$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6d7bf04f-7913-46e6-b88d-da2443be88d4/2fbda1dd-b043-3f88-aac6-28e6e5b2dfb4.roa File: 2fbda1dd-b043-3f88-aac6-28e6e5b2dfb4.roa (raw, json) Hash identifier: XGS+HjdsI0E1HUsV6tfg2kxUG7g+rOt4ojPlEHEhGek= Subject key identifier: 78:56:F8:9E:EC:4C:AF:D2:51:A6:71:B1:06:4A:0F:8A:4B:69:DB:2E Certificate issuer: /CN=6d7bf04f-7913-46e6-b88d-da2443be88d4 Certificate serial: 010D0C9F4328584F969176F1E84294AA7408BF00 Authority key identifier: D6:FA:E7:D4:AD:4C:E0:1B:29:6B:99:28:59:9B:B9:9C:AC:F0:2F:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6d7bf04f-7913-46e6-b88d-da2443be88d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6d7bf04f-7913-46e6-b88d-da2443be88d4/2fbda1dd-b043-3f88-aac6-28e6e5b2dfb4.roa Signing time: Thu 22 Oct 2026 15:59:48 +0000 ROA not before: Thu 22 Oct 2026 15:59:48 +0000 ROA not after: Wed 20 Jan 2027 16:59:48 +0000 asID: 22643 IP address blocks: 198.133.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6d7bf04f-7913-46e6-b88d-da2443be88d4/6d7bf04f-7913-46e6-b88d-da2443be88d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6d7bf04f-7913-46e6-b88d-da2443be88d4/6d7bf04f-7913-46e6-b88d-da2443be88d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6d7bf04f-7913-46e6-b88d-da2443be88d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:91:76:f1:e8:42:94:aa:74:08:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7bf04f-7913-46e6-b88d-da2443be88d4 Validity Not Before: Oct 22 15:59:48 2026 GMT Not After : Jan 20 16:59:48 2027 GMT Subject: CN=e3e0d472-a027-4b0d-8a3e-c157f01e0c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ab:3a:85:b1:cb:68:2e:0b:75:d6:30:3b:fa: 6d:c1:f6:c0:62:f0:b2:2b:11:03:64:87:48:a2:1b: 8f:cf:da:98:8a:3c:01:5f:9a:fe:f2:2e:97:0a:43: 6d:ce:ae:ff:44:d5:89:69:1a:f3:30:ec:bc:9a:81: 8e:73:0a:fa:95:e0:55:7b:5f:3b:83:85:3d:6d:28: 57:0c:fa:dd:a0:7c:f6:05:ef:12:b2:c0:c2:bf:1c: 86:8c:6c:88:dd:3d:54:61:7b:cb:b0:06:59:f8:3d: cd:68:ac:30:ce:1d:0f:34:32:47:43:85:53:3a:4f: 7e:84:6b:44:67:fd:88:e6:16:f7:56:1a:6e:90:a0: 50:0e:14:0e:e5:06:d3:58:1f:9a:06:a5:40:6c:00: c1:10:65:f8:6a:68:b6:4c:02:fa:63:f9:06:47:13: bd:72:c9:d9:7b:04:71:c5:4b:33:a4:d2:e5:ee:eb: 54:ea:f2:bd:d9:26:e3:0e:92:60:c2:35:7d:2a:ea: 62:db:8f:cc:b1:c3:bd:9a:0b:85:54:c7:3d:2c:6c: dc:22:bb:ff:68:83:0d:67:e7:23:ec:7b:2d:b1:d5: 20:cd:d4:23:ba:59:96:75:25:6e:77:7f:20:87:16: ee:a3:0f:d4:04:6d:74:17:0c:a1:e7:6f:84:8d:75: 82:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:56:F8:9E:EC:4C:AF:D2:51:A6:71:B1:06:4A:0F:8A:4B:69:DB:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6d7bf04f-7913-46e6-b88d-da2443be88d4/2fbda1dd-b043-3f88-aac6-28e6e5b2dfb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6d7bf04f-7913-46e6-b88d-da2443be88d4/6d7bf04f-7913-46e6-b88d-da2443be88d4.crl X509v3 Authority Key Identifier: keyid:D6:FA:E7:D4:AD:4C:E0:1B:29:6B:99:28:59:9B:B9:9C:AC:F0:2F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6d7bf04f-7913-46e6-b88d-da2443be88d4.cer sbgp-ipAddrBlock: critical IPv4: 198.133.