$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa File: 22eb73ec-b415-3bc1-9d15-13db833fbec4.roa (raw, json) Hash identifier: PpS+IEGM9Idfp6urVEDimpZJIF2AbnhH3Q8jx1mgJ4M= Subject key identifier: 1C:CF:77:F3:69:B2:43:A3:EA:FA:8F:72:D8:D8:3B:09:2A:52:2B:9E Certificate issuer: /CN=530ba529-ac94-44aa-8a24-334da5fccb1e Certificate serial: 010D0C9F4328584F119CFA36D83C13D0EDDB25C0 Authority key identifier: E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 22169 IP address blocks: 204.10.136.0/24 maxlen: 24 204.10.139.0/24 maxlen: 24 216.239.128.0/24 maxlen: 24 216.239.130.0/24 maxlen: 24 216.239.132.0/24 maxlen: 24 2607:fe90:2::/48 maxlen: 48 2607:fe90:7998::/48 maxlen: 48 2607:fe90:7999::/48 maxlen: 48 2607:fe90:8000::/48 maxlen: 48 2607:fe90:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:fa:36:d8:3c:13:d0:ed:db:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=530ba529-ac94-44aa-8a24-334da5fccb1e Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=2cbc78a5-5f4f-465e-b64e-03eb486d8a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:55:c8:14:e5:09:eb:9f:a8:42:59:4e:78:38: 1d:18:c9:9b:2d:fc:09:e2:d1:83:d0:59:ee:e0:ee: e7:c4:c3:8e:25:de:af:87:5b:21:bb:ae:50:b2:13: a8:ae:99:3d:ff:81:c3:ff:26:99:f6:f2:73:4b:48: 60:d9:97:19:d6:69:48:0d:05:2c:e7:50:cb:fb:e0: 96:8d:e2:cc:ac:8e:46:7b:67:39:8a:18:d7:89:bc: c2:a3:3f:93:11:b5:ad:63:6d:65:e2:1c:5b:46:70: cb:c4:17:1f:55:48:08:eb:7d:8f:da:51:e5:5a:f1: cf:36:6d:45:f8:ac:f2:a0:81:62:e9:fc:ac:78:0d: ff:a1:12:54:93:e9:9d:a4:b2:f1:68:a2:6e:a7:4f: 26:6d:13:6b:35:9b:3c:7e:5d:b5:64:00:5c:71:81: fb:7e:f2:85:fd:72:95:2c:60:37:7f:ea:b3:74:72: c3:7f:db:81:68:4f:0f:d6:3e:41:46:6a:fb:e7:f8: 7f:b2:3f:e4:00:97:2f:9f:0d:ad:92:19:d1:77:9b: 01:07:3b:83:a7:0e:fc:1e:25:61:b0:02:87:6e:4f: d4:67:7a:95:b6:02:74:9a:e6:30:e7:0d:ce:78:95: 1f:f4:b2:eb:82:25:c2:70:05:0c:8e:81:2a:fd:1b: 9e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CF:77:F3:69:B2:43:A3:EA:FA:8F:72:D8:D8:3B:09:2A:52:2B:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/22eb73ec-b415-3bc1-9d15-13db833fbec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e/530ba529-ac94-44aa-8a24-334da5fccb1e.crl X509v3 Authority Key Identifier: keyid:E2:70:AF:2A:32:F0:30:09:13:CF:91:AB:C2:55:00:27:FA:B8:C1:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/530ba529-ac94-44aa-8a24-334da5fccb1e.cer sbgp-ipAddrBlock: critical IPv4: 204.10.136.0/24 204.10.139.0/24 216.239.128.0/24 216.239.130.0/24 216.239.132.0/24 IPv6: 2607:fe90:2::/48 2607:fe90:7998::/47 2607:fe90:8000::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:6c:d3:66:b3:b4:5a:00:1a:5c:c8:9c:19:f4:cd:3b:1c:07: