$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/6d0b4764-0964-39bc-9cef-9a933d1daa6f.roa File: 6d0b4764-0964-39bc-9cef-9a933d1daa6f.roa (raw, json) Hash identifier: EXYrDRpDxTPMLlPtDiAyKRS2BUeg0BCjYGfucj+f7hA= Subject key identifier: 6A:0F:38:C9:17:E0:20:0C:30:BF:6B:77:23:D0:23:B2:9D:8C:45:DA Certificate issuer: /CN=884b7d34-d438-4755-8e96-f046e8b77dab Certificate serial: 010D0C9F4328584F34EE345F5CA8BD29D1493040 Authority key identifier: B7:F5:36:39:6C:D6:8A:75:38:CC:19:B4:AB:AE:38:8D:80:30:86:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/6d0b4764-0964-39bc-9cef-9a933d1daa6f.roa Signing time: Thu 17 Sep 2026 16:37:26 +0000 ROA not before: Thu 17 Sep 2026 16:37:26 +0000 ROA not after: Wed 16 Dec 2026 17:37:26 +0000 asID: 399220 IP address blocks: 207.66.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/884b7d34-d438-4755-8e96-f046e8b77dab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/884b7d34-d438-4755-8e96-f046e8b77dab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:ee:34:5f:5c:a8:bd:29:d1:49:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884b7d34-d438-4755-8e96-f046e8b77dab Validity Not Before: Sep 17 16:37:26 2026 GMT Not After : Dec 16 17:37:26 2026 GMT Subject: CN=ce320958-767a-456a-8fbd-543e27bef94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:1e:35:18:cd:e8:70:15:26:a0:40:d8:cb: 67:f8:25:33:c5:24:c9:b5:47:d9:60:f6:db:7e:c8: bb:a9:b4:e3:16:f3:34:19:78:42:ca:e6:ef:90:56: 24:da:b5:bf:f3:a5:5a:a3:33:3a:16:54:82:af:d3: 5b:c0:7c:45:ac:4b:9a:97:97:b7:47:54:7f:38:c4: 0c:bd:60:6e:38:4a:c2:ce:f6:e8:f3:fc:48:02:10: 5e:e7:6b:da:54:ed:d9:44:ce:0e:d5:67:90:bd:04: c0:0d:0c:02:c9:df:b5:b0:9a:e6:89:6a:5f:0f:2c: 6e:04:92:d3:99:23:92:21:7a:b6:b5:41:4e:2c:f8: d2:34:a0:97:fb:99:ab:85:fe:69:33:f8:5c:39:fd: f1:e6:30:5d:37:ef:e9:4f:5f:54:44:e2:dd:d1:66: 13:c8:ba:f5:ff:a6:a3:e5:a4:65:2b:26:0a:c0:a4: 2a:bd:a4:78:ed:ea:fe:6d:95:2c:c6:42:90:2d:be: 16:fe:fc:10:e6:da:7e:c2:67:67:ed:d7:2c:0e:93: 86:af:3a:1d:a9:8a:0b:87:bc:0e:93:2f:3a:be:77: 65:f9:33:0d:ef:dd:f8:f5:e9:4a:4b:68:6f:ce:59: 92:84:15:f9:86:4f:c5:c6:66:52:b6:e3:b6:50:57: e9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0F:38:C9:17:E0:20:0C:30:BF:6B:77:23:D0:23:B2:9D:8C:45:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/6d0b4764-0964-39bc-9cef-9a933d1daa6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/884b7d34-d438-4755-8e96-f046e8b77dab.crl X509v3 Authority Key Identifier: keyid:B7:F5:36:39:6C:D6:8A:75:38:CC:19:B4:AB:AE:38:8D:80:30:86:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab.cer sbgp-ipAddrBlock: critical IPv4: 207.66.