$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/cc57cbcf-ec40-3d79-b0c4-d7d11e1984e5.roa File: cc57cbcf-ec40-3d79-b0c4-d7d11e1984e5.roa (raw, json) Hash identifier: puQbSwWjdr1+N+GxpGNI+yc7SUaRBAyRUWwJgFEy2bw= Subject key identifier: 8B:AD:EA:DA:32:C5:1D:9F:85:EB:C4:8E:C6:E1:3C:FE:66:76:DB:48 Certificate issuer: /CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Certificate serial: 010D0C9F4328584F173235F9213D4ECC3E1C3F40 Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/cc57cbcf-ec40-3d79-b0c4-d7d11e1984e5.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 62549 IP address blocks: 209.175.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:35:f9:21:3d:4e:cc:3e:1c:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=3fe2fb38-070e-47ff-a6e2-192bcf9e1891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:89:b5:31:95:69:d6:87:be:4b:3c:1c:1a:49: c2:32:94:f0:a2:f4:54:b5:f2:ec:c6:1a:a4:41:8c: bb:d9:d1:cc:e0:40:cb:09:03:de:34:04:c6:ed:a8: 51:68:e9:a3:cc:50:20:c7:a4:7b:93:74:3f:e9:e4: fa:90:55:0d:aa:12:5a:c3:b8:e0:8b:75:e8:ae:5e: a1:f4:0c:7f:bc:28:dd:76:e8:35:39:30:d4:d3:e0: 55:c0:0f:6f:0b:f0:43:f7:11:02:a6:42:da:e1:86: 2c:21:be:98:ad:38:d4:3f:94:62:a1:cb:a6:ed:e5: 45:91:1e:26:32:05:67:85:f8:0f:b1:c8:75:26:22: 0c:49:d4:aa:9c:81:c9:15:64:5b:1d:92:7e:59:3a: 5e:07:0e:bb:f0:48:9b:bb:d0:bf:13:dc:b5:69:6a: 76:18:0d:e3:74:a3:f4:f6:6f:ec:da:32:76:39:d7: cc:ca:b7:1b:11:e6:bb:07:85:14:f9:ce:f6:eb:b4: 59:08:72:98:4e:6b:ab:fd:ca:8b:90:8d:88:3a:60: 1a:be:ea:10:62:ad:21:75:b9:3f:9c:59:5e:ca:a8: 9d:11:22:e4:af:1f:2c:86:cd:27:73:d2:b3:86:94: 57:29:8e:db:7d:d0:3a:4b:27:09:50:d4:df:ab:12: c3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AD:EA:DA:32:C5:1D:9F:85:EB:C4:8E:C6:E1:3C:FE:66:76:DB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/cc57cbcf-ec40-3d79-b0c4-d7d11e1984e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl X509v3 Authority Key Identifier: keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer sbgp-ipAddrBlock: critical IPv4: 209.175.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:28:97:4b:cb:03:7d:a4:12:23:10:82:83:5d:83:da:96:6d: 33:25:b7:9c:1d:24:5b:c6:1a:da:7a:1c:42:be:e2:90:b3:a7: 53:9f:d1:1b:30:c0:0e:ea:84:54:3a:b3:69:db:15:b1:23:3d: 5a:12:1d:55:66:10:10:49:c4:47:f3:c6:91:7d:86:a9:af:74: 87:df:57:0c:65:da:8b:06:d4:5e:c3:d8:07:95:d5:55:72:48: 34:9e:1b:d5:fc:21:0c:fc:9d:88:cf:c1:7d:ed:9b:83:81:06: 6b:ee:7c:7e:87:9f:ac:73:da:ff:7a:c9:10:24:0a:58:52:12: a5:c4:e5:3a:af:c5:7f:dd:2a:c0:2f:6c:7e:b2:40:5d:29:e1: 90:7a:76:6f:1d:ca:fc:28:44:ac:bc:1d:0c:b2:51:d5:ee:7a: 9e:26:a2:cb:36:54:07:ad:80:70:21:f0:c1:55:f8:49:74:c8: 47:e4:5c:b5:c8:43:9a:6b:b9:c4:ba:8e:9f:3e:36:83:e4:d3: 21:9c:05:26:ec:0c:98:00:ed:2a:89:f4:c2:a7:26:3a:13:75: cf:8d:a5:d9:ac:67:91:26:5b:84:dd:6c:de:f5:e9:46:c6:d4: 50:9c:89:d4:4a:fb:50:6c:1e:51:cc:5a:84:a2:24:7f:62:1b: 6a:84:94:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMjX5IT1OzD4cP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzYyMjhmODYtYmY1NC00OWZjLTgzNWMtNTg4Y2QyYWFk YjQ5MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk M2ZlMmZiMzgtMDcwZS00N2ZmLWE2ZTItMTkyYmNmOWUxODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Im1MZVp1oe+SzwcGknCMpTwovRUtfLsxhqk QYy72dHM4EDLCQPeNATG7ahRaOmjzFAgx6R7k3Q/6eT6kFUNqhJaw7jgi3Xorl6h 9Ax/vCjddug1OTDU0+BVwA9vC/BD9xECpkLa4YYsIb6YrTjUP5Riocum7eVFkR4m MgVnhfgPsch1JiIMSdSqnIHJFWRbHZJ+WTpeBw678Eibu9C/E9y1aWp2GA3jdKP0 9m/s2jJ2OdfMyrcbEea7B4UU+c7267RZCHKYTmur/cqLkI2IOmAavuoQYq0hdbk/ nFleyqidESLkrx8shs0nc9KzhpRXKY7bfdA6SycJUNTfqxLDNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIut6toyxR2fhevEjsbhPP5mdttIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNjIy OGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhjZDJhYWRiNDkvY2M1N2NiY2YtZWM0MC0z ZDc5LWIwYzQtZDdkMTFlMTk4NGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzYyMjhmODYtYmY1NC00OWZjLTgz NWMtNTg4Y2QyYWFkYjQ5L2M2MjI4Zjg2LWJmNTQtNDlmYy04MzVjLTU4OGNkMmFh ZGI0OS5jcmwwHwYDVR0jBBgwFoAU02ys5jOi7tSvgh71l2CJvthHPJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jNjIyOGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhj ZDJhYWRiNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0a+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcol0vLA32kEiMQgoNdg9qWbTMlt5wdJFvGGtp6HEK+4pCzp1Of0Rsw wA7qhFQ6s2nbFbEjPVoSHVVmEBBJxEfzxpF9hqmvdIffVwxl2osG1F7D2AeV1VVy SDSeG9X8IQz8nYjPwX3tm4OBBmvufH6Hn6xz2v96yRAkClhSEqXE5TqvxX/dKsAv bH6yQF0p4ZB6dm8dyvwoRKy8HQyyUdXuep4moss2VAetgHAh8MFV+El0yEfkXLXI Q5prucS6jp8+NoPk0yGcBSbsDJgA7SqJ9MKnJjoTdc+NpdmsZ5EmW4TdbN716UbG 1FCcidRK+1BsHlHMWoSiJH9iG2qElOQ= -----END CERTIFICATE-----Generated at Tue Sep 22 17:08:45 2026 by rpki-client