$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/684c8408-e1d6-3109-9a08-0ec671566794.roa File: 684c8408-e1d6-3109-9a08-0ec671566794.roa (raw, json) Hash identifier: VzSbkhk/A7VpxBcj6eeiqp3X+RHPx+P1k0/O7soSuNc= Subject key identifier: 39:1E:FD:06:C3:A6:31:B4:C1:05:3E:E1:CC:3A:45:0A:AA:2C:2E:AD Certificate issuer: /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Certificate serial: 010D0C9F4328584EA797F5D175CC73AF7E92B800 Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/684c8408-e1d6-3109-9a08-0ec671566794.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399864 IP address blocks: 206.168.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:f5:d1:75:cc:73:af:7e:92:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=7558b3b9-dfd5-4c17-bd86-a484665c35bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d5:78:20:fc:14:9c:c2:84:43:f4:f4:e5:18: 29:8c:86:ad:66:fc:7c:e4:da:95:78:05:f5:5e:27: bf:d0:3a:a1:fe:43:eb:6d:d3:2c:51:d4:6e:b2:f2: de:d7:d7:6e:d0:81:3f:90:6d:7b:ed:2d:b6:4f:69: b1:9e:e1:2a:c3:ec:2b:46:c3:76:e4:e3:ac:43:36: 8a:a2:9c:30:fb:05:0c:79:4e:08:d5:0a:d6:e8:8c: f2:4a:e7:9a:a0:16:8f:95:ee:7d:8d:a8:76:3c:a9: fa:ca:d1:83:44:59:0c:b5:e2:15:e0:4b:5a:2c:49: 5e:1e:4d:bc:1f:20:0e:9d:2e:a6:e7:45:e2:7f:15: 91:30:b6:84:04:89:9c:b3:a1:1e:58:8e:2e:e8:9d: a3:cf:30:ad:ba:03:55:04:92:15:dd:13:92:a8:29: 57:e7:83:30:4e:97:54:88:a9:53:0c:d5:58:82:25: 6e:ff:38:57:a9:16:03:55:3e:f1:9b:8a:95:2a:ce: ad:1f:ba:37:90:d7:f0:bc:ad:10:49:73:73:9e:8f: f0:09:40:6e:3a:25:b7:3f:91:9f:93:3c:7d:cb:23: 7a:fe:92:57:6e:d1:c0:5e:e7:b6:58:f2:35:f9:9b: 70:dc:e6:69:fe:7d:91:99:cb:41:83:af:16:bf:94: c7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1E:FD:06:C3:A6:31:B4:C1:05:3E:E1:CC:3A:45:0A:AA:2C:2E:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/684c8408-e1d6-3109-9a08-0ec671566794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl X509v3 Authority Key Identifier: keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer sbgp-ipAddrBlock: critical IPv4: 206.168.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:1f:c1:53:8c:49:0f:6b:dc:0e:86:e9:f3:7a:6d:80:e8:7d: 8c:f8:29:6f:b0:42:00:47:cc:7c:ce:7f:38:47:11:e8:e5:1d: db:10:c8:b9:e7:9a:23:d2:74:9a:07:fe:d0:f0:c7:dc:4c:ed: 00:3f:fe:67:86:f4:2e:ff:73:8b:70:b8:f6:54:ab:56:9d:91: b7:9d:23:f3:fb:31:df:21:cc:17:ba:09:47:8e:e6:79:81:c9: 3d:42:89:94:11:65:0d:8d:e8:c0:db:a2:3e:87:14:80:40:7d: 8e:f1:c0:06:59:ea:24:0e:b5:90:6c:d8:3c:c7:66:db:b8:23: ee:2c:cc:ef:9e:ab:24:bc:17:78:5d:14:ec:8c:38:45:c9:71: c8:e5:66:34:36:c3:b1:31:c9:45:ad:38:3c:8a:a9:1b:63:2b: b6:f8:e6:60:be:a9:45:ea:dd:1e:e5:db:c3:c2:bb:da:b2:e2: e9:29:f3:5a:e9:8f:3e:f0:c2:29:12:c8:aa:e2:6b:c9:f3:58: 1f:8f:94:fa:94:38:be:8b:f8:84:15:5a:74:51:23:a5:c0:6f: 60:1a:be:bf:1b:f2:bf:0e:cf:0c:a2:ed:b6:e2:85:31:4d:44: ab:3e:f2:c2:09:74:7f:ca:56:92:ec:19:9f:ca:8b:26:45:c6: a0:aa:ca:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl/XRdcxzr36SuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NiYjA4NWItOGM1OC00OGYxLWE3YjktZDQ0NmQzZjk2 MWJmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NzU1OGIzYjktZGZkNS00YzE3LWJkODYtYTQ4NDY2NWMzNWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdV4IPwUnMKEQ/T05RgpjIatZvx85NqVeAX1 Xie/0Dqh/kPrbdMsUdRusvLe19du0IE/kG177S22T2mxnuEqw+wrRsN25OOsQzaK opww+wUMeU4I1QrW6IzySueaoBaPle59jah2PKn6ytGDRFkMteIV4EtaLEleHk28 HyAOnS6m50XifxWRMLaEBImcs6EeWI4u6J2jzzCtugNVBJIV3ROSqClX54MwTpdU iKlTDNVYgiVu/zhXqRYDVT7xm4qVKs6tH7o3kNfwvK0QSXNzno/wCUBuOiW3P5Gf kzx9yyN6/pJXbtHAXue2WPI1+Ztw3OZp/n2RmctBg68Wv5THHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDke/QbDpjG0wQU+4cw6RQqqLC6tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zY2Ji MDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2ZDNmOTYxYmYvNjg0Yzg0MDgtZTFkNi0z MTA5LTlhMDgtMGVjNjcxNTY2Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2NiYjA4NWItOGM1OC00OGYxLWE3 YjktZDQ0NmQzZjk2MWJmLzNjYmIwODViLThjNTgtNDhmMS1hN2I5LWQ0NDZkM2Y5 NjFiZi5jcmwwHwYDVR0jBBgwFoAU4e3x8Ae8hTPlv1z+X4vszy8hl7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zY2JiMDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2 ZDNmOTYxYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqg4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4fwVOMSQ9r3A6G6fN6bYDofYz4KW+wQgBHzHzOfzhHEejlHdsQyLnn miPSdJoH/tDwx9xM7QA//meG9C7/c4twuPZUq1adkbedI/P7Md8hzBe6CUeO5nmB yT1CiZQRZQ2N6MDboj6HFIBAfY7xwAZZ6iQOtZBs2DzHZtu4I+4szO+eqyS8F3hd FOyMOEXJccjlZjQ2w7ExyUWtODyKqRtjK7b45mC+qUXq3R7l28PCu9qy4ukp81rp jz7wwikSyKria8nzWB+PlPqUOL6L+IQVWnRRI6XAb2Aavr8b8r8Ozwyi7bbihTFN RKs+8sIJdH/KVpLsGZ/KiyZFxqCqysI= -----END CERTIFICATE-----Generated at Wed Jul 29 14:41:46 2026 by rpki-client