$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa File: 6436fe84-15d0-3af0-956b-b3cb8a063158.roa (raw, json) Hash identifier: AYLpqYaF7+ugwbPRuG+nq4eLYC1myD5mzdQaiy1PjWY= Subject key identifier: B9:FA:41:5E:B5:B7:9A:CD:A4:F3:07:1C:96:5C:E3:59:B1:B1:02:C9 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584EA78897F42613003D7A016900 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398420 IP address blocks: 216.246.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:97:f4:26:13:00:3d:7a:01:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e7cffe9f-ae05-4ad4-9cc1-9afb2429c544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:41:e3:e4:c1:26:72:d9:2b:51:f9:08:fe:f8: 38:90:00:29:ed:c7:a6:32:44:64:f7:ed:f9:d8:65: d4:d5:a6:6a:c6:69:38:a3:ed:64:06:6f:84:8a:cc: ab:a8:4b:7d:a3:84:b7:b3:dc:4b:5d:eb:57:15:7a: 3c:06:99:19:3e:5e:55:74:88:02:cc:b0:88:a2:ec: 30:58:34:2e:c0:ab:a0:1c:34:ff:23:0a:ff:2c:4d: f5:ee:3b:1c:ff:a6:e2:46:6f:a4:92:84:75:ab:f0: e0:3a:40:5a:5c:af:c5:d4:9e:37:f5:72:0e:15:dd: b9:7d:3e:59:22:56:42:96:8a:48:23:ac:59:75:ba: 31:24:53:bd:3b:e9:82:bc:e9:80:a3:84:5e:1b:08: 38:55:4d:bf:42:72:7f:5a:84:fe:2c:ad:17:de:6a: f3:4a:18:00:66:f9:25:6c:80:cd:23:45:b6:6e:b9: a3:76:2a:ed:22:57:ba:58:55:95:21:7d:93:5a:3b: 91:4a:1c:9d:b9:de:6d:1e:cc:2c:7b:26:29:36:91: 40:54:e2:a6:cf:73:94:b8:71:2a:13:51:21:86:7d: 17:9a:07:23:23:7b:d1:17:56:8c:8b:f5:bb:85:09: a1:b2:95:dc:21:99:dc:6a:6e:8d:4f:e0:43:e1:05: 8c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FA:41:5E:B5:B7:9A:CD:A4:F3:07:1C:96:5C:E3:59:B1:B1:02:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/6436fe84-15d0-3af0-956b-b3cb8a063158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 216.246.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f9:07:ec:ce:75:d1:16:7e:53:28:9a:9b:30:0b:e4:47:50: 93:79:53:e7:dc:60:49:9f:a9:8c:fc:50:5d:e8:ee:83:e3:5f: ba:2d:fd:a4:f6:d7:ad:95:90:64:b6:28:db:b0:05:6c:39:6e: bd:17:f1:f0:6c:a2:b7:7b:77:56:97:9c:0c:19:91:c8:53:99: 6b:3f:89:33:11:20:34:9e:95:30:04:41:d1:bb:2b:09:68:39: 5f:16:ba:13:4b:88:16:6c:1e:24:ea:b4:4b:30:50:3b:fe:d4: 3a:c8:21:16:d3:08:f6:0b:02:bd:02:9a:92:d3:73:bd:3e:2f: c3:18:b1:74:b1:90:60:d9:10:09:28:3b:38:eb:b5:f2:1e:e2: 27:5b:6d:d7:03:96:d0:39:2f:57:93:17:54:44:59:99:18:22: c4:5f:c8:6f:da:43:cd:eb:37:be:31:59:c4:95:3e:31:c7:62: ff:b0:11:ce:d2:26:4d:69:c4:fb:1d:92:f3:4e:1b:44:f5:8a: ed:d7:09:7c:98:29:82:e3:58:74:43:e4:88:78:a6:78:fd:41: f5:37:c8:f7:60:44:3a:22:6c:89:a2:e9:28:1f:a4:57:82:e0: 51:a5:ff:3f:de:42:ce:3a:3b:ef:34:96:c5:de:86:cb:35:35: aa:99:7c:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niJf0JhMAPXoBaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTdjZmZlOWYtYWUwNS00YWQ0LTljYzEtOWFmYjI0MjljNTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUHj5MEmctkrUfkI/vg4kAAp7cemMkRk9+35 2GXU1aZqxmk4o+1kBm+EisyrqEt9o4S3s9xLXetXFXo8BpkZPl5VdIgCzLCIouww WDQuwKugHDT/Iwr/LE317jsc/6biRm+kkoR1q/DgOkBaXK/F1J439XIOFd25fT5Z IlZClopII6xZdboxJFO9O+mCvOmAo4ReGwg4VU2/QnJ/WoT+LK0X3mrzShgAZvkl bIDNI0W2brmjdirtIle6WFWVIX2TWjuRShydud5tHswseyYpNpFAVOKmz3OUuHEq E1Ehhn0XmgcjI3vRF1aMi/W7hQmhspXcIZncam6NT+BD4QWMuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLn6QV61t5rNpPMHHJZc41mxsQLJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNjQzNmZlODQtMTVkMC0z YWYwLTk1NmItYjNjYjhhMDYzMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEj5B+zOddEWflMompswC+RHUJN5U+fcYEmfqYz8UF3o7oPjX7ot/aT2 162VkGS2KNuwBWw5br0X8fBsord7d1aXnAwZkchTmWs/iTMRIDSelTAEQdG7Kwlo OV8WuhNLiBZsHiTqtEswUDv+1DrIIRbTCPYLAr0CmpLTc70+L8MYsXSxkGDZEAko OzjrtfIe4idbbdcDltA5L1eTF1REWZkYIsRfyG/aQ83rN74xWcSVPjHHYv+wEc7S Jk1pxPsdkvNOG0T1iu3XCXyYKYLjWHRD5Ih4pnj9QfU3yPdgRDoibImi6SgfpFeC 4FGl/z/eQs46O+80lsXehss1NaqZfF0= -----END CERTIFICATE-----Generated at Wed Aug 26 13:09:48 2026 by rpki-client