$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/969f25a1-c856-32d6-9b9a-d3b05ea24ec3.roa File: 969f25a1-c856-32d6-9b9a-d3b05ea24ec3.roa (raw, json) Hash identifier: i4wrHboHpBfRYONXANJk3Nfcf/8js8Zd0ay8Xbf2tE8= Subject key identifier: 8B:62:17:B6:16:DE:A3:1A:F1:BF:C7:18:65:87:F5:83:3A:94:11:7C Certificate issuer: /CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Certificate serial: 010D0C9F4328584F17323643F69E2E67FE492000 Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/969f25a1-c856-32d6-9b9a-d3b05ea24ec3.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 6325 IP address blocks: 209.175.0.0/16 maxlen: 16 209.175.0.0/17 maxlen: 17 209.175.0.0/18 maxlen: 18 209.175.64.0/18 maxlen: 18 209.175.128.0/17 maxlen: 17 209.175.128.0/18 maxlen: 18 209.175.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:36:43:f6:9e:2e:67:fe:49:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=20b376d2-ea51-4895-9f46-acfd61670fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b8:33:1e:d9:75:73:3e:ca:6a:e1:87:8d:7e: e2:b1:ac:81:03:e0:cd:38:aa:60:b5:57:61:25:af: 1b:00:78:a2:10:3a:ab:69:e0:6d:39:35:f5:53:3b: 8e:85:d8:b6:99:99:44:33:a3:a0:ec:b9:89:f5:36: ea:95:d9:a1:38:1a:df:67:69:d6:1a:c5:28:50:b0: e9:e7:8b:17:de:39:ef:f7:67:de:b6:6c:3c:ed:3f: 67:73:39:36:da:3c:fd:48:0e:4e:05:db:40:fc:94: 71:f2:61:6d:6c:2f:8d:11:b8:10:8e:7d:c2:f0:d9: f2:af:21:6a:4c:71:27:36:f7:00:63:45:48:df:4f: a7:e5:51:81:55:c2:28:0d:3c:00:c2:94:d6:39:67: 38:9f:69:c7:c0:1a:86:22:52:05:d4:a9:be:41:b2: fc:95:05:c7:96:b0:6a:ba:24:d6:b4:1f:56:e6:35: c6:9c:40:7f:00:8e:ae:d2:6d:e4:45:f6:c5:d6:a0: ee:cb:88:4e:51:a4:c8:a7:84:7a:0e:1a:08:c1:03: db:a8:e2:cf:42:1a:32:3a:be:36:15:f0:f1:67:24: 2a:e4:10:d4:9e:6b:a3:f8:03:99:28:da:a7:82:b8: cb:18:0f:59:f4:96:e2:bc:2e:af:58:7c:2f:cb:55: 40:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:62:17:B6:16:DE:A3:1A:F1:BF:C7:18:65:87:F5:83:3A:94:11:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/969f25a1-c856-32d6-9b9a-d3b05ea24ec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl X509v3 Authority Key Identifier: keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer sbgp-ipAddrBlock: critical IPv4: 209.175.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b6:4b:0b:7a:4b:1d:6e:f0:56:32:b5:e8:82:fb:d5:d2:97: 09:2e:d9:fb:25:9c:a3:6a:5e:34:65:6d:09:e1:43:db:b9:86: be:84:78:1d:ac:e5:66:8e:bf:76:c1:a5:a1:f2:c2:be:91:a9: fd:91:4a:22:71:01:6d:ba:a1:8d:9b:b5:1e:d1:64:a9:39:bc: a2:54:05:5d:49:75:c3:c8:35:4c:4c:f0:3c:ac:39:f4:38:b5: 87:36:41:09:1d:f7:20:77:7c:a8:c4:6e:ea:78:75:ea:41:d0: 30:7a:9d:f7:da:d3:80:48:e1:c4:3a:b7:66:9d:6f:af:54:42: d3:9e:77:00:2a:b5:cb:39:c9:95:16:57:6f:d5:5b:cc:ce:b9: de:9f:d1:6e:ae:38:62:3a:b5:40:03:b3:e1:43:c4:89:18:35: df:d7:43:9a:8a:e0:b4:2e:3c:0e:b4:65:02:99:41:89:e1:de: e1:6c:59:be:f7:0e:cf:56:b2:c5:c7:23:20:bb:18:88:af:8f: 9f:d2:bf:e3:5a:1c:5b:3d:36:2e:7b:e2:07:7b:fc:2f:40:86: 73:dd:ef:65:b1:20:84:8c:7a:ba:52:26:87:49:b2:5e:a5:47: b7:88:c6:01:24:8a:19:aa:3d:58:61:32:c7:62:0f:fb:b6:d8: 40:6b:38:33 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8XMjZD9p4uZ/5JIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzYyMjhmODYtYmY1NC00OWZjLTgzNWMtNTg4Y2QyYWFk YjQ5MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk MjBiMzc2ZDItZWE1MS00ODk1LTlmNDYtYWNmZDYxNjcwZmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrgzHtl1cz7KauGHjX7isayBA+DNOKpgtVdh Ja8bAHiiEDqraeBtOTX1UzuOhdi2mZlEM6Og7LmJ9TbqldmhOBrfZ2nWGsUoULDp 54sX3jnv92fetmw87T9nczk22jz9SA5OBdtA/JRx8mFtbC+NEbgQjn3C8NnyryFq THEnNvcAY0VI30+n5VGBVcIoDTwAwpTWOWc4n2nHwBqGIlIF1Km+QbL8lQXHlrBq uiTWtB9W5jXGnEB/AI6u0m3kRfbF1qDuy4hOUaTIp4R6DhoIwQPbqOLPQhoyOr42 FfDxZyQq5BDUnmuj+AOZKNqngrjLGA9Z9JbivC6vWHwvy1VAWQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFItiF7YW3qMa8b/HGGWH9YM6lBF8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNjIy OGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhjZDJhYWRiNDkvOTY5ZjI1YTEtYzg1Ni0z MmQ2LTliOWEtZDNiMDVlYTI0ZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzYyMjhmODYtYmY1NC00OWZjLTgz NWMtNTg4Y2QyYWFkYjQ5L2M2MjI4Zjg2LWJmNTQtNDlmYy04MzVjLTU4OGNkMmFh ZGI0OS5jcmwwHwYDVR0jBBgwFoAU02ys5jOi7tSvgh71l2CJvthHPJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jNjIyOGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhj ZDJhYWRiNDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0a8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEATLZLC3pLHW7wVjK16IL71dKXCS7Z+yWco2peNGVtCeFD27mGvoR4Hazl Zo6/dsGlofLCvpGp/ZFKInEBbbqhjZu1HtFkqTm8olQFXUl1w8g1TEzwPKw59Di1 hzZBCR33IHd8qMRu6nh16kHQMHqd99rTgEjhxDq3Zp1vr1RC0553ACq1yznJlRZX b9VbzM653p/Rbq44Yjq1QAOz4UPEiRg139dDmorgtC48DrRlAplBieHe4WxZvvcO z1ayxccjILsYiK+Pn9K/41ocWz02LnviB3v8L0CGc93vZbEghIx6ulImh0myXqVH t4jGASSKGao9WGEyx2IP+7bYQGs4Mw== -----END CERTIFICATE-----Generated at Wed Sep 23 09:56:49 2026 by rpki-client