$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/6c12fbd0-094c-338c-9772-809d7e4a7e15.roa File: 6c12fbd0-094c-338c-9772-809d7e4a7e15.roa (raw, json) Hash identifier: y+a6pOcEiCh3eXgg9ssTT/mFOyx/uaDtz+rs0f9xUMo= Subject key identifier: AA:82:01:21:6C:F2:E0:B0:99:8C:E8:F0:67:6D:CD:17:EB:2D:EA:16 Certificate issuer: /CN=2c96f64f-6506-4f99-a6ef-5e8a264b2845 Certificate serial: 010D0C9F4328584EDC91F2370975C9B7CB8E4780 Authority key identifier: AA:26:F4:E0:97:B6:85:C6:CE:55:2F:A3:B2:60:63:4D:59:AA:29:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/6c12fbd0-094c-338c-9772-809d7e4a7e15.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 5723 IP address blocks: 128.220.0.0/16 maxlen: 24 192.12.13.0/24 maxlen: 24 192.12.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:91:f2:37:09:75:c9:b7:cb:8e:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c96f64f-6506-4f99-a6ef-5e8a264b2845 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=d1b9bdf3-08eb-44c2-a5df-2327748f5d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1e:5f:9e:9d:2a:bf:41:2d:40:1c:3d:7b:54: 45:70:52:99:ac:be:86:12:83:b8:e2:b2:e7:20:e9: 9e:91:03:a1:74:2f:06:87:32:a2:a8:9a:c1:1d:40: c9:ee:4e:e0:a8:d9:b2:f8:ba:73:5d:f1:94:ae:5b: cc:dc:62:87:42:f3:0f:9e:49:67:96:c4:48:98:62: 56:80:48:50:d2:b0:ab:74:ad:dc:b0:f5:b8:97:d1: 26:ed:37:11:bb:c1:db:f5:3c:17:f3:59:fb:ab:24: e1:a0:c1:a9:1b:2b:0e:b5:57:a8:f8:91:9b:43:77: 7f:00:08:3a:58:c5:68:d7:c3:8a:3b:82:42:89:d9: be:d6:32:09:c5:da:fe:8f:09:bc:48:44:1e:4b:13: ae:51:79:5f:ef:17:ee:04:1e:70:73:f9:fb:58:4d: 3d:81:d8:c9:13:a2:70:fc:4b:cd:3d:77:ab:a1:8a: fe:fb:52:3a:c1:93:2e:61:62:16:9f:60:2f:50:c3: 3f:08:e8:a4:02:16:c9:da:44:1e:d7:b3:94:2c:fb: 93:d6:a0:18:f9:f0:b9:77:e7:90:4d:46:e3:59:4d: b5:6e:4d:d3:eb:87:2d:3e:04:5f:9e:73:ae:18:1a: 78:88:90:99:e2:78:5f:99:62:45:ec:29:5c:3c:f4: df:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:82:01:21:6C:F2:E0:B0:99:8C:E8:F0:67:6D:CD:17:EB:2D:EA:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/6c12fbd0-094c-338c-9772-809d7e4a7e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845/2c96f64f-6506-4f99-a6ef-5e8a264b2845.crl X509v3 Authority Key Identifier: keyid:AA:26:F4:E0:97:B6:85:C6:CE:55:2F:A3:B2:60:63:4D:59:AA:29:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c96f64f-6506-4f99-a6ef-5e8a264b2845.cer sbgp-ipAddrBlock: critical IPv4: 128.220.0.0/16 192.12.13.0-192.12.14.