$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/2d08d33f-0c0a-37fd-ba25-8d5f4c70f931.roa File: 2d08d33f-0c0a-37fd-ba25-8d5f4c70f931.roa (raw, json) Hash identifier: OKnWamSJdpdKLOZNkufS0GzaWwIB0uhvQOtu+Or38ks= Subject key identifier: 08:72:AD:F4:2F:FE:83:C6:70:97:D3:75:5D:80:0E:60:0C:5E:50:14 Certificate issuer: /CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Certificate serial: 010D0C9F4328584FB93BC59A9E44ED7F464B1B00 Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/2d08d33f-0c0a-37fd-ba25-8d5f4c70f931.roa Signing time: Wed 04 Nov 2026 02:00:13 +0000 ROA not before: Wed 04 Nov 2026 02:00:13 +0000 ROA not after: Tue 02 Feb 2027 02:00:13 +0000 asID: 62523 IP address blocks: 216.124.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b9:3b:c5:9a:9e:44:ed:7f:46:4b:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Validity Not Before: Nov 4 02:00:13 2026 GMT Not After : Feb 2 02:00:13 2027 GMT Subject: CN=ff8c19cf-4b5d-4409-b093-5abf8fb09623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b5:ca:23:aa:dd:ef:76:e8:94:a4:13:65:9c: 56:9a:ad:b1:35:52:c4:b8:21:06:47:fd:a9:5f:aa: a6:e8:2a:a6:b9:75:fa:0d:43:e8:a6:75:bb:ef:1f: 9b:38:32:c2:22:be:f3:ed:d1:a4:c2:60:f2:74:5a: 90:0f:df:79:24:bc:2e:43:b8:93:df:3f:73:c6:64: 68:c2:40:56:27:9a:b1:2c:f4:0d:70:96:b1:b2:29: 69:23:b3:d9:5e:8d:e3:78:49:a3:25:d5:b3:59:0d: fc:38:fa:8f:93:65:12:29:fc:92:2f:cb:fb:e6:40: b9:41:4e:79:91:66:03:5a:e9:6a:7b:8f:dd:91:d2: 51:f3:47:a5:cc:c8:dc:27:63:80:34:75:2e:34:1c: 5c:72:9d:65:fb:1a:78:c0:8f:04:0e:3d:a3:81:37: 42:32:e9:81:e3:7c:56:bb:fa:bd:48:85:a9:7e:9e: 41:cb:fa:f2:6a:4b:be:17:33:79:e5:5d:12:df:9c: 7e:03:c7:a2:f0:68:30:ee:6e:02:4e:e5:47:89:e7: ee:ff:e6:bb:d9:44:1e:9e:71:00:80:77:c4:74:3b: a1:81:c0:19:1e:20:05:4c:8b:6a:82:48:d0:f5:27: 2e:47:0c:60:f6:75:15:9f:45:a0:3f:a5:9c:c5:34: ae:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:72:AD:F4:2F:FE:83:C6:70:97:D3:75:5D:80:0E:60:0C:5E:50:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/2d08d33f-0c0a-37fd-ba25-8d5f4c70f931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl X509v3 Authority Key Identifier: keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer sbgp-ipAddrBlock: critical IPv4: 216.124.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d7:55:6c:5d:8e:e9:4d:55:4d:b1:e0:42:a8:56:2c:23:c1: fa:f3:77:e9:fb:14:e4:bc:48:ad:f1:52:68:dd:21:c5:c9:e1: 61:5c:37:69:f9:8f:fe:4b:f6:35:a3:79:dd:2d:7d:3f:13:cc: fc:25:55:ae:b9:aa:df:14:9e:3e:da:ab:d9:8f:b4:80:6b:0a: 16:48:25:74:1b:7a:3c:be:91:2a:e5:0d:3f:34:61:2c:8c:c0: 44:98:79:be:76:37:b8:8a:5f:b5:8f:7b:74:71:b7:1d:b0:00: 82:db:7b:66:da:8c:65:93:35:0b:b5:f8:1c:53:b8:4b:26:40: fd:9e:76:88:1e:54:64:76:05:4e:1b:70:12:9e:58:64:ef:4c: c3:39:d3:11:5a:4c:22:66:28:f1:17:19:e2:2f:fb:19:31:9e: e2:0c:bf:7d:79:4e:26:30:90:26:8c:63:08:33:ca:19:9b:de: 4e:44:34:12:8c:66:c9:7c:6f:58:e1:18:a0:e3:1a:92:cf:f4: a6:e4:60:d4:9c:e5:fd:28:83:5a:94:80:f1:30:64:51:cf:d3: 89:23:9a:f0:f4:8d:3f:e1:c8:19:d7:4e:45:5c:5e:e3:53:34: bb:2c:52:63:63:a3:87:8e:2b:21:d7:7b:97:79:ef:65:7b:65: a1:48:86:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+5O8WankTtf0ZLGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzYyMjhmODYtYmY1NC00OWZjLTgzNWMtNTg4Y2QyYWFk YjQ5MB4XDTI2MTEwNDAyMDAxM1oXDTI3MDIwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZmY4YzE5Y2YtNGI1ZC00NDA5LWIwOTMtNWFiZjhmYjA5NjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirXKI6rd73bolKQTZZxWmq2xNVLEuCEGR/2p X6qm6CqmuXX6DUPopnW77x+bODLCIr7z7dGkwmDydFqQD995JLwuQ7iT3z9zxmRo wkBWJ5qxLPQNcJaxsilpI7PZXo3jeEmjJdWzWQ38OPqPk2USKfySL8v75kC5QU55 kWYDWulqe4/dkdJR80elzMjcJ2OANHUuNBxccp1l+xp4wI8EDj2jgTdCMumB43xW u/q9SIWpfp5By/ryaku+FzN55V0S35x+A8ei8Ggw7m4CTuVHiefu/+a72UQennEA gHfEdDuhgcAZHiAFTItqgkjQ9ScuRwxg9nUVn0WgP6WcxTSu7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhyrfQv/oPGcJfTdV2ADmAMXlAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNjIy OGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhjZDJhYWRiNDkvMmQwOGQzM2YtMGMwYS0z N2ZkLWJhMjUtOGQ1ZjRjNzBmOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzYyMjhmODYtYmY1NC00OWZjLTgz NWMtNTg4Y2QyYWFkYjQ5L2M2MjI4Zjg2LWJmNTQtNDlmYy04MzVjLTU4OGNkMmFh ZGI0OS5jcmwwHwYDVR0jBBgwFoAU02ys5jOi7tSvgh71l2CJvthHPJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jNjIyOGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhj ZDJhYWRiNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2HycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDXVWxdjulNVU2x4EKoViwjwfrzd+n7FOS8SK3xUmjdIcXJ4WFcN2n5 j/5L9jWjed0tfT8TzPwlVa65qt8Unj7aq9mPtIBrChZIJXQbejy+kSrlDT80YSyM wESYeb52N7iKX7WPe3Rxtx2wAILbe2bajGWTNQu1+BxTuEsmQP2edogeVGR2BU4b cBKeWGTvTMM50xFaTCJmKPEXGeIv+xkxnuIMv315TiYwkCaMYwgzyhmb3k5ENBKM Zsl8b1jhGKDjGpLP9KbkYNSc5f0og1qUgPEwZFHP04kjmvD0jT/hyBnXTkVcXuNT NLssUmNjo4eOKyHXe5d572V7ZaFIhis= -----END CERTIFICATE-----Generated at Thu Nov 5 05:10:13 2026 by rpki-client