$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6e504479-4df1-4f5b-bc3b-2d271ce2c7da/2c89b3df-2fa4-3933-8157-21873b600db9.roa File: 2c89b3df-2fa4-3933-8157-21873b600db9.roa (raw, json) Hash identifier: aB2oCHXNxoWR5Qhb1/wQkJ8fuSvtXBhcJbHbtjDk0XU= Subject key identifier: C0:52:34:07:54:13:76:81:83:04:3A:49:54:90:11:B8:BB:75:11:72 Certificate issuer: /CN=6e504479-4df1-4f5b-bc3b-2d271ce2c7da Certificate serial: 010D0C9F4328584F8E11C6415C3E6B7286175530 Authority key identifier: 35:8F:E7:38:41:6B:08:24:6B:78:A2:CC:AE:31:9F:BE:A5:C8:FF:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6e504479-4df1-4f5b-bc3b-2d271ce2c7da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6e504479-4df1-4f5b-bc3b-2d271ce2c7da/2c89b3df-2fa4-3933-8157-21873b600db9.roa Signing time: Mon 19 Oct 2026 14:56:03 +0000 ROA not before: Mon 19 Oct 2026 14:56:03 +0000 ROA not after: Sun 17 Jan 2027 15:56:03 +0000 asID: 3561 IP address blocks: 206.220.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6e504479-4df1-4f5b-bc3b-2d271ce2c7da/6e504479-4df1-4f5b-bc3b-2d271ce2c7da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6e504479-4df1-4f5b-bc3b-2d271ce2c7da/6e504479-4df1-4f5b-bc3b-2d271ce2c7da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6e504479-4df1-4f5b-bc3b-2d271ce2c7da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8e:11:c6:41:5c:3e:6b:72:86:17:55:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e504479-4df1-4f5b-bc3b-2d271ce2c7da Validity Not Before: Oct 19 14:56:03 2026 GMT Not After : Jan 17 15:56:03 2027 GMT Subject: CN=a89d3e0e-af66-429d-8f56-d7483bbab697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dd:5b:1b:26:df:87:45:27:cf:a6:4e:d4:87: 5a:b0:cd:99:13:41:d2:cb:d0:5a:c9:e5:e9:f0:f6: dc:71:a1:77:0f:a6:4f:1c:61:20:31:fd:61:c9:15: 12:6f:12:2f:b5:54:05:33:80:54:9f:00:8b:d8:59: 59:2f:2d:a4:f5:d2:c7:17:49:1c:61:5d:86:b7:0d: 35:b4:2d:44:0d:34:9e:94:03:28:3b:1f:38:8b:1b: 41:3b:bd:43:2b:9e:43:ae:0d:f5:d9:7a:ef:b7:de: 45:e8:f6:c4:c0:61:40:bb:ee:fb:b4:30:9c:83:42: 87:61:c8:f8:cb:0f:50:78:90:4f:f0:62:5f:1c:69: f0:1f:bb:40:70:ae:21:c9:73:fb:30:0b:9d:3a:80: 05:76:3c:c6:04:4b:fe:0d:de:5a:76:56:65:94:75: 36:48:68:c4:5a:81:3a:7d:ff:e4:1b:c1:a4:be:53: ee:a0:44:45:0b:fa:93:2c:47:a6:47:31:c7:5b:f9: 10:74:04:17:bb:db:f3:83:f9:a3:d8:9f:57:00:df: a5:ec:dc:67:19:5d:b3:5a:c3:3b:35:03:06:34:52: 62:a2:ab:3f:8d:bc:33:5e:a5:63:5a:28:64:e5:a3: 2d:a4:3a:6d:80:51:a3:66:d1:56:95:28:8d:c6:d7: a5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:52:34:07:54:13:76:81:83:04:3A:49:54:90:11:B8:BB:75:11:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6e504479-4df1-4f5b-bc3b-2d271ce2c7da/2c89b3df-2fa4-3933-8157-21873b600db9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6e504479-4df1-4f5b-bc3b-2d271ce2c7da/6e504479-4df1-4f5b-bc3b-2d271ce2c7da.crl X509v3 Authority Key Identifier: keyid:35:8F:E7:38:41:6B:08:24:6B:78:A2:CC:AE:31:9F:BE:A5:C8:FF:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6e504479-4df1-4f5b-bc3b-2d271ce2c7da.cer sbgp-ipAddrBlock: critical IPv4: 206.220.