$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c5102a2d-64e7-3cac-8c9f-86f003b71533.roa File: c5102a2d-64e7-3cac-8c9f-86f003b71533.roa (raw, json) Hash identifier: Rfi5dV9tFMXju3hjp9MykaySVA1oUOld6849eS5czzc= Subject key identifier: C1:B8:27:78:D9:21:CF:3C:08:0B:18:8A:FF:18:B5:73:C4:91:76:11 Certificate issuer: /CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Certificate serial: 010D0C9F4328584E71CA86B8DE09FA76CC43B500 Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c5102a2d-64e7-3cac-8c9f-86f003b71533.roa Signing time: Thu 09 Jul 2026 19:02:55 +0000 ROA not before: Thu 09 Jul 2026 19:02:55 +0000 ROA not after: Wed 07 Oct 2026 19:02:55 +0000 asID: 6325 IP address blocks: 206.166.0.0/17 maxlen: 17 206.166.0.0/18 maxlen: 18 206.166.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:71:ca:86:b8:de:09:fa:76:cc:43:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49 Validity Not Before: Jul 9 19:02:55 2026 GMT Not After : Oct 7 19:02:55 2026 GMT Subject: CN=9a8a6154-6da3-4e9b-a16b-25fd0d82ad1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9b:e5:bc:f6:7d:de:0b:ee:ad:6a:06:a3:6c: c7:61:d8:5a:0f:9f:aa:a7:b9:89:cc:67:14:ba:c4: 0c:d1:90:da:f3:25:45:f9:44:85:4f:70:21:c6:e1: 55:06:e2:ea:15:56:1a:cf:a2:bd:2f:c1:5c:85:b4: 59:39:18:9c:08:1e:db:70:d2:ba:fb:1c:c8:a8:75: 05:25:82:8d:d6:3f:16:24:ba:d1:6b:bf:8d:1e:ef: 86:74:07:7b:a9:3a:ad:e5:22:87:8a:7e:09:e9:e9: 44:c2:ad:66:a8:c1:da:0e:bc:7c:01:4a:ce:4b:71: 32:88:de:da:89:74:bd:bc:73:87:f5:f4:d4:19:21: 6b:e8:1f:24:8c:e0:e4:84:85:af:08:98:ee:91:33: 3c:1a:7b:fd:92:d0:c5:9c:9e:c3:02:2d:67:e9:15: 32:03:42:4e:b8:55:55:1b:a1:84:c2:21:b1:af:ca: ef:74:af:1b:40:9a:20:34:90:f8:45:f2:52:54:0c: be:45:c4:68:11:c3:24:04:6b:12:38:3f:9a:4a:df: 48:a6:85:c5:db:19:32:e7:db:42:ff:a5:29:ae:2a: 3b:4d:c6:a6:ba:c8:0f:10:f7:a4:b6:e8:82:8b:7b: 91:dd:e4:5b:50:ac:ce:3d:e6:c2:f9:c5:d4:0b:1b: a8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B8:27:78:D9:21:CF:3C:08:0B:18:8A:FF:18:B5:73:C4:91:76:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c5102a2d-64e7-3cac-8c9f-86f003b71533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl X509v3 Authority Key Identifier: keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer sbgp-ipAddrBlock: critical IPv4: 206.166.