$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa File: 38911b59-4da5-3259-be8a-e5ae2c28a66b.roa (raw, json) Hash identifier: oKfvFC5I493hpKKTl06Wp1ZpOt1qRe3lAjkfsmRA0FI= Subject key identifier: CB:C3:98:55:F1:17:3D:A2:9B:EA:C4:49:41:59:6B:39:80:29:DC:35 Certificate issuer: /CN=65bc064b-6753-4438-8da3-b0b6d3b4d5bf Certificate serial: 010D0C9F4328584F480D44E72E81348816F2CEC0 Authority key identifier: 13:18:C4:39:07:71:22:07:0F:A4:50:EC:64:23:3E:A5:2D:ED:90:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 400510 IP address blocks: 206.202.0.0/18 maxlen: 24 2602:fe17::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:44:e7:2e:81:34:88:16:f2:ce:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bc064b-6753-4438-8da3-b0b6d3b4d5bf Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=532c0f68-7ae5-4cf1-95b1-d8cc66824d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:58:a5:91:84:ff:96:82:d8:75:38:6e:f4: ee:70:82:9b:f4:72:5b:77:f6:96:36:5a:15:69:1b: ab:c7:db:2b:ed:a5:96:a7:ae:6e:10:4e:46:82:16: 3e:88:1e:d9:06:20:af:59:d8:4e:9c:ce:d4:4e:13: 50:09:3b:08:29:9f:ac:49:5a:56:29:f8:81:10:f0: 93:6c:00:77:bd:62:02:c4:86:5c:6a:88:cc:2d:4e: 09:32:17:5d:8b:5b:5b:f2:81:87:cc:62:61:36:f2: 83:5f:15:eb:89:0e:63:07:03:a1:22:b5:e0:0c:2a: 47:dc:ef:ea:56:25:90:f1:8a:da:b0:60:37:5e:51: de:7b:33:e1:79:c1:23:cd:05:12:cc:e7:e7:c7:42: 7c:bf:42:e9:1d:91:ea:f8:8d:7f:c3:21:51:40:12: fc:60:9a:ea:0e:01:18:5b:0d:00:d8:58:c4:03:53: d8:2b:16:82:cd:e8:f0:aa:d7:ee:f0:01:c8:25:1e: 6a:cc:65:5c:2a:cc:a9:3c:6b:8a:53:78:50:0a:20: 5c:05:86:38:07:dc:87:85:96:a1:93:f2:38:3a:d8: ee:d6:0f:09:63:d9:dd:51:e5:83:83:a1:e7:d9:f6: 07:0e:b9:6c:d3:61:2a:9a:9a:43:73:5a:aa:6a:16: 7f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C3:98:55:F1:17:3D:A2:9B:EA:C4:49:41:59:6B:39:80:29:DC:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/38911b59-4da5-3259-be8a-e5ae2c28a66b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.crl X509v3 Authority Key Identifier: keyid:13:18:C4:39:07:71:22:07:0F:A4:50:EC:64:23:3E:A5:2D:ED:90:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65bc064b-6753-4438-8da3-b0b6d3b4d5bf.cer sbgp-ipAddrBlock: critical IPv4: 206.202.0.0/18 IPv6: 2602:fe17::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:c0:9a:8a:ad:53:f2:72:be:89:ed:50:f3:e6:8a:23:0b:e4: a3:4b:dd:33:ea:de:b8:9b:a5:49:cf:8b:5b:45:19:25:68:2c: de:57:d0:3e:69:ea:73:be:e5:6c:18:e5:96:f4:2c:8a:4c:77: c1:b3:dd:e8:e9:13:3c:25:a6:a3:ef:f5:54:e6:c9:91:a0:a1: 6c:29:22:28:9b:dc:f5:51:af:0b:99:5f:ec:c0:b1:13:0c:e0: e0:bb:ba:d1:20:67:24:e2:89:b8:56:94:87:d9:85:5e:ce:e6: 85:8a:5a:83:50:43:2e:7d:a6:e6:9f:49:14:c8:2e:f7:b2:17: b3:d8:83:9e:d9:bf:38:89:da:f1:2d:fc:14:ea:9b:11:0a:4e: b6:2e:dd:ae:00:d8:97:62:a7:da:96:2d:c5:88:3a:f5:1b:8c: 35:d0:74:bb:bd:c9:1e:cb:7f:26:58:3f:b8:f5:62:6c:21:8f: ca:f7:8b:6a:52:d1:b1:7c:d9:c4:4e:91:73:77:1d:41:45:70: 93:73:b5:55:dc:0d:e6:31:45:a1:88:39:ed:45:23:c8:16:29: bd:84:a3:98:74:ce:72:c2:83:88:da:d1:0c:7a:fc:01:fd:ae: dc:04:1d:9e:59:0e:5c:14:95:65:8e:cc:ca:44:f5:4e:50:29: d1:58:37:ec -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9IDUTnLoE0iBbyzsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjViYzA2NGItNjc1My00NDM4LThkYTMtYjBiNmQzYjRk NWJmMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk NTMyYzBmNjgtN2FlNS00Y2YxLTk1YjEtZDhjYzY2ODI0ZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0NYpZGE/5aC2HU4bvTucIKb9HJbd/aWNloV aRurx9sr7aWWp65uEE5GghY+iB7ZBiCvWdhOnM7UThNQCTsIKZ+sSVpWKfiBEPCT bAB3vWICxIZcaojMLU4JMhddi1tb8oGHzGJhNvKDXxXriQ5jBwOhIrXgDCpH3O/q ViWQ8YrasGA3XlHeezPhecEjzQUSzOfnx0J8v0LpHZHq+I1/wyFRQBL8YJrqDgEY Ww0A2FjEA1PYKxaCzejwqtfu8AHIJR5qzGVcKsypPGuKU3hQCiBcBYY4B9yHhZah k/I4Otju1g8JY9ndUeWDg6Hn2fYHDrls02EqmppDc1qqahZ/LQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMvDmFXxFz2im+rESUFZazmAKdw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWJj MDY0Yi02NzUzLTQ0MzgtOGRhMy1iMGI2ZDNiNGQ1YmYvMzg5MTFiNTktNGRhNS0z MjU5LWJlOGEtZTVhZTJjMjhhNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjViYzA2NGItNjc1My00NDM4LThk YTMtYjBiNmQzYjRkNWJmLzY1YmMwNjRiLTY3NTMtNDQzOC04ZGEzLWIwYjZkM2I0 ZDViZi5jcmwwHwYDVR0jBBgwFoAUExjEOQdxIgcPpFDsZCM+pS3tkH8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWJjMDY0Yi02NzUzLTQ0MzgtOGRhMy1iMGI2 ZDNiNGQ1YmYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQGzsoAMA4E AgACMAgDBgQmAv4XADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC5wJqKrVPycr6J7VDz5oojC+SjS90z6t64 m6VJz4tbRRklaCzeV9A+aepzvuVsGOWW9CyKTHfBs93o6RM8Jaaj7/VU5smRoKFs KSIom9z1Ua8LmV/swLETDODgu7rRIGck4om4VpSH2YVezuaFilqDUEMufabmn0kU yC73shez2IOe2b84idrxLfwU6psRCk62Lt2uANiXYqfali3FiDr1G4w10HS7vcke y38mWD+49WJsIY/K94tqUtGxfNnETpFzdx1BRXCTc7VV3A3mMUWhiDntRSPIFim9 hKOYdM5ywoOI2tEMevwB/a7cBB2eWQ5cFJVljszKRPVOUCnRWDfs -----END CERTIFICATE-----Generated at Sat Sep 26 03:58:02 2026 by rpki-client