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:4d:ca:06:1e:a3:bd:71:a0:c3:88:dd:c9:10:8d:34:e3:87: e9:32:fe:ff:cb:ed:c3:c9:f8:4a:46:05:9c:52:ae:8d:22:79: 0c:7c:e2:0c:e3:d8:36:dc:42:b6:b4:aa:fc:df:ab:9a:7e:f7: 8e:a1:84:75:2f:6d:90:9e:37:53:30:c1:73:dd:50:da:cf:6d: ee:07:21:2e:41:31:59:4b:d0:bb:b4:d7:33:41:be:a7:2b:37: 4b:ee:85:19:4b:fd:e7:76:b0:ad:82:b3:ba:01:d3:8f:eb:2f: 01:5f:db:d2:75:09:12:4b:aa:d7:01:2e:de:94:13:de:3d:1f: 1d:69:46:9b:2e:cd:98:a0:a0:85:75:55:40:03:67:5a:4f:3d: a8:56:c5:68:2a:9a:14:25:52:d4:97:20:8a:4b:4e:16:97:e7: 31:f4:4b:41:7d:b0:57:76:f5:7f:54:de:18:d3:5b:e4:77:29: 41:68:95:a0:78:7a:5b:6a:d0:dd:a9:1c:af:e5:8b:55:c1:b3: 9e:0a:09:11:b3:77:9c:ed:81:9e:90:2b:22:1d:bd:05:9f:4a: 2e:ce:d1:f2:65:4b:40:11:db:b7:6e:89:d0:3f:39:a5:82:01: 7e:86:f7:2a:87:db:77:60:ff:5d:5e:2c:74:c1:3d:89:62:02: 48:cd:e5:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WkXbx6EKUqnQIvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ3YmYwNGYtNzkxMy00NmU2LWI4OGQtZGEyNDQzYmU4 OGQ0MB4XDTI2MTAyMjE1NTk0OFoXDTI3MDEyMDE2NTk0OFowLzEtMCsGA1UEAxMk ZTNlMGQ0NzItYTAyNy00YjBkLThhM2UtYzE1N2YwMWUwYzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAras6hbHLaC4LddYwO/ptwfbAYvCyKxEDZIdI ohuPz9qYijwBX5r+8i6XCkNtzq7/RNWJaRrzMOy8moGOcwr6leBVe187g4U9bShX DPrdoHz2Be8SssDCvxyGjGyI3T1UYXvLsAZZ+D3NaKwwzh0PNDJHQ4VTOk9+hGtE Z/2I5hb3VhpukKBQDhQO5QbTWB+aBqVAbADBEGX4ami2TAL6Y/kGRxO9csnZewRx xUszpNLl7utU6vK92SbjDpJgwjV9Kupi24/MscO9mguFVMc9LGzcIrv/aIMNZ+cj 7HstsdUgzdQjulmWdSVud38ghxbuow/UBG10Fwyh52+EjXWCEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhW+J7sTK/SUaZxsQZKD4pLadsuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82ZDdi ZjA0Zi03OTEzLTQ2ZTYtYjg4ZC1kYTI0NDNiZTg4ZDQvMmZiZGExZGQtYjA0My0z Zjg4LWFhYzYtMjhlNmU1YjJkZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNmQ3YmYwNGYtNzkxMy00NmU2LWI4 OGQtZGEyNDQzYmU4OGQ0LzZkN2JmMDRmLTc5MTMtNDZlNi1iODhkLWRhMjQ0M2Jl ODhkNC5jcmwwHwYDVR0jBBgwFoAU1vrn1K1M4Bspa5koWZu5nKzwL+MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82ZDdiZjA0Zi03OTEzLTQ2ZTYtYjg4ZC1kYTI0 NDNiZTg4ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoX/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJNygYeo71xoMOI3ckQjTTjh+ky/v/L7cPJ+EpGBZxSro0ieQx84gzj 2DbcQra0qvzfq5p+946hhHUvbZCeN1MwwXPdUNrPbe4HIS5BMVlL0Lu01zNBvqcr N0vuhRlL/ed2sK2Cs7oB04/rLwFf29J1CRJLqtcBLt6UE949Hx1pRpsuzZigoIV1 VUADZ1pPPahWxWgqmhQlUtSXIIpLThaX5zH0S0F9sFd29X9U3hjTW+R3KUFolaB4 eltq0N2pHK/li1XBs54KCRGzd5ztgZ6QKyIdvQWfSi7O0fJlS0AR27duidA/OaWC AX6G9yqH23dg/11eLHTBPYliAkjN5eY= -----END CERTIFICATE-----Generated at Sat Oct 24 10:39:22 2026 by rpki-client