$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4/bf549c0f-b6c0-3942-b4e2-c2b22f4f7b2c.roa File: bf549c0f-b6c0-3942-b4e2-c2b22f4f7b2c.roa (raw, json) Hash identifier: iN9DwXXGM+4AUu7wiIBbysP32gi6w8eZy//2qu1YzNI= Subject key identifier: 15:67:5D:D4:9B:E4:2D:57:9C:DF:3B:3D:B8:7D:21:BE:58:68:D5:07 Certificate issuer: /CN=cffcc184-95e8-40b1-9a9e-e4445e3b9bd4 Certificate serial: 010D0C9F4328584EF587BD2625349296710D0D80 Authority key identifier: 00:66:91:EE:39:EC:89:0B:B6:6C:BE:39:1D:87:30:3C:D8:37:F7:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4/bf549c0f-b6c0-3942-b4e2-c2b22f4f7b2c.roa Signing time: Tue 25 Aug 2026 23:35:03 +0000 ROA not before: Tue 25 Aug 2026 23:35:03 +0000 ROA not after: Tue 24 Nov 2026 00:35:03 +0000 asID: 14618 IP address blocks: 142.228.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:87:bd:26:25:34:92:96:71:0d:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cffcc184-95e8-40b1-9a9e-e4445e3b9bd4 Validity Not Before: Aug 25 23:35:03 2026 GMT Not After : Nov 24 00:35:03 2026 GMT Subject: CN=e9c65838-6114-42a6-80b5-99def88362bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:72:c5:33:6e:7e:0c:1b:a8:55:6f:4a:96: 2a:46:f3:ae:d4:8b:a8:82:f7:51:c5:fa:4b:61:b6: 1c:53:a5:75:b2:95:bd:42:a6:79:54:1d:e1:4e:88: 4c:11:54:f8:0a:f1:dd:3d:d8:bc:c9:95:ee:1e:bb: 8d:a8:b5:2c:80:2c:50:fe:62:c5:45:18:13:fc:b0: fc:5d:e5:ad:10:a2:f1:60:9d:ba:0f:43:7a:d6:e0: f1:ab:79:9e:c3:7e:3a:e6:f4:f9:be:cc:41:d3:a6: 87:d6:98:31:3c:43:30:6b:d8:20:4b:4f:0f:2d:a2: 67:1d:c4:4a:05:85:1e:79:2a:30:05:f7:3c:6b:20: 50:2c:94:c3:8f:a0:96:3f:2f:e0:19:01:20:32:23: 28:d7:3c:45:8b:2f:4a:e5:b7:57:48:04:eb:c3:13: e9:fc:dc:42:e3:97:11:ad:44:4b:dc:bf:3d:27:6c: d9:98:6f:2b:69:d8:88:99:df:1a:84:15:a2:e0:db: 6c:2f:53:30:d7:3f:e0:02:71:7c:fe:68:a5:b2:70: 02:60:e3:a9:9c:ac:56:42:62:84:a7:56:0a:e6:dc: 56:44:c8:4d:ef:5a:05:cf:78:bd:18:12:2f:7f:dd: ed:d0:24:52:bb:72:e0:a8:3f:4c:3b:7e:9e:0f:1d: 50:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:67:5D:D4:9B:E4:2D:57:9C:DF:3B:3D:B8:7D:21:BE:58:68:D5:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4/bf549c0f-b6c0-3942-b4e2-c2b22f4f7b2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4.crl X509v3 Authority Key Identifier: keyid:00:66:91:EE:39:EC:89:0B:B6:6C:BE:39:1D:87:30:3C:D8:37:F7:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cffcc184-95e8-40b1-9a9e-e4445e3b9bd4.cer sbgp-ipAddrBlock: critical IPv4: 142.228.