$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/0639ea96-660c-316a-8237-bab7ef39f7ec.roa File: 0639ea96-660c-316a-8237-bab7ef39f7ec.roa (raw, json) Hash identifier: ZACdkjSbe3zw6eXGfu71Ew9vxoJ072HE9eGUQmhgpC0= Subject key identifier: F6:0E:A3:86:4A:AB:F5:DA:F5:85:8E:4C:58:71:6D:B2:62:3D:60:C8 Certificate issuer: /CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e Certificate serial: 010D0C9F4328584F4974108B3450670C2DB61E68 Authority key identifier: CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/0639ea96-660c-316a-8237-bab7ef39f7ec.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 198.203.4.0/22 maxlen: 24 199.73.116.0/22 maxlen: 24 208.79.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:10:8b:34:50:67:0c:2d:b6:1e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=55c2bdf9-e988-46cb-8b53-98dce37b8c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:00:64:07:9e:3e:0c:6b:0b:e3:28:63:d1: 0d:c8:1a:08:3f:40:17:e7:7c:d6:6a:65:b7:0f:80: 8d:c1:cb:f1:60:27:5f:ab:ba:bc:7c:d6:ac:6e:37: 03:f9:21:2a:ba:46:a4:90:93:f5:2a:9f:9a:2f:8d: 3e:fd:1d:78:9b:ed:b1:6c:94:28:6d:cc:ba:71:36: f4:8b:7c:54:a7:1b:aa:ca:48:fa:04:08:2c:94:2a: 16:3c:8a:fe:ab:db:fe:77:10:9d:48:95:ab:bf:5a: 11:57:e3:f8:cc:99:11:06:55:ab:e9:83:41:f0:af: 58:24:b6:ba:83:3d:87:6b:8c:59:ed:f4:31:a4:c4: b8:85:e3:aa:6a:e0:06:ac:2b:4a:1e:bc:de:e3:91: 8c:31:89:86:a4:14:ce:36:4a:f0:be:0c:45:13:38: d4:9c:d6:f2:d3:3f:de:01:22:c2:80:cd:9d:66:4d: 11:ac:15:5d:8c:f9:e5:a8:29:ad:b8:c2:57:9a:b4: 6f:fc:cc:17:9e:24:58:97:06:02:e0:9a:ad:ad:d0: ce:d8:ea:57:c6:98:6f:93:ad:38:ce:79:37:92:20: 06:74:27:a4:ad:00:d1:bf:b7:4b:00:40:e2:2c:59: 11:c9:6a:fc:2c:fd:44:a8:10:33:81:9a:37:0a:f3: b2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0E:A3:86:4A:AB:F5:DA:F5:85:8E:4C:58:71:6D:B2:62:3D:60:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/0639ea96-660c-316a-8237-bab7ef39f7ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl X509v3 Authority Key Identifier: keyid:CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer sbgp-ipAddrBlock: critical IPv4: 198.203.4.0/22 199.73.116.0/22 208.79.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:11:44:71:03:1a:19:9c:ab:1f:4e:13:a3:fd:d3:22:76:17: 59:f8:06:35:a3:e9:67:fb:4a:b1:cb:6a:71:f6:99:b6:97:75: dd:e6:c1:fd:76:72:39:c6:bc:1a:ae:dc:db:ea:5f:ae:e3:18: ed:26:96:8a:dc:c0:b6:cb:fa:d2:a5:cb:7a:7c:a9:7d:f7:79: 35:dd:1b:8e:d1:1f:cd:54:8c:b9:46:b6:4d:c0:a4:81:c8:61: 78:54:5d:8b:c1:41:08:34:37:db:36:4f:6c:18:5f:b3:29:f7: 05:6b:21:2e:97:88:da:51:09:fd:fa:75:60:7c:e0:a9:a5:bf: 91:d8:bf:e9:48:c3:f5:43:ba:b5:ae:f5:87:81:45:2e:49:18: 04:72:0d:3b:45:27:e3:be:95:7d:7a:0f:66:29:ef:92:95:d4: 38:34:cb:c9:14:68:bd:54:a2:1a:ca:83:7d:df:ec:3d:cc:65: ee:35:a2:0c:39:84:fc:70:8b:7e:5f:aa:32:b4:af:a8:92:9b: 62:60:d6:b6:c5:af:e0:20:3c:69:93:b7:e3:7b:21:c3:e2:46: 1e:09:39:a9:c1:b5:b1:c0:91:22:0a:a7:0f:97:ea:81:e4:03: 71:69:38:6f:5f:3e:ea:33:f1:a4:d6:a9:96:fb:f3:64:d8:81: 09:9a:23:ed -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9JdBCLNFBnDC22HmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZkYzk5ODEtMWQ2Mi00NTAxLWEzY2UtOWFiMzg5YTQ5 YjRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTVjMmJkZjktZTk4OC00NmNiLThiNTMtOThkY2UzN2I4YzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnYAZAeePgxrC+MoY9ENyBoIP0AX53zWamW3 D4CNwcvxYCdfq7q8fNasbjcD+SEqukakkJP1Kp+aL40+/R14m+2xbJQobcy6cTb0 i3xUpxuqykj6BAgslCoWPIr+q9v+dxCdSJWrv1oRV+P4zJkRBlWr6YNB8K9YJLa6 gz2Ha4xZ7fQxpMS4heOqauAGrCtKHrze45GMMYmGpBTONkrwvgxFEzjUnNby0z/e ASLCgM2dZk0RrBVdjPnlqCmtuMJXmrRv/MwXniRYlwYC4JqtrdDO2OpXxphvk604 znk3kiAGdCekrQDRv7dLAEDiLFkRyWr8LP1EqBAzgZo3CvOyeQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFPYOo4ZKq/Xa9YWOTFhxbbJiPWDIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NmRj OTk4MS0xZDYyLTQ1MDEtYTNjZS05YWIzODlhNDliNGUvMDYzOWVhOTYtNjYwYy0z MTZhLTgyMzctYmFiN2VmMzlmN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTZkYzk5ODEtMWQ2Mi00NTAxLWEz Y2UtOWFiMzg5YTQ5YjRlLzU2ZGM5OTgxLTFkNjItNDUwMS1hM2NlLTlhYjM4OWE0 OWI0ZS5jcmwwHwYDVR0jBBgwFoAUzd1nPbP93i4sxOnlLZ999JawLmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81NmRjOTk4MS0xZDYyLTQ1MDEtYTNjZS05YWIz ODlhNDliNGUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCxssEAwQC x0l0AwQC0E90MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADMRRHEDGhmcqx9OE6P90yJ2F1n4BjWj6Wf7SrHL anH2mbaXdd3mwf12cjnGvBqu3NvqX67jGO0mlorcwLbL+tKly3p8qX33eTXdG47R H81UjLlGtk3ApIHIYXhUXYvBQQg0N9s2T2wYX7Mp9wVrIS6XiNpRCf36dWB84Kml v5HYv+lIw/VDurWu9YeBRS5JGARyDTtFJ+O+lX16D2Yp75KV1Dg0y8kUaL1UohrK g33f7D3MZe41ogw5hPxwi35fqjK0r6iSm2Jg1rbFr+AgPGmTt+N7IcPiRh4JOanB tbHAkSIKpw+X6oHkA3FpOG9fPuoz8aTWqZb782TYgQmaI+0= -----END CERTIFICATE-----Generated at Wed Sep 30 03:46:55 2026 by rpki-client