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:97:dd:e8:69:8f:d3:a3:2b:29:90:2d:44:20:a8:69:79:da: 80:74:0d:23:99:8e:11:be:b1:32:0d:d6:5d:fc:01:ca:4a:42: 91:c7:fd:b5:8a:a7:41:22:95:98:c5:40:ec:9e:b4:e2:90:bf: 97:80:97:f3:16:cd:3b:c4:7f:54:b0:ca:e3:ba:cf:a7:10:c4: 84:5c:dc:b1:bf:a9:e8:98:80:d3:d5:82:52:bd:50:6d:1f:cf: 22:c9:b7:7b:8a:c3:69:f0:9f:be:23:fb:26:05:fd:c9:18:ce: 77:c4:b9:78:02:b6:e3:c9:cb:4b:cc:11:45:6b:9d:55:b3:e1: d5:d4:17:25:eb:f3:27:db:39:cf:3c:b7:c1:37:45:a4:d3:fd: e6:02:1c:bf:0f:84:68:68:b3:36:de:43:c7:0d:5d:25:53:8f: 3a:04:33:43:a4:58:2e:b3:72:b3:99:0d:85:7b:4b:fc:11:99: f0:63:e0:e6:76:2e:1e:4c:42:46:df:64:10:46:80:ec:26:dc: d3:a6:dc:3d:e9:28:68:f3:fa:ec:f1:bd:65:c0:84:22:2b:b4: 14:92:66:ee:5c:c3:30:d2:12:1d:b7:8c:07:e6:28:39:33:5c: 94:f5:bf:95:79:f9:ca:e9:ab:82:6c:d9:68:86:ad:0c:ca:78: 93:9b:79:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE807jRfXKi9KdFJMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0YjdkMzQtZDQzOC00NzU1LThlOTYtZjA0NmU4Yjc3 ZGFiMB4XDTI2MDkxNzE2MzcyNloXDTI2MTIxNjE3MzcyNlowLzEtMCsGA1UEAxMk Y2UzMjA5NTgtNzY3YS00NTZhLThmYmQtNTQzZTI3YmVmOTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsceNRjN6HAVJqBA2Mtn+CUzxSTJtUfZYPbb fsi7qbTjFvM0GXhCyubvkFYk2rW/86VaozM6FlSCr9NbwHxFrEual5e3R1R/OMQM vWBuOErCzvbo8/xIAhBe52vaVO3ZRM4O1WeQvQTADQwCyd+1sJrmiWpfDyxuBJLT mSOSIXq2tUFOLPjSNKCX+5mrhf5pM/hcOf3x5jBdN+/pT19UROLd0WYTyLr1/6aj 5aRlKyYKwKQqvaR47er+bZUsxkKQLb4W/vwQ5tp+wmdn7dcsDpOGrzodqYoLh7wO ky86vndl+TMN79349elKS2hvzlmShBX5hk/FxmZStuO2UFfptQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoPOMkX4CAMML9rdyPQI7KdjEXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84ODRi N2QzNC1kNDM4LTQ3NTUtOGU5Ni1mMDQ2ZThiNzdkYWIvNmQwYjQ3NjQtMDk2NC0z OWJjLTljZWYtOWE5MzNkMWRhYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODg0YjdkMzQtZDQzOC00NzU1LThl OTYtZjA0NmU4Yjc3ZGFiLzg4NGI3ZDM0LWQ0MzgtNDc1NS04ZTk2LWYwNDZlOGI3 N2RhYi5jcmwwHwYDVR0jBBgwFoAUt/U2OWzWinU4zBm0q644jYAwhv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84ODRiN2QzNC1kNDM4LTQ3NTUtOGU5Ni1mMDQ2 ZThiNzdkYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz0JAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGX3ehpj9OjKymQLUQgqGl52oB0DSOZjhG+sTIN1l38AcpKQpHH/bWK p0EilZjFQOyetOKQv5eAl/MWzTvEf1SwyuO6z6cQxIRc3LG/qeiYgNPVglK9UG0f zyLJt3uKw2nwn74j+yYF/ckYznfEuXgCtuPJy0vMEUVrnVWz4dXUFyXr8yfbOc88 t8E3RaTT/eYCHL8PhGhoszbeQ8cNXSVTjzoEM0OkWC6zcrOZDYV7S/wRmfBj4OZ2 Lh5MQkbfZBBGgOwm3NOm3D3pKGjz+uzxvWXAhCIrtBSSZu5cwzDSEh23jAfmKDkz XJT1v5V5+crpq4Js2WiGrQzKeJObefY= -----END CERTIFICATE-----Generated at Mon Sep 28 06:49:13 2026 by rpki-client