$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6/4aeaee1e-1d4e-3317-9efe-151695d702d0.roa File: 4aeaee1e-1d4e-3317-9efe-151695d702d0.roa (raw, json) Hash identifier: peLNsC4Hu0Za0SEn7JSpH+5N1WGL7ngX/YX/F2K4blU= Subject key identifier: B7:FF:C1:44:AC:1C:9A:94:EE:A4:DD:D3:3F:1A:88:15:D4:F9:81:C5 Certificate issuer: /CN=35f87494-f17b-4780-a8d9-0e3d5a3e43d6 Certificate serial: 010D0C9F4328584F2D15013EFBEC293B8DD68600 Authority key identifier: 56:76:51:0D:6F:88:F9:45:61:BC:1D:D5:D1:14:6D:50:97:57:05:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6/4aeaee1e-1d4e-3317-9efe-151695d702d0.roa Signing time: Mon 14 Sep 2026 21:09:09 +0000 ROA not before: Mon 14 Sep 2026 21:09:09 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 402568 IP address blocks: 204.17.242.0/24 maxlen: 24 2602:f2f1::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6/35f87494-f17b-4780-a8d9-0e3d5a3e43d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6/35f87494-f17b-4780-a8d9-0e3d5a3e43d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:15:01:3e:fb:ec:29:3b:8d:d6:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35f87494-f17b-4780-a8d9-0e3d5a3e43d6 Validity Not Before: Sep 14 21:09:09 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=61f189af-8e54-4d48-a56a-49fbf3863820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1d:d3:65:6d:4b:5c:d0:e9:81:91:42:08:9c: 62:46:74:ca:10:c3:31:97:79:56:d1:3e:d0:b8:8a: c8:74:d7:a0:28:16:68:a9:07:d3:c7:4c:91:89:58: 53:61:f8:42:5f:c3:1c:17:11:d4:05:1e:25:c5:cc: cf:15:a6:a3:65:51:98:36:dc:41:6d:02:a3:2d:41: 12:6f:bd:14:d4:61:34:da:e9:3a:cd:c4:ba:15:17: e4:8a:48:86:d0:5c:05:b0:8a:8d:51:87:0e:a2:e2: 02:ac:58:9b:a3:39:e3:69:94:51:cb:ef:7e:fb:e3: bf:fe:c1:5a:73:7d:2c:5f:4e:00:e9:39:84:e9:09: 01:67:3a:38:3f:e2:f4:ed:ed:5d:6d:53:8a:ab:4f: 34:48:cc:70:1c:8f:58:b4:14:33:69:34:3e:15:4d: 9b:ee:0a:8f:58:f8:c3:24:76:df:5c:1a:c3:fe:d2: e0:66:8b:e5:19:b9:8e:9e:6f:1d:89:27:18:1c:92: d4:14:40:94:b0:52:46:d5:66:b5:64:4c:5d:9c:18: c8:c9:15:74:41:7c:ce:81:8d:ca:49:43:a9:52:32: 19:a4:7a:c0:ee:d6:1e:0f:1d:6e:79:2b:5a:f2:6e: 59:e8:93:2a:1d:ea:20:df:7a:1a:73:08:aa:73:3c: 77:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FF:C1:44:AC:1C:9A:94:EE:A4:DD:D3:3F:1A:88:15:D4:F9:81:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6/4aeaee1e-1d4e-3317-9efe-151695d702d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6/35f87494-f17b-4780-a8d9-0e3d5a3e43d6.crl X509v3 Authority Key Identifier: keyid:56:76:51:0D:6F:88:F9:45:61:BC:1D:D5:D1:14:6D:50:97:57:05:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35f87494-f17b-4780-a8d9-0e3d5a3e43d6.cer sbgp-ipAddrBlock: critical IPv4: 