$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbce48f2-6a13-466a-b5fa-02062a3a5b90/0236d945-42db-37f9-951a-934dfb7432ee.roa File: 0236d945-42db-37f9-951a-934dfb7432ee.roa (raw, json) Hash identifier: 05q6fZlBwwb6oRWYV3gHiKeY9cZTAzIWTGux5YCRJr8= Subject key identifier: 0E:3A:36:79:CD:E5:6E:64:6F:1F:82:AE:BD:59:C3:33:FF:9C:92:E4 Certificate issuer: /CN=cbce48f2-6a13-466a-b5fa-02062a3a5b90 Certificate serial: 010D0C9F4328584F42F5E2326853B2F4B54CFE00 Authority key identifier: 75:0A:15:2B:EB:8C:E3:73:D3:D4:61:99:33:DE:57:15:A2:99:C5:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbce48f2-6a13-466a-b5fa-02062a3a5b90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbce48f2-6a13-466a-b5fa-02062a3a5b90/0236d945-42db-37f9-951a-934dfb7432ee.roa Signing time: Tue 22 Sep 2026 17:14:14 +0000 ROA not before: Tue 22 Sep 2026 17:14:14 +0000 ROA not after: Mon 21 Dec 2026 18:14:14 +0000 asID: 46473 IP address blocks: 68.64.240.0/20 maxlen: 24 68.168.144.0/20 maxlen: 24 2602:fe2f::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbce48f2-6a13-466a-b5fa-02062a3a5b90/cbce48f2-6a13-466a-b5fa-02062a3a5b90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbce48f2-6a13-466a-b5fa-02062a3a5b90/cbce48f2-6a13-466a-b5fa-02062a3a5b90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbce48f2-6a13-466a-b5fa-02062a3a5b90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:f5:e2:32:68:53:b2:f4:b5:4c:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbce48f2-6a13-466a-b5fa-02062a3a5b90 Validity Not Before: Sep 22 17:14:14 2026 GMT Not After : Dec 21 18:14:14 2026 GMT Subject: CN=add5222e-41da-4b06-9195-e3d84cf68554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:30:3b:67:d4:71:bf:5d:0c:66:8d:ee:f7:90: 5f:5d:2f:4e:c0:5b:c6:a4:2f:7a:ba:b9:a7:8f:0b: 07:5e:b2:0d:aa:3e:57:64:ff:fa:71:79:8d:50:92: fe:93:a5:51:04:6b:c0:07:2e:8b:5e:85:f0:d5:9b: 0d:1d:a0:9d:09:61:0a:a8:4a:92:8d:a6:8a:66:61: c7:d0:9b:74:12:40:44:24:bb:a0:8a:e2:c5:bf:36: 61:9c:03:9c:06:a9:20:01:7c:38:b6:1a:fd:4c:ad: f2:84:ec:02:83:d2:01:b4:a9:b4:0f:fe:6c:d4:79: 9f:d8:af:ff:f9:23:69:3f:b1:44:10:1b:48:5b:14: 56:08:64:fe:14:99:54:65:04:bb:c3:4e:7c:e1:a1: 41:5b:e6:29:72:c1:8b:d9:98:e2:1f:59:58:e2:5f: 27:e1:b1:67:50:cc:b8:7b:6c:cc:34:d3:58:a1:58: fe:91:09:cb:cf:3a:f6:61:6e:98:cc:79:99:91:1a: 3a:5b:4b:25:76:c1:9b:89:f5:4e:ae:2d:15:88:d8: 04:8a:42:11:19:b4:94:38:00:fe:61:98:ef:b4:e9: b8:d1:77:6a:4e:45:96:4b:10:df:38:f5:29:90:80: ad:12:e5:96:b3:e7:5c:42:ff:4b:87:da:b3:c9:fb: 13:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3A:36:79:CD:E5:6E:64:6F:1F:82:AE:BD:59:C3:33:FF:9C:92:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbce48f2-6a13-466a-b5fa-02062a3a5b90/0236d945-42db-37f9-951a-934dfb7432ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbce48f2-6a13-466a-b5fa-02062a3a5b90/cbce48f2-6a13-466a-b5fa-02062a3a5b90.crl X509v3 Authority Key Identifier: