$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa File: 59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa (raw, json) Hash identifier: P1l/REeB6WClG+XqLZhwoJ9EQAstSjvnbP/6b8O4Rr8= Subject key identifier: BA:70:32:63:6C:9F:ED:D0:9A:46:B0:F9:4B:AF:0A:7D:3C:0F:3D:27 Certificate issuer: /CN=9ffa2885-cbaa-44e8-babb-180936652b5c Certificate serial: 010D0C9F4328584F4112B85744DEAFDB6C18E100 Authority key identifier: 1B:4F:10:EB:F9:FE:83:F4:AB:C9:86:D0:8E:57:63:BD:71:C6:0D:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 400410 IP address blocks: 206.168.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b8:57:44:de:af:db:6c:18:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffa2885-cbaa-44e8-babb-180936652b5c Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=552a0514-9caf-487b-a899-37b754b74b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:6a:31:c9:ab:51:69:eb:2d:18:e7:a2:97: 47:3a:06:e9:96:3a:09:31:41:68:ed:10:59:0f:2a: a0:4f:66:5d:82:ad:17:52:8a:fe:69:28:9d:d9:43: 0e:b8:4e:4e:ba:c0:8a:d1:6d:34:3c:f4:82:66:37: 70:55:c7:1a:9a:e4:fe:f5:37:6e:83:c3:2e:9d:b1: 27:25:58:c5:01:ca:1d:92:1a:7e:f2:27:96:39:48: 19:86:dc:3f:40:e3:73:30:43:3b:5a:9a:ce:41:ca: 4b:ed:d5:c1:42:d4:4b:1e:fd:0b:37:d0:28:31:3b: a6:3a:7c:53:bd:03:e6:5a:be:6d:9c:38:2a:03:0b: de:13:fb:c6:91:c9:ce:ad:0b:86:a4:1b:cf:4b:20: af:b9:fc:f9:96:6e:fc:35:fb:34:50:c6:2e:6f:72: 47:55:99:5e:c6:a0:d3:f3:bf:5c:81:3f:cd:ef:11: b1:31:62:60:28:e9:31:01:36:ba:3b:c2:ff:2c:3f: 0f:70:b7:c8:b0:14:93:a5:a5:89:2d:6e:62:76:86: 5c:45:d2:a6:3d:03:b6:2d:d6:32:33:2c:fe:5c:e4: 94:4e:d6:26:ed:9a:3b:06:22:6c:e5:95:3b:db:bf: fa:7b:8e:03:b2:42:2d:82:fb:e9:2b:c1:be:61:bc: d7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:70:32:63:6C:9F:ED:D0:9A:46:B0:F9:4B:AF:0A:7D:3C:0F:3D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.crl X509v3 Authority Key Identifier: keyid:1B:4F:10:EB:F9:FE:83:F4:AB:C9:86:D0:8E:57:63:BD:71:C6:0D:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer sbgp-ipAddrBlock: critical IPv4: 206.168.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:08:cb:84:a2:d3:cc:a0:74:64:5f:be:29:3f:87:33:64:87: 5d:6c:1b:af:a0:47:a2:ad:cb:1f:6d:0d:91:9c:88:4c:45:73: 98:0d:91:64:0c:7c:a0:ce:12:5d:bf:05:8e:a9:40:a8:46:11: 58:bb:f4:a8:fb:29:5d:52:cf:a0:d3:ac:4e:bf:b9:27:c1:07: 57:0a:f0:a5:ee:d7:a5:f3:b2:f3:d8:7e:23:0f:86:2b:e2:03: 2b:33:16:a1:a2:fc:22:02:64:91:56:bc:9c:dc:a3:7f:10:f2: 2b:b8:38:c6:1f:80:b6:89:1c:36:86:b8:b8:d3:1c:3a:f7:55: 0d:a1:c1:c8:70:9b:24:a4:9d:8a:6a:e8:9a:57:e4:2f:c8:23: 67:42:49:d8:3e:b4:94:3c:41:17:e2:3c:1a:6e:e8:c9:4a:bb: d9:2c:d6:7b:33:af:d3:e9:b3:fb:4d:6b:88:c1:65:07:58:1a: 1d:fa:ae:19:30:db:94:a5:7c:fc:96:7c:9f:fd:91:a4:1e:d2: 62:54:5d:3d:77:1f:6d:70:a7:6b:76:3e:0e:35:66:ff:54:33: aa:2f:be:4d:40:ad:3b:72:bd:cd:9e:5a:49:a2:95:32:90:f8: f0:44:95:0c:2d:a0:48:46:01:47:3f:9b:93:bc:ab:1a:73:26: 83:1f:e2:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErhXRN6v22wY4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZmYTI4ODUtY2JhYS00NGU4LWJhYmItMTgwOTM2NjUy YjVjMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NTUyYTA1MTQtOWNhZi00ODdiLWE4OTktMzdiNzU0Yjc0YjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1tqMcmrUWnrLRjnopdHOgbpljoJMUFo7RBZ DyqgT2Zdgq0XUor+aSid2UMOuE5OusCK0W00PPSCZjdwVccamuT+9Tdug8MunbEn JVjFAcodkhp+8ieWOUgZhtw/QONzMEM7WprOQcpL7dXBQtRLHv0LN9AoMTumOnxT vQPmWr5tnDgqAwveE/vGkcnOrQuGpBvPSyCvufz5lm78Nfs0UMYub3JHVZlexqDT 879cgT/N7xGxMWJgKOkxATa6O8L/LD8PcLfIsBSTpaWJLW5idoZcRdKmPQO2LdYy Myz+XOSUTtYm7Zo7BiJs5ZU727/6e44DskItgvvpK8G+YbzXCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpwMmNsn+3Qmkaw+UuvCn08Dz0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZmZh Mjg4NS1jYmFhLTQ0ZTgtYmFiYi0xODA5MzY2NTJiNWMvNTlkZTJkMDAtMDYzOS0z ZTk5LTkxYzctMjJiMmM2OWI2YTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWZmYTI4ODUtY2JhYS00NGU4LWJh YmItMTgwOTM2NjUyYjVjLzlmZmEyODg1LWNiYWEtNDRlOC1iYWJiLTE4MDkzNjY1 MmI1Yy5jcmwwHwYDVR0jBBgwFoAUG08Q6/n+g/SryYbQjldjvXHGDekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZmZhMjg4NS1jYmFhLTQ0ZTgtYmFiYi0xODA5 MzY2NTJiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqheMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUIy4Si08ygdGRfvik/hzNkh11sG6+gR6Ktyx9tDZGciExFc5gNkWQM fKDOEl2/BY6pQKhGEVi79Kj7KV1Sz6DTrE6/uSfBB1cK8KXu16XzsvPYfiMPhivi AyszFqGi/CICZJFWvJzco38Q8iu4OMYfgLaJHDaGuLjTHDr3VQ2hwchwmySknYpq 6JpX5C/II2dCSdg+tJQ8QRfiPBpu6MlKu9ks1nszr9Pps/tNa4jBZQdYGh36rhkw 25SlfPyWfJ/9kaQe0mJUXT13H21wp2t2Pg41Zv9UM6ovvk1ArTtyvc2eWkmilTKQ +PBElQwtoEhGAUc/m5O8qxpzJoMf4hE= -----END CERTIFICATE-----Generated at Wed Sep 23 02:57:45 2026 by rpki-client