$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/c5647d32-2348-3ec2-87b8-71c2703da1ff.roa File: c5647d32-2348-3ec2-87b8-71c2703da1ff.roa (raw, json) Hash identifier: 1tUfRbbkPPuIR31kvgkFjXgdADMhnEQZ0yO9OYWvfkE= Subject key identifier: 8E:9F:D9:90:21:17:5F:FE:06:B5:5F:9F:F4:0A:B3:A8:33:21:B9:9D Certificate issuer: /CN=6c1cacf6-731e-4845-81a0-0e28071dbc9b Certificate serial: 010D0C9F4328584F34826F3FDC0F7B46EE6FF580 Authority key identifier: 31:E2:4A:2D:9F:C8:7B:E0:6C:C0:F5:21:F4:67:40:69:72:09:DD:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/c5647d32-2348-3ec2-87b8-71c2703da1ff.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 32270 IP address blocks: 208.65.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/6c1cacf6-731e-4845-81a0-0e28071dbc9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/6c1cacf6-731e-4845-81a0-0e28071dbc9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:6f:3f:dc:0f:7b:46:ee:6f:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1cacf6-731e-4845-81a0-0e28071dbc9b Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=71c0cc36-4007-4187-a64b-ec48ff2d80e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:22:80:cc:f0:a0:1e:3e:ee:7a:d5:02:b9:2e: c9:fd:89:1e:96:67:2b:5a:30:88:7b:99:f8:d8:a7: 83:9f:15:4d:61:a3:70:0d:1e:e2:eb:1e:9b:08:ba: f2:9e:e9:07:24:f1:80:35:9e:b9:07:ed:a4:2a:af: 19:fb:01:23:e6:46:33:bb:d5:0b:f4:aa:12:a0:11: 4a:34:e6:c8:a4:bb:fe:44:cb:02:40:22:ae:1e:42: 64:62:ad:7a:fe:46:1f:c8:ff:25:25:ed:4f:47:86: a0:5d:f7:5f:44:59:e9:fa:7a:34:29:56:61:f0:92: 76:16:c6:7b:54:85:6b:5a:b0:2b:5d:44:c9:b7:c2: b8:f5:31:19:bd:ae:12:cd:b0:d8:a2:4f:1b:26:30: 52:e4:4c:1b:e5:2d:24:6b:a1:ac:c8:a7:99:e5:35: ee:61:94:4a:ae:97:45:9e:9c:f1:6e:be:60:f1:c1: ab:6a:1c:55:d0:46:8b:b3:59:30:be:5e:0a:f0:f0: b2:56:38:92:64:ea:f4:da:df:0d:46:c6:5a:55:14: e4:9c:b9:27:93:b6:6d:fb:32:25:64:55:31:3e:c2: fa:cf:36:a8:ff:d0:71:4d:ed:ca:01:04:e8:b1:88: 01:bd:0b:79:ef:c9:44:e1:37:68:47:cd:7e:4c:37: da:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9F:D9:90:21:17:5F:FE:06:B5:5F:9F:F4:0A:B3:A8:33:21:B9:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/c5647d32-2348-3ec2-87b8-71c2703da1ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b/6c1cacf6-731e-4845-81a0-0e28071dbc9b.crl X509v3 Authority Key Identifier: keyid:31:E2:4A:2D:9F:C8:7B:E0:6C:C0:F5:21:F4:67:40:69:72:09:DD:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6c1cacf6-731e-4845-81a0-0e28071dbc9b.cer sbgp-ipAddrBlock: critical IPv4: 208.65.