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:67:d6:ef:a7:9d:f3:b1:09:e1:1e:d6:be:dc:3e:95:34:82: fe:6c:3d:bb:65:b3:0c:70:24:0e:e5:fc:6b:74:a9:10:92:91: f0:f3:f9:91:50:50:ae:32:a5:62:29:98:e0:44:ab:70:ad:fe: f3:39:c9:6b:b4:34:91:e2:55:b6:41:8f:14:e2:3f:a2:64:18: d1:b8:f3:c9:84:46:4f:56:2f:dd:20:87:56:37:5e:e0:cb:25: 8d:ba:c2:6d:3a:58:2a:13:f8:01:a3:a8:a8:94:18:51:65:b7: 15:37:76:b0:3a:b7:d3:86:75:f2:5a:e4:28:f3:a0:c1:22:d4: ad:07:56:6c:f0:bc:ae:c5:6a:32:3a:47:d5:1f:7b:5b:07:77: 2a:be:89:68:4a:7c:cd:46:76:6c:20:ff:24:4e:86:fa:9d:d4: 35:2a:22:d2:6e:e2:c2:d3:43:45:63:dc:b9:78:db:db:40:18: c3:b3:6e:01:09:59:24:76:14:e4:62:7b:04:c6:56:40:95:5b: cc:0b:4a:41:e0:da:ad:6d:e0:b7:0c:45:26:41:85:c9:87:63: ee:75:c4:ac:c0:19:e5:f6:46:a6:4a:92:c5:96:1f:35:7a:d7: 56:da:4e:03:02:44:8d:bd:c7:d1:7a:0c:0c:ec:4d:d0:fd:71: c8:28:41:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5xyoa43gn6dsxDtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzYyMjhmODYtYmY1NC00OWZjLTgzNWMtNTg4Y2QyYWFk YjQ5MB4XDTI2MDcwOTE5MDI1NVoXDTI2MTAwNzE5MDI1NVowLzEtMCsGA1UEAxMk OWE4YTYxNTQtNmRhMy00ZTliLWExNmItMjVmZDBkODJhZDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZvlvPZ93gvurWoGo2zHYdhaD5+qp7mJzGcU usQM0ZDa8yVF+USFT3AhxuFVBuLqFVYaz6K9L8FchbRZORicCB7bcNK6+xzIqHUF JYKN1j8WJLrRa7+NHu+GdAd7qTqt5SKHin4J6elEwq1mqMHaDrx8AUrOS3EyiN7a iXS9vHOH9fTUGSFr6B8kjODkhIWvCJjukTM8Gnv9ktDFnJ7DAi1n6RUyA0JOuFVV G6GEwiGxr8rvdK8bQJogNJD4RfJSVAy+RcRoEcMkBGsSOD+aSt9IpoXF2xky59tC /6Uprio7TcamusgPEPektuiCi3uR3eRbUKzOPebC+cXUCxuoiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMG4J3jZIc88CAsYiv8YtXPEkXYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jNjIy OGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhjZDJhYWRiNDkvYzUxMDJhMmQtNjRlNy0z Y2FjLThjOWYtODZmMDAzYjcxNTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYzYyMjhmODYtYmY1NC00OWZjLTgz NWMtNTg4Y2QyYWFkYjQ5L2M2MjI4Zjg2LWJmNTQtNDlmYy04MzVjLTU4OGNkMmFh ZGI0OS5jcmwwHwYDVR0jBBgwFoAU02ys5jOi7tSvgh71l2CJvthHPJkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jNjIyOGY4Ni1iZjU0LTQ5ZmMtODM1Yy01ODhj ZDJhYWRiNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzqYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFn1u+nnfOxCeEe1r7cPpU0gv5sPbtlswxwJA7l/Gt0qRCSkfDz+ZFQ UK4ypWIpmOBEq3Ct/vM5yWu0NJHiVbZBjxTiP6JkGNG488mERk9WL90gh1Y3XuDL JY26wm06WCoT+AGjqKiUGFFltxU3drA6t9OGdfJa5CjzoMEi1K0HVmzwvK7FajI6 R9Ufe1sHdyq+iWhKfM1Gdmwg/yROhvqd1DUqItJu4sLTQ0Vj3Ll429tAGMOzbgEJ WSR2FORiewTGVkCVW8wLSkHg2q1t4LcMRSZBhcmHY+51xKzAGeX2RqZKksWWHzV6 11baTgMCRI29x9F6DAzsTdD9ccgoQZA= -----END CERTIFICATE-----Generated at Mon Jul 13 07:16:13 2026 by rpki-client