$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/6022c5e2-d167-3e40-b1be-482d6a77fb22.roa File: 6022c5e2-d167-3e40-b1be-482d6a77fb22.roa (raw, json) Hash identifier: MNzxTZ1BjdPHMjKGH3oWpHVBQSb4rJQhLP9huLoJj/c= Subject key identifier: F6:91:AF:36:54:C0:0C:3D:58:BE:63:31:AE:B0:28:A0:05:75:FE:42 Certificate issuer: /CN=8da2ab18-c7fe-481a-a5e3-31579c83e101 Certificate serial: 010D0C9F4328584F457053D0D714CD54D0FF9680 Authority key identifier: 5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/6022c5e2-d167-3e40-b1be-482d6a77fb22.roa Signing time: Wed 23 Sep 2026 14:32:33 +0000 ROA not before: Wed 23 Sep 2026 14:32:33 +0000 ROA not after: Tue 22 Dec 2026 15:32:33 +0000 asID: 198949 IP address blocks: 206.188.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:70:53:d0:d7:14:cd:54:d0:ff:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8da2ab18-c7fe-481a-a5e3-31579c83e101 Validity Not Before: Sep 23 14:32:33 2026 GMT Not After : Dec 22 15:32:33 2026 GMT Subject: CN=4a89a016-e075-4637-a7a8-a3c2f0dc0581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:15:e3:39:4e:02:63:22:2e:69:82:79:75: 6e:c0:11:99:54:2a:07:74:95:22:f5:3a:1f:33:77: a2:7f:50:65:9b:5c:d2:fb:90:e8:28:ee:1a:94:51: 68:ae:7a:2e:53:a6:50:36:60:af:ba:ab:91:46:8a: 9a:a1:e1:da:be:65:d0:d3:02:bb:a6:f0:44:ae:18: 7d:ee:86:0b:97:b7:11:1c:08:30:70:cd:32:ee:08: 02:c6:22:c5:bc:ec:fd:72:d8:9e:10:7f:9f:13:01: 0b:43:46:22:c3:c8:fa:34:2e:e6:a2:42:fc:d2:01: ce:58:31:17:94:fa:c9:e0:bf:38:a7:01:3e:76:99: 68:5c:b3:67:f0:24:41:2b:07:ec:dc:d4:33:d9:8b: 7b:fb:32:24:64:5c:89:9e:77:14:2d:bd:b9:78:03: fb:d2:e6:11:30:19:99:b6:b4:3b:08:c8:b4:ad:32: e4:92:73:8a:5c:67:4d:f2:76:1c:5d:45:5e:54:5f: 82:de:a6:55:9e:9d:d4:3b:73:dd:d6:1f:fd:42:62: c1:d1:4d:5f:10:63:5e:ba:9d:d2:c5:a9:e6:61:fb: 45:ed:7b:6a:0c:87:63:bf:c2:e2:97:86:e5:3a:a3: 2e:9b:19:05:7e:24:86:5a:3b:94:2a:93:93:6b:b1: 46:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:91:AF:36:54:C0:0C:3D:58:BE:63:31:AE:B0:28:A0:05:75:FE:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/6022c5e2-d167-3e40-b1be-482d6a77fb22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101/8da2ab18-c7fe-481a-a5e3-31579c83e101.crl X509v3 Authority Key Identifier: keyid:5D:FC:5C:D7:AC:EC:F4:24:89:AB:F0:DD:0A:B6:1A:C6:FF:26:B6:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8da2ab18-c7fe-481a-a5e3-31579c83e101.cer sbgp-ipAddrBlock: critical IPv4: 206.188.