$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/a8d95147-2bf2-381a-b436-c637c0802b79.roa File: a8d95147-2bf2-381a-b436-c637c0802b79.roa (raw, json) Hash identifier: gO0wOZUG/mokRYLCFA/jhZFq1OuRGrmCwJpUudyk8r8= Subject key identifier: 3A:E3:CB:1C:88:CC:06:65:D0:CB:FC:8D:CE:24:F2:0E:9C:71:25:F7 Certificate issuer: /CN=03d20efd-729c-46b2-b268-510d1f9f7dd3 Certificate serial: 010D0C9F4328584F093CDC0D8BDFD53F9CD9E2C0 Authority key identifier: EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/a8d95147-2bf2-381a-b436-c637c0802b79.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 393424 IP address blocks: 206.108.0.0/24 maxlen: 24 2602:fde5::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:dc:0d:8b:df:d5:3f:9c:d9:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d20efd-729c-46b2-b268-510d1f9f7dd3 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=93175c36-1a10-40ec-9800-550d3eb83eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c7:92:cd:97:c1:91:5f:f3:ca:b0:dc:3d:64: 29:84:e0:e2:8f:c1:67:0d:a0:81:ee:38:1c:a9:e4: e9:90:aa:78:50:8c:0b:3a:a5:98:28:da:cf:4f:31: 74:ec:93:ae:3c:fe:90:4f:1b:cd:10:90:67:41:b7: 5c:9b:47:3f:d1:88:79:bf:df:c1:92:4b:5a:16:9e: 25:86:28:e5:c3:b8:d8:7e:ed:5f:94:0d:ca:8b:6e: 0c:5f:8b:f5:ac:b9:53:e8:89:7c:2a:0d:5a:53:55: 6a:b7:f8:87:93:db:4f:20:95:c2:b6:bd:a7:ea:67: e5:25:cd:3b:3b:c2:df:f7:05:9e:a9:72:ec:3a:f0: 4e:5b:79:01:96:f9:b0:dd:03:c5:d0:7c:e7:a0:bc: 6e:09:c2:7b:80:88:40:c2:9a:41:3c:cf:41:8b:84: 19:de:ff:94:23:09:65:f5:15:f4:e0:34:de:4d:0d: 26:1e:bc:d5:a1:31:9b:66:10:dd:84:df:2e:86:ad: 37:ac:a4:2a:e3:9a:8c:a7:03:0f:93:01:b5:6a:c2: 8e:18:e4:58:37:7b:5a:7e:3d:90:b1:39:c6:99:1f: 8d:d5:b0:48:76:70:3b:65:79:bb:b9:3e:0c:77:24: 3c:d1:fc:75:2b:33:1d:25:51:98:af:27:c0:1e:00: a5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E3:CB:1C:88:CC:06:65:D0:CB:FC:8D:CE:24:F2:0E:9C:71:25:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/a8d95147-2bf2-381a-b436-c637c0802b79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl X509v3 Authority Key Identifier: keyid:EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer sbgp-ipAddrBlock: critical IPv4: 206.108.0.0/24 IPv6: 2602:fde5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:91:1d:b1:76:01:d8:f5:2b:1b:e4:31:62:a2:02:83:e7:14: 5b:eb:df:43:0d:f4:4e:4c:7c:3b:cc:66:d9:fb:81:a2:8b:67: b4:31:33:75:b2:46:58:ea:d2:8e:92:68:8a:22:5b:2b:2a:ae: 8a:88:f8:f1:67:82:6a:f3:91:96:8a:47:3e:67:09:ac:ef:90: 0a:46:71:67:90:3a:19:85:f5:3a:6a:d6:f6:9b:d3:c0:60:14: dd:94:d3:f9:55:85:f5:14:69:01:79:4f:8d:fe:9e:70:7c:5d: 39:58:b8:57:70:98:a3:5d:dd:d8:ff:e6:57:6e:aa:c9:70:ba: 95:ae:db:bd:ff:1b:1d:32:70:75:0a:72:cb:08:b3:c2:63:af: 95:bd:62:45:6b:e7:1f:c2:2a:0a:d7:97:60:e9:41:17:0f:f1: 8b:66:ec:16:4d:2e:b5:a7:c7:b4:a7:82:99:bb:db:1d:84:c2: c6:e7:df:c7:bd:da:2e:e9:65:73:f4:9c:7c:0b:43:e6:84:12: db:20:a1:38:8a:17:31:04:7c:1f:50:70:44:64:82:80:11:89: 1c:7c:69:39:e0:7c:a2:fa:4f:39:26:73:c7:ff:20:f7:6d:c6: 75:04:be:bb:58:00:9d:14:57:7b:fa:ac:c7:be:83:78:ff:98: c7:d0:8c:4f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8JPNwNi9/VP5zZ4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNkMjBlZmQtNzI5Yy00NmIyLWIyNjgtNTEwZDFmOWY3 ZGQzMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk OTMxNzVjMzYtMWExMC00MGVjLTk4MDAtNTUwZDNlYjgzZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjseSzZfBkV/zyrDcPWQphODij8FnDaCB7jgc qeTpkKp4UIwLOqWYKNrPTzF07JOuPP6QTxvNEJBnQbdcm0c/0Yh5v9/BkktaFp4l hijlw7jYfu1flA3Ki24MX4v1rLlT6Il8Kg1aU1Vqt/iHk9tPIJXCtr2n6mflJc07 O8Lf9wWeqXLsOvBOW3kBlvmw3QPF0HznoLxuCcJ7gIhAwppBPM9Bi4QZ3v+UIwll 9RX04DTeTQ0mHrzVoTGbZhDdhN8uhq03rKQq45qMpwMPkwG1asKOGORYN3tafj2Q sTnGmR+N1bBIdnA7ZXm7uT4MdyQ80fx1KzMdJVGYryfAHgClRQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDrjyxyIzAZl0Mv8jc4k8g6ccSX3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Qy MGVmZC03MjljLTQ2YjItYjI2OC01MTBkMWY5ZjdkZDMvYThkOTUxNDctMmJmMi0z ODFhLWI0MzYtYzYzN2MwODAyYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNkMjBlZmQtNzI5Yy00NmIyLWIy NjgtNTEwZDFmOWY3ZGQzLzAzZDIwZWZkLTcyOWMtNDZiMi1iMjY4LTUxMGQxZjlm N2RkMy5jcmwwHwYDVR0jBBgwFoAU7igQcfxLoYlblvWnORaycggT39QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2QyMGVmZC03MjljLTQ2YjItYjI2OC01MTBk MWY5ZjdkZDMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzmwAMA4E AgACMAgDBgAmAv3lADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAckR2xdgHY9Ssb5DFiogKD5xRb699DDfRO THw7zGbZ+4Gii2e0MTN1skZY6tKOkmiKIlsrKq6KiPjxZ4Jq85GWikc+Zwms75AK RnFnkDoZhfU6atb2m9PAYBTdlNP5VYX1FGkBeU+N/p5wfF05WLhXcJijXd3Y/+ZX bqrJcLqVrtu9/xsdMnB1CnLLCLPCY6+VvWJFa+cfwioK15dg6UEXD/GLZuwWTS61 p8e0p4KZu9sdhMLG59/Hvdou6WVz9Jx8C0PmhBLbIKE4ihcxBHwfUHBEZIKAEYkc fGk54Hyi+k85JnPH/yD3bcZ1BL67WACdFFd7+qzHvoN4/5jH0IxP -----END CERTIFICATE-----Generated at Mon Sep 28 12:05:02 2026 by rpki-client