$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a2310dea-bfb2-30bb-a6eb-efe32eb4f8bb.roa File: a2310dea-bfb2-30bb-a6eb-efe32eb4f8bb.roa (raw, json) Hash identifier: 0ZMsqZsHi7tns6Wu5DZJZ5SYFTVgG32iHKlYQddSiwQ= Subject key identifier: F4:2A:D6:98:41:9E:22:C8:B6:E7:B5:6B:64:21:57:A4:E0:87:6C:D1 Certificate issuer: /CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Certificate serial: 010D0C9F4328584F46A7F67A5811EAFF94A58E00 Authority key identifier: E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a2310dea-bfb2-30bb-a6eb-efe32eb4f8bb.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 63448 IP address blocks: 208.56.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f6:7a:58:11:ea:ff:94:a5:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=280def25-2f95-41ef-9fc9-a2a7bbdefa77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:20:aa:0f:0e:d6:63:d7:28:c9:f6:ef:29:71: fc:1c:fa:b2:d1:8c:ea:9d:4f:2a:9b:5c:a9:07:1c: 10:1e:83:4a:a3:82:0d:42:d7:66:0c:c6:85:01:eb: b7:c4:01:a4:f2:fc:15:d4:bc:0f:09:59:91:b4:52: 7d:90:85:e6:c0:23:b7:da:11:4a:bd:84:4a:b2:61: b0:42:b4:71:48:d2:94:39:f3:f4:72:33:d2:0f:01: d8:35:22:69:34:dd:ff:63:16:d2:3b:23:9f:72:8b: 2a:e7:5d:cf:ca:9e:84:68:98:1e:02:3e:b5:72:52: 0d:90:8f:52:91:6f:28:ae:b8:f8:ac:15:78:ce:a7: a0:1d:50:67:c5:c4:cc:21:51:9b:80:a3:5d:64:6c: 1c:a9:c8:ee:60:18:b6:4b:41:17:46:04:b0:20:df: 56:9b:2b:d6:44:b3:1f:fe:4c:3c:07:99:75:ea:a0: 62:03:12:e3:e3:7d:7b:10:9f:2c:7b:2d:6b:d3:81: fd:b2:b6:64:43:72:e2:57:02:d7:4e:74:4b:a8:95: 7a:bc:9a:34:ba:cc:78:1e:2b:33:5d:31:eb:be:b3: c6:71:6f:cd:f5:aa:a5:02:ac:46:d0:23:28:78:09: 6e:64:70:74:38:53:0e:f6:35:38:9d:ce:5e:03:9e: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2A:D6:98:41:9E:22:C8:B6:E7:B5:6B:64:21:57:A4:E0:87:6C:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a2310dea-bfb2-30bb-a6eb-efe32eb4f8bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl X509v3 Authority Key Identifier: keyid:E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer sbgp-ipAddrBlock: critical IPv4: 208.56.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7e:55:39:f7:bb:dd:9d:9e:4f:a2:b2:b5:d0:9b:9e:81:17: 75:c5:2b:f2:c1:01:85:5a:44:1f:7e:af:e2:10:db:43:f1:b1: 00:c0:26:78:c9:8e:cc:d9:4b:2b:39:e3:16:d4:c5:38:47:d6: 9d:c0:06:e5:d4:09:dd:07:e7:11:a4:fc:ab:3e:36:84:94:9d: 7e:b6:d9:c7:0d:62:f0:78:68:1b:44:3e:cf:c4:74:25:2c:ad: 8c:85:15:85:b2:52:f9:d0:1f:f2:a7:26:ec:52:f5:95:e2:39: 90:a8:5d:2d:ff:84:11:f4:a5:a3:5e:63:15:65:71:cd:1d:f2: 9d:bc:52:43:98:44:22:ca:3a:64:fe:c6:c9:2f:b6:db:2b:5f: 77:d4:74:eb:94:ca:51:50:ba:c9:d4:67:e9:0a:08:bf:28:c9: 0f:04:44:c1:a9:48:bc:14:6a:d6:5b:0a:98:e1:bd:0b:b2:7d: 5e:84:e0:26:b8:3d:d3:5e:d7:3a:3d:a3:b5:73:c2:a7:a4:f3: 12:d5:c6:ac:d7:f3:8a:de:0f:11:61:1a:88:65:8e:b4:54:87: 14:c9:50:07:a2:bd:37:1c:e6:1d:d5:3a:27:46:09:05:d1:59: 44:60:30:58:0a:e6:ad:1c:f7:98:d5:b9:60:50:a2:57:fc:78: 8a:99:c1:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/Z6WBHq/5SljgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ0ZjZlNDYtZDljNS00MjIxLWExZTUtMGY4NzIyYWZl ZjIxMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MjgwZGVmMjUtMmY5NS00MWVmLTlmYzktYTJhN2JiZGVmYTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyCqDw7WY9coyfbvKXH8HPqy0YzqnU8qm1yp BxwQHoNKo4INQtdmDMaFAeu3xAGk8vwV1LwPCVmRtFJ9kIXmwCO32hFKvYRKsmGw QrRxSNKUOfP0cjPSDwHYNSJpNN3/YxbSOyOfcosq513Pyp6EaJgeAj61clINkI9S kW8orrj4rBV4zqegHVBnxcTMIVGbgKNdZGwcqcjuYBi2S0EXRgSwIN9WmyvWRLMf /kw8B5l16qBiAxLj4317EJ8sey1r04H9srZkQ3LiVwLXTnRLqJV6vJo0usx4Hisz XTHrvrPGcW/N9aqlAqxG0CMoeAluZHB0OFMO9jU4nc5eA57bHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQq1phBniLItue1a2QhV6Tgh2zRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xZDRm NmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3MjJhZmVmMjEvYTIzMTBkZWEtYmZiMi0z MGJiLWE2ZWItZWZlMzJlYjRmOGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWQ0ZjZlNDYtZDljNS00MjIxLWEx ZTUtMGY4NzIyYWZlZjIxLzFkNGY2ZTQ2LWQ5YzUtNDIyMS1hMWU1LTBmODcyMmFm ZWYyMS5jcmwwHwYDVR0jBBgwFoAU4nfIxkNwCuM5P69UqCneqpdXysEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xZDRmNmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3 MjJhZmVmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0DjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx+VTn3u92dnk+isrXQm56BF3XFK/LBAYVaRB9+r+IQ20PxsQDAJnjJ jszZSys54xbUxThH1p3ABuXUCd0H5xGk/Ks+NoSUnX622ccNYvB4aBtEPs/EdCUs rYyFFYWyUvnQH/KnJuxS9ZXiOZCoXS3/hBH0paNeYxVlcc0d8p28UkOYRCLKOmT+ xskvttsrX3fUdOuUylFQusnUZ+kKCL8oyQ8ERMGpSLwUatZbCpjhvQuyfV6E4Ca4 PdNe1zo9o7Vzwqek8xLVxqzX84reDxFhGohljrRUhxTJUAeivTcc5h3VOidGCQXR WURgMFgK5q0c95jVuWBQolf8eIqZwaM= -----END CERTIFICATE-----Generated at Sat Sep 26 14:53:31 2026 by rpki-client