$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/d3d64247-d754-342a-b8f5-056c92a5462e.roa File: d3d64247-d754-342a-b8f5-056c92a5462e.roa (raw, json) Hash identifier: Dz7CRSp95SnEMJEplHGkWOnYpfg+RKjeb9MmwsbjJXY= Subject key identifier: 0E:31:D9:C0:CA:2C:C5:5F:BD:A6:BA:11:6C:89:77:C2:80:73:FC:54 Certificate issuer: /CN=5cc1ebaa-d0c9-4588-a688-29d18d2c9af6 Certificate serial: 010D0C9F4328584F49871737ED10E587271D8080 Authority key identifier: 8C:57:F3:5C:6F:82:F7:B1:68:AA:13:4C:92:3A:1B:44:81:51:2C:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/d3d64247-d754-342a-b8f5-056c92a5462e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395825 IP address blocks: 207.229.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:17:37:ed:10:e5:87:27:1d:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cc1ebaa-d0c9-4588-a688-29d18d2c9af6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9fbf1368-7548-46cc-b610-10fed2b91605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ef:65:3e:c0:73:c3:6b:36:be:31:4a:d4:bd: ff:6a:ed:3a:f2:a2:3b:7d:25:7a:f9:20:a1:ba:2e: 0d:0f:6b:99:c0:5f:fd:8c:9b:a6:f8:31:88:cb:fb: 00:5a:dc:e2:0f:15:9b:da:37:8b:13:97:56:05:99: 99:b2:57:e3:e2:be:f8:07:39:e9:d3:39:4f:01:8f: 3e:7f:bd:9b:f2:6c:28:83:5f:67:07:98:0d:62:2c: de:21:08:51:ad:e3:51:12:0e:99:64:e2:39:67:4d: 91:ea:43:e8:7d:5c:58:84:10:4f:d4:f8:f6:d3:95: 70:72:06:d3:41:a3:1b:13:91:6f:58:7e:7d:a1:b5: 24:98:75:13:92:33:9f:97:f2:df:29:1b:07:f7:ac: ee:5e:b1:d3:b4:f1:31:1b:52:fc:34:e6:0c:73:8a: 88:de:39:36:79:41:2b:ce:76:20:4c:47:ec:38:7a: 4b:58:22:f2:01:46:e0:d8:bb:bd:41:cc:2d:8d:a4: b0:4c:b9:d2:90:fa:af:51:b8:43:c3:61:79:de:de: 50:94:22:7c:05:c3:2b:72:87:16:59:fd:8c:d9:08: a2:4f:53:6a:a6:fa:92:88:6f:e5:b4:25:87:24:d1: 94:41:0f:8f:90:ad:27:b2:7e:10:c3:43:d4:2f:b0: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:31:D9:C0:CA:2C:C5:5F:BD:A6:BA:11:6C:89:77:C2:80:73:FC:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/d3d64247-d754-342a-b8f5-056c92a5462e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.crl X509v3 Authority Key Identifier: keyid:8C:57:F3:5C:6F:82:F7:B1:68:AA:13:4C:92:3A:1B:44:81:51:2C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5cc1ebaa-d0c9-4588-a688-29d18d2c9af6.cer sbgp-ipAddrBlock: critical IPv4: 207.229.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:37:3b:d9:a5:3d:31:37:72:78:88:5c:e1:74:0b:93:db:42: ff:11:b1:7f:3f:6b:8e:48:9c:16:5f:a8:d4:ee:16:25:cb:6d: bf:fb:70:ef:c5:16:45:3e:75:83:a1:f8:17:bb:ad:66:bd:db: 85:33:fd:fa:90:f7:b2:4e:99:e2:ff:cc:56:45:b2:76:92:29: a7:24:64:78:e3:d5:cc:24:bd:df:bf:81:c1:23:3a:60:5c:45: 8d:d3:93:73:4b:5a:73:bf:01:86:3c:4c:b5:98:63:9f:8d:08: 57:90:cb:b8:a4:ca:58:1a:9d:41:31:d4:77:17:fd:e4:58:11: 8e:91:ec:82:c7:28:db:27:d0:9a:37:80:53:27:db:c6:6d:9b: 7d:fb:ec:b5:81:ea:cd:13:8c:51:d2:ef:d9:d0:ee:5d:6f:40: 02:b0:e0:6b:cd:08:c2:db:4a:90:24:f7:89:28:f0:e3:7c:1a: cb:01:38:6a:b6:bd:9b:6d:56:08:18:dc:f9:1f:03:8f:5d:83: 17:97:1c:db:8e:00:1c:6a:0b:cb:9b:97:d3:2e:94:af:86:d9: e0:aa:47:bd:2f:25:69:17:72:6b:08:cf:6e:71:59:18:69:ef: 27:2c:88:b7:8c:76:58:45:93:da:9b:49:17:c2:34:86:85:40: e5:12:bc:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhxc37RDlhycdgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjMWViYWEtZDBjOS00NTg4LWE2ODgtMjlkMThkMmM5 YWY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWZiZjEzNjgtNzU0OC00NmNjLWI2MTAtMTBmZWQyYjkxNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+9lPsBzw2s2vjFK1L3/au068qI7fSV6+SCh ui4ND2uZwF/9jJum+DGIy/sAWtziDxWb2jeLE5dWBZmZslfj4r74Bznp0zlPAY8+ f72b8mwog19nB5gNYizeIQhRreNREg6ZZOI5Z02R6kPofVxYhBBP1Pj205VwcgbT QaMbE5FvWH59obUkmHUTkjOfl/LfKRsH96zuXrHTtPExG1L8NOYMc4qI3jk2eUEr znYgTEfsOHpLWCLyAUbg2Lu9QcwtjaSwTLnSkPqvUbhDw2F53t5QlCJ8BcMrcocW Wf2M2QiiT1NqpvqSiG/ltCWHJNGUQQ+PkK0nsn4Qw0PUL7CVgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4x2cDKLMVfvaa6EWyJd8KAc/xUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81Y2Mx ZWJhYS1kMGM5LTQ1ODgtYTY4OC0yOWQxOGQyYzlhZjYvZDNkNjQyNDctZDc1NC0z NDJhLWI4ZjUtMDU2YzkyYTU0NjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNWNjMWViYWEtZDBjOS00NTg4LWE2 ODgtMjlkMThkMmM5YWY2LzVjYzFlYmFhLWQwYzktNDU4OC1hNjg4LTI5ZDE4ZDJj OWFmNi5jcmwwHwYDVR0jBBgwFoAUjFfzXG+C97FoqhNMkjobRIFRLEYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81Y2MxZWJhYS1kMGM5LTQ1ODgtYTY4OC0yOWQx OGQyYzlhZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+VVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHU3O9mlPTE3cniIXOF0C5PbQv8RsX8/a45InBZfqNTuFiXLbb/7cO/F FkU+dYOh+Be7rWa924Uz/fqQ97JOmeL/zFZFsnaSKackZHjj1cwkvd+/gcEjOmBc RY3Tk3NLWnO/AYY8TLWYY5+NCFeQy7ikylganUEx1HcX/eRYEY6R7ILHKNsn0Jo3 gFMn28Ztm3377LWB6s0TjFHS79nQ7l1vQAKw4GvNCMLbSpAk94ko8ON8GssBOGq2 vZttVggY3PkfA49dgxeXHNuOABxqC8ubl9MulK+G2eCqR70vJWkXcmsIz25xWRhp 7ycsiLeMdlhFk9qbSRfCNIaFQOUSvNI= -----END CERTIFICATE-----Generated at Sat Sep 26 14:04:05 2026 by rpki-client