$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/3d035da1-470c-335b-a26e-943068c5d46a.roa File: 3d035da1-470c-335b-a26e-943068c5d46a.roa (raw, json) Hash identifier: ZFZacweLuS0d6j6FbnduAUksCMEGl409fNqMCE2T920= Subject key identifier: 8A:A7:B0:AE:50:20:D1:92:99:10:E8:94:69:35:B4:C2:1F:F3:9D:42 Certificate issuer: /CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Certificate serial: 010D0C9F4328584F1732372095726DD5FD53FF40 Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/3d035da1-470c-335b-a26e-943068c5d46a.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 395847 IP address blocks: 216.125.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:37:20:95:72:6d:d5:fd:53:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=11cf5c0f-29ad-4ac7-944c-086d32f6fb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8a:86:c8:43:33:b7:5d:77:f7:d5:ec:e1:0d: 5a:fd:bf:ac:93:d1:c5:fd:3e:55:46:d8:8a:9c:21: 69:e0:27:a0:c9:8e:27:d5:7d:b7:7e:48:dc:70:ab: 0b:72:47:db:35:91:d9:4c:a9:ca:d0:33:94:05:04: 0d:35:ab:8c:e8:89:6f:9d:26:58:bf:31:ac:dc:42: ec:6e:45:bd:c7:19:45:48:e5:0a:a4:0b:32:f8:ee: b3:da:fb:1f:0d:83:76:5d:24:88:a6:ae:fc:d4:0f: ae:66:5e:28:ee:fc:c2:61:4f:69:23:cb:02:05:fd: 20:fb:9c:8d:3c:55:f0:87:4b:7f:e5:25:1d:d9:f8: 20:23:69:db:b2:49:9e:6e:4d:cb:93:b7:fb:10:30: a3:53:60:f7:73:6f:5f:63:53:0d:6e:30:11:90:10: 87:ef:5c:30:a0:e4:ee:d0:62:6f:7b:20:09:97:39: ad:21:45:84:2f:7c:fd:0a:ff:e3:7e:32:3f:10:72: 84:d1:5a:b6:98:79:01:cf:d9:10:fa:ea:04:72:47: 43:b1:bc:9a:95:28:9e:44:a0:e1:f9:07:df:60:5f: 2d:bc:00:89:02:55:57:f3:5b:41:8e:2c:a2:eb:b8: 6b:f2:35:9d:81:70:61:90:66:08:0b:c4:98:9e:c9: 00:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A7:B0:AE:50:20:D1:92:99:10:E8:94:69:35:B4:C2:1F:F3:9D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/3d035da1-470c-335b-a26e-943068c5d46a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl X509v3 Authority Key Identifier: keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer sbgp-ipAddrBlock: critical IPv4: 216.125.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:72:d4:8d:56:7e:4a:cf:f4:b2:d7:89:cb:10:65:f7:81:08: ed:4c:54:4d:af:eb:5c:4f:66:aa:1d:56:48:5a:18:a9:24:b8: 4a:66:76:9c:da:d3:c3:95:f3:cc:90:80:9e:af:19:96:f3:17: c7:45:1b:b6:5c:76:3a:d6:ff:5e:6a:38:4f:b9:53:99:16:29: 68:9f:55:10:b9:a5:b8:77:2f:6f:f0:43:69:81:7c:fe:d1:d4: c8:7a:7b:cc:74:ba:4b:7a:5e:6e:5a:bc:57:cd:f5:d2:12:75: d6:11:aa:2a:58:4d:cc:81:c0:41:29:4c:d4:8b:bf:c9:10:a9: e2:bc:e4:e4:3d:ee:35:0e:04:57:2d:a7:b2:c6:d0:6a:0c:6f: a8:86:16:39:34:30:2e:f2:62:31:8f:31:c5:cd:93:cb:e5:b0: f1:56:11:86:e8:b5:28:b9:30:9a:92:7a:06:95:c3:94:db:20: cd:19:ce:fb:4b:0b:c7:e5:d4:19:f9:ca:a4:da:e3:79:c0:91: 5a:3e:0d:a2:a2:21:d6:ac:92:07:9b:68:fe:30:c3:b8:75:ab: c8:f8:6c:e7:97:97:a6:9e:3b:f8:9f:1a:87:89:9e:c6:dd:11: cf:0a:51:d9:a3:97:83:00:51:62:71:ac:88:1f:a5:ed:76:88: d3:f9:23:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjcglXJt1f1T/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzYyMjhmODYtYmY1NC00OWZjLTgzNWMtNTg4Y2QyYWFk YjQ5MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MTFjZjVjMGYtMjlhZC00YWM3LTk0NGMtMDg2ZDMyZjZmYjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4qGyEMzt11399Xs4Q1a/b+sk9HF/T5VRtiK nCFp4CegyY4n1X23fkjccKsLckfbNZHZTKnK0DOUBQQNNauM6IlvnSZYvzGs3ELs bkW9xxlFSOUKpAsy+O6z2vsfDYN2XSSIpq781A+uZl4o7vzCYU9pI8sCBf0g+5yN PFXwh0t/5SUd2fggI2nbskmebk3Lk7f7EDCjU2D3c29fY1MNbjARkBCH71wwoOTu 0GJveyAJlzmtIUWEL3z9Cv/jfjI/EHKE0Vq2mHkBz9kQ+uoEckdDsbyalSieRKDh +QffYF8tvACJAlVX81tBjiyi67hr8jWdgXBhkGYIC8SYnskARQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqnsK5QINGSmRDolGk1tMIf851CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNjIy OGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhjZDJhYWRiNDkvM2QwMzVkYTEtNDcwYy0z MzViLWEyNmUtOTQzMDY4YzVkNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzYyMjhmODYtYmY1NC00OWZjLTgz NWMtNTg4Y2QyYWFkYjQ5L2M2MjI4Zjg2LWJmNTQtNDlmYy04MzVjLTU4OGNkMmFh ZGI0OS5jcmwwHwYDVR0jBBgwFoAU02ys5jOi7tSvgh71l2CJvthHPJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jNjIyOGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhj ZDJhYWRiNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2H04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpy1I1WfkrP9LLXicsQZfeBCO1MVE2v61xPZqodVkhaGKkkuEpmdpza 08OV88yQgJ6vGZbzF8dFG7ZcdjrW/15qOE+5U5kWKWifVRC5pbh3L2/wQ2mBfP7R 1Mh6e8x0ukt6Xm5avFfN9dISddYRqipYTcyBwEEpTNSLv8kQqeK85OQ97jUOBFct p7LG0GoMb6iGFjk0MC7yYjGPMcXNk8vlsPFWEYbotSi5MJqSegaVw5TbIM0ZzvtL C8fl1Bn5yqTa43nAkVo+DaKiIdaskgebaP4ww7h1q8j4bOeXl6aeO/ifGoeJnsbd Ec8KUdmjl4MAUWJxrIgfpe12iNP5I4s= -----END CERTIFICATE-----Generated at Fri Sep 25 21:40:09 2026 by rpki-client