$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/34b137e6-c681-334f-835e-9988ec1cef88.roa File: 34b137e6-c681-334f-835e-9988ec1cef88.roa (raw, json) Hash identifier: wbNQE51giPlVirJQdxmww268pXJmJrE5hnT3rYKgDfg= Subject key identifier: E5:41:2C:86:93:93:BC:60:3D:72:12:DE:FA:BC:15:D3:48:F0:69:BE Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584F0D6CE58218FF4EDEBB4B6EE0 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/34b137e6-c681-334f-835e-9988ec1cef88.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 6079 IP address blocks: 209.20.192.0/19 maxlen: 19 209.20.224.0/19 maxlen: 19 216.65.128.0/20 maxlen: 20 216.65.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e5:82:18:ff:4e:de:bb:4b:6e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=05588e29-05dc-4c74-a318-545e43dd7399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:38:a3:14:41:06:0b:d1:56:be:dc:68:20:02: c9:a2:20:18:47:ae:1e:df:01:7f:af:f3:46:f9:56: 5f:51:82:6a:6b:85:8e:63:a1:f1:54:ce:90:c9:a8: 73:01:43:be:ec:03:02:03:2f:19:0c:0f:b0:9a:c9: 22:21:1a:ba:85:8e:63:ec:e0:29:56:f7:10:98:aa: a9:b6:c9:5c:a1:5a:81:ef:1d:32:ce:e1:cc:68:c1: d5:ea:52:eb:51:1e:cf:f3:aa:9f:af:90:51:e8:db: fc:0b:c3:85:48:dd:54:0f:cc:99:4f:44:4a:63:4c: ae:1b:54:55:5f:06:38:bd:d6:af:fc:fe:b4:2b:1e: 77:d4:10:8b:5a:8f:21:1d:e8:d0:19:38:f4:14:8f: ec:ff:cd:49:0c:e1:9a:54:84:3e:ae:b2:9b:b7:25: 46:2d:7a:e0:e1:28:d2:1d:4e:0a:a9:e8:74:9a:7d: ae:4b:ad:95:a3:01:23:08:0a:18:5b:26:cf:1b:ee: 9c:09:5f:94:b3:15:c6:a9:57:2e:e1:21:a4:45:e3: 84:25:9b:07:4f:c2:b8:2b:d0:54:c4:6e:c1:e8:5b: 6b:89:29:4f:4a:a5:43:ff:66:96:44:80:3b:31:e1: 12:54:5b:79:85:84:8c:04:d7:20:04:85:25:8b:68: 40:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:41:2C:86:93:93:BC:60:3D:72:12:DE:FA:BC:15:D3:48:F0:69:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/34b137e6-c681-334f-835e-9988ec1cef88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.192.0/18 216.65.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:75:0a:a3:5a:b1:99:fd:62:43:82:a4:da:fb:73:64:f0:e7: d9:63:50:94:bd:30:9e:b8:64:b6:48:06:1b:33:3a:5b:49:14: af:ea:1b:1b:9f:86:e3:16:b5:fa:5e:40:50:74:7a:31:91:39: da:1b:42:5a:69:53:ce:d2:90:83:21:67:66:e5:16:d3:40:17: 0d:d1:66:a4:1d:bc:84:39:9e:f0:32:be:80:c3:e4:04:e5:1a: 3d:e8:fe:3f:6a:a6:35:53:c5:c4:a6:26:b4:b1:f7:87:66:fb: 82:e1:b1:e9:04:8f:52:ad:33:50:8f:37:63:a8:29:97:c8:5c: f7:dd:7b:ae:f8:5e:07:45:83:ba:5c:37:e1:ea:40:b6:88:ec: 6b:f2:70:0a:68:a1:35:7d:dc:69:c2:40:ef:e6:66:50:03:24: 2d:d2:1f:20:4e:d7:2b:c9:a9:72:c6:78:35:63:a4:d2:45:d2: 9b:39:bf:96:c5:2c:b6:fa:f9:01:1b:99:0f:9d:05:3b:28:4e: c7:1d:09:a8:0a:ae:4e:9e:5e:05:81:bb:ef:44:60:60:46:46: aa:f9:f1:54:c8:73:f6:4c:80:d2:2f:8b:27:01:72:20:81:da: 6b:21:79:94:ef:e9:43:e4:71:a2:2a:e6:83:8f:3e:5d:1b:c0: 41:49:0e:06 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8NbOWCGP9O3rtLbuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MDU1ODhlMjktMDVkYy00Yzc0LWEzMTgtNTQ1ZTQzZGQ3Mzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzijFEEGC9FWvtxoIALJoiAYR64e3wF/r/NG +VZfUYJqa4WOY6HxVM6QyahzAUO+7AMCAy8ZDA+wmskiIRq6hY5j7OApVvcQmKqp tslcoVqB7x0yzuHMaMHV6lLrUR7P86qfr5BR6Nv8C8OFSN1UD8yZT0RKY0yuG1RV XwY4vdav/P60Kx531BCLWo8hHejQGTj0FI/s/81JDOGaVIQ+rrKbtyVGLXrg4SjS HU4Kqeh0mn2uS62VowEjCAoYWybPG+6cCV+UsxXGqVcu4SGkReOEJZsHT8K4K9BU xG7B6FtriSlPSqVD/2aWRIA7MeESVFt5hYSMBNcgBIUli2hA7wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOVBLIaTk7xgPXIS3vq8FdNI8Gm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMzRiMTM3ZTYtYzY4MS0z MzRmLTgzNWUtOTk4OGVjMWNlZjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQG0RTAAwQF 2EGAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAN1CqNasZn9YkOCpNr7c2Tw59ljUJS9MJ64ZLZIBhszOltJ FK/qGxufhuMWtfpeQFB0ejGROdobQlppU87SkIMhZ2blFtNAFw3RZqQdvIQ5nvAy voDD5ATlGj3o/j9qpjVTxcSmJrSx94dm+4LhsekEj1KtM1CPN2OoKZfIXPfde674 XgdFg7pcN+HqQLaI7GvycApooTV93GnCQO/mZlADJC3SHyBO1yvJqXLGeDVjpNJF 0ps5v5bFLLb6+QEbmQ+dBTsoTscdCagKrk6eXgWBu+9EYGBGRqr58VTIc/ZMgNIv iycBciCB2msheZTv6UPkcaIq5oOPPl0bwEFJDgY= -----END CERTIFICATE-----Generated at Sat Oct 10 10:53:56 2026 by rpki-client