$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa File: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (raw, json) Hash identifier: sXUU+Dp37nOJejpDnTfU5q6m1DOgR37RFdbAD4fDnO4= Subject key identifier: 01:D3:DF:A7:3C:CD:2C:90:1D:E6:21:84:0B:E0:0C:5B:AE:A7:88:56 Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584F0D6CDD4E945A6B8C1140B100 Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 6579 IP address blocks: 192.75.24.0/24 maxlen: 24 192.219.31.0/24 maxlen: 24 208.85.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:dd:4e:94:5a:6b:8c:11:40:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=e86e1953-0983-4d9d-aabb-01a80dee4bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:36:6d:ec:b3:0c:81:e6:53:ee:1e:f3:c5:46: a5:33:be:d9:c7:cc:05:de:b5:80:9f:95:98:4f:64: 8e:d2:02:7e:49:46:c0:67:9a:26:8e:26:bc:cb:54: ae:6d:42:a3:f6:13:78:79:22:32:0e:ab:f5:eb:e2: e4:e7:b0:31:b0:c6:76:0b:e7:45:8d:0a:1e:4c:d6: 6a:cb:83:a4:f6:3e:ec:2b:8d:cc:b1:c8:64:b9:4d: 6a:48:f9:73:4b:e8:47:bc:12:7d:16:83:df:b5:c8: 46:74:41:77:3f:43:e3:21:b1:be:e8:a6:c2:fb:3b: aa:cc:34:c6:1f:36:fa:66:e5:53:28:d7:b7:49:09: 62:1f:4a:1a:09:e0:f5:e2:a2:bf:6f:41:be:e9:41: 66:55:86:d7:b4:3a:cd:a2:22:77:06:4f:58:b0:6c: 20:30:37:65:af:13:0d:7a:98:86:95:8a:c2:10:88: 56:cd:db:51:f6:6d:24:0f:8c:e4:3a:4b:56:54:31: 71:00:42:4c:83:fa:f4:e8:8f:9f:40:9a:38:3b:10: 8c:a0:d4:51:ab:b2:69:0d:99:62:d7:80:55:d5:38: 53:6a:a8:ba:db:6a:b5:d8:af:53:af:ee:d7:1d:26: 0a:c1:54:63:6b:49:c6:46:3d:c2:8a:c1:88:6a:e4: cc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D3:DF:A7:3C:CD:2C:90:1D:E6:21:84:0B:E0:0C:5B:AE:A7:88:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: 192.75.24.0/24 192.219.31.0/24 208.85.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:da:ff:b1:e0:8c:62:b9:07:83:0a:c5:6e:71:5d:a6:e7:ca: f6:ba:6d:1e:ec:66:49:0b:ef:fb:ba:c1:1d:c6:c9:b1:60:a1: e4:e2:67:cd:32:b4:bc:86:37:12:f5:dc:1d:2d:ce:17:3c:4e: 49:1f:23:c0:2f:99:91:ad:62:51:eb:cf:c7:86:eb:d7:d1:cc: 54:4b:9e:53:4e:b3:3d:87:01:34:d2:1e:22:0b:81:31:fa:98: a3:cf:c5:c5:56:39:73:3c:8b:44:4e:18:03:f0:75:72:0f:c0: b0:ba:53:73:f7:14:2f:f4:d6:5c:e5:78:a0:cc:50:f7:de:02: 02:98:3e:18:ba:32:b8:4e:6b:44:95:5b:47:61:61:25:1a:b5: ad:5a:dd:ef:8a:e6:80:29:1e:2d:c0:7a:ae:ec:c8:06:e0:03: bf:0f:bf:d1:00:cc:2c:d1:97:e1:1c:95:66:ae:9c:45:e7:1b: fb:52:b7:07:ef:37:36:ab:a5:bf:cc:97:b5:5d:93:a6:89:72: 4b:b5:e0:2a:06:95:02:a9:43:0e:fe:b3:cd:0f:07:64:ff:85: 56:03:06:6c:40:5d:fe:77:ad:60:30:77:d9:06:33:12:95:04: 2d:eb:6b:db:40:41:9c:93:3f:97:ef:9d:85:c6:ec:d4:eb:c2: bd:48:67:18 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8NbN1OlFprjBFAsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZTg2ZTE5NTMtMDk4My00ZDlkLWFhYmItMDFhODBkZWU0YmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzZt7LMMgeZT7h7zxUalM77Zx8wF3rWAn5WY T2SO0gJ+SUbAZ5omjia8y1SubUKj9hN4eSIyDqv16+Lk57AxsMZ2C+dFjQoeTNZq y4Ok9j7sK43MschkuU1qSPlzS+hHvBJ9FoPftchGdEF3P0PjIbG+6KbC+zuqzDTG Hzb6ZuVTKNe3SQliH0oaCeD14qK/b0G+6UFmVYbXtDrNoiJ3Bk9YsGwgMDdlrxMN epiGlYrCEIhWzdtR9m0kD4zkOktWVDFxAEJMg/r06I+fQJo4OxCMoNRRq7JpDZli 14BV1ThTaqi622q12K9Tr+7XHSYKwVRja0nGRj3CisGIauTM3wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFAHT36c8zSyQHeYhhAvgDFuup4hWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvNmZhODAxZTMtMzM0Mi0z ZjFjLWEzOTYtNmY5MjAxYzBkNTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwEsYAwQA wNsfAwQC0FVQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIva/7HgjGK5B4MKxW5xXabnyva6bR7sZkkL7/u6 wR3GybFgoeTiZ80ytLyGNxL13B0tzhc8TkkfI8AvmZGtYlHrz8eG69fRzFRLnlNO sz2HATTSHiILgTH6mKPPxcVWOXM8i0ROGAPwdXIPwLC6U3P3FC/01lzleKDMUPfe AgKYPhi6MrhOa0SVW0dhYSUata1a3e+K5oApHi3Aeq7syAbgA78Pv9EAzCzRl+Ec lWaunEXnG/tStwfvNzarpb/Ml7Vdk6aJcku14CoGlQKpQw7+s80PB2T/hVYDBmxA Xf53rWAwd9kGMxKVBC3ra9tAQZyTP5fvnYXG7NTrwr1IZxg= -----END CERTIFICATE-----Generated at Tue Sep 22 03:40:10 2026 by rpki-client