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:48:f0:62:09:43:d7:75:89:39:fa:d6:d0:72:f7:e1:67:b4: de:51:85:fd:63:22:e9:6f:38:f7:e8:1a:82:5c:1d:c9:87:56: 58:5f:57:8f:d4:0a:c1:84:87:67:66:4e:37:a1:15:e1:b7:a5: 36:32:4d:7b:93:93:2c:37:71:38:b5:38:9d:66:f2:01:4b:03: 49:23:20:62:b5:62:ef:8a:93:e8:df:e8:69:01:8e:f1:5b:96: 00:06:e4:8e:32:11:92:5f:0c:0c:6c:8e:fe:a9:02:5a:b4:ff: 86:ec:c8:35:15:ee:fc:39:6c:24:01:39:e5:64:83:54:17:60: eb:75:21:ca:70:8b:c8:88:b1:e5:39:49:1c:c6:63:cb:03:60: da:38:75:66:37:9e:bc:c3:3a:8c:bc:7c:f1:73:6a:c2:50:a1: 7b:5f:4b:35:74:ac:ab:44:82:03:a6:f9:35:0b:98:9a:b7:d1: 82:43:91:1d:f3:e8:95:10:99:67:6d:de:0e:3d:86:21:07:1f: a3:b2:3e:3c:2a:ac:37:84:a0:7f:0e:c3:9d:a5:90:d9:52:97: 73:50:8b:6a:74:8b:d2:60:95:28:4e:58:a7:d5:71:15:ac:96: cd:0e:4a:c7:61:4f:58:96:d5:17:c0:59:f7:97:54:2a:0b:02: 05:d0:75:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FcFPQ1xTNVND/loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRhMmFiMTgtYzdmZS00ODFhLWE1ZTMtMzE1NzljODNl MTAxMB4XDTI2MDkyMzE0MzIzM1oXDTI2MTIyMjE1MzIzM1owLzEtMCsGA1UEAxMk NGE4OWEwMTYtZTA3NS00NjM3LWE3YTgtYTNjMmYwZGMwNTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbgV4zlOAmMiLmmCeXVuwBGZVCoHdJUi9Tof M3eif1Blm1zS+5DoKO4alFFornouU6ZQNmCvuquRRoqaoeHavmXQ0wK7pvBErhh9 7oYLl7cRHAgwcM0y7ggCxiLFvOz9ctieEH+fEwELQ0Yiw8j6NC7mokL80gHOWDEX lPrJ4L84pwE+dploXLNn8CRBKwfs3NQz2Yt7+zIkZFyJnncULb25eAP70uYRMBmZ trQ7CMi0rTLkknOKXGdN8nYcXUVeVF+C3qZVnp3UO3Pd1h/9QmLB0U1fEGNeup3S xanmYftF7XtqDIdjv8Lil4blOqMumxkFfiSGWjuUKpOTa7FGXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaRrzZUwAw9WL5jMa6wKKAFdf5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZGEy YWIxOC1jN2ZlLTQ4MWEtYTVlMy0zMTU3OWM4M2UxMDEvNjAyMmM1ZTItZDE2Ny0z ZTQwLWIxYmUtNDgyZDZhNzdmYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGRhMmFiMTgtYzdmZS00ODFhLWE1 ZTMtMzE1NzljODNlMTAxLzhkYTJhYjE4LWM3ZmUtNDgxYS1hNWUzLTMxNTc5Yzgz ZTEwMS5jcmwwHwYDVR0jBBgwFoAUXfxc16zs9CSJq/DdCrYaxv8mtucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZGEyYWIxOC1jN2ZlLTQ4MWEtYTVlMy0zMTU3 OWM4M2UxMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzrzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBI8GIJQ9d1iTn61tBy9+FntN5Rhf1jIulvOPfoGoJcHcmHVlhfV4/U CsGEh2dmTjehFeG3pTYyTXuTkyw3cTi1OJ1m8gFLA0kjIGK1Yu+Kk+jf6GkBjvFb lgAG5I4yEZJfDAxsjv6pAlq0/4bsyDUV7vw5bCQBOeVkg1QXYOt1Icpwi8iIseU5 SRzGY8sDYNo4dWY3nrzDOoy8fPFzasJQoXtfSzV0rKtEggOm+TULmJq30YJDkR3z 6JUQmWdt3g49hiEHH6OyPjwqrDeEoH8Ow52lkNlSl3NQi2p0i9JglShOWKfVcRWs ls0OSsdhT1iW1RfAWfeXVCoLAgXQddk= -----END CERTIFICATE-----Generated at Sun Oct 4 01:33:18 2026 by rpki-client