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:89:15:c4:63:30:dd:64:23:fd:ba:6e:f0:5b:cf:60:98:78: 89:1d:dd:ff:3e:72:84:82:26:26:f1:fc:f8:b8:ef:47:78:19: 90:14:db:54:ec:00:3c:0b:b8:e3:b8:5c:e0:0b:1f:61:e7:f8: 7b:d8:c6:2f:99:9d:e6:5f:54:f4:ab:60:6b:0d:8b:50:30:b5: 74:45:90:4a:ff:fc:7d:1b:2a:1c:0b:90:9f:03:b2:19:92:e8: b7:15:cb:2f:e2:42:1e:0d:1f:67:d0:66:2f:08:55:0e:a2:08: da:c1:17:5b:5e:09:cc:70:3d:32:38:af:ac:ba:cc:86:9d:d6: 0a:90:70:1a:b4:12:94:95:aa:51:c0:ad:9f:61:f5:e5:2f:d1: 58:84:40:80:38:0d:2a:4c:b4:e3:9d:22:85:d2:fd:ba:d2:a8: cd:ff:9c:c1:77:2e:b3:67:99:e3:e5:5f:32:c3:9d:1f:53:dd: 86:01:86:22:f0:a2:a7:df:46:8c:1f:4f:e5:01:4d:f0:66:a8: 0e:5a:ba:8b:98:30:6e:ba:a2:2e:3c:5e:1c:37:df:8d:f2:21: d4:46:64:02:95:06:a7:50:23:4c:fe:18:52:1c:be:44:fc:17: 94:40:9f:80:11:2f:3f:7c:09:df:3c:19:c2:cf:85:c1:79:fb: 65:ba:8d:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71h70mJTSSlnENDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZmY2MxODQtOTVlOC00MGIxLTlhOWUtZTQ0NDVlM2I5 YmQ0MB4XDTI2MDgyNTIzMzUwM1oXDTI2MTEyNDAwMzUwM1owLzEtMCsGA1UEAxMk ZTljNjU4MzgtNjExNC00MmE2LTgwYjUtOTlkZWY4ODM2MmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmByxTNufgwbqFVvSpYqRvOu1IuogvdRxfpL YbYcU6V1spW9QqZ5VB3hTohMEVT4CvHdPdi8yZXuHruNqLUsgCxQ/mLFRRgT/LD8 XeWtEKLxYJ26D0N61uDxq3mew3465vT5vsxB06aH1pgxPEMwa9ggS08PLaJnHcRK BYUeeSowBfc8ayBQLJTDj6CWPy/gGQEgMiMo1zxFiy9K5bdXSATrwxPp/NxC45cR rURL3L89J2zZmG8radiImd8ahBWi4NtsL1Mw1z/gAnF8/milsnACYOOpnKxWQmKE p1YK5txWRMhN71oFz3i9GBIvf93t0CRSu3LgqD9MO36eDx1QoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVnXdSb5C1XnN87Pbh9Ib5YaNUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jZmZj YzE4NC05NWU4LTQwYjEtOWE5ZS1lNDQ0NWUzYjliZDQvYmY1NDljMGYtYjZjMC0z OTQyLWI0ZTItYzJiMjJmNGY3YjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2ZmY2MxODQtOTVlOC00MGIxLTlh OWUtZTQ0NDVlM2I5YmQ0L2NmZmNjMTg0LTk1ZTgtNDBiMS05YTllLWU0NDQ1ZTNi OWJkNC5jcmwwHwYDVR0jBBgwFoAUAGaR7jnsiQu2bL45HYcwPNg395IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jZmZjYzE4NC05NWU4LTQwYjEtOWE5ZS1lNDQ0 NWUzYjliZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjuQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeJFcRjMN1kI/26bvBbz2CYeIkd3f8+coSCJibx/Pi470d4GZAU21Ts ADwLuOO4XOALH2Hn+HvYxi+ZneZfVPSrYGsNi1AwtXRFkEr//H0bKhwLkJ8DshmS 6LcVyy/iQh4NH2fQZi8IVQ6iCNrBF1teCcxwPTI4r6y6zIad1gqQcBq0EpSVqlHA rZ9h9eUv0ViEQIA4DSpMtOOdIoXS/brSqM3/nMF3LrNnmePlXzLDnR9T3YYBhiLw oqffRowfT+UBTfBmqA5auouYMG66oi48Xhw3343yIdRGZAKVBqdQI0z+GFIcvkT8 F5RAn4ARLz98Cd88GcLPhcF5+2W6jbs= -----END CERTIFICATE-----Generated at Mon Sep 21 10:38:02 2026 by rpki-client