204.17.242.0/24 IPv6: 2602:f2f1::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:23:58:da:70:9a:7f:99:b2:08:21:02:2d:77:86:f8:1a:f6: 63:e3:22:af:76:63:0a:ad:8e:85:bc:ff:d0:27:ea:78:49:99: 46:47:14:d9:11:a7:9d:37:35:d4:ce:31:2b:04:c9:f3:52:8c: 34:e6:5d:57:4d:ee:76:7d:5c:8c:0a:54:2c:1b:0f:40:f5:be: da:c9:31:32:bc:ba:c2:d7:d9:63:11:d4:e3:b0:4f:14:5a:59: c0:31:94:f7:6a:9d:f7:32:3b:d7:1c:ff:1b:04:de:01:39:1f: 27:41:b4:1b:2d:f1:e3:96:64:a3:df:13:17:34:b5:4d:f3:01: 20:31:b4:7b:76:9c:20:ea:5f:ef:2e:66:55:63:8c:9c:71:70: a6:83:b0:e9:55:8a:c8:1e:9b:19:90:e7:56:27:e8:00:de:7d: 45:b9:a6:fe:b4:bf:e9:ac:99:b8:23:73:b5:6a:c1:af:3f:2a: 8d:33:d0:31:85:b9:1a:c0:4a:a0:7c:bf:6c:4d:86:de:0a:61: 69:46:28:34:00:1d:2e:73:96:c9:ec:5e:c6:e6:a8:8a:c0:58: e3:8f:e4:3f:3e:d3:c7:1b:44:f8:d7:16:c9:72:79:05:ff:35: d1:d8:2b:c1:d3:51:c5:b6:69:53:9f:80:ac:7a:d2:bd:da:91: a2:6b:65:93 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8tFQE+++wpO43WhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVmODc0OTQtZjE3Yi00NzgwLWE4ZDktMGUzZDVhM2U0 M2Q2MB4XDTI2MDkxNDIxMDkwOVoXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk NjFmMTg5YWYtOGU1NC00ZDQ4LWE1NmEtNDlmYmYzODYzODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh3TZW1LXNDpgZFCCJxiRnTKEMMxl3lW0T7Q uIrIdNegKBZoqQfTx0yRiVhTYfhCX8McFxHUBR4lxczPFaajZVGYNtxBbQKjLUES b70U1GE02uk6zcS6FRfkikiG0FwFsIqNUYcOouICrFiboznjaZRRy+9+++O//sFa c30sX04A6TmE6QkBZzo4P+L07e1dbVOKq080SMxwHI9YtBQzaTQ+FU2b7gqPWPjD JHbfXBrD/tLgZovlGbmOnm8diScYHJLUFECUsFJG1Wa1ZExdnBjIyRV0QXzOgY3K SUOpUjIZpHrA7tYeDx1ueSta8m5Z6JMqHeog33oacwiqczx39QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLf/wUSsHJqU7qTd0z8aiBXU+YHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNWY4 NzQ5NC1mMTdiLTQ3ODAtYThkOS0wZTNkNWEzZTQzZDYvNGFlYWVlMWUtMWQ0ZS0z MzE3LTllZmUtMTUxNjk1ZDcwMmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzVmODc0OTQtZjE3Yi00NzgwLWE4 ZDktMGUzZDVhM2U0M2Q2LzM1Zjg3NDk0LWYxN2ItNDc4MC1hOGQ5LTBlM2Q1YTNl NDNkNi5jcmwwHwYDVR0jBBgwFoAUVnZRDW+I+UVhvB3V0RRtUJdXBTYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zNWY4NzQ5NC1mMTdiLTQ3ODAtYThkOS0wZTNk NWEzZTQzZDYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzBHyMA4E AgACMAgDBgAmAvLxADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcI1jacJp/mbIIIQItd4b4GvZj4yKvdmMK rY6FvP/QJ+p4SZlGRxTZEaedNzXUzjErBMnzUow05l1XTe52fVyMClQsGw9A9b7a yTEyvLrC19ljEdTjsE8UWlnAMZT3ap33MjvXHP8bBN4BOR8nQbQbLfHjlmSj3xMX NLVN8wEgMbR7dpwg6l/vLmZVY4yccXCmg7DpVYrIHpsZkOdWJ+gA3n1Fuab+tL/p rJm4I3O1asGvPyqNM9AxhbkawEqgfL9sTYbeCmFpRig0AB0uc5bJ7F7G5qiKwFjj j+Q/PtPHG0T41xbJcnkF/zXR2CvB01HFtmlTn4CsetK92pGia2WT -----END CERTIFICATE-----Generated at Sun Sep 20 20:37:36 2026 by rpki-client