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:2a:c7:20:3a:5d:f7:d3:48:8e:c2:33:09:d0:24:a0:5c:1c: 94:f1:8e:7e:7a:41:f9:b5:9e:f1:8e:f0:6f:08:55:6f:1f:b7: 82:b8:45:17:b8:19:05:3a:da:cf:66:66:24:86:89:3a:1f:f8: cc:1c:33:94:dc:68:36:3f:04:7a:6e:0d:cd:f9:23:84:fe:88: f3:f8:e3:f4:83:dd:6d:36:ee:17:f0:e1:f8:dc:6d:ec:7f:ae: c0:1e:7a:85:07:cf:e6:dd:3b:0c:0d:aa:c7:9b:3b:dc:22:ec: 27:ec:3a:9d:1e:5e:3b:a8:38:5f:d9:87:6e:9d:db:d0:67:cf: 32:b8:07:5d:5e:12:7e:2e:18:6b:a0:e1:f4:5f:d3:bf:42:ba: fc:3f:d2:ab:27:2e:e1:e2:15:37:a8:54:e8:d8:25:2e:a9:87: 72:71:4b:56:5a:6a:0a:9f:36:ba:03:5c:b3:27:41:27:5f:58: 71:c9:a9:e8:f6:90:bb:68:8e:86:39:80:59:36:29:b8:a6:dc: 77:42:b7:61:68:36:f1:59:65:e3:e9:c6:5d:d8:b3:79:4a:ac: 92:55:ca:0b:67:ac:67:05:e1:6e:f0:2e:cf:1e:26:76:a0:64: c3:2c:f9:9d:90:7b:8e:92:3c:80:78:93:ae:0f:7e:6a:50:cf: b5:14:42:c4 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE7ckfI3CXXJt8uOR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmM5NmY2NGYtNjUwNi00Zjk5LWE2ZWYtNWU4YTI2NGIy ODQ1MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk ZDFiOWJkZjMtMDhlYi00NGMyLWE1ZGYtMjMyNzc0OGY1ZDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh5fnp0qv0EtQBw9e1RFcFKZrL6GEoO44rLn IOmekQOhdC8GhzKiqJrBHUDJ7k7gqNmy+LpzXfGUrlvM3GKHQvMPnklnlsRImGJW gEhQ0rCrdK3csPW4l9Em7TcRu8Hb9TwX81n7qyThoMGpGysOtVeo+JGbQ3d/AAg6 WMVo18OKO4JCidm+1jIJxdr+jwm8SEQeSxOuUXlf7xfuBB5wc/n7WE09gdjJE6Jw /EvNPXeroYr++1I6wZMuYWIWn2AvUMM/COikAhbJ2kQe17OULPuT1qAY+fC5d+eQ TUbjWU21bk3T64ctPgRfnnOuGBp4iJCZ4nhfmWJF7ClcPPTfmwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKqCASFs8uCwmYzo8GdtzRfrLeoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yYzk2 ZjY0Zi02NTA2LTRmOTktYTZlZi01ZThhMjY0YjI4NDUvNmMxMmZiZDAtMDk0Yy0z MzhjLTk3NzItODA5ZDdlNGE3ZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmM5NmY2NGYtNjUwNi00Zjk5LWE2 ZWYtNWU4YTI2NGIyODQ1LzJjOTZmNjRmLTY1MDYtNGY5OS1hNmVmLTVlOGEyNjRi Mjg0NS5jcmwwHwYDVR0jBBgwFoAUqib04Je2hcbOVS+jsmBjTVmqKQwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yYzk2ZjY0Zi02NTA2LTRmOTktYTZlZi01ZThh MjY0YjI4NDUuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwMAgNwwDAME AMAMDQMEAMAMDjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCFKscgOl3300iOwjMJ0CSgXByU8Y5+ekH5tZ7x jvBvCFVvH7eCuEUXuBkFOtrPZmYkhok6H/jMHDOU3Gg2PwR6bg3N+SOE/ojz+OP0 g91tNu4X8OH43G3sf67AHnqFB8/m3TsMDarHmzvcIuwn7DqdHl47qDhf2YdundvQ Z88yuAddXhJ+LhhroOH0X9O/Qrr8P9KrJy7h4hU3qFTo2CUuqYdycUtWWmoKnza6 A1yzJ0EnX1hxyano9pC7aI6GOYBZNim4ptx3QrdhaDbxWWXj6cZd2LN5SqySVcoL Z6xnBeFu8C7PHiZ2oGTDLPmdkHuOkjyAeJOuD35qUM+1FELE -----END CERTIFICATE-----Generated at Sat Sep 26 00:26:00 2026 by rpki-client