$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa File: 8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa (raw, json) Hash identifier: LXkYUbnBweP/9Sjt59KkJ7/0vFCYyQ1UMf90SeLZcE8= Subject key identifier: 87:25:E1:20:3A:FD:08:A5:99:D1:A5:E4:31:34:C3:1E:03:EC:BD:71 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584F49740F6D0670E5EFD9F9F180 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14740 IP address blocks: 206.210.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0f:6d:06:70:e5:ef:d9:f9:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=35dcef48-cd64-4695-8507-417061fa8b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:eb:b5:ec:0f:9b:0d:87:a1:78:63:16:74: a3:fe:fd:fa:0e:10:ba:60:da:53:03:23:24:7c:db: f1:06:89:1d:e4:c6:b2:81:f6:01:c9:47:c4:3d:b2: 24:12:30:15:5e:b8:c5:f9:98:11:7a:6b:be:5e:c8: 47:4c:c2:76:34:52:04:d1:95:6b:75:07:f8:df:4a: 3f:a4:b2:1a:04:b2:1b:d0:23:42:00:08:2b:ad:99: cf:f4:f3:9d:41:d5:2f:ee:fd:56:54:46:ab:df:f1: fb:e5:1f:e2:fa:ec:b1:91:4a:a0:78:33:77:ee:71: 10:f5:2a:9a:a4:e3:c7:36:6f:fa:04:06:f9:b1:ce: 6e:0e:db:17:57:d9:25:25:10:d3:80:b6:b4:22:37: 9a:4d:bb:44:fd:9b:a1:2d:e1:0a:ce:b6:8a:67:de: 7a:d2:86:e5:b3:d8:18:dc:dd:c6:df:2a:99:fe:6b: 55:28:f3:b4:3e:d9:cd:56:d5:57:3a:a3:02:95:f6: a6:62:4a:17:68:80:7c:c1:74:7e:91:3c:f6:0f:03: c1:ef:4e:c2:bd:e8:97:fc:15:6a:1a:7d:cb:30:c4: b0:94:23:66:b8:8a:75:b8:6f:96:2c:b2:4d:9f:75: eb:8a:5e:95:62:80:ef:c6:76:86:ff:c9:72:e5:64: 03:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:25:E1:20:3A:FD:08:A5:99:D1:A5:E4:31:34:C3:1E:03:EC:BD:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 206.210.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:81:cb:26:c5:e2:28:8e:da:05:5f:0c:4b:23:61:0d:a4:05: e0:f1:87:29:fc:0f:ad:e3:0f:ad:f5:d0:2d:56:9d:3d:3f:34: 1c:fd:ab:35:7b:62:7f:b3:11:5a:0b:93:a9:51:c4:f4:fe:ee: e3:94:45:5c:33:97:68:62:1d:85:8c:e4:c8:51:60:a6:c8:38: 57:38:eb:ae:1f:b9:31:f1:12:f8:9c:e4:3c:0e:05:76:38:c4: 76:41:8a:9e:fe:90:d3:15:d9:14:88:70:a1:8e:39:68:60:43: 6c:86:4d:7c:a3:bc:aa:34:4e:a9:59:ca:80:64:c6:c3:af:4a: 2f:ea:70:2a:4e:3f:e8:61:d9:6b:c1:20:d4:27:32:93:c2:6a: 00:00:51:cd:48:b0:00:91:71:3e:53:f4:ef:de:b1:a3:97:ba: 55:16:ea:62:d9:a0:ab:88:88:cd:21:15:2f:c5:b6:5e:11:63: e1:88:33:03:f3:d3:c7:84:84:78:7d:60:5f:9b:cd:e0:7a:ae: 7f:d6:b5:d4:21:35:45:18:53:5b:b3:e0:7a:8e:3d:57:78:89: 9c:41:1d:b2:33:42:10:b4:5b:a6:3f:f1:d8:73:59:cc:3f:a6: 0d:8b:d2:c2:78:8a:ce:fc:93:61:a6:ce:d0:4a:37:4c:ac:9b: 81:72:c6:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdA9tBnDl79n58YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzVkY2VmNDgtY2Q2NC00Njk1LTg1MDctNDE3MDYxZmE4YjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIjrtewPmw2HoXhjFnSj/v36DhC6YNpTAyMk fNvxBokd5MaygfYByUfEPbIkEjAVXrjF+ZgRemu+XshHTMJ2NFIE0ZVrdQf430o/ pLIaBLIb0CNCAAgrrZnP9POdQdUv7v1WVEar3/H75R/i+uyxkUqgeDN37nEQ9Sqa pOPHNm/6BAb5sc5uDtsXV9klJRDTgLa0IjeaTbtE/ZuhLeEKzraKZ9560obls9gY 3N3G3yqZ/mtVKPO0PtnNVtVXOqMClfamYkoXaIB8wXR+kTz2DwPB707CveiX/BVq Gn3LMMSwlCNmuIp1uG+WLLJNn3Xril6VYoDvxnaG/8ly5WQDKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcl4SA6/QilmdGl5DE0wx4D7L1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvOGI5NGQxMjMtMWU2ZS0z OWIyLWI4YWMtZjllN2Q0MmJlZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztJVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuByybF4iiO2gVfDEsjYQ2kBeDxhyn8D63jD6310C1WnT0/NBz9qzV7 Yn+zEVoLk6lRxPT+7uOURVwzl2hiHYWM5MhRYKbIOFc4664fuTHxEvic5DwOBXY4 xHZBip7+kNMV2RSIcKGOOWhgQ2yGTXyjvKo0TqlZyoBkxsOvSi/qcCpOP+hh2WvB INQnMpPCagAAUc1IsACRcT5T9O/esaOXulUW6mLZoKuIiM0hFS/Ftl4RY+GIMwPz 08eEhHh9YF+bzeB6rn/WtdQhNUUYU1uz4HqOPVd4iZxBHbIzQhC0W6Y/8dhzWcw/ pg2L0sJ4is78k2GmztBKN0ysm4Fyxqs= -----END CERTIFICATE-----Generated at Tue Oct 6 23:20:07 2026 by rpki-client