$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa File: 9b2a0da3-5551-3cef-ab65-d40999076b92.roa (raw, json) Hash identifier: 4g6JKOqOt2x+IfaHrcDUxnZRUO7QdVvTgUkqGJw0PUc= Subject key identifier: 4E:5D:B6:99:BB:36:25:A6:69:82:A8:46:E3:4A:CD:A6:95:BA:E8:4F Certificate issuer: /CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720 Certificate serial: 010D0C9F4328584F4277FD935C26BC2B632362A8 Authority key identifier: 61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 63351 IP address blocks: 207.90.254.0/23 maxlen: 24 2606:3180::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:fd:93:5c:26:bc:2b:63:23:62:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfd8346-5f32-4973-b00f-6aa94c8ca720 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=48e5aece-f5bc-4070-aee7-86b532470281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:27:7a:74:af:89:a0:90:fa:7f:35:01:10:6e: 5a:a3:f9:66:ca:f1:dd:72:58:ef:ac:ef:a0:17:6c: 79:7f:16:30:2e:37:1e:3c:ca:fb:39:60:b4:34:10: 7e:5e:9e:06:a5:33:02:d0:ab:a3:9d:c6:13:b1:2d: 24:bc:3c:6a:82:d1:98:28:9c:69:1b:0d:1a:ab:7f: ff:06:62:43:4c:cb:94:b2:c7:66:42:78:30:f4:28: 33:29:2f:95:ce:9b:e3:d1:dd:75:6c:99:31:45:ea: 90:25:32:e7:6f:d5:26:e4:78:60:c0:f0:84:7e:ff: 9c:7a:8a:d3:62:f0:6a:38:0f:9f:5f:31:3d:33:26: 9e:6d:85:8b:59:29:67:41:60:4f:e5:7b:df:53:c4: aa:b8:62:6e:25:bc:ad:f1:59:fc:bb:98:f5:cb:3d: ee:eb:8a:1d:18:05:ab:7b:04:fd:c4:b8:e9:1f:d1: a1:05:d3:c0:f3:5b:da:69:04:bd:f2:46:47:fb:17: 24:3e:b0:27:3c:c0:b4:1c:fd:58:ee:fe:0a:c1:10: 4f:00:6b:a9:9d:82:34:97:03:bc:97:53:6d:6a:6b: ac:23:1a:60:d0:2b:8b:de:6d:a8:78:00:4d:c8:7c: a2:01:9c:15:59:ee:9c:a9:2c:0c:4c:b3:25:0c:16: 07:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5D:B6:99:BB:36:25:A6:69:82:A8:46:E3:4A:CD:A6:95:BA:E8:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/9b2a0da3-5551-3cef-ab65-d40999076b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720/3bfd8346-5f32-4973-b00f-6aa94c8ca720.crl X509v3 Authority Key Identifier: keyid:61:99:39:67:76:A2:0A:A2:6A:AF:E6:CD:DF:15:1C:3A:A9:E4:FA:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3bfd8346-5f32-4973-b00f-6aa94c8ca720.cer sbgp-ipAddrBlock: critical IPv4: 207.90.254.0/23 IPv6: 2606:3180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:80:09:33:bc:d9:00:10:37:a5:3d:84:96:38:1b:14:a3:84: 75:de:0f:89:9b:bd:fd:28:09:cf:8b:38:25:78:3a:88:ff:31: b8:a4:29:6f:f1:27:ef:9c:98:a9:99:03:9f:02:cb:f8:50:e5: 