$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa File: d66d3dcb-2e94-38a7-9549-d369a5770717.roa (raw, json) Hash identifier: Hh50YQ7HbifbVK024i6UcVCU3SN5CK6VND38CkJGeho= Subject key identifier: 63:4B:60:6A:E0:85:BF:A0:9C:31:2A:B5:26:56:09:4A:56:17:43:92 Certificate issuer: /CN=325f62aa-b9c8-4315-87d2-409b60e8840d Certificate serial: 010D0C9F4328584F498B00D27B48892811C1B700 Authority key identifier: 53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400228 IP address blocks: 206.41.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:00:d2:7b:48:89:28:11:c1:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=325f62aa-b9c8-4315-87d2-409b60e8840d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ef8808db-15ce-45f4-b2f7-835a129bf98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a3:70:1c:dd:b4:a6:a4:30:1c:53:8c:d1:25: 23:1e:92:d3:37:b2:fb:ab:85:72:31:18:52:f0:ef: 92:e3:11:b4:aa:22:c4:90:88:e5:ff:19:94:de:ad: 43:a4:78:61:2e:99:64:f3:af:7d:80:35:c9:4e:1e: 11:38:2d:a1:ef:1d:77:70:f0:a6:d8:90:6b:29:9b: f4:dd:fd:f6:4a:8e:6d:8e:c4:57:0f:8a:69:76:58: 3c:d9:59:ff:49:a4:92:6c:87:d8:c0:bb:21:49:95: e4:56:50:6c:af:1b:4f:70:9e:99:c9:f0:60:e5:61: 98:1c:65:db:f2:97:77:8d:ea:2f:88:f5:cf:68:41: 68:14:0f:10:ad:e8:54:84:05:a5:53:46:0c:20:08: 74:a2:1e:75:9f:08:a5:ae:1c:80:76:b3:bb:4e:c2: 10:74:3f:e3:2e:05:db:32:72:6f:51:0f:a2:a7:c4: e1:a9:f2:04:66:44:1c:26:bc:56:a0:dc:6c:49:fc: af:77:ad:8f:79:f5:5e:d4:88:74:0a:5b:b7:45:16: 6b:88:6e:9d:f7:98:8d:ee:0d:37:22:82:0b:16:df: 1b:09:e1:32:5c:a7:48:38:eb:ea:cc:77:4e:a7:18: 0b:1a:ca:f0:0e:34:30:cb:c7:3e:98:be:bc:02:70: 49:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4B:60:6A:E0:85:BF:A0:9C:31:2A:B5:26:56:09:4A:56:17:43:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/d66d3dcb-2e94-38a7-9549-d369a5770717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d/325f62aa-b9c8-4315-87d2-409b60e8840d.crl X509v3 Authority Key Identifier: keyid:53:D2:9F:71:7D:5B:E5:8D:B3:EE:5A:34:65:6B:14:30:C8:0C:0F:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/325f62aa-b9c8-4315-87d2-409b60e8840d.cer sbgp-ipAddrBlock: critical IPv4: 206.41.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:c5:0d:cc:ea:cd:a5:45:eb:ec:06:51:a1:d0:f3:0f:00:2d: a2:bc:55:8c:c7:13:48:f6:bd:5c:27:00:78:c3:d2:ac:b4:f2: ba:0c:b7:09:b5:15:b5:e2:da:d3:ae:5d:4c:a9:8b:42:b5:50: 5c:fe:d6:78:f8:db:8e:67:bb:04:02:92:43:48:b1:29:91:76: b6:2a:8d:96:15:f5:2d:ae:38:be:75:75:bc:14:55:e9:07:5b: cb:6f:ab:71:1f:5e:05:e6:e7:77:e1:00:82:a8:c4:d7:d8:ec: 0d:7c:b9:73:f3:c6:6e:da:59:c0:64:7d:b5:59:6d:18:ed:26: 6d:a0:47:61:32:23:9b:b2:bd:29:20:e9:23:e6:93:07:ec:4f: 11:55:14:2d:01:88:02:0b:62:00:24:af:4a:a5:53:79:6a:4f: d6:9d:88:84:72:17:4e:86:f2:e3:bd:29:31:f5:42:5e:e9:2e: 56:44:21:2d:65:fd:79:07:b4:b7:c9:e0:db:fd:2a:ed:93:42: 3f:ea:83:38:45:b4:c5:ee:a5:f9:39:3f:a3:77:90:e8:e3:73: 87:dc:d9:2d:69:6d:78:6a:a4:44:c1:d0:6e:65:e9:e6:d4:f8: 47:d3:16:37:7d:24:5f:1f:6b:a2:0c:3f:47:c7:aa:c3:63:71: 66:36:d0:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiwDSe0iJKBHBtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI1ZjYyYWEtYjljOC00MzE1LTg3ZDItNDA5YjYwZTg4 NDBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWY4ODA4ZGItMTVjZS00NWY0LWIyZjctODM1YTEyOWJmOThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKNwHN20pqQwHFOM0SUjHpLTN7L7q4VyMRhS 8O+S4xG0qiLEkIjl/xmU3q1DpHhhLplk8699gDXJTh4ROC2h7x13cPCm2JBrKZv0 3f32So5tjsRXD4ppdlg82Vn/SaSSbIfYwLshSZXkVlBsrxtPcJ6ZyfBg5WGYHGXb 8pd3jeoviPXPaEFoFA8QrehUhAWlU0YMIAh0oh51nwilrhyAdrO7TsIQdD/jLgXb MnJvUQ+ip8ThqfIEZkQcJrxWoNxsSfyvd62PefVe1Ih0Clu3RRZriG6d95iN7g03 IoILFt8bCeEyXKdIOOvqzHdOpxgLGsrwDjQwy8c+mL68AnBJ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNLYGrghb+gnDEqtSZWCUpWF0OSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVm NjJhYS1iOWM4LTQzMTUtODdkMi00MDliNjBlODg0MGQvZDY2ZDNkY2ItMmU5NC0z OGE3LTk1NDktZDM2OWE1NzcwNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzI1ZjYyYWEtYjljOC00MzE1LTg3 ZDItNDA5YjYwZTg4NDBkLzMyNWY2MmFhLWI5YzgtNDMxNS04N2QyLTQwOWI2MGU4 ODQwZC5jcmwwHwYDVR0jBBgwFoAUU9KfcX1b5Y2z7lo0ZWsUMMgMD8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zMjVmNjJhYS1iOWM4LTQzMTUtODdkMi00MDli NjBlODg0MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzilvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLFDczqzaVF6+wGUaHQ8w8ALaK8VYzHE0j2vVwnAHjD0qy08roMtwm1 FbXi2tOuXUypi0K1UFz+1nj4245nuwQCkkNIsSmRdrYqjZYV9S2uOL51dbwUVekH W8tvq3EfXgXm53fhAIKoxNfY7A18uXPzxm7aWcBkfbVZbRjtJm2gR2EyI5uyvSkg 6SPmkwfsTxFVFC0BiAILYgAkr0qlU3lqT9adiIRyF06G8uO9KTH1Ql7pLlZEIS1l /XkHtLfJ4Nv9Ku2TQj/qgzhFtMXupfk5P6N3kOjjc4fc2S1pbXhqpETB0G5l6ebU +EfTFjd9JF8fa6IMP0fHqsNjcWY20NE= -----END CERTIFICATE-----Generated at Sun Sep 27 01:23:38 2026 by rpki-client