$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/684c8408-e1d6-3109-9a08-0ec671566794.roa File: 684c8408-e1d6-3109-9a08-0ec671566794.roa (raw, json) Hash identifier: /1q6vPdhg4TsThXSV6i4I6pzt8aL/AEUxPCVfQGbOW8= Subject key identifier: EA:75:C1:BE:98:6E:D5:C4:15:06:C0:AA:6C:A4:CE:2C:1C:EF:84:58 Certificate issuer: /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Certificate serial: 010D0C9F4328584F4973D5F123577FBF8563AC80 Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/684c8408-e1d6-3109-9a08-0ec671566794.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399864 IP address blocks: 206.168.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d5:f1:23:57:7f:bf:85:63:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bbad40e9-7974-452a-8e8e-af19842c5e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:45:5a:a4:90:c2:d7:f5:82:aa:34:c0:8a: b4:03:57:34:69:e7:77:7d:06:81:81:7b:9f:01:6c: 20:d4:30:02:af:ae:85:e1:4c:ae:c8:b2:a5:21:da: 34:eb:52:08:fc:bf:3d:50:37:60:c3:94:57:fa:66: 5d:e5:df:e3:e0:2b:5f:8b:f9:3c:45:6d:18:a7:1e: e0:56:1d:b4:cf:3c:f4:ad:fb:2f:5a:1e:25:4f:54: 0c:82:7c:e3:b5:4a:83:fd:dc:f9:8d:58:10:7a:f6: ac:13:1e:6e:1a:71:47:d2:82:33:85:dc:f0:11:a0: 70:ca:7b:25:fa:f4:ba:5c:62:39:ed:7a:c2:a7:fb: f2:71:ca:2a:59:e7:48:3a:8f:af:54:c2:0e:c6:18: a9:6a:86:49:27:5b:e3:c5:24:03:7d:0d:58:fa:40: 68:4f:dd:13:49:e7:9f:eb:96:3d:6b:c5:ef:13:dd: 71:e9:d5:ba:7a:0e:ee:00:ec:26:1f:5d:b1:1a:5a: 79:cc:44:e6:41:55:f5:c3:32:81:f2:35:2d:3e:ad: fe:3f:cd:25:65:86:31:a3:c4:a5:db:9f:19:fe:f7: 5e:a5:10:6f:d3:37:3d:2d:70:f7:38:aa:7d:46:88: 68:73:15:79:53:58:fc:64:21:22:8d:59:4d:20:52: 76:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:75:C1:BE:98:6E:D5:C4:15:06:C0:AA:6C:A4:CE:2C:1C:EF:84:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/684c8408-e1d6-3109-9a08-0ec671566794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl X509v3 Authority Key Identifier: keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer sbgp-ipAddrBlock: critical IPv4: 206.168.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:df:9c:d7:5a:56:56:83:b7:9e:81:28:08:3d:79:75:54:d5: 7d:19:24:37:e9:d3:a9:5c:38:ae:05:04:39:49:eb:80:74:80: 67:1b:ab:b9:67:98:28:b4:36:63:6f:07:de:e2:95:ec:60:68: 14:21:50:88:9a:3b:64:ee:5b:ea:81:4c:88:1b:b6:53:bf:73: b7:a9:71:e4:26:16:76:ce:ee:79:4e:cd:5a:ad:ac:36:a8:8a: 89:12:91:ed:11:e5:d4:07:d9:2b:6f:0f:37:f0:52:3a:59:51: ef:5e:e1:42:dd:7c:66:20:96:24:91:aa:44:11:06:87:fe:71: b8:ac:2b:2f:2e:83:19:60:c4:e9:f2:2c:30:b0:20:30:04:86: 71:c5:97:1b:d1:a3:6a:eb:9d:38:fc:07:22:4d:e1:35:8c:4d: 76:8d:62:1d:a3:00:c3:3c:4a:6d:0e:78:b0:ee:fe:d3:be:e8: a0:fd:8b:67:09:cb:b7:50:37:b6:08:d7:3f:64:84:dd:f8:eb: f6:e1:7b:98:a7:6c:93:b7:1a:b6:df:08:2a:3e:51:1d:6e:5f: 1c:b1:0a:5b:e3:f6:6d:0a:50:31:11:f3:54:28:c0:5b:7b:60: e4:63:0c:ee:db:c5:5f:c8:05:57:33:e6:d2:80:20:88:01:f2: da:81:5f:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9XxI1d/v4VjrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2NiYjA4NWItOGM1OC00OGYxLWE3YjktZDQ0NmQzZjk2 MWJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmJhZDQwZTktNzk3NC00NTJhLThlOGUtYWYxOTg0MmM1ZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp9FWqSQwtf1gqo0wIq0A1c0aed3fQaBgXuf AWwg1DACr66F4UyuyLKlIdo061II/L89UDdgw5RX+mZd5d/j4Ctfi/k8RW0Ypx7g Vh20zzz0rfsvWh4lT1QMgnzjtUqD/dz5jVgQevasEx5uGnFH0oIzhdzwEaBwynsl +vS6XGI57XrCp/vyccoqWedIOo+vVMIOxhipaoZJJ1vjxSQDfQ1Y+kBoT90TSeef 65Y9a8XvE91x6dW6eg7uAOwmH12xGlp5zETmQVX1wzKB8jUtPq3+P80lZYYxo8Sl 258Z/vdepRBv0zc9LXD3OKp9RohocxV5U1j8ZCEijVlNIFJ28wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOp1wb6YbtXEFQbAqmykziwc74RYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zY2Ji MDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2ZDNmOTYxYmYvNjg0Yzg0MDgtZTFkNi0z MTA5LTlhMDgtMGVjNjcxNTY2Nzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2NiYjA4NWItOGM1OC00OGYxLWE3 YjktZDQ0NmQzZjk2MWJmLzNjYmIwODViLThjNTgtNDhmMS1hN2I5LWQ0NDZkM2Y5 NjFiZi5jcmwwHwYDVR0jBBgwFoAU4e3x8Ae8hTPlv1z+X4vszy8hl7AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zY2JiMDg1Yi04YzU4LTQ4ZjEtYTdiOS1kNDQ2 ZDNmOTYxYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqg4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDfnNdaVlaDt56BKAg9eXVU1X0ZJDfp06lcOK4FBDlJ64B0gGcbq7ln mCi0NmNvB97ilexgaBQhUIiaO2TuW+qBTIgbtlO/c7epceQmFnbO7nlOzVqtrDao iokSke0R5dQH2StvDzfwUjpZUe9e4ULdfGYgliSRqkQRBof+cbisKy8ugxlgxOny LDCwIDAEhnHFlxvRo2rrnTj8ByJN4TWMTXaNYh2jAMM8Sm0OeLDu/tO+6KD9i2cJ y7dQN7YI1z9khN346/bhe5inbJO3GrbfCCo+UR1uXxyxClvj9m0KUDER81QowFt7 YORjDO7bxV/IBVcz5tKAIIgB8tqBX00= -----END CERTIFICATE-----Generated at Wed Sep 30 20:56:45 2026 by rpki-client