41:1a:6c:37:51:16:34:f4:4a:9f:b4:85:5e:48:ce:3f:bc:db: db:bf:7f:14:b3:bf:21:a1:b3:08:c3:15:7e:8d:6f:c3:91:0a: 70:fc:67:ac:4a:09:d7:1c:70:c0:d4:54:0d:40:31:fe:7a:a7: 21:be:77:c3:ca:3b:04:0f:c2:f4:47:c0:ac:fb:36:74:d8:aa: b8:2b:47:fd:75:ff:f9:bf:b0:9d:0f:55:a6:7d:34:53:37:08: 04:99:ef:cd:11:17:89:bc:3b:d1:34:34:e4:57:57:50:79:d6: 65:83:72:71:04:d9:5b:da:af:62:9b:23:32:7e:37:54:67:7c: 58:f4:37:ae:b1:40:f8:6a:01:fc:a3:9e:2a:f3:32:74:e6:1e: 4b:6d:c8:b0:d8:af:93:12:44:8f:d4:6a:b0:02:40:a6:fa:c4: 53:ba:95:39:1f:7f:c7:f9:e7:c3:8b:fc:d7:6d:9c:0a:b0:37: 0c:df:2b:d5:f7:01:b7:2b:a6:a5:a0:9e:6a:c8:56:ae:47:4c: 11:63:3e:8d -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9Cd/2TXCa8K2MjYqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JmZDgzNDYtNWYzMi00OTczLWIwMGYtNmFhOTRjOGNh NzIwMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NDhlNWFlY2UtZjViYy00MDcwLWFlZTctODZiNTMyNDcwMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6id6dK+JoJD6fzUBEG5ao/lmyvHdcljvrO+g F2x5fxYwLjcePMr7OWC0NBB+Xp4GpTMC0KujncYTsS0kvDxqgtGYKJxpGw0aq3// BmJDTMuUssdmQngw9CgzKS+Vzpvj0d11bJkxReqQJTLnb9Um5HhgwPCEfv+ceorT YvBqOA+fXzE9MyaebYWLWSlnQWBP5XvfU8SquGJuJbyt8Vn8u5j1yz3u64odGAWr ewT9xLjpH9GhBdPA81vaaQS98kZH+xckPrAnPMC0HP1Y7v4KwRBPAGupnYI0lwO8 l1NtamusIxpg0CuL3m2oeABNyHyiAZwVWe6cqSwMTLMlDBYHbQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFE5dtpm7NiWmaYKoRuNKzaaVuuhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYmZk ODM0Ni01ZjMyLTQ5NzMtYjAwZi02YWE5NGM4Y2E3MjAvOWIyYTBkYTMtNTU1MS0z Y2VmLWFiNjUtZDQwOTk5MDc2YjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2JmZDgzNDYtNWYzMi00OTczLWIw MGYtNmFhOTRjOGNhNzIwLzNiZmQ4MzQ2LTVmMzItNDk3My1iMDBmLTZhYTk0Yzhj YTcyMC5jcmwwHwYDVR0jBBgwFoAUYZk5Z3aiCqJqr+bN3xUcOqnk+qYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zYmZkODM0Ni01ZjMyLTQ5NzMtYjAwZi02YWE5 NGM4Y2E3MjAuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBz1r+MA0E AgACMAcDBQAmBjGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBADuACTO82QAQN6U9hJY4GxSjhHXeD4mbvf0o Cc+LOCV4Ooj/MbikKW/xJ++cmKmZA58Cy/hQ5UEabDdRFjT0Sp+0hV5Izj+829u/ fxSzvyGhswjDFX6Nb8ORCnD8Z6xKCdcccMDUVA1AMf56pyG+d8PKOwQPwvRHwKz7 NnTYqrgrR/11//m/sJ0PVaZ9NFM3CASZ780RF4m8O9E0NORXV1B51mWDcnEE2Vva r2KbIzJ+N1RnfFj0N66xQPhqAfyjnirzMnTmHkttyLDYr5MSRI/UarACQKb6xFO6 lTkff8f558OL/NdtnAqwNwzfK9X3AbcrpqWgnmrIVq5HTBFjPo0= -----END CERTIFICATE-----Generated at Sun Sep 27 16:44:06 2026 by rpki-client