$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/6cca8e1b-377b-3f09-b244-45469107fef2.roa File: 6cca8e1b-377b-3f09-b244-45469107fef2.roa (raw, json) Hash identifier: 4kDx2nNfpTDlZ9xQuCmsgkShScY4d0oYJ2ssiyraZX4= Subject key identifier: 9F:5B:D2:55:53:15:C4:E7:1E:29:3A:BA:C3:59:3E:7F:E4:77:9E:A4 Certificate issuer: /CN=afa70384-20ce-4e0a-b42a-581d05c70079 Certificate serial: 010D0C9F4328584F331D28AA694C33C5CB3E59A0 Authority key identifier: 6A:3F:DF:49:CB:0D:84:9D:16:C2:8B:30:9A:BB:45:B0:1D:83:B3:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/6cca8e1b-377b-3f09-b244-45469107fef2.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 22317 IP address blocks: 208.85.208.0/22 maxlen: 22 208.85.208.0/24 maxlen: 24 208.85.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:28:aa:69:4c:33:c5:cb:3e:59:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afa70384-20ce-4e0a-b42a-581d05c70079 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=4333ef4b-4daa-479e-b85f-ab35d1227fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:53:0d:b7:42:04:f4:83:96:38:5d:a5:27:a6: f1:be:d3:1c:88:04:48:de:92:43:c5:52:1d:d3:3a: 88:39:60:22:bd:6e:eb:57:9f:55:43:46:bd:3f:d3: 48:88:a9:20:b4:8f:0d:40:bc:39:7a:ba:fa:fe:f8: 6d:d8:dc:e9:f0:99:c7:f1:e8:09:55:d9:ae:e3:b8: 9f:4c:61:43:52:3d:8b:82:29:28:d4:79:e3:5e:c9: 31:ce:54:8d:9c:4a:17:a2:a3:94:7a:d1:a6:55:56: 6f:30:c4:78:96:a4:85:13:0a:72:b0:03:50:a4:a5: ab:83:01:56:1f:0a:0e:cb:be:aa:b7:bd:99:23:03: 8d:bc:c3:26:77:73:51:41:0e:27:c5:5e:e7:83:5f: 61:53:fe:b1:1e:e9:91:6b:47:5e:0a:60:6e:77:22: d1:c2:a9:85:97:78:e1:20:91:1c:82:5a:47:58:88: 95:e9:e1:4d:89:5b:86:c8:19:64:d3:d8:80:d5:a1: 7a:d2:7d:31:ec:68:c5:ae:f6:b4:63:10:e2:f3:65: b5:52:d5:96:01:8d:a0:79:a9:85:3d:bf:06:dc:0c: cd:df:3f:35:32:25:91:4c:b6:cf:41:8d:fa:78:8f: 93:94:fb:d2:ef:62:3e:e8:f3:7e:04:f9:f5:cc:c3: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5B:D2:55:53:15:C4:E7:1E:29:3A:BA:C3:59:3E:7F:E4:77:9E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/6cca8e1b-377b-3f09-b244-45469107fef2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079/afa70384-20ce-4e0a-b42a-581d05c70079.crl X509v3 Authority Key Identifier: keyid:6A:3F:DF:49:CB:0D:84:9D:16:C2:8B:30:9A:BB:45:B0:1D:83:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afa70384-20ce-4e0a-b42a-581d05c70079.cer sbgp-ipAddrBlock: critical IPv4: 208.85.