$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa File: 6bfd8c06-649d-344f-9311-8c34c244a748.roa (raw, json) Hash identifier: 0ls6gDVZep3zlY1NJbh16hFVhuB2WEna/ShjVKVkgcc= Subject key identifier: 6E:8E:94:6D:54:1F:B9:52:66:3E:CB:48:22:4B:01:1F:CB:6B:D0:B0 Certificate issuer: /CN=f65be2e0-6a40-4cf1-8234-6eb4f40c788a Certificate serial: 010D0C9F4328584F576821537E970526B9236C00 Authority key identifier: 7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 22121 IP address blocks: 172.99.224.0/22 maxlen: 24 199.21.136.0/21 maxlen: 24 2604:14c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:21:53:7e:97:05:26:b9:23:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65be2e0-6a40-4cf1-8234-6eb4f40c788a Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=cdfea178-5806-40a2-a513-75f676e1bd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8f:43:02:05:0c:80:57:51:3c:02:80:c0:a7: a1:3e:48:47:68:7f:7a:2e:38:28:0b:a3:d3:08:9a: f9:b7:50:da:db:76:94:f6:6c:77:20:e8:30:cc:bc: ae:73:d4:25:37:ac:89:e7:a1:7a:0b:59:e4:33:3a: 44:f4:e0:72:cf:6a:b9:e1:0a:97:e4:78:84:f2:c8: 32:6e:62:78:4e:99:71:55:53:79:95:8e:95:0a:ce: 74:1f:e4:23:82:c8:bc:33:ac:cd:e4:22:ca:53:44: 3d:c9:32:0a:ea:3c:de:26:c8:df:a3:00:b1:a4:e1: c8:d8:38:df:74:85:d5:7e:cc:c3:59:5a:0d:1e:8f: 82:ae:33:c6:02:35:33:42:e8:ed:de:38:ba:28:b5: 81:1f:bb:08:fb:ff:48:d4:d2:e0:a0:e5:36:30:f0: 12:b2:6a:46:d2:e6:5b:98:79:f4:e2:1c:3c:47:1a: 83:23:82:96:c2:2b:3c:f0:e6:2b:55:84:6f:1a:ab: fd:5b:f7:7c:12:a1:80:a0:f2:be:a3:91:eb:7d:c1: 4d:ed:d8:5b:c7:06:38:3f:c8:76:ac:6d:b3:3b:49: ca:15:d5:f4:4e:58:b8:93:98:54:20:2e:71:79:aa: 0b:4c:9e:fd:ca:34:65:64:a9:e4:be:1d:79:9d:a5: fd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8E:94:6D:54:1F:B9:52:66:3E:CB:48:22:4B:01:1F:CB:6B:D0:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/6bfd8c06-649d-344f-9311-8c34c244a748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.crl X509v3 Authority Key Identifier: keyid:7C:CA:20:FA:2B:1D:8F:D4:74:96:0A:8C:49:88:B7:54:60:A0:C6:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f65be2e0-6a40-4cf1-8234-6eb4f40c788a.cer sbgp-ipAddrBlock: critical IPv4: 172.99.224.0/22 199.21.136.0/21 IPv6: 2604:14c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:65:a9:2c:44:9c:e5:ad:a0:9e:ca:9c:7f:b2:1d:bb:c3:80: eb:eb:82:62:12:50:9d:06:76:54:a8:36:74:ec:09:0a:8c:0e: 0d:2b:aa:ef:4b:9e:74:8b:2b:2c:cd:a6:86:8f:7c:32:83:e2: 74:c3:4a:ff:09:f3:6e:02:1a:62:eb:df:60:e3:96:a8:01:16: 50:86:c9:16:7f:01:3a:7f:1a:f9:04:db:b9:a1:03:72:e8:92: 40:f9:1f:9f:66:ee:54:60:1b:bf:65:39:2a:50:3c:2f:72:6d: 9d:c7:fd:eb:e4:c0:4d:b9:c8:fd:4a:53:3c:5d:11:b6:ca:8e: 5c:dc:80:ec:e7:37:12:05:af:07:bb:dc:3d:5e:99:b5:69:cd: b2:3d:c8:ca:15:58:64:e7:44:76:b1:6c:1b:67:0d:bf:a1:ab: bd:12:54:47:0d:9d:b9:94:34:49:6d:ac:6a:e5:00:f6:fc:b9: 92:d5:ca:94:e3:f9:f7:fb:93:70:a2:74:08:10:89:39:3c:13: 9d:de:dc:b3:3a:d6:54:99:6e:c9:5d:e5:7b:ed:39:74:a6:2b: 42:e0:02:7a:e7:40:25:f7:d3:6f:c3:1f:ad:b7:f4:e7:db:90: 12:17:bd:2c:55:80:ca:38:d9:f5:1a:18:85:bf:a0:e3:9f:f6: 7b:41:8c:59 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE9XaCFTfpcFJrkjbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY1YmUyZTAtNmE0MC00Y2YxLTgyMzQtNmViNGY0MGM3 ODhhMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk Y2RmZWExNzgtNTgwNi00MGEyLWE1MTMtNzVmNjc2ZTFiZDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI9DAgUMgFdRPAKAwKehPkhHaH96LjgoC6PT CJr5t1Da23aU9mx3IOgwzLyuc9QlN6yJ56F6C1nkMzpE9OByz2q54QqX5HiE8sgy bmJ4TplxVVN5lY6VCs50H+Qjgsi8M6zN5CLKU0Q9yTIK6jzeJsjfowCxpOHI2Djf dIXVfszDWVoNHo+CrjPGAjUzQujt3ji6KLWBH7sI+/9I1NLgoOU2MPASsmpG0uZb mHn04hw8RxqDI4KWwis88OYrVYRvGqv9W/d8EqGAoPK+o5HrfcFN7dhbxwY4P8h2 rG2zO0nKFdX0Tli4k5hUIC5xeaoLTJ79yjRlZKnkvh15naX98wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFG6OlG1UH7lSZj7LSCJLAR/La9CwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mNjVi ZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0ZjQwYzc4OGEvNmJmZDhjMDYtNjQ5ZC0z NDRmLTkzMTEtOGMzNGMyNDRhNzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjY1YmUyZTAtNmE0MC00Y2YxLTgy MzQtNmViNGY0MGM3ODhhL2Y2NWJlMmUwLTZhNDAtNGNmMS04MjM0LTZlYjRmNDBj Nzg4YS5jcmwwHwYDVR0jBBgwFoAUfMog+isdj9R0lgqMSYi3VGCgxvowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mNjViZTJlMC02YTQwLTRjZjEtODIzNC02ZWI0 ZjQwYzc4OGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCrGPgAwQD xxWIMA0EAgACMAcDBQAmBBTAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGJlqSxEnOWtoJ7KnH+yHbvDgOvr gmISUJ0GdlSoNnTsCQqMDg0rqu9LnnSLKyzNpoaPfDKD4nTDSv8J824CGmLr32Dj lqgBFlCGyRZ/ATp/GvkE27mhA3LokkD5H59m7lRgG79lOSpQPC9ybZ3H/evkwE25 yP1KUzxdEbbKjlzcgOznNxIFrwe73D1embVpzbI9yMoVWGTnRHaxbBtnDb+hq70S VEcNnbmUNEltrGrlAPb8uZLVypTj+ff7k3CidAgQiTk8E53e3LM61lSZbsld5Xvt OXSmK0LgAnrnQCX302/DH6239OfbkBIXvSxVgMo42fUaGIW/oOOf9ntBjFk= -----END CERTIFICATE-----Generated at Sun Oct 4 18:25:25 2026 by rpki-client