a6:41:b8:f4:51:88:ae:01:26:7e:75:e8:89:dc:a6:12:f0:97: 57:e8:c0:9b:8a:45:7a:f6:37:c6:c2:a8:91:47:de:18:d9:5e: de:4c:31:4a:73:b7:61:ef:89:c8:7a:62:5b:bd:0c:06:56:8f: d7:81:c9:f0:2f:ea:04:b3:60:e3:ce:96:b8:a7:06:7b:92:60: d4:0a:52:53:53:da:8a:42:e6:24:7a:ca:8d:40:97:12:aa:a2: a3:95:97:ac:2a:e4:57:ab:2c:7c:a2:cc:f7:10:8e:54:7f:8e: 14:13:83:a4:6c:48:83:40:28:ba:cb:19:43:f4:0e:ff:41:55: 3a:58:01:f5:33:b4:e9:d6:89:69:9a:00:5c:d3:fd:d0:3c:72: 2a:d4:e7:48:64:3b:7e:75:bc:9a:cc:c1:8c:e8:2e:93:3f:71: d3:b5:9c:78:2f:fb:5a:32:4d:02:ad:8a:30:d1:24:d2:5e:9c: ec:3a:2a:18:bf:01:e7:56:a5:6c:de:19:2f:fe:19:8e:3e:ea: fa:84:98:17:6e:14:3d:81:42:ed:8f:99:0d:d1:b4:9a:b3:16: 0c:14:ee:ff:9f:ad:9c:5f:d8:76:33:b2:03:e5:01:06:c0:7c: 72:6b:a5:a5 -----BEGIN CERTIFICATE----- MIIGfjCCBWagAwIBAgIUAQ0Mn0MoWE8RnPo22DwT0O3bJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTMwYmE1MjktYWM5NC00NGFhLThhMjQtMzM0ZGE1ZmNj YjFlMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MmNiYzc4YTUtNWY0Zi00NjVlLWI2NGUtMDNlYjQ4NmQ4YTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlXIFOUJ65+oQllOeDgdGMmbLfwJ4tGD0Fnu 4O7nxMOOJd6vh1shu65QshOorpk9/4HD/yaZ9vJzS0hg2ZcZ1mlIDQUs51DL++CW jeLMrI5Ge2c5ihjXibzCoz+TEbWtY21l4hxbRnDLxBcfVUgI632P2lHlWvHPNm1F +KzyoIFi6fyseA3/oRJUk+mdpLLxaKJup08mbRNrNZs8fl21ZABccYH7fvKF/XKV LGA3f+qzdHLDf9uBaE8P1j5BRmr75/h/sj/kAJcvnw2tkhnRd5sBBzuDpw78HiVh sAKHbk/UZ3qVtgJ0muYw5w3OeJUf9LLrgiXCcAUMjoEq/Rue3wIDAQABo4IDkDCC A4wwHQYDVR0OBBYEFBzPd/NpskOj6vqPctjYOwkqUiueMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MzBi YTUyOS1hYzk0LTQ0YWEtOGEyNC0zMzRkYTVmY2NiMWUvMjJlYjczZWMtYjQxNS0z YmMxLTlkMTUtMTNkYjgzM2ZiZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTMwYmE1MjktYWM5NC00NGFhLThh MjQtMzM0ZGE1ZmNjYjFlLzUzMGJhNTI5LWFjOTQtNDRhYS04YTI0LTMzNGRhNWZj Y2IxZS5jcmwwHwYDVR0jBBgwFoAU4nCvKjLwMAkTz5GrwlUAJ/q4wTEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MzBiYTUyOS1hYzk0LTQ0YWEtOGEyNC0zMzRk YTVmY2NiMWUuY2VyMFoGCCsGAQUFBwEHAQH/BEswSTAkBAIAATAeAwQAzAqIAwQA zAqLAwQA2O+AAwQA2O+CAwQA2O+EMCEEAgACMBsDBwAmB/6QAAIDBwEmB/6QeZgD BwEmB/6QgAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEALGzTZrO0WgAaXMicGfTNOxwHpkG49FGIrgEmfnXo idymEvCXV+jAm4pFevY3xsKokUfeGNle3kwxSnO3Ye+JyHpiW70MBlaP14HJ8C/q BLNg486WuKcGe5Jg1ApSU1PaikLmJHrKjUCXEqqio5WXrCrkV6ssfKLM9xCOVH+O FBODpGxIg0AoussZQ/QO/0FVOlgB9TO06daJaZoAXNP90DxyKtTnSGQ7fnW8mszB jOgukz9x07WceC/7WjJNAq2KMNEk0l6c7DoqGL8B51albN4ZL/4Zjj7q+oSYF24U PYFC7Y+ZDdG0mrMWDBTu/5+tnF/YdjOyA+UBBsB8cmulpQ== -----END CERTIFICATE-----Generated at Sun Oct 4 10:15:00 2026 by rpki-client