$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa File: bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa (raw, json) Hash identifier: J4Vr6SgizZwH5uDrKywv1F5K6sFhId8ADD8+F2wVOX0= Subject key identifier: 5D:5D:99:23:27:D6:16:5C:3D:E0:C1:1D:52:40:38:2A:E2:36:05:74 Certificate issuer: /CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Certificate serial: 010D0C9F4328584F4974112A9C54F21A7CC5F400 Authority key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398419 IP address blocks: 206.168.92.0/24 maxlen: 24 2602:fb82::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:11:2a:9c:54:f2:1a:7c:c5:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1cdef198-a0bc-4f6d-aee1-a87dfe4c4c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:cc:f8:d3:0f:d9:e2:04:de:7c:6c:d8:73: e1:51:18:6c:8a:55:f2:f7:67:09:cc:4e:e8:4a:0f: 2e:28:dc:6d:ff:ae:8c:cf:3a:ce:c4:d1:aa:18:9b: a0:31:1a:5f:f6:2e:97:d6:47:bf:e6:2d:17:e3:9c: 7d:31:d7:da:e7:06:0f:39:aa:40:bb:ae:3c:9a:48: 6b:b3:58:67:08:fe:ee:44:83:03:e8:da:15:b3:a0: b2:7f:4a:0c:d9:7a:a7:dc:e8:43:eb:84:ac:7f:ea: f2:da:9f:98:36:f0:a9:8f:27:3b:65:50:2b:d9:c3: 8c:74:5c:4a:c9:fd:5d:fd:49:28:9c:ce:ca:05:0c: 2b:c8:05:61:17:c7:09:32:44:c3:a7:8b:3f:8e:73: ff:f9:97:94:66:91:ec:58:b8:da:68:b2:15:8d:e0: f5:a5:bf:e1:8f:20:7a:c8:c4:5e:84:64:ed:64:f9: c2:f1:ae:ce:28:9f:8e:98:72:fe:7a:bf:b8:17:93: 29:2e:b6:df:23:1b:20:2c:9c:14:ef:c6:db:aa:81: cb:9f:d5:d4:12:92:5d:0b:95:bf:0e:e9:1c:6a:2a: a5:8f:f8:29:72:4d:e9:e2:1e:a4:53:fe:55:0f:2c: 2b:d8:f6:ea:af:dd:66:91:0d:07:fb:bf:1e:a4:cf: d8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5D:99:23:27:D6:16:5C:3D:E0:C1:1D:52:40:38:2A:E2:36:05:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/bd3530fc-aba4-30aa-b5ee-4cb67b4e5233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.crl X509v3 Authority Key Identifier: keyid:41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:dc:b0:e7:92:44:de:4c:9e:35:4d:54:35:38:47:18:fa:d1: c9:e5:37:c3:c1:b4:9b:2d:31:30:e0:38:83:42:81:d0:04:04: 6e:75:dd:ef:e5:76:83:b0:5c:cf:70:54:fe:cb:96:6d:6b:fa: 85:31:e8:37:1a:a7:34:11:42:10:6a:5d:99:21:70:9a:d2:93: 6e:50:e9:c1:e7:0a:d6:38:a2:1a:84:ce:c6:54:9c:f8:ec:db: 8c:f0:8b:16:ec:6d:ac:49:a5:a5:cf:d0:8f:0b:87:ad:8d:31: 0b:e5:b6:38:c0:be:c1:36:77:96:99:42:96:c2:9a:69:b0:75: 6d:68:ef:e5:20:2c:2c:cc:cb:61:e9:ed:93:53:07:db:cf:88: 10:21:60:24:d8:b6:ab:21:e6:f6:bd:24:72:68:76:68:bf:14: 49:7b:e4:67:06:65:d2:fa:22:f3:a1:c8:2c:42:47:9b:93:ad: cd:35:78:aa:e0:bf:c9:3d:54:1b:e3:ac:bb:e4:a7:7e:f2:da: e0:4b:f7:2c:53:eb:fd:9d:7a:c6:83:7a:e3:30:1d:d3:4e:70: 56:cc:65:1e:e1:58:15:5a:73:35:c0:c0:81:df:a5:a4:2d:39: ec:ca:5c:15:94:6a:6a:a0:b9:a1:d8:65:63:e2:d3:b4:9e:fb: 69:1a:15:15 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JdBEqnFTyGnzF9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFl Y2U3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWNkZWYxOTgtYTBiYy00ZjZkLWFlZTEtYTg3ZGZlNGM0YzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV3M+NMP2eIE3nxs2HPhURhsilXy92cJzE7o Sg8uKNxt/66MzzrOxNGqGJugMRpf9i6X1ke/5i0X45x9Mdfa5wYPOapAu648mkhr s1hnCP7uRIMD6NoVs6Cyf0oM2Xqn3OhD64Ssf+ry2p+YNvCpjyc7ZVAr2cOMdFxK yf1d/UkonM7KBQwryAVhF8cJMkTDp4s/jnP/+ZeUZpHsWLjaaLIVjeD1pb/hjyB6 yMRehGTtZPnC8a7OKJ+OmHL+er+4F5MpLrbfIxsgLJwU78bbqoHLn9XUEpJdC5W/ Dukcaiqlj/gpck3p4h6kU/5VDywr2Pbqr91mkQ0H+78epM/YAQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFF1dmSMn1hZcPeDBHVJAOCriNgV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5 ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvYmQzNTMwZmMtYWJhNC0z MGFhLWI1ZWUtNGNiNjdiNGU1MjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDU4OWYzZTQtMjcwMS00OGY1LTlj NmItN2VhOGQwNzFlY2U3L2Q1ODlmM2U0LTI3MDEtNDhmNS05YzZiLTdlYThkMDcx ZWNlNy5jcmwwHwYDVR0jBBgwFoAUQbmkG8YihK7ly7p7M2I7+iT7/yIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4 ZDA3MWVjZTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAzqhcMA4E AgACMAgDBgQmAvuCADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBk3LDnkkTeTJ41TVQ1OEcY+tHJ5TfDwbSb LTEw4DiDQoHQBARudd3v5XaDsFzPcFT+y5Zta/qFMeg3Gqc0EUIQal2ZIXCa0pNu UOnB5wrWOKIahM7GVJz47NuM8IsW7G2sSaWlz9CPC4etjTEL5bY4wL7BNneWmUKW wpppsHVtaO/lICwszMth6e2TUwfbz4gQIWAk2LarIeb2vSRyaHZovxRJe+RnBmXS +iLzocgsQkebk63NNXiq4L/JPVQb46y75Kd+8trgS/csU+v9nXrGg3rjMB3TTnBW zGUe4VgVWnM1wMCB36WkLTnsylwVlGpqoLmh2GVj4tO0nvtpGhUV -----END CERTIFICATE-----Generated at Tue Sep 29 11:12:44 2026 by rpki-client