$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/b02a32d4-1e90-31bb-b311-0a9ccc0681e3.roa File: b02a32d4-1e90-31bb-b311-0a9ccc0681e3.roa (raw, json) Hash identifier: iuBmePbmB7cCBLCCwpH7KzPZchN/EGIrXanD4/Pi0mA= Subject key identifier: 36:16:E0:78:B7:1E:EE:88:A1:5B:0B:45:70:8B:9B:AC:6B:95:6E:2A Certificate issuer: /CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Certificate serial: 010D0C9F4328584F15CD0908902FB5F1FAD74500 Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/b02a32d4-1e90-31bb-b311-0a9ccc0681e3.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 36655 IP address blocks: 207.63.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:09:08:90:2f:b5:f1:fa:d7:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=e01f92a1-1547-4666-8c43-9a95ef3a06d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:08:d7:c6:85:e4:c4:52:35:ab:91:25:3c:db: 5b:16:84:98:b2:39:fd:00:6a:95:51:0e:45:15:53: 65:a0:73:17:1a:16:cd:a5:4f:2d:07:32:5f:90:29: 3b:ab:a5:c8:e5:88:43:68:9f:df:5c:28:38:87:65: a4:cc:e6:16:90:b6:34:34:e8:dd:2e:54:8e:6b:13: a8:d9:f3:62:b6:9c:9f:d1:dc:4d:ce:61:80:79:8c: 0a:7c:25:f5:db:68:2a:22:d5:f6:57:bf:55:57:7d: 77:d4:13:1f:5b:a1:7d:91:6a:fa:d6:aa:49:b4:8c: 77:2f:d7:df:23:62:31:b2:a7:19:7e:91:3c:68:03: f1:db:e1:0e:8f:20:82:c7:f6:d9:72:39:24:00:c5: af:66:21:af:ee:11:cc:20:55:bd:c7:48:8b:3b:c1: 70:4a:24:42:54:1c:ec:30:f9:19:39:cb:67:e8:62: 56:5d:39:11:7e:09:b7:f9:b4:52:35:f1:cb:b0:8b: 4e:f9:b1:14:a4:29:d1:ff:48:be:42:a3:c7:60:3d: ad:94:81:4a:f9:11:f5:65:05:df:5c:52:f9:bb:21: bd:49:d2:4d:3d:37:13:d4:4a:a1:3c:e5:37:a0:52: 89:bb:54:fb:02:5f:99:5f:26:8f:e9:e3:80:ee:37: 50:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:16:E0:78:B7:1E:EE:88:A1:5B:0B:45:70:8B:9B:AC:6B:95:6E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/b02a32d4-1e90-31bb-b311-0a9ccc0681e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl X509v3 Authority Key Identifier: keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer sbgp-ipAddrBlock: critical IPv4: 207.63.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:7c:cb:d5:a9:8b:77:07:66:f1:90:35:42:5d:90:69:5c:b3: 50:24:c5:c7:fe:b9:c7:bd:18:3a:c3:63:dc:0a:61:01:b3:3a: c4:ed:1f:90:96:ed:56:ca:1a:6d:c0:c9:b4:e0:0b:8f:4e:b1: 85:97:08:17:3b:3c:03:61:22:9c:90:77:af:81:32:b0:88:6b: 10:1d:96:59:76:42:ec:34:57:32:bf:d3:01:8a:f7:ea:38:a5: c1:da:f0:e7:01:63:4a:4a:52:50:fc:02:de:59:8d:a8:46:53: ae:05:a2:04:0b:c4:50:e9:6f:0d:14:6f:1c:de:4f:78:ca:dc: 03:d1:d1:75:9f:a7:4e:42:0c:6e:9d:37:c9:b6:d7:3b:e8:4c: 03:8d:cb:6b:f2:95:e0:1e:a6:61:fe:62:0d:ce:48:94:e6:e1: 11:f1:22:1a:28:c3:c4:5b:cc:3e:46:71:a2:6b:91:22:44:73: 3c:b8:bd:6f:86:cd:15:b0:d0:4f:17:1f:f7:5a:44:70:9c:a2: 22:ad:8a:8d:c5:07:48:fe:82:c9:42:06:68:a4:82:55:14:f0: 6d:21:6a:55:cd:08:ed:9f:e1:b6:ce:a5:1a:3d:32:9b:97:25: 49:c5:f0:fc:11:dd:92:33:ce:53:6a:d7:c6:11:dc:62:34:b3: 84:27:a6:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzQkIkC+18frXRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzYyMjhmODYtYmY1NC00OWZjLTgzNWMtNTg4Y2QyYWFk YjQ5MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk ZTAxZjkyYTEtMTU0Ny00NjY2LThjNDMtOWE5NWVmM2EwNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQjXxoXkxFI1q5ElPNtbFoSYsjn9AGqVUQ5F FVNloHMXGhbNpU8tBzJfkCk7q6XI5YhDaJ/fXCg4h2WkzOYWkLY0NOjdLlSOaxOo 2fNitpyf0dxNzmGAeYwKfCX122gqItX2V79VV3131BMfW6F9kWr61qpJtIx3L9ff I2IxsqcZfpE8aAPx2+EOjyCCx/bZcjkkAMWvZiGv7hHMIFW9x0iLO8FwSiRCVBzs MPkZOctn6GJWXTkRfgm3+bRSNfHLsItO+bEUpCnR/0i+QqPHYD2tlIFK+RH1ZQXf XFL5uyG9SdJNPTcT1EqhPOU3oFKJu1T7Al+ZXyaP6eOA7jdQowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYW4Hi3Hu6IoVsLRXCLm6xrlW4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNjIy OGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhjZDJhYWRiNDkvYjAyYTMyZDQtMWU5MC0z MWJiLWIzMTEtMGE5Y2NjMDY4MWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzYyMjhmODYtYmY1NC00OWZjLTgz NWMtNTg4Y2QyYWFkYjQ5L2M2MjI4Zjg2LWJmNTQtNDlmYy04MzVjLTU4OGNkMmFh ZGI0OS5jcmwwHwYDVR0jBBgwFoAU02ys5jOi7tSvgh71l2CJvthHPJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jNjIyOGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhj ZDJhYWRiNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzz/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx8y9Wpi3cHZvGQNUJdkGlcs1Akxcf+uce9GDrDY9wKYQGzOsTtH5CW 7VbKGm3AybTgC49OsYWXCBc7PANhIpyQd6+BMrCIaxAdlll2Quw0VzK/0wGK9+o4 pcHa8OcBY0pKUlD8At5ZjahGU64FogQLxFDpbw0UbxzeT3jK3APR0XWfp05CDG6d N8m21zvoTAONy2vyleAepmH+Yg3OSJTm4RHxIhoow8RbzD5GcaJrkSJEczy4vW+G zRWw0E8XH/daRHCcoiKtio3FB0j+gslCBmikglUU8G0halXNCO2f4bbOpRo9MpuX JUnF8PwR3ZIzzlNq18YR3GI0s4QnprQ= -----END CERTIFICATE-----Generated at Fri Sep 25 18:05:47 2026 by rpki-client