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6e:af:a4:8e:67:39:66:18:26:71:04:09:bb:5b:4d:13:fb: 3d:e7:c9:1a:b8:92:f0:b5:1e:ee:61:26:55:b8:c9:99:db:f7: 05:a8:df:55:60:77:73:68:a3:8a:ed:65:7a:a7:90:ff:9b:4c: a9:ce:1b:4c:a6:1e:73:5a:24:f0:da:18:fc:6e:18:04:11:41: 16:ad:c6:6d:0e:4b:dc:df:ac:50:8c:d4:07:15:0c:07:44:a0: d3:47:f1:98:3d:ef:5e:7f:1d:8b:64:b8:4b:37:f3:f9:95:33: f8:36:23:9d:d4:9b:d8:f9:c3:e1:ce:b1:58:8c:9a:a0:6b:5e: dd:6e:8c:a7:8e:15:f4:ac:4b:3c:09:8f:ef:3c:e8:09:d4:ff: 2f:f4:4f:36:5a:35:ea:e0:1f:88:37:f2:7f:17:dc:6c:1b:50: f5:36:98:33:20:3a:8e:6c:e2:e2:18:f1:71:5c:3b:ab:b7:bb: c1:47:e4:de:58:dc:1a:9c:38:7a:15:7f:8b:d0:c4:f0:42:5a: a4:69:9e:de:50:0e:fd:8c:fa:a7:9a:df:41:1e:6b:50:cf:27: 6a:67:da:2a:c8:c9:c8:44:62:96:10:ea:c7:e1:3b:54:58:75: 0f:b0:99:8d:ab:79:a5:81:87:7f:bc:9c:07:b5:d9:cb:e6:9e: 03:af:6d:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSiqaUwzxcs+WaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhNzAzODQtMjBjZS00ZTBhLWI0MmEtNTgxZDA1Yzcw MDc5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk NDMzM2VmNGItNGRhYS00NzllLWI4NWYtYWIzNWQxMjI3ZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFMNt0IE9IOWOF2lJ6bxvtMciARI3pJDxVId 0zqIOWAivW7rV59VQ0a9P9NIiKkgtI8NQLw5err6/vht2Nzp8JnH8egJVdmu47if TGFDUj2Lgiko1HnjXskxzlSNnEoXoqOUetGmVVZvMMR4lqSFEwpysANQpKWrgwFW HwoOy76qt72ZIwONvMMmd3NRQQ4nxV7ng19hU/6xHumRa0deCmBudyLRwqmFl3jh IJEcglpHWIiV6eFNiVuGyBlk09iA1aF60n0x7GjFrva0YxDi82W1UtWWAY2geamF Pb8G3AzN3z81MiWRTLbPQY36eI+TlPvS72I+6PN+BPn1zMMHGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9b0lVTFcTnHik6usNZPn/kd56kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hZmE3 MDM4NC0yMGNlLTRlMGEtYjQyYS01ODFkMDVjNzAwNzkvNmNjYThlMWItMzc3Yi0z ZjA5LWIyNDQtNDU0NjkxMDdmZWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWZhNzAzODQtMjBjZS00ZTBhLWI0 MmEtNTgxZDA1YzcwMDc5L2FmYTcwMzg0LTIwY2UtNGUwYS1iNDJhLTU4MWQwNWM3 MDA3OS5jcmwwHwYDVR0jBBgwFoAUaj/fScsNhJ0WwoswmrtFsB2Ds34wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hZmE3MDM4NC0yMGNlLTRlMGEtYjQyYS01ODFk MDVjNzAwNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9ur6SOZzlmGCZxBAm7W00T+z3nyRq4kvC1Hu5hJlW4yZnb9wWo31Vg d3Noo4rtZXqnkP+bTKnOG0ymHnNaJPDaGPxuGAQRQRatxm0OS9zfrFCM1AcVDAdE oNNH8Zg9715/HYtkuEs38/mVM/g2I53Um9j5w+HOsViMmqBrXt1ujKeOFfSsSzwJ j+886AnU/y/0TzZaNergH4g38n8X3GwbUPU2mDMgOo5s4uIY8XFcO6u3u8FH5N5Y 3BqcOHoVf4vQxPBCWqRpnt5QDv2M+qea30Eea1DPJ2pn2irIychEYpYQ6sfhO1RY dQ+wmY2reaWBh3+8nAe12cvmngOvbYI= -----END CERTIFICATE-----Generated at Sat Sep 26 03:11:38 2026 by rpki-client