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:db:f7:22:b9:a6:58:01:7a:08:c4:86:51:9c:dc:50:43:78: b2:8a:f9:9f:9e:3c:7d:54:65:75:00:a7:b7:c8:21:ff:08:ac: c5:ad:75:c6:e8:2f:46:55:85:06:bd:66:f9:f2:8a:5c:fb:ff: b0:0f:73:50:c1:81:0c:ba:79:84:c1:93:64:c7:24:6e:1e:30: 57:ec:97:4f:be:19:b6:c1:bd:c3:18:99:3b:5f:26:d9:3c:40: 5b:06:c7:d5:54:a6:7a:70:50:40:34:b6:c2:e3:9c:78:ea:0b: 62:29:1e:34:de:4e:90:27:cd:b9:37:f5:60:3d:c7:9b:81:02: 49:80:18:1b:4c:78:47:bd:72:86:3e:5c:5f:10:28:c5:27:4f: bf:58:1a:d8:7d:e1:b4:1d:24:56:b5:4c:0a:e3:ab:f8:2e:1f: 2f:f0:97:de:3c:0f:13:4b:20:22:ba:b8:75:8c:11:df:ff:e4: 86:6c:cd:28:72:48:70:fb:32:ce:86:fb:3c:de:6a:9d:9f:98: 79:25:e7:0e:80:70:95:d0:bf:df:8e:71:a4:98:df:24:29:15: 3d:6d:5e:e7:b9:98:b8:e6:b8:a6:15:a9:24:64:eb:f5:1c:d9: 80:8e:a3:e8:1a:02:65:ed:71:09:84:f4:09:5a:71:11:e3:cb: 25:94:5c:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+OEcZBXD5rcoYXVTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU1MDQ0NzktNGRmMS00ZjViLWJjM2ItMmQyNzFjZTJj N2RhMB4XDTI2MTAxOTE0NTYwM1oXDTI3MDExNzE1NTYwM1owLzEtMCsGA1UEAxMk YTg5ZDNlMGUtYWY2Ni00MjlkLThmNTYtZDc0ODNiYmFiNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd1bGybfh0Unz6ZO1IdasM2ZE0HSy9BayeXp 8PbccaF3D6ZPHGEgMf1hyRUSbxIvtVQFM4BUnwCL2FlZLy2k9dLHF0kcYV2Gtw01 tC1EDTSelAMoOx84ixtBO71DK55Drg312Xrvt95F6PbEwGFAu+77tDCcg0KHYcj4 yw9QeJBP8GJfHGnwH7tAcK4hyXP7MAudOoAFdjzGBEv+Dd5adlZllHU2SGjEWoE6 ff/kG8GkvlPuoERFC/qTLEemRzHHW/kQdAQXu9vzg/mj2J9XAN+l7NxnGV2zWsM7 NQMGNFJioqs/jbwzXqVjWihk5aMtpDptgFGjZtFWlSiNxtelGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBSNAdUE3aBgwQ6SVSQEbi7dRFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS82ZTUw NDQ3OS00ZGYxLTRmNWItYmMzYi0yZDI3MWNlMmM3ZGEvMmM4OWIzZGYtMmZhNC0z OTMzLTgxNTctMjE4NzNiNjAwZGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNmU1MDQ0NzktNGRmMS00ZjViLWJj M2ItMmQyNzFjZTJjN2RhLzZlNTA0NDc5LTRkZjEtNGY1Yi1iYzNiLTJkMjcxY2Uy YzdkYS5jcmwwHwYDVR0jBBgwFoAUNY/nOEFrCCRreKLMrjGfvqXI/xQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS82ZTUwNDQ3OS00ZGYxLTRmNWItYmMzYi0yZDI3 MWNlMmM3ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCztwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDb9yK5plgBegjEhlGc3FBDeLKK+Z+ePH1UZXUAp7fIIf8IrMWtdcbo L0ZVhQa9Zvnyilz7/7APc1DBgQy6eYTBk2THJG4eMFfsl0++GbbBvcMYmTtfJtk8 QFsGx9VUpnpwUEA0tsLjnHjqC2IpHjTeTpAnzbk39WA9x5uBAkmAGBtMeEe9coY+ XF8QKMUnT79YGth94bQdJFa1TArjq/guHy/wl948DxNLICK6uHWMEd//5IZszShy SHD7Ms6G+zzeap2fmHkl5w6AcJXQv9+OcaSY3yQpFT1tXue5mLjmuKYVqSRk6/Uc 2YCOo+gaAmXtcQmE9AlacRHjyyWUXLs= -----END CERTIFICATE-----Generated at Sun Nov 1 16:34:31 2026 by rpki-client