$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/f8c29c68-0179-3fc3-a651-babcb1f95d9c.roa File: f8c29c68-0179-3fc3-a651-babcb1f95d9c.roa (raw, json) Hash identifier: 9X5zQYKoprJuC70fC1bTSD01eCToXC2Tv/HFrHKUTLw= Subject key identifier: 7E:85:63:6A:93:BC:A2:CE:61:1F:8B:AC:64:73:4A:78:8C:4C:9C:26 Certificate issuer: /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Certificate serial: 010D0C9F4328584F06722D4F1BE95531D9F8EF00 Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/f8c29c68-0179-3fc3-a651-babcb1f95d9c.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 22773 IP address blocks: 216.185.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:2d:4f:1b:e9:55:31:d9:f8:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=e2425586-57b1-4fe1-b6b2-0b84cf14e7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2b:d4:e6:61:dc:fa:96:07:12:5f:10:28:67: 0d:9e:ff:6b:e1:19:d5:f9:e0:0b:8a:a1:0b:b3:b7: 12:7f:4c:e5:33:42:33:bd:5b:f4:43:82:2e:4a:ce: bf:7e:b7:56:f1:2c:60:7f:f0:ef:5f:c4:5f:03:0f: 4e:5e:4d:ca:9a:d8:18:43:fe:e0:10:a4:5c:c6:c1: 5e:bd:a2:12:c5:94:4a:fa:9f:83:b5:3b:6a:26:08: 97:77:c8:c4:ad:1b:8c:13:b3:9f:83:44:a6:7c:cc: 26:d6:10:dd:5e:ad:b4:d3:95:58:72:46:ba:af:84: 8e:15:40:ab:a8:10:4e:02:e4:ef:ec:eb:71:0d:da: 4d:39:fd:12:5d:ea:8c:89:c3:92:a0:67:36:e2:eb: 2c:0f:81:1b:85:a7:db:92:93:3b:5c:e2:01:01:c7: c9:39:80:47:3b:65:58:83:f3:36:3b:93:e2:31:17: 9b:ec:b3:d8:03:fd:7a:93:78:d1:f6:73:f2:a9:b4: f6:06:3b:66:26:60:d3:f2:ea:42:58:7f:1f:d7:c9: 66:d2:f3:a1:41:3b:39:56:a3:19:c5:11:5e:28:4e: 7f:37:d6:86:35:a0:54:ba:da:78:0b:76:d0:ab:e1: 28:58:03:97:cf:55:4f:a9:2b:dc:1f:10:d3:6b:c3: f8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:85:63:6A:93:BC:A2:CE:61:1F:8B:AC:64:73:4A:78:8C:4C:9C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/f8c29c68-0179-3fc3-a651-babcb1f95d9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl X509v3 Authority Key Identifier: keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer sbgp-ipAddrBlock: critical IPv4: 216.185.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:f9:62:ae:1d:5b:bc:a5:f1:d7:7e:f5:c9:18:32:db:c5:c1: 29:1c:56:01:46:b9:21:4f:b8:78:3f:46:1a:cf:2a:29:8a:4a: 16:1e:9e:c3:6e:58:c2:b0:04:99:27:68:e9:ab:f1:17:fd:2b: 43:db:8a:1e:32:a6:b5:be:b1:82:4d:0e:c9:69:b0:0a:e4:8f: 5e:17:5d:4d:07:06:d3:ae:1c:33:d9:01:ab:65:b5:cb:20:3c: 87:61:6c:8d:b7:81:95:80:99:20:9f:e4:b7:58:20:09:e0:42: 13:cc:5b:58:f3:52:16:02:d1:8d:8a:c7:a3:f3:48:3a:e9:93: b7:eb:14:70:13:cb:19:59:cb:a7:f8:8e:29:fb:fc:e0:da:ad: 5c:ce:02:4c:47:c3:68:36:30:d3:6c:3e:be:8b:da:74:13:60: 07:79:fd:85:9d:72:b4:e2:2d:60:67:8d:14:b1:ab:6e:23:d3: 11:da:b0:90:da:51:62:c2:83:b1:33:ee:db:f4:4b:c9:e6:b9: 36:b2:03:6d:68:94:28:03:f5:5c:11:59:61:c5:c1:9f:39:8b: 1b:fd:6b:a1:1c:f1:59:39:58:fa:4d:cc:92:81:8d:b8:a0:39: a0:2e:ad:9e:bb:7a:f5:f8:33:aa:a6:da:6f:60:25:0c:12:b2: 4e:cd:3f:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gci1PG+lVMdn47wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2 NjNlMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk ZTI0MjU1ODYtNTdiMS00ZmUxLWI2YjItMGI4NGNmMTRlN2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyvU5mHc+pYHEl8QKGcNnv9r4RnV+eALiqEL s7cSf0zlM0IzvVv0Q4IuSs6/frdW8Sxgf/DvX8RfAw9OXk3KmtgYQ/7gEKRcxsFe vaISxZRK+p+DtTtqJgiXd8jErRuME7Ofg0SmfMwm1hDdXq2005VYcka6r4SOFUCr qBBOAuTv7OtxDdpNOf0SXeqMicOSoGc24ussD4EbhafbkpM7XOIBAcfJOYBHO2VY g/M2O5PiMReb7LPYA/16k3jR9nPyqbT2BjtmJmDT8upCWH8f18lm0vOhQTs5VqMZ xRFeKE5/N9aGNaBUutp4C3bQq+EoWAOXz1VPqSvcHxDTa8P4IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6FY2qTvKLOYR+LrGRzSniMTJwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvZjhjMjljNjgtMDE3OS0z ZmMzLWE2NTEtYmFiY2IxZjk1ZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2 YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3 NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm NDg4NzY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2LncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/5Yq4dW7yl8dd+9ckYMtvFwSkcVgFGuSFPuHg/RhrPKimKShYensNu WMKwBJknaOmr8Rf9K0Pbih4yprW+sYJNDslpsArkj14XXU0HBtOuHDPZAatltcsg PIdhbI23gZWAmSCf5LdYIAngQhPMW1jzUhYC0Y2Kx6PzSDrpk7frFHATyxlZy6f4 jin7/ODarVzOAkxHw2g2MNNsPr6L2nQTYAd5/YWdcrTiLWBnjRSxq24j0xHasJDa UWLCg7Ez7tv0S8nmuTayA21olCgD9VwRWWHFwZ85ixv9a6Ec8Vk5WPpNzJKBjbig OaAurZ67evX4M6qm2m9gJQwSsk7NPzo= -----END CERTIFICATE-----Generated at Thu Sep 10 10:43:45 2026 by rpki-client