8:e6:51:b1:40:00:ea:0b:64:a1:b1:d2:ea:1c: 2f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FA:C3:AC:95:91:11:45:51:0A:FD:39:AC:9A:06:31:26:62:3D:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a677148e-8e5e-3bf5-9614-c93128ae885c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d/a1bd9d43-c127-4a9e-b038-0c436c5d905d.crl X509v3 Authority Key Identifier: keyid:44:56:B0:0C:C3:6F:6E:82:D5:8A:0A:1C:2A:77:45:78:E6:33:A0:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1bd9d43-c127-4a9e-b038-0c436c5d905d.cer sbgp-ipAddrBlock: critical IPv4: 206.53.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:14:20:53:cd:f9:e6:61:eb:ef:13:ec:84:96:a4:cd:65:8f: db:bf:cc:79:ee:a6:95:7e:14:08:8f:c9:d0:2e:bb:a2:cf:00: 51:a0:aa:84:a8:c0:7d:98:d6:65:d4:dd:2a:b2:e4:17:f8:3f: 14:7e:4c:14:61:e1:eb:b5:fd:2f:74:52:86:1b:b2:30:2c:18: 99:5a:46:26:ef:ac:ea:75:f7:96:77:30:6d:6a:ce:a2:92:e5: 0d:90:44:e5:9f:f1:cb:66:04:6a:f9:6a:5b:5f:81:71:8a:42: e6:a4:ae:99:89:2f:90:cc:1b:26:2c:2c:cf:fe:80:e4:89:80: 1c:11:cd:26:6d:66:7b:56:cf:4e:2c:39:0e:dc:31:97:63:e4: 85:15:9b:4b:3c:2a:a5:de:ed:e8:53:52:de:e7:f6:1b:61:10: 32:e8:8c:7f:c2:a1:35:60:b4:00:64:ee:07:1f:3e:63:7d:a0: 34:24:41:bb:1d:84:f9:54:7d:4a:77:92:43:c1:d6:ac:91:55: cc:c9:e4:e2:83:93:e5:04:dd:1c:c7:6b:c7:44:47:74:b4:50: 83:8d:9b:0d:89:25:21:c0:d3:40:c0:52:51:7a:78:0c:55:d5: af:43:bb:e3:48:9f:59:32:70:59:2c:b8:01:b8:05:23:b9:95: 4a:db:59:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gtZ5P9ACm25UMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFiZDlkNDMtYzEyNy00YTllLWIwMzgtMGM0MzZjNWQ5 MDVkMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTkzMGU4ZWMtMGUyMi00OWIyLTk5NjUtNDljNDQ1MmViOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyj11ShbAAI36yD0+COh3qaWENsfcn8Vfdz8 rKH23zppvM09B+go9Z0ll9GRZzexqGtngKLqpc8Whgubmwlgiu/9tB4iAEWWYtl3 BYfgQqGJiKafmsGjknIw6xzT3Xvrlhf0LqeSRcCqEUuEoOfZBGHbuSwJNSfiMov+ KKa2qC2mpSADhA1+G0pp6+gatIs3tpgUfOpt4Lp3R0PVLJqRheDOAisX6c29yvpT e3bj50dbcPgttn0j4FDB2IsX28vve5pffS1AkxRlhEGNCZnvYlDf4ntUUXY7elqc sPuNZV24Uv1s/I3/Bs5aMr5Mi0BduOZRsUAA6gtkobHS6hwvnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP6w6yVkRFFUQr9OayaBjEmYj0JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJk OWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQzNmM1ZDkwNWQvYTY3NzE0OGUtOGU1ZS0z YmY1LTk2MTQtYzkzMTI4YWU4ODVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFiZDlkNDMtYzEyNy00YTllLWIw MzgtMGM0MzZjNWQ5MDVkL2ExYmQ5ZDQzLWMxMjctNGE5ZS1iMDM4LTBjNDM2YzVk OTA1ZC5jcmwwHwYDVR0jBBgwFoAURFawDMNvboLVigocKndFeOYzoPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWJkOWQ0My1jMTI3LTRhOWUtYjAzOC0wYzQz NmM1ZDkwNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzjWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYUIFPN+eZh6+8T7ISWpM1lj9u/zHnuppV+FAiPydAuu6LPAFGgqoSo wH2Y1mXU3Sqy5Bf4PxR+TBRh4eu1/S90UoYbsjAsGJlaRibvrOp195Z3MG1qzqKS 5Q2QROWf8ctmBGr5altfgXGKQuakrpmJL5DMGyYsLM/+gOSJgBwRzSZtZntWz04s OQ7cMZdj5IUVm0s8KqXe7ehTUt7n9hthEDLojH/CoTVgtABk7gcfPmN9oDQkQbsd hPlUfUp3kkPB1qyRVczJ5OKDk+UE3RzHa8dER3S0UIONmw2JJSHA00DAUlF6eAxV 1a9Du+NIn1kycFksuAG4BSO5lUrbWVo= -----END CERTIFICATE-----Generated at Tue Oct 13 04:04:32 2026 by rpki-client