keyid:75:0A:15:2B:EB:8C:E3:73:D3:D4:61:99:33:DE:57:15:A2:99:C5:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cbce48f2-6a13-466a-b5fa-02062a3a5b90.cer sbgp-ipAddrBlock: critical IPv4: 68.64.240.0/20 68.168.144.0/20 IPv6: 2602:fe2f::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:43:61:f4:3f:f8:75:33:c7:b4:74:d1:1b:7d:bb:64:77:13: 02:58:85:87:b7:b5:04:2f:a9:3f:06:42:a8:d2:b7:97:65:0b: 68:48:a2:21:64:7f:af:60:e0:06:e6:92:c7:1c:50:84:b2:3a: 57:10:be:ca:b7:a9:d0:ef:7f:69:d5:d0:91:de:0b:7d:3f:2e: 55:8e:63:7d:7a:16:f6:4c:2f:21:f3:66:e0:b5:62:ab:00:e7: f8:a4:68:b4:8c:77:5c:67:fa:d9:82:00:ad:71:20:79:6d:6e: 35:02:8b:da:50:f7:60:0e:30:f9:5d:99:0d:6b:63:3f:ca:30: 79:04:f2:83:a9:70:04:ff:4b:38:30:74:56:03:8c:97:f9:07: 4b:90:67:7e:b8:7a:20:15:5a:2c:de:35:27:82:a4:0e:71:f1: e0:73:ff:04:c8:8a:75:76:d8:23:e2:78:46:20:15:1c:fd:53: 61:38:2f:9b:04:93:5f:73:89:f6:dd:47:1f:8f:cc:78:e4:95: c5:eb:99:03:bb:ca:a2:9a:69:8a:1f:41:e5:48:10:0b:06:2d: d5:5f:34:18:da:3d:91:45:c9:d2:f1:a0:9f:11:24:50:7d:c8: fc:cd:d6:0b:77:bf:1e:8c:ac:c8:b2:46:2e:99:18:3b:5a:5b: a1:c0:d8:24 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE9C9eIyaFOy9LVM/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JjZTQ4ZjItNmExMy00NjZhLWI1ZmEtMDIwNjJhM2E1 YjkwMB4XDTI2MDkyMjE3MTQxNFoXDTI2MTIyMTE4MTQxNFowLzEtMCsGA1UEAxMk YWRkNTIyMmUtNDFkYS00YjA2LTkxOTUtZTNkODRjZjY4NTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDA7Z9Rxv10MZo3u95BfXS9OwFvGpC96urmn jwsHXrINqj5XZP/6cXmNUJL+k6VRBGvABy6LXoXw1ZsNHaCdCWEKqEqSjaaKZmHH 0Jt0EkBEJLugiuLFvzZhnAOcBqkgAXw4thr9TK3yhOwCg9IBtKm0D/5s1Hmf2K// +SNpP7FEEBtIWxRWCGT+FJlUZQS7w0584aFBW+YpcsGL2ZjiH1lY4l8n4bFnUMy4 e2zMNNNYoVj+kQnLzzr2YW6YzHmZkRo6W0sldsGbifVOri0ViNgEikIRGbSUOAD+ YZjvtOm40XdqTkWWSxDfOPUpkICtEuWWs+dcQv9Lh9qzyfsTNwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFA46NnnN5W5kbx+Crr1ZwzP/nJLkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9jYmNl NDhmMi02YTEzLTQ2NmEtYjVmYS0wMjA2MmEzYTViOTAvMDIzNmQ5NDUtNDJkYi0z N2Y5LTk1MWEtOTM0ZGZiNzQzMmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvY2JjZTQ4ZjItNmExMy00NjZhLWI1 ZmEtMDIwNjJhM2E1YjkwL2NiY2U0OGYyLTZhMTMtNDY2YS1iNWZhLTAyMDYyYTNh NWI5MC5jcmwwHwYDVR0jBBgwFoAUdQoVK+uM43PT1GGZM95XFaKZxeYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9jYmNlNDhmMi02YTEzLTQ2NmEtYjVmYS0wMjA2 MmEzYTViOTAuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQEREDwAwQE RKiQMA4EAgACMAgDBgQmAv4vADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKQ2H0P/h1M8e0dNEbfbtkdxMC WIWHt7UEL6k/BkKo0reXZQtoSKIhZH+vYOAG5pLHHFCEsjpXEL7Kt6nQ739p1dCR 3gt9Py5VjmN9ehb2TC8h82bgtWKrAOf4pGi0jHdcZ/rZggCtcSB5bW41AovaUPdg DjD5XZkNa2M/yjB5BPKDqXAE/0s4MHRWA4yX+QdLkGd+uHogFVos3jUngqQOcfHg c/8EyIp1dtgj4nhGIBUc/VNhOC+bBJNfc4n23Ucfj8x45JXF65kDu8qimmmKH0Hl SBALBi3VXzQY2j2RRcnS8aCfESRQfcj8zdYLd78ejKzIskYumRg7WluhwNgk -----END CERTIFICATE-----Generated at Fri Sep 25 03:48:24 2026 by rpki-client