$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa File: 925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa (raw, json) Hash identifier: IeRE7UKzXU4dAFh5uJXWjHmwt/yTBijfguz5kgPS+mY= Subject key identifier: 33:3A:19:09:B1:CD:9B:4E:42:E5:31:36:D2:F7:50:36:F2:43:7C:16 Certificate issuer: /CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Certificate serial: 010D0C9F4328584F189792946C9ED8738EC6DC60 Authority key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 400427 IP address blocks: 206.225.0.0/22 maxlen: 24 2606:ad40::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:92:94:6c:9e:d8:73:8e:c6:dc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=6eaf6014-226a-49c7-845f-3d4bf1986858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c9:04:a1:4b:24:80:8e:09:95:36:fb:62:63: cd:13:c7:f7:05:19:78:d1:42:71:fe:f3:3c:35:cf: 51:eb:ae:ed:5b:30:88:61:18:3e:6c:85:e3:e1:cc: e6:39:21:12:b3:1a:2c:3f:1e:00:44:d1:e3:4c:fc: 17:d3:ca:4d:93:6a:f0:0d:1d:6d:1a:d8:11:f7:52: 8a:5d:f7:f6:f0:6c:bb:e1:0a:5b:89:5f:ca:af:ce: 7c:64:da:da:9d:b4:a1:6f:64:ae:47:1f:c2:81:2f: 16:bd:11:41:12:a9:f9:15:77:a2:70:21:a2:4b:ed: 34:ea:6f:44:72:8a:d7:48:56:18:d4:b3:02:21:d0: ab:fc:0d:5f:e7:1a:4a:da:66:e7:84:2b:e1:87:92: a2:7b:30:70:ad:72:c3:ba:a1:3e:35:29:05:69:e4: a8:61:76:8d:94:c6:8f:fd:1f:08:fe:32:ea:d5:db: 06:ae:16:5b:27:79:66:e9:44:9d:fd:e6:d9:ce:ad: d3:34:41:63:b8:2f:4b:05:bc:7c:9c:54:31:ca:99: b7:4f:11:8a:a8:85:52:c5:a8:13:10:48:5c:00:5c: 5e:ef:d7:42:e6:28:7b:1c:8e:4e:3d:5e:ab:0f:f6: 57:f0:34:7a:4f:1b:86:37:98:33:ae:35:5d:f1:3e: fd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3A:19:09:B1:CD:9B:4E:42:E5:31:36:D2:F7:50:36:F2:43:7C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl X509v3 Authority Key Identifier: keyid:E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer sbgp-ipAddrBlock: critical IPv4: 206.225.0.0/22 IPv6: 2606:ad40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:56:ff:95:19:1d:a3:f8:b3:fb:48:b0:90:e9:b1:9e:55:41: 7b:d3:04:e8:f7:9e:0c:83:7b:15:3d:37:77:35:20:1b:a4:3b: 4b:0f:dd:e0:1c:60:23:5a:f5:78:47:b4:82:71:f1:b1:f8:ba: bf:80:39:4e:64:1f:28:3e:d9:cf:98:f1:35:d1:99:e7:11:2e: 81:9b:b4:d8:09:97:94:dc:9b:63:1d:61:d6:2b:ac:e7:db:5d: 76:ae:36:1a:da:e2:8f:a4:77:03:61:1f:99:88:ac:22:bc:21: 48:38:b8:cf:ba:5f:47:bd:b7:29:72:71:c3:ed:2a:83:6b:e9: 58:ed:91:31:96:6f:91:ba:66:fd:f4:4e:bb:79:90:7d:93:fb: e7:cd:9f:d6:a8:a1:3b:ab:ed:88:7c:07:23:d8:2f:ed:8d:c2: 87:fd:66:55:0c:e9:fa:b9:2a:f3:eb:5b:e6:e2:dc:9c:e4:b3: 75:59:20:2a:c9:58:99:62:11:c3:9a:44:24:a7:81:69:67:c1: 68:c9:50:9f:f3:1b:f3:fe:27:6c:34:57:22:0e:ac:ec:c7:4f: 79:b7:fa:d1:fe:d7:9a:df:23:58:52:78:23:db:39:37:d2:80: 8f:25:92:0d:5a:95:93:35:f6:d2:db:ed:fd:80:c5:3b:58:66: 8c:a8:b3:b8 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE8Yl5KUbJ7Yc47G3GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1 NzhmMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NmVhZjYwMTQtMjI2YS00OWM3LTg0NWYtM2Q0YmYxOTg2ODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmckEoUskgI4JlTb7YmPNE8f3BRl40UJx/vM8 Nc9R667tWzCIYRg+bIXj4czmOSESsxosPx4ARNHjTPwX08pNk2rwDR1tGtgR91KK Xff28Gy74QpbiV/Kr858ZNranbShb2SuRx/CgS8WvRFBEqn5FXeicCGiS+006m9E corXSFYY1LMCIdCr/A1f5xpK2mbnhCvhh5KiezBwrXLDuqE+NSkFaeSoYXaNlMaP /R8I/jLq1dsGrhZbJ3lm6USd/ebZzq3TNEFjuC9LBbx8nFQxypm3TxGKqIVSxagT EEhcAFxe79dC5ih7HI5OPV6rD/ZX8DR6TxuGN5gzrjVd8T79DQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFDM6GQmxzZtOQuUxNtL3UDbyQ3wWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3 YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvOTI1YzhjNmUtN2E2Ni0z YTJjLTk0MGQtNTZiZDU2YzcwZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmU2N2EzNzQtZGJkMy00YmZhLWI4 MmMtNmRiZmQ2NGU1NzhmLzJlNjdhMzc0LWRiZDMtNGJmYS1iODJjLTZkYmZkNjRl NTc4Zi5jcmwwHwYDVR0jBBgwFoAU4EaVkSgTL9WOY7iPKkNSxMOhOY4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJm ZDY0ZTU3OGYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCzuEAMA0E AgACMAcDBQAmBq1AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAIBW/5UZHaP4s/tIsJDpsZ5VQXvTBOj3ngyD exU9N3c1IBukO0sP3eAcYCNa9XhHtIJx8bH4ur+AOU5kHyg+2c+Y8TXRmecRLoGb tNgJl5Tcm2MdYdYrrOfbXXauNhra4o+kdwNhH5mIrCK8IUg4uM+6X0e9tylyccPt KoNr6VjtkTGWb5G6Zv30Trt5kH2T++fNn9aooTur7Yh8ByPYL+2Nwof9ZlUM6fq5 KvPrW+bi3Jzks3VZICrJWJliEcOaRCSngWlnwWjJUJ/zG/P+J2w0VyIOrOzHT3m3 +tH+15rfI1hSeCPbOTfSgI8lkg1alZM19tLb7f2AxTtYZoyos7g= -----END CERTIFICATE-----Generated at Mon Sep 21 20:15:10 2026 by rpki-client