$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/3d035da1-470c-335b-a26e-943068c5d46a.roa File: 3d035da1-470c-335b-a26e-943068c5d46a.roa (raw, json) Hash identifier: saeDExToyT1M0ErrG6049HU9/wCTQ08HdUvI9LDlCPQ= Subject key identifier: 6D:6F:03:72:CC:34:1C:D3:E4:C0:A5:75:9E:7D:4E:EE:82:A4:56:81 Certificate issuer: /CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Certificate serial: 010D0C9F4328584E742B99A2B1DED008A55F6400 Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/3d035da1-470c-335b-a26e-943068c5d46a.roa Signing time: Fri 10 Jul 2026 15:30:08 +0000 ROA not before: Fri 10 Jul 2026 15:30:08 +0000 ROA not after: Thu 08 Oct 2026 15:30:08 +0000 asID: 395847 IP address blocks: 216.125.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:2b:99:a2:b1:de:d0:08:a5:5f:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Validity Not Before: Jul 10 15:30:08 2026 GMT Not After : Oct 8 15:30:08 2026 GMT Subject: CN=ac131ffe-9323-46ca-890f-f8464c9f01bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:89:f5:7e:68:7e:8a:fb:4f:10:b3:b8:28:c7: 02:47:52:a9:5c:cc:46:ec:f8:f9:f6:70:ee:bb:ca: b4:f0:b2:3f:ab:41:3e:da:b3:a6:2b:75:12:11:86: 45:89:7f:72:97:ef:3e:92:93:b9:42:ee:51:1c:95: 81:39:5b:50:f3:cf:25:3d:72:45:df:2a:10:e0:e7: 2e:61:d8:16:44:c7:14:03:eb:ca:a2:0e:eb:b7:60: f7:24:92:be:58:92:1d:5c:b3:f7:36:20:b1:b5:39: c6:9b:b8:a9:53:da:61:ff:ac:ec:5a:6b:68:33:93: a1:27:72:b5:f7:8b:03:1a:57:11:94:37:5d:9a:dd: f3:81:d6:ff:11:8d:51:16:46:68:3f:b0:30:fa:24: 92:0f:7e:6c:bc:8c:3c:0f:68:d8:61:5f:94:f8:10: 89:4b:fb:46:09:29:7e:61:62:b4:8a:17:2e:69:6a: 9c:e0:86:0c:05:5d:b7:eb:90:35:0d:6e:18:f6:c0: d5:95:e0:91:6b:f2:1e:79:cb:71:eb:2d:49:f5:e2: 86:15:b2:0e:e8:f6:6b:8f:91:9a:6d:2b:93:35:d1: e6:60:91:87:a9:02:a4:3f:ee:78:46:6e:61:ee:ed: d8:a3:2d:85:91:68:a2:45:d8:33:55:26:93:c5:85: cd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6F:03:72:CC:34:1C:D3:E4:C0:A5:75:9E:7D:4E:EE:82:A4:56:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/3d035da1-470c-335b-a26e-943068c5d46a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl X509v3 Authority Key Identifier: keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer sbgp-ipAddrBlock: critical IPv4: 216.125.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:fa:e8:1b:67:05:41:c4:75:6e:ce:a9:23:a4:42:17:f1:2a: 9b:51:2f:07:fb:ec:e5:dc:a7:b9:31:aa:3c:2e:d3:c1:9d:7d: 87:5f:a2:54:d4:52:b6:af:ea:1e:cc:14:54:64:32:74:b5:6f: 8e:73:35:df:4e:f5:62:92:84:cd:af:43:32:74:a3:14:77:73: cd:1a:f8:ce:ca:de:54:6d:8f:d7:2f:c5:4f:1c:71:31:af:a4: 73:1f:cb:e6:0a:14:55:3e:9c:24:13:d5:af:cc:ce:72:df:ef: 5e:06:9f:4f:14:f8:bb:44:cc:0f:2b:7c:02:8b:4c:34:f9:46: 05:7a:54:af:1e:9c:43:b3:9e:2a:e6:6d:6c:ca:05:d4:fd:ad: ad:50:8c:b4:78:64:bb:db:70:11:5c:41:d9:43:6b:28:74:d2: 3b:eb:4c:d5:49:77:39:e2:07:6f:ba:10:f6:43:61:bf:59:3b: e0:72:48:e8:42:90:c0:02:7d:0e:9d:ea:f1:08:24:e4:12:a8: d4:47:fa:fd:d1:d9:2d:df:ea:6f:b2:86:6f:59:4f:c9:c5:10: 20:37:df:e8:ff:ed:0f:46:04:75:0e:e1:0e:95:2e:60:97:35: a7:33:63:d4:40:95:32:0f:dc:35:7f:5d:5a:7d:3e:5d:6e:5f: 7c:ce:12:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE50K5misd7QCKVfZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzYyMjhmODYtYmY1NC00OWZjLTgzNWMtNTg4Y2QyYWFk YjQ5MB4XDTI2MDcxMDE1MzAwOFoXDTI2MTAwODE1MzAwOFowLzEtMCsGA1UEAxMk YWMxMzFmZmUtOTMyMy00NmNhLTg5MGYtZjg0NjRjOWYwMWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYn1fmh+ivtPELO4KMcCR1KpXMxG7Pj59nDu u8q08LI/q0E+2rOmK3USEYZFiX9yl+8+kpO5Qu5RHJWBOVtQ888lPXJF3yoQ4Ocu YdgWRMcUA+vKog7rt2D3JJK+WJIdXLP3NiCxtTnGm7ipU9ph/6zsWmtoM5OhJ3K1 94sDGlcRlDddmt3zgdb/EY1RFkZoP7Aw+iSSD35svIw8D2jYYV+U+BCJS/tGCSl+ YWK0ihcuaWqc4IYMBV2365A1DW4Y9sDVleCRa/Ieectx6y1J9eKGFbIO6PZrj5Ga bSuTNdHmYJGHqQKkP+54Rm5h7u3Yoy2FkWiiRdgzVSaTxYXNpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1vA3LMNBzT5MCldZ59Tu6CpFaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNjIy OGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhjZDJhYWRiNDkvM2QwMzVkYTEtNDcwYy0z MzViLWEyNmUtOTQzMDY4YzVkNDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzYyMjhmODYtYmY1NC00OWZjLTgz NWMtNTg4Y2QyYWFkYjQ5L2M2MjI4Zjg2LWJmNTQtNDlmYy04MzVjLTU4OGNkMmFh ZGI0OS5jcmwwHwYDVR0jBBgwFoAU02ys5jOi7tSvgh71l2CJvthHPJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jNjIyOGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhj ZDJhYWRiNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2H04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFv66BtnBUHEdW7OqSOkQhfxKptRLwf77OXcp7kxqjwu08GdfYdfolTU Urav6h7MFFRkMnS1b45zNd9O9WKShM2vQzJ0oxR3c80a+M7K3lRtj9cvxU8ccTGv pHMfy+YKFFU+nCQT1a/MznLf714Gn08U+LtEzA8rfAKLTDT5RgV6VK8enEOznirm bWzKBdT9ra1QjLR4ZLvbcBFcQdlDayh00jvrTNVJdzniB2+6EPZDYb9ZO+BySOhC kMACfQ6d6vEIJOQSqNRH+v3R2S3f6m+yhm9ZT8nFECA33+j/7Q9GBHUO4Q6VLmCX NaczY9RAlTIP3DV/XVp9Pl1uX3zOEj8= -----END CERTIFICATE-----Generated at Mon Jul 13 07:15:58 2026 by rpki-client