$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/5ffe1678-8815-30d2-a59f-c30a27eabb87.roa File: 5ffe1678-8815-30d2-a59f-c30a27eabb87.roa (raw, json) Hash identifier: 7H6q2F9dTDvosOCSL8g51gv466qiOoIeWgHgo2U1PU4= Subject key identifier: 43:59:3E:6C:57:2E:5C:48:59:06:D1:1E:32:3E:2E:95:4E:4E:F7:3E Certificate issuer: /CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Certificate serial: 010D0C9F4328584F15CD0971BAD68079FEDA4480 Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/5ffe1678-8815-30d2-a59f-c30a27eabb87.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 6325 IP address blocks: 209.174.0.0/16 maxlen: 16 209.174.0.0/17 maxlen: 17 209.174.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:09:71:ba:d6:80:79:fe:da:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=c9fc721e-f9a6-4484-800c-b56399d2bec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b1:b7:04:3d:9d:78:3f:2e:81:a2:6c:9b:2b: 88:1b:4d:0b:d2:f1:a7:f3:1f:19:d5:1c:84:73:40: 0e:71:42:9b:ac:e4:08:ae:33:cd:33:da:43:9e:bc: e2:b0:8d:0e:27:72:31:b4:59:ed:20:63:f7:98:9f: 3f:fa:20:25:6c:5c:01:bf:ab:72:9b:56:05:b6:0d: 97:81:7b:88:46:8c:5a:61:4a:90:64:b0:32:bd:9b: dc:a3:3c:b7:f1:2d:b9:24:2c:5c:52:26:52:43:62: 02:a9:d4:20:3c:60:d9:49:66:42:35:ab:81:50:57: ea:36:e3:57:bc:81:dc:9e:ae:d9:df:d4:bd:0b:cd: 46:e7:f9:f6:b4:e1:57:eb:da:d1:1a:50:2b:70:77: be:90:c3:d3:31:38:25:2a:4c:11:cb:ae:77:74:1f: 09:96:10:ac:d7:65:b5:88:6a:51:5e:a4:7c:91:eb: 09:7b:3e:2d:bd:38:0c:41:af:48:05:d1:7c:17:9e: c8:8c:4c:df:05:58:ae:9c:d6:4c:05:db:3b:87:75: 74:84:64:d1:42:9f:ab:5d:5b:a3:38:bc:d2:df:c1: 30:1b:8d:e5:d4:a8:0d:2b:43:b9:5d:40:b8:4f:b5: bb:80:2c:45:9c:13:f3:72:93:67:41:4e:b0:1e:3e: 7f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:59:3E:6C:57:2E:5C:48:59:06:D1:1E:32:3E:2E:95:4E:4E:F7:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/5ffe1678-8815-30d2-a59f-c30a27eabb87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl X509v3 Authority Key Identifier: keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer sbgp-ipAddrBlock: critical IPv4: 209.174.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b7:88:23:0a:90:c0:5a:11:58:6c:6e:cf:f5:f3:93:5b:5e: f5:35:da:d4:2c:b6:f9:8a:a0:0f:1a:a0:2c:41:d5:f4:de:42: 94:d2:ea:4b:a0:20:95:4e:9d:2c:fc:ed:32:05:66:ab:30:c4: 6f:d5:92:14:a5:fe:45:34:54:74:03:b7:f5:27:ed:68:a7:a8: 89:05:e0:85:fa:30:f2:56:d7:71:73:f4:d4:8b:19:15:05:9b: d7:73:2d:44:81:24:b2:9d:82:34:0a:e4:c7:6d:b7:ab:6b:11: 4d:83:24:89:38:9e:1c:ab:d6:4d:fe:fc:46:2f:8e:85:08:59: 1a:e9:cd:0f:60:02:03:b1:c8:d9:6f:a2:d4:91:3d:48:49:74: 3f:00:27:9f:3e:00:33:74:2e:d9:6b:c7:2e:5f:b4:6c:5c:fb: f0:cd:d8:99:a5:36:01:18:a0:7b:30:b0:96:74:9b:25:dd:3a: ef:e3:3d:c3:48:99:e7:b0:6b:81:e1:c2:dd:1b:eb:e9:d7:b3: e2:2c:0b:63:6a:72:90:82:5e:0b:f4:5e:9f:91:84:0c:18:65: 65:3a:64:00:8b:eb:4b:c5:90:3f:c7:3e:5d:bc:b8:a1:66:0e: 45:e8:b3:1a:39:26:da:66:5d:48:5d:3e:9a:62:62:24:db:38: 94:29:aa:b5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8VzQlxutaAef7aRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzYyMjhmODYtYmY1NC00OWZjLTgzNWMtNTg4Y2QyYWFk YjQ5MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YzlmYzcyMWUtZjlhNi00NDg0LTgwMGMtYjU2Mzk5ZDJiZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7G3BD2deD8ugaJsmyuIG00L0vGn8x8Z1RyE c0AOcUKbrOQIrjPNM9pDnrzisI0OJ3IxtFntIGP3mJ8/+iAlbFwBv6tym1YFtg2X gXuIRoxaYUqQZLAyvZvcozy38S25JCxcUiZSQ2ICqdQgPGDZSWZCNauBUFfqNuNX vIHcnq7Z39S9C81G5/n2tOFX69rRGlArcHe+kMPTMTglKkwRy653dB8JlhCs12W1 iGpRXqR8kesJez4tvTgMQa9IBdF8F57IjEzfBViunNZMBds7h3V0hGTRQp+rXVuj OLzS38EwG43l1KgNK0O5XUC4T7W7gCxFnBPzcpNnQU6wHj5/dQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFENZPmxXLlxIWQbRHjI+LpVOTvc+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNjIy OGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhjZDJhYWRiNDkvNWZmZTE2NzgtODgxNS0z MGQyLWE1OWYtYzMwYTI3ZWFiYjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzYyMjhmODYtYmY1NC00OWZjLTgz NWMtNTg4Y2QyYWFkYjQ5L2M2MjI4Zjg2LWJmNTQtNDlmYy04MzVjLTU4OGNkMmFh ZGI0OS5jcmwwHwYDVR0jBBgwFoAU02ys5jOi7tSvgh71l2CJvthHPJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jNjIyOGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhj ZDJhYWRiNDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0a4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAbLeIIwqQwFoRWGxuz/Xzk1te9TXa1Cy2+YqgDxqgLEHV9N5ClNLqS6Ag lU6dLPztMgVmqzDEb9WSFKX+RTRUdAO39SftaKeoiQXghfow8lbXcXP01IsZFQWb 13MtRIEksp2CNArkx223q2sRTYMkiTieHKvWTf78Ri+OhQhZGunND2ACA7HI2W+i 1JE9SEl0PwAnnz4AM3Qu2WvHLl+0bFz78M3YmaU2ARigezCwlnSbJd067+M9w0iZ 57BrgeHC3Rvr6dez4iwLY2pykIJeC/Ren5GEDBhlZTpkAIvrS8WQP8c+Xby4oWYO ReizGjkm2mZdSF0+mmJiJNs4lCmqtQ== -----END CERTIFICATE-----Generated at Thu Sep 24 11:36:57 2026 by rpki-client