$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa File: ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa (raw, json) Hash identifier: P3BD4U8F6p8SLhwOnrSphVq0UQLva0QTUK2FN5C7u6s= Subject key identifier: E8:E8:4E:49:16:B2:76:25:D0:CB:8E:41:F0:B0:68:98:51:AF:BC:64 Certificate issuer: /CN=c067ebcd-d586-4479-97f2-23ae813be2d8 Certificate serial: 010D0C9F4328584F3A17D057F1B942A68BA95540 Authority key identifier: 06:7C:1D:5F:E4:88:A6:4E:A5:97:22:D4:A1:74:18:6C:C6:DC:AE:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 19224 IP address blocks: 130.51.84.0/22 maxlen: 24 172.98.0.0/22 maxlen: 22 192.210.0.0/24 maxlen: 24 204.10.32.0/22 maxlen: 22 2606:bb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/c067ebcd-d586-4479-97f2-23ae813be2d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/c067ebcd-d586-4479-97f2-23ae813be2d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d0:57:f1:b9:42:a6:8b:a9:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c067ebcd-d586-4479-97f2-23ae813be2d8 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=ac39cc85-d066-4ad9-a182-d9073e744cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fe:ed:ad:eb:c5:64:b0:78:bc:1c:6e:67:1b: f0:cf:3a:78:b2:60:ba:db:28:d9:fe:29:64:4d:6b: 4f:2e:d4:b7:9d:a6:6e:c8:d7:86:3c:29:68:88:e5: f6:71:15:ce:24:40:38:d3:64:81:5b:48:d0:c6:58: 86:93:91:06:56:ea:75:28:ee:3b:f3:f9:43:f6:56: a7:08:a0:64:06:01:bc:9e:42:d6:1a:99:bc:3b:fd: 60:a8:cc:f2:81:e5:e0:6a:3a:b9:69:be:c3:22:d3: ce:95:26:4d:05:b7:9a:e4:da:ec:dc:19:f0:0d:ba: 7d:9f:a8:7b:c7:30:00:2a:ff:b9:db:37:b8:da:e3: 46:61:ba:51:09:dc:00:02:cc:04:ea:82:28:11:a2: f9:7b:6a:9d:42:ee:4b:bb:e3:93:7d:4b:c4:3a:34: f8:94:5d:e2:33:23:69:bc:64:28:73:ce:45:f3:26: e3:d6:02:68:fc:e5:46:72:19:fd:e4:c6:18:70:ce: 54:43:30:10:f1:5a:f9:85:da:75:0c:b4:a5:27:49: a2:47:de:3b:47:24:a8:49:0e:b6:b5:7f:4c:7b:7b: ce:1e:7c:30:17:dd:9f:54:98:f8:17:d4:0e:13:6f: fd:cb:6f:27:c1:9a:25:c2:db:a3:c8:7b:de:64:6c: 14:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E8:4E:49:16:B2:76:25:D0:CB:8E:41:F0:B0:68:98:51:AF:BC:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/ff0d7608-989c-3f5d-bd2d-f07d422f1a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8/c067ebcd-d586-4479-97f2-23ae813be2d8.crl X509v3 Authority Key Identifier: keyid:06:7C:1D:5F:E4:88:A6:4E:A5:97:22:D4:A1:74:18:6C:C6:DC:AE:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c067ebcd-d586-4479-97f2-23ae813be2d8.cer sbgp-ipAddrBlock: critical IPv4: 130.51.84.0/22 172.98.0.0/22 192.210.0.0/24 204.10.32.0/22 IPv6: 