$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa File: bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa (raw, json) Hash identifier: tY14NgGy3BY5XuQyySb2pHOKvgdIYLqkOnNmzuLd5EI= Subject key identifier: AD:B7:11:A6:95:21:4E:2A:DD:8A:79:91:1E:02:9B:53:F2:54:05:78 Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Certificate serial: 010D0C9F4328584F7782F3DF3F2A357121116F80 Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 1299 IP address blocks: 204.15.220.0/22 maxlen: 24 208.86.120.0/21 maxlen: 24 2606:3840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:f3:df:3f:2a:35:71:21:11:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=14989000-6d56-4f20-b495-912c3dcd8d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f5:d7:dc:5f:20:6d:44:7d:62:53:29:e4:35: 7f:48:27:e9:97:a8:a8:a0:32:4f:91:99:e2:f3:57: b2:df:80:86:29:11:f3:f3:d8:11:55:d9:06:e3:fd: 87:7e:ca:06:73:80:a6:45:61:24:99:0a:67:fd:b3: 38:59:e0:61:b0:e5:de:34:d6:69:5d:6f:58:a7:cb: d3:9a:af:22:bb:5a:1b:f8:bd:fd:50:1b:4d:d5:d1: 56:bd:65:ac:25:31:9c:77:f4:9c:a8:e4:b1:68:60: 9b:f6:74:03:06:9f:53:9f:47:47:df:8a:4f:8c:b3: 4e:b0:b4:31:72:c4:6b:a0:ee:84:de:e1:6a:14:00: 8c:a7:41:72:f7:95:db:93:16:ec:2f:dd:e3:52:16: 73:bd:be:bd:8d:65:21:81:b9:44:4f:b3:a7:b7:86: 55:ef:cb:1c:bb:fa:bc:55:99:99:36:97:0b:e4:6d: b3:17:36:73:05:8b:38:32:8a:06:3f:7b:df:37:82: 91:90:de:0d:62:b9:70:8d:73:97:50:0f:d4:b0:b3: 03:d7:c1:30:f9:30:fa:c1:de:be:e1:1a:df:da:12: db:fb:0b:d8:c1:cf:20:7f:70:a0:92:eb:19:23:7f: be:77:61:ae:f1:52:b0:e3:5c:f1:40:55:a6:26:a6: 4e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B7:11:A6:95:21:4E:2A:DD:8A:79:91:1E:02:9B:53:F2:54:05:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/bd89da8b-bd32-33a2-8093-1b5f44bc7bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl X509v3 Authority Key Identifier: keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer sbgp-ipAddrBlock: critical IPv4: 204.15.220.0/22 208.86.120.0/21 IPv6: 2606:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:30:19:6b:fa:b6:3a:22:1d:fa:a9:9f:b4:7e:f9:5e:f8:32: f5:a4:11:5e:db:45:97:40:b2:87:b7:eb:15:43:bd:b7:ba:ca: 98:14:04:f8:cb:ed:b7:38:ec:c9:ac:77:bf:62:cd:c5:a2:f4: 18:2d:63:32:85:25:43:79:06:32:2a:2d:de:42:a3:50:52:d8: f9:0b:9c:ad:8d:ce:70:41:45:58:12:e5:d4:72:b3:80:24:78: 5b:0a:bf:89:a4:2c:6f:f4:c5:f2:26:30:84:11:37:1a:64:d4: 9e:d6:d2:01:c2:a3:54:b0:ab:2d:8a:2b:ae:83:23:50:86:bc: 3a:13:1c:46:fc:0c:47:23:1b:cc:ef:f6:61:2e:56:1f:51:46: 5c:05:94:84:05:e2:46:51:48:40:d7:6e:78:22:e7:76:97:e3: 05:66:63:d5:54:a7:04:b1:8d:1d:cd:37:dd:62:ea:df:a0:56: ed:28:64:f9:7e:07:1f:c8:b7:c1:d6:84:af:4e:d8:26:76:37: c6:72:10:46:79:0a:e2:2c:2b:eb:d4:08:de:27:e6:80:be:a2: ef:4f:04:d3:dd:af:ae:81:fd:04:f7:01:62:67:f2:1c:07:81: 8a:9a:57:91:f2:64:15:02:14:dd:d3:af:35:2d:f6:89:42:6c: 36:3b:1f:95 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE93gvPfPyo1cSERb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz ZjcxMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk MTQ5ODkwMDAtNmQ1Ni00ZjIwLWI0OTUtOTEyYzNkY2Q4ZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPXX3F8gbUR9YlMp5DV/SCfpl6iooDJPkZni 81ey34CGKRHz89gRVdkG4/2HfsoGc4CmRWEkmQpn/bM4WeBhsOXeNNZpXW9Yp8vT mq8iu1ob+L