$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa File: 6d52598c-853a-33f7-b184-caa86dfc7a61.roa (raw, json) Hash identifier: 7TPn8m/UxgoXk9gjob7tzvnbfr3tX409A6yspwG6rDo= Subject key identifier: 62:9B:64:BB:B3:C6:1C:12:84:75:FE:B6:03:A4:1F:4C:FC:00:8A:2C Certificate issuer: /CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8 Certificate serial: 010D0C9F4328584F49740A3201263B8167E2F180 Authority key identifier: 18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36515 IP address blocks: 199.68.56.0/21 maxlen: 21 209.240.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0a:32:01:26:3b:81:67:e2:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb6bf07-4e00-444e-a404-d3174fa94ce8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6ef44c3b-960b-4984-bf60-15ead6e17954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:c4:b9:f0:bc:91:7c:85:d4:9d:00:cf:d5: ef:1b:5e:db:d2:77:09:c3:3f:f0:a6:2c:8f:b3:a6: 33:95:5b:da:a6:d4:f7:12:1d:69:42:01:e8:7c:d7: 59:19:36:bf:11:20:95:21:76:b4:d0:27:28:55:13: 89:37:04:05:a8:2f:d1:b5:06:e1:0f:18:00:08:93: 8e:c5:93:c2:54:f3:d7:25:43:c2:84:58:df:30:40: 14:56:fd:44:75:24:ba:58:cb:ed:dc:4c:5e:54:73: 80:cb:49:dc:d4:2a:0c:70:51:7f:dc:c7:e6:14:e5: 2a:eb:c0:15:6c:4e:c2:c1:29:93:5b:c5:4d:db:d5: 90:60:79:ec:29:6d:0d:8b:cf:4f:9e:94:eb:36:fb: e4:28:c8:e2:32:33:90:b8:09:34:0a:58:5f:af:37: 46:ca:70:cf:5a:2b:8b:1c:ff:6b:13:8b:c1:97:c9: 74:8c:69:52:ea:99:79:ef:38:97:70:3b:9d:9e:9d: ee:de:34:85:d1:69:40:d7:62:7e:01:7e:82:81:57: f0:a9:ed:66:0c:21:95:ea:52:93:78:98:9f:8a:f7: 93:0e:d1:78:71:fb:5c:ab:2c:0a:66:26:97:d0:f2: f6:4b:02:9d:db:c3:5c:d8:3c:b5:ec:94:1f:a9:87: 22:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9B:64:BB:B3:C6:1C:12:84:75:FE:B6:03:A4:1F:4C:FC:00:8A:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6d52598c-853a-33f7-b184-caa86dfc7a61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8/6cb6bf07-4e00-444e-a404-d3174fa94ce8.crl X509v3 Authority Key Identifier: keyid:18:2D:6E:FB:F8:F8:70:25:A4:EB:BC:6F:AE:84:94:14:62:7B:58:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6cb6bf07-4e00-444e-a404-d3174fa94ce8.cer sbgp-ipAddrBlock: critical IPv4: 199.68.56.0/21 209.240.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f8:fe:30:8e:09:02:22:57:67:bf:05:ef:81:e3:d3:2d:4f: a6:66:72:90:1e:37:99:cf:c2:00:bd:51:ad:23:bc:3f:26:71: a7:26:9d:09:de:90:67:fd:4f:ce:fe:85:06:51:56:73:dd:87: 77:58:ac:a8:fa:26:e8:a8:6e:cf:c4:cc:59:cc:7d:3a:bd:c7: 63:c8:69:36:57:ae:a7:e8:71:04:e3:4a:c4:e4:c7:80:6c:d2: fa:d7:47:cd:42:05:ba:59:5f:86:07:7b:38:44:4b:b1:a8:c3: c5:fd:f9:9c:11:57:b9:cb:78:1f:a6:98:1e:3c:e7:fa:87:ed: 62:d2:21:f2:92:81:60:1c:7c:54:54:c6:b7:bb:5e:1a:0f:bd: fd:85:b7:79:ab:57:f9:c5:46:e7:6e:6e:db:10:98:e3:5d:09: 5a:ad:d5:92:51:e8:b4:8d:35:fc:42:39:c5:6f:43:50:55:5c: 03:8f:2f:a8:c7:1c:06:76:6c:43:73:8d:38:a6:98:a9:e2:21: e8:a6:0e:3f:3c:da:aa:aa:65:9b:29:40:b8:6f:78:48:f0:79: 53:9b:6f:08:e6:74:57:27:96:5f:ab:b6:16:f2:be:fc:a2:cb: 03:44:9f:5f:24:e2:40:f6:c8:47:6c:a9:ac:c8:95:bf:da:45: 9d:e5:61:3b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdAoyASY7gWfi8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNiNmJmMDctNGUwMC00NDRlLWE0MDQtZDMxNzRmYTk0 Y2U4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmVmNDRjM2ItOTYwYi00OTg0LWJmNjAtMTVlYWQ2ZTE3OTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxfEufC8kXyF1J0Az9XvG17b0ncJwz/wpiyP s6YzlVvaptT3Eh1pQgHofNdZGTa/ESCVIXa00CcoVROJNwQFqC/RtQbhDxgACJOO xZPCVPPXJUPChFjfMEAUVv1EdSS6WMvt3ExeVHOAy0nc1CoMcFF/3MfmFOUq68AV bE7CwSmTW8VN29WQYHnsKW0Ni89PnpTrNvvkKMjiMjOQuAk0ClhfrzdGynDPWiuL HP9rE4vBl8l0jGlS6pl57ziXcDudnp3u3jSF0WlA12J+AX6CgVfwqe1mDCGV6lKT eJifiveTDtF4cftcqywKZiaX0PL2SwKd28Nc2Dy17JQfqYciTQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGKbZLuzxhwShHX+tgOkH0z8AIosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82Y2I2 YmYwNy00ZTAwLTQ0NGUtYTQwNC1kMzE3NGZhOTRjZTgvNmQ1MjU5OGMtODUzYS0z M2Y3LWIxODQtY2FhODZkZmM3YTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmNiNmJmMDctNGUwMC00NDRlLWE0 MDQtZDMxNzRmYTk0Y2U4LzZjYjZiZjA3LTRlMDAtNDQ0ZS1hNDA0LWQzMTc0ZmE5 NGNlOC5jcmwwHwYDVR0jBBgwFoAUGC1u+/j4cCWk67xvroSUFGJ7WG4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82Y2I2YmYwNy00ZTAwLTQ0NGUtYTQwNC1kMzE3 NGZhOTRjZTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDx0Q4AwQE 0fAwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJj4/jCOCQIiV2e/Be+B49MtT6ZmcpAeN5nPwgC9Ua0jvD8m cacmnQnekGf9T87+hQZRVnPdh3dYrKj6Juiobs/EzFnMfTq9x2PIaTZXrqfocQTj SsTkx4Bs0vrXR81CBbpZX4YHezhES7Gow8X9+ZwRV7nLeB+mmB485/qH7WLSIfKS gWAcfFRUxre7XhoPvf2Ft3mrV/nFRudubtsQmONdCVqt1ZJR6LSNNfxCOcVvQ1BV XAOPL6jHHAZ2bENzjTimmKniIeimDj882qqqZZspQLhveEjweVObbwjmdFcnll+r thbyvvyiywNEn18k4kD2yEdsqazIlb/aRZ3lYTs= -----END CERTIFICATE-----Generated at Fri Sep 25 19:57:24 2026 by rpki-client