2606:bb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:37:57:0e:e7:64:09:a2:f5:5c:ec:9c:7f:7d:a0:75:68:53: 2d:d5:c9:29:5a:59:b4:2a:3b:19:f9:ca:ca:f2:a1:03:97:01: ac:bb:93:f5:85:79:ef:1f:1f:87:f9:d2:d0:8e:89:23:6b:e0: 1c:28:20:d0:20:b0:20:26:90:b6:ca:a8:1a:8a:df:47:0e:6c: 65:68:ac:d4:af:6d:78:00:ff:0a:90:db:af:d7:1a:7a:e8:54: 93:be:d1:4b:07:04:f5:ca:90:f6:8a:d5:29:99:d8:ba:94:72: 2b:97:f7:b3:f4:67:74:98:85:29:35:0f:1b:23:b5:1b:3e:90: 74:12:ae:fb:23:48:ca:bc:17:9c:24:87:5e:4b:be:bb:d3:90: 35:c5:38:ae:fb:19:7d:83:fa:0e:e7:34:4d:fa:56:a1:21:3b: 66:50:5e:d1:33:28:a9:64:f4:00:57:9e:52:3b:c9:e7:fa:41: 40:f8:a6:a6:ab:b8:09:04:36:4b:3d:9b:4b:2a:b7:72:29:d0: f8:c1:13:7d:8b:b0:9b:e4:98:7c:b6:d3:17:b5:e3:12:8a:af: cc:cc:e2:12:93:cc:94:cb:ae:3c:49:b4:1e:80:66:32:40:72: 95:76:39:af:8f:a4:ec:93:2f:f7:bb:65:c1:63:74:bc:a4:24: 5d:ce:c5:4a -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE86F9BX8blCpoupVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA2N2ViY2QtZDU4Ni00NDc5LTk3ZjItMjNhZTgxM2Jl MmQ4MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk YWMzOWNjODUtZDA2Ni00YWQ5LWExODItZDkwNzNlNzQ0Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf7trevFZLB4vBxuZxvwzzp4smC62yjZ/ilk TWtPLtS3naZuyNeGPCloiOX2cRXOJEA402SBW0jQxliGk5EGVup1KO478/lD9lan CKBkBgG8nkLWGpm8O/1gqMzygeXgajq5ab7DItPOlSZNBbea5Nrs3BnwDbp9n6h7 xzAAKv+52ze42uNGYbpRCdwAAswE6oIoEaL5e2qdQu5Lu+OTfUvEOjT4lF3iMyNp vGQoc85F8ybj1gJo/OVGchn95MYYcM5UQzAQ8Vr5hdp1DLSlJ0miR947RySoSQ62 tX9Me3vOHnwwF92fVJj4F9QOE2/9y28nwZolwtujyHveZGwUQQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFOjoTkkWsnYl0MuOQfCwaJhRr7xkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDY3 ZWJjZC1kNTg2LTQ0NzktOTdmMi0yM2FlODEzYmUyZDgvZmYwZDc2MDgtOTg5Yy0z ZjVkLWJkMmQtZjA3ZDQyMmYxYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzA2N2ViY2QtZDU4Ni00NDc5LTk3 ZjItMjNhZTgxM2JlMmQ4L2MwNjdlYmNkLWQ1ODYtNDQ3OS05N2YyLTIzYWU4MTNi ZTJkOC5jcmwwHwYDVR0jBBgwFoAUBnwdX+SIpk6llyLUoXQYbMbcrn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDY3ZWJjZC1kNTg2LTQ0NzktOTdmMi0yM2Fl ODEzYmUyZDguY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCgjNUAwQC rGIAAwQAwNIAAwQCzAogMA0EAgACMAcDBQAmBrtAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA03Vw7nZAmi 9VzsnH99oHVoUy3VySlaWbQqOxn5ysryoQOXAay7k/WFee8fH4f50tCOiSNr4Bwo INAgsCAmkLbKqBqK30cObGVorNSvbXgA/wqQ26/XGnroVJO+0UsHBPXKkPaK1SmZ 2LqUciuX97P0Z3SYhSk1DxsjtRs+kHQSrvsjSMq8F5wkh15LvrvTkDXFOK77GX2D +g7nNE36VqEhO2ZQXtEzKKlk9ABXnlI7yef6QUD4pqaruAkENks9m0sqt3Ip0PjB E32LsJvkmHy20xe14xKKr8zM4hKTzJTLrjxJtB6AZjJAcpV2Oa+PpOyTL/e7ZcFj dLykJF3OxUo= -----END CERTIFICATE-----Generated at Thu Oct 1 16:25:18 2026 by rpki-client