$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/2d08d33f-0c0a-37fd-ba25-8d5f4c70f931.roa File: 2d08d33f-0c0a-37fd-ba25-8d5f4c70f931.roa (raw, json) Hash identifier: Rk3DAGU3kQ08JFmIoZh+s+q0q4zlwyvGvYmwszl8ZBE= Subject key identifier: CB:BE:8E:47:B0:67:B0:7A:B2:C2:3F:89:42:1F:0D:1F:D4:25:DA:AB Certificate issuer: /CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Certificate serial: 010D0C9F4328584F173236566394FE40DE546400 Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/2d08d33f-0c0a-37fd-ba25-8d5f4c70f931.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 62523 IP address blocks: 216.124.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:36:56:63:94:fe:40:de:54:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=311ad8cc-fa46-4b73-8d26-66d74f34fa9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:58:64:ef:f2:8c:55:ed:55:b0:09:04:4e:b6: 95:ca:a7:b4:c0:1f:3d:36:38:fb:bc:5b:fe:0f:eb: 93:b2:2b:cd:f5:54:cc:a0:8d:f3:32:ea:88:21:0e: e5:e4:e3:de:e5:81:34:66:12:3c:78:61:9d:af:90: 31:fd:b6:b4:9a:c2:84:0d:e6:95:ab:19:51:69:70: 25:ad:b2:e5:f5:43:a9:eb:d8:27:76:d1:f7:a5:9f: 8d:5d:b2:5d:c2:1e:a7:27:96:56:2e:e4:35:93:8b: 42:7e:a0:3b:3e:6a:8b:4c:04:80:cc:43:52:91:33: c0:c7:93:e3:a3:da:ec:bc:8f:64:dc:04:65:a3:99: a8:4a:7b:48:2c:06:17:49:83:85:4a:bf:74:a4:c2: 46:54:2f:c4:62:b3:f1:86:f6:73:21:8e:18:9c:a4: a8:f5:02:9c:9f:f4:ea:f2:01:9c:66:1d:b6:d9:1e: bd:ed:a9:5b:83:de:5b:82:4e:d6:8b:33:db:85:70: 89:ca:c6:d7:e6:63:72:ee:d1:e5:49:bc:71:e9:e9: d7:ad:21:df:ef:84:64:da:20:c5:66:f1:a3:65:f1: bf:91:ca:55:f3:bd:c1:b2:5d:ab:b9:ff:09:c8:aa: 5f:f6:d1:7f:49:5a:0d:8d:14:15:96:ed:5b:1f:16: 92:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BE:8E:47:B0:67:B0:7A:B2:C2:3F:89:42:1F:0D:1F:D4:25:DA:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/2d08d33f-0c0a-37fd-ba25-8d5f4c70f931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl X509v3 Authority Key Identifier: keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer sbgp-ipAddrBlock: critical IPv4: 216.124.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:eb:98:ed:7c:af:88:02:cd:9f:69:4a:b0:be:fd:a8:24:f4: 01:81:08:9f:f8:ce:45:98:7d:3d:8c:58:8a:a4:ad:04:e2:ee: 81:15:41:55:95:66:1a:a6:f7:3c:a5:78:fb:93:78:46:27:ce: b5:c1:0a:84:81:33:48:88:8b:a2:fb:b1:c2:8d:98:58:82:65: df:be:3d:5c:5e:d9:21:da:11:e5:96:3e:40:88:e9:33:60:f5: b3:c8:f5:12:57:d8:5f:c4:e6:a2:b9:05:58:b3:45:61:0d:62: 33:a4:93:ae:06:5d:99:24:ee:ed:ae:01:83:1e:12:67:30:05: aa:f3:ea:07:89:ea:4f:b5:2f:00:7c:ab:db:86:4e:83:cf:3e: a2:04:3b:4a:3f:a3:55:fa:c1:09:62:04:be:49:b9:3f:7b:75: e3:76:b7:d1:5e:74:8f:36:19:65:9a:6d:a2:8a:b7:3b:f2:29: 9e:ee:b1:99:2c:12:21:54:3b:11:a3:fc:fa:cf:e9:ac:ed:6d: 14:84:8f:1d:0b:aa:1c:15:db:a6:96:40:73:89:d4:62:18:fa: 0f:4d:62:02:a9:36:47:e8:f2:48:5f:d6:46:de:2e:bb:ac:af: 01:b2:4d:3d:ac:c3:78:26:b0:e7:30:2b:c5:15:ea:cc:c2:ce: 52:9f:0d:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjZWY5T+QN5UZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzYyMjhmODYtYmY1NC00OWZjLTgzNWMtNTg4Y2QyYWFk YjQ5MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MzExYWQ4Y2MtZmE0Ni00YjczLThkMjYtNjZkNzRmMzRmYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlhk7/KMVe1VsAkETraVyqe0wB89Njj7vFv+ D+uTsivN9VTMoI3zMuqIIQ7l5OPe5YE0ZhI8eGGdr5Ax/ba0msKEDeaVqxlRaXAl rbLl9UOp69gndtH3pZ+NXbJdwh6nJ5ZWLuQ1k4tCfqA7PmqLTASAzENSkTPAx5Pj o9rsvI9k3ARlo5moSntILAYXSYOFSr90pMJGVC/EYrPxhvZzIY4YnKSo9QKcn/Tq 8gGcZh222R697albg95bgk7WizPbhXCJysbX5mNy7tHlSbxx6enXrSHf74Rk2iDF ZvGjZfG/kcpV873Bsl2ruf8JyKpf9tF/SVoNjRQVlu1bHxaSAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMu+jkewZ7B6ssI/iUIfDR/UJdqrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNjIy OGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhjZDJhYWRiNDkvMmQwOGQzM2YtMGMwYS0z N2ZkLWJhMjUtOGQ1ZjRjNzBmOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzYyMjhmODYtYmY1NC00OWZjLTgz NWMtNTg4Y2QyYWFkYjQ5L2M2MjI4Zjg2LWJmNTQtNDlmYy04MzVjLTU4OGNkMmFh ZGI0OS5jcmwwHwYDVR0jBBgwFoAU02ys5jOi7tSvgh71l2CJvthHPJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jNjIyOGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhj ZDJhYWRiNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2HycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7rmO18r4gCzZ9pSrC+/agk9AGBCJ/4zkWYfT2MWIqkrQTi7oEVQVWV Zhqm9zylePuTeEYnzrXBCoSBM0iIi6L7scKNmFiCZd++PVxe2SHaEeWWPkCI6TNg 9bPI9RJX2F/E5qK5BVizRWENYjOkk64GXZkk7u2uAYMeEmcwBarz6geJ6k+1LwB8 q9uGToPPPqIEO0o/o1X6wQliBL5JuT97deN2t9FedI82GWWabaKKtzvyKZ7usZks EiFUOxGj/PrP6aztbRSEjx0LqhwV26aWQHOJ1GIY+g9NYgKpNkfo8khf1kbeLrus rwGyTT2sw3gmsOcwK8UV6szCzlKfDcY= -----END CERTIFICATE-----Generated at Sun Sep 20 13:50:49 2026 by rpki-client