$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/54b98886-c6e4-39a0-9483-0550a1211254.roa File: 54b98886-c6e4-39a0-9483-0550a1211254.roa (raw, json) Hash identifier: foHNKT1wFYtqLt6qM/EtdTSUu+BVt0NK0tuEGDDLWMk= Subject key identifier: 2C:09:B5:74:70:FA:62:F8:8B:DF:3A:8E:E7:42:3C:10:9A:2C:80:95 Certificate issuer: /CN=6094ff48-2cdc-4ee0-879b-8cc25ddb855b Certificate serial: 010D0C9F4328584EED52162FFC3FC20AEC8B2F60 Authority key identifier: B6:06:67:28:64:96:0A:3D:B3:F7:18:26:4B:BE:3B:9F:5F:79:2B:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/54b98886-c6e4-39a0-9483-0550a1211254.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 209.20.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:16:2f:fc:3f:c2:0a:ec:8b:2f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6094ff48-2cdc-4ee0-879b-8cc25ddb855b Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=1e81bcba-bd7c-474d-b15c-64f3e74945b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:52:54:82:b7:6c:68:6e:eb:63:31:5e:ea: c1:5f:fd:c4:10:45:04:1e:02:29:3e:d3:8b:1a:f2: c9:4f:67:7e:f8:e3:fe:b0:80:90:f6:ef:ce:a3:8e: de:3f:8d:52:7f:41:96:e5:dc:60:b5:9e:9d:d6:45: 9f:ae:21:04:68:e6:43:b2:56:30:93:8a:56:88:8f: ce:16:ef:d5:89:7d:88:d2:aa:e5:20:ae:2a:8d:9b: 51:ae:b8:42:3e:d9:e7:2d:01:a1:8c:58:26:cc:1c: ba:47:ae:f7:48:a2:ee:38:6b:7c:f6:2a:ff:ab:b2: cf:26:2b:85:0f:49:02:e8:9e:a2:7c:d6:30:f9:a4: bd:43:3d:7c:ac:75:cb:8e:53:ef:8f:c4:17:9a:1a: 05:9f:94:a2:6c:93:37:0a:4e:97:25:84:ee:0b:aa: cc:bd:3d:1d:16:f1:9e:1c:aa:c8:da:9a:8a:e6:17: dc:fa:62:d6:fa:4a:f1:61:51:db:40:da:ad:24:39: 66:4b:73:83:4c:9e:17:bd:2f:47:2a:75:ef:58:1d: 8b:9b:b8:11:bc:94:23:0b:8c:e8:31:3c:8d:28:10: ee:28:bf:ac:64:3f:42:ac:2a:73:32:0d:ad:20:85: 31:5e:50:5c:82:62:75:f0:da:49:ea:5b:a5:ec:10: f0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:09:B5:74:70:FA:62:F8:8B:DF:3A:8E:E7:42:3C:10:9A:2C:80:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/54b98886-c6e4-39a0-9483-0550a1211254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.crl X509v3 Authority Key Identifier: keyid:B6:06:67:28:64:96:0A:3D:B3:F7:18:26:4B:BE:3B:9F:5F:79:2B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:09:77:75:0a:d6:40:30:a5:de:ba:b5:4f:d7:f4:11:f2:e0: 78:22:e9:a1:b3:21:b8:9e:77:e4:74:cb:49:91:26:67:f2:d5: f0:d7:39:7f:b1:f5:d5:6d:bd:ff:69:8f:6c:b1:a2:b3:a8:e9: 8f:d9:ae:01:72:56:9b:50:4f:85:78:e2:6a:d8:21:0a:a0:84: f4:fb:e9:71:0c:c0:50:f2:3b:d6:74:22:4f:87:86:3d:21:c1: b2:5a:6c:96:73:1c:1b:5c:3b:54:a4:fd:9e:f0:70:ab:2b:a6: 7f:fa:d3:ec:e0:e3:4c:62:7d:03:34:37:c9:c9:57:b7:67:f6: fc:43:77:60:64:9e:da:bb:74:5e:7f:ab:22:8e:db:9f:07:5a: 72:9e:32:d8:0f:fe:a7:2a:f4:2d:09:7f:fb:44:a0:84:0c:2c: bc:b6:a3:1f:1f:c5:20:57:b3:b8:47:64:7e:99:b2:8b:f6:2d: 5f:86:d2:04:d8:32:d2:c2:25:67:a0:7f:16:76:d3:d2:50:b7: 5a:e4:16:a5:77:e5:fc:da:65:2d:b9:c3:41:50:92:d7:83:1e: 28:78:26:fc:e1:89:22:e2:e4:cb:e8:75:99:4b:8c:6b:27:7a: eb:ed:8d:63:ff:63:ce:9f:cd:c4:15:52:3b:ad:63:7b:35:a3: 6b:c7:e9:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUhYv/D/CCuyLL2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA5NGZmNDgtMmNkYy00ZWUwLTg3OWItOGNjMjVkZGI4 NTViMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MWU4MWJjYmEtYmQ3Yy00NzRkLWIxNWMtNjRmM2U3NDk0NWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVhSVIK3bGhu62MxXurBX/3EEEUEHgIpPtOL GvLJT2d++OP+sICQ9u/Oo47eP41Sf0GW5dxgtZ6d1kWfriEEaOZDslYwk4pWiI/O Fu/ViX2I0qrlIK4qjZtRrrhCPtnnLQGhjFgmzBy6R673SKLuOGt89ir/q7LPJiuF D0kC6J6ifNYw+aS9Qz18rHXLjlPvj8QXmhoFn5SibJM3Ck6XJYTuC6rMvT0dFvGe HKrI2pqK5hfc+mLW+krxYVHbQNqtJDlmS3ODTJ4XvS9HKnXvWB2Lm7gRvJQjC4zo MTyNKBDuKL+sZD9CrCpzMg2tIIUxXlBcgmJ18NpJ6lul7BDwLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwJtXRw+mL4i986judCPBCaLICVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82MDk0 ZmY0OC0yY2RjLTRlZTAtODc5Yi04Y2MyNWRkYjg1NWIvNTRiOTg4ODYtYzZlNC0z OWEwLTk0ODMtMDU1MGExMjExMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjA5NGZmNDgtMmNkYy00ZWUwLTg3 OWItOGNjMjVkZGI4NTViLzYwOTRmZjQ4LTJjZGMtNGVlMC04NzliLThjYzI1ZGRi ODU1Yi5jcmwwHwYDVR0jBBgwFoAUtgZnKGSWCj2z9xgmS747n195KzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82MDk0ZmY0OC0yY2RjLTRlZTAtODc5Yi04Y2My NWRkYjg1NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUJd3UK1kAwpd66tU/X9BHy4Hgi6aGzIbied+R0y0mRJmfy1fDXOX+x 9dVtvf9pj2yxorOo6Y/ZrgFyVptQT4V44mrYIQqghPT76XEMwFDyO9Z0Ik+Hhj0h wbJabJZzHBtcO1Sk/Z7wcKsrpn/60+zg40xifQM0N8nJV7dn9vxDd2Bkntq7dF5/ qyKO258HWnKeMtgP/qcq9C0Jf/tEoIQMLLy2ox8fxSBXs7hHZH6Zsov2LV+G0gTY MtLCJWegfxZ209JQt1rkFqV35fzaZS25w0FQkteDHih4JvzhiSLi5MvodZlLjGsn euvtjWP/Y86fzcQVUjutY3s1o2vH6cU= -----END CERTIFICATE-----Generated at Tue Sep 22 20:35:13 2026 by rpki-client