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:22:6d:24:98:57:34:af:f5:8b:c6:2f:e8:d4:f4:1e:9e:1c: ae:d9:d4:31:63:02:5e:9e:2c:15:46:4c:98:a8:c3:45:da:49: a9:5f:e8:3f:46:5d:93:b5:25:f4:b8:1b:df:f1:29:a3:b8:9d: db:1d:78:2c:bc:4a:fa:db:a9:2a:d9:84:03:fd:96:be:7b:9b: e1:f0:b8:56:6e:2c:0e:52:b9:f2:1a:6f:64:4a:eb:cb:9a:4e: 8d:68:4a:a0:18:a9:8c:4c:92:49:90:09:c3:db:a9:81:3b:18: 67:8e:c6:a3:4a:cd:cc:53:8f:b1:8b:59:f5:a8:cc:e7:9d:a1: ab:01:9d:87:ef:1f:81:04:3f:90:46:1c:e3:d0:7b:38:d6:f9: 68:63:55:0b:e3:79:32:cd:1e:de:cf:97:ac:aa:60:37:db:25: b2:0d:32:a0:1d:74:48:1e:b8:4c:6b:b1:b6:d4:0e:fc:b8:61: 6e:93:dc:54:a9:91:4e:07:04:b7:e9:f1:fe:e6:1c:15:74:c7: ce:5c:55:9b:56:45:0c:fd:b0:da:fd:69:12:82:e2:22:55:9e: 60:dc:a0:34:88:fb:f6:6c:dd:53:2a:31:f3:65:cb:1b:1f:ac: 5c:17:de:42:8d:88:b7:37:0b:40:df:cf:1d:b8:1c:55:37:27: 8a:8b:67:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gm8/3A97Ru5v9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmMxY2FjZjYtNzMxZS00ODQ1LTgxYTAtMGUyODA3MWRi YzliMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk NzFjMGNjMzYtNDAwNy00MTg3LWE2NGItZWM0OGZmMmQ4MGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyKAzPCgHj7uetUCuS7J/YkelmcrWjCIe5n4 2KeDnxVNYaNwDR7i6x6bCLrynukHJPGANZ65B+2kKq8Z+wEj5kYzu9UL9KoSoBFK NObIpLv+RMsCQCKuHkJkYq16/kYfyP8lJe1PR4agXfdfRFnp+no0KVZh8JJ2FsZ7 VIVrWrArXUTJt8K49TEZva4SzbDYok8bJjBS5Ewb5S0ka6GsyKeZ5TXuYZRKrpdF npzxbr5g8cGrahxV0EaLs1kwvl4K8PCyVjiSZOr02t8NRsZaVRTknLknk7Zt+zIl ZFUxPsL6zzao/9BxTe3KAQTosYgBvQt578lE4TdoR81+TDfa+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6f2ZAhF1/+BrVfn/QKs6gzIbmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82YzFj YWNmNi03MzFlLTQ4NDUtODFhMC0wZTI4MDcxZGJjOWIvYzU2NDdkMzItMjM0OC0z ZWMyLTg3YjgtNzFjMjcwM2RhMWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNmMxY2FjZjYtNzMxZS00ODQ1LTgx YTAtMGUyODA3MWRiYzliLzZjMWNhY2Y2LTczMWUtNDg0NS04MWEwLTBlMjgwNzFk YmM5Yi5jcmwwHwYDVR0jBBgwFoAUMeJKLZ/Ie+BswPUh9GdAaXIJ3cgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82YzFjYWNmNi03MzFlLTQ4NDUtODFhMC0wZTI4 MDcxZGJjOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EFcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAibSSYVzSv9YvGL+jU9B6eHK7Z1DFjAl6eLBVGTJiow0XaSalf6D9G XZO1JfS4G9/xKaO4ndsdeCy8SvrbqSrZhAP9lr57m+HwuFZuLA5SufIab2RK68ua To1oSqAYqYxMkkmQCcPbqYE7GGeOxqNKzcxTj7GLWfWozOedoasBnYfvH4EEP5BG HOPQezjW+WhjVQvjeTLNHt7Pl6yqYDfbJbINMqAddEgeuExrsbbUDvy4YW6T3FSp kU4HBLfp8f7mHBV0x85cVZtWRQz9sNr9aRKC4iJVnmDcoDSI+/Zs3VMqMfNlyxsf rFwX3kKNiLc3C0Dfzx24HFU3J4qLZ6A= -----END CERTIFICATE-----Generated at Thu Oct 1 01:15:17 2026 by rpki-client