$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa File: b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa (raw, json) Hash identifier: Q1vn0o60GPV7qrvSYqPzCfM2V8IYvdjgKxCZ8O/i+LU= Subject key identifier: 33:FF:8F:F7:72:AB:58:C3:62:48:CC:6F:5E:1E:1F:F4:BB:4C:07:E5 Certificate issuer: /CN=c9607f1e-20c8-421d-b23b-a4c9bb6b791f Certificate serial: 010D0C9F4328584F4973F2A91A8DB98A5A5BA380 Authority key identifier: 3A:9D:F6:7E:78:A2:D3:C4:F2:72:DA:86:5E:28:29:FF:EE:ED:05:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 26962 IP address blocks: 207.71.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f2:a9:1a:8d:b9:8a:5a:5b:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9607f1e-20c8-421d-b23b-a4c9bb6b791f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1cb741d0-8fbd-46ec-a29c-b946aeb96d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:8e:2e:42:88:cd:b5:52:54:e4:a4:74:a0: 38:b2:16:11:1f:bf:b9:b8:2f:c8:3a:b5:60:09:7f: 39:b5:62:53:4f:60:12:81:69:ba:3d:81:11:50:24: c5:80:ca:f2:18:68:dc:e3:bf:cc:a8:cc:fb:b0:66: 88:83:aa:ec:e0:cc:85:af:3a:2a:73:30:88:23:27: f1:df:ec:52:f5:3c:ca:86:64:8b:56:f9:bc:df:f1: 2b:94:fa:f1:f1:f0:f4:d3:71:28:3a:d3:c4:cf:8a: 98:bd:fa:bf:d6:74:8c:d5:34:60:40:8b:84:3f:e1: 03:c7:00:20:23:36:8f:a7:4f:c0:79:39:3f:be:17: c0:1e:ca:56:46:8f:7b:d3:ab:70:f0:06:02:71:f5: 8d:f7:65:67:29:f2:51:db:89:eb:7e:54:54:8b:6d: 4c:b2:c1:a9:a2:dc:f2:b2:7d:ba:24:fb:40:9f:db: b4:5b:db:a9:24:82:be:66:e6:f0:da:74:b8:60:d4: f1:b0:16:ca:8f:d8:5f:11:db:16:4d:fe:45:ff:f5: 86:d9:7e:24:dd:3e:05:3b:06:e5:0b:fc:5a:37:e0: 72:a7:f6:56:46:ba:ff:69:a4:9d:64:52:20:01:d1: 90:b5:05:36:a7:e5:c7:83:59:8a:17:18:ed:e1:24: 04:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FF:8F:F7:72:AB:58:C3:62:48:CC:6F:5E:1E:1F:F4:BB:4C:07:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/b12a3cb5-98c7-31f3-bbf2-7541da4b1fab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.crl X509v3 Authority Key Identifier: keyid:3A:9D:F6:7E:78:A2:D3:C4:F2:72:DA:86:5E:28:29:FF:EE:ED:05:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9607f1e-20c8-421d-b23b-a4c9bb6b791f.cer sbgp-ipAddrBlock: critical IPv4: 207.71.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:a3:d2:12:33:b2:52:47:79:b4:f3:d1:f6:60:af:1e:86:9b: a9:42:c0:a2:02:23:0b:7e:a5:cd:8c:16:8f:c3:9c:78:a7:0c: c6:c3:38:d4:d1:a1:22:97:db:b3:2d:b0:61:91:fb:25:7b:6f: 71:41:66:84:39:16:fb:82:31:40:96:57:30:92:bd:cb:e1:b0: 58:b6:c5:00:ef:92:36:71:79:e2:c3:47:a0:68:04:13:08:a8: 95:4e:9a:fa:40:6a:5d:3c:1d:23:a2:7e:d2:4e:97:e1:dc:01: 8d:33:a0:d6:12:14:bd:4c:a0:97:e5:c5:d7:14:e2:07:3d:87: 58:d2:8d:f4:e9:ce:a9:d3:5b:57:5b:8f:d0:aa:c2:95:02:13: 37:3d:61:73:32:82:db:59:76:2a:fa:18:55:c4:be:5e:f8:f8: 2a:c4:4d:ec:cc:c5:81:bf:e6:cf:b0:76:4d:96:c9:e0:75:d6: d9:29:25:56:dc:4a:f9:66:9e:b8:b5:7c:cd:ff:d5:ff:41:7c: b4:89:58:db:ac:73:72:64:17:73:bd:37:3a:b7:4b:49:dd:8d: 36:29:26:f3:10:47:4a:4d:9e:b7:92:5d:35:12:20:00:18:6f: 11:6c:b9:f3:9e:c6:1d:d3:92:74:8f:f4:88:34:69:8f:de:d4: b7:2d:1e:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/KpGo25ilpbo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2MDdmMWUtMjBjOC00MjFkLWIyM2ItYTRjOWJiNmI3 OTFmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWNiNzQxZDAtOGZiZC00NmVjLWEyOWMtYjk0NmFlYjk2ZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIyOLkKIzbVSVOSkdKA4shYRH7+5uC/IOrVg CX85tWJTT2ASgWm6PYERUCTFgMryGGjc47/MqMz7sGaIg6rs4MyFrzoqczCIIyfx 3+xS9TzKhmSLVvm83/ErlPrx8fD003EoOtPEz4qYvfq/1nSM1TRgQIuEP+EDxwAg IzaPp0/AeTk/vhfAHspWRo9706tw8AYCcfWN92VnKfJR24nrflRUi21MssGpotzy sn26JPtAn9u0W9upJIK+Zubw2nS4YNTxsBbKj9hfEdsWTf5F//WG2X4k3T4FOwbl C/xaN+Byp/ZWRrr/aaSdZFIgAdGQtQU2p+XHg1mKFxjt4SQEvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDP/j/dyq1jDYkjMb14eH/S7TAflMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTYw N2YxZS0yMGM4LTQyMWQtYjIzYi1hNGM5YmI2Yjc5MWYvYjEyYTNjYjUtOThjNy0z MWYzLWJiZjItNzU0MWRhNGIxZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk2MDdmMWUtMjBjOC00MjFkLWIy M2ItYTRjOWJiNmI3OTFmL2M5NjA3ZjFlLTIwYzgtNDIxZC1iMjNiLWE0YzliYjZi NzkxZi5jcmwwHwYDVR0jBBgwFoAUOp32fnii08TyctqGXigp/+7tBR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTYwN2YxZS0yMGM4LTQyMWQtYjIzYi1hNGM5 YmI2Yjc5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz0egMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuj0hIzslJHebTz0fZgrx6Gm6lCwKICIwt+pc2MFo/DnHinDMbDONTR oSKX27MtsGGR+yV7b3FBZoQ5FvuCMUCWVzCSvcvhsFi2xQDvkjZxeeLDR6BoBBMI qJVOmvpAal08HSOiftJOl+HcAY0zoNYSFL1MoJflxdcU4gc9h1jSjfTpzqnTW1db j9CqwpUCEzc9YXMygttZdir6GFXEvl74+CrETezMxYG/5s+wdk2WyeB11tkpJVbc Svlmnri1fM3/1f9BfLSJWNusc3JkF3O9Nzq3S0ndjTYpJvMQR0pNnreSXTUSIAAY bxFsufOexh3TknSP9Ig0aY/e1LctHmM= -----END CERTIFICATE-----Generated at Sat Sep 26 16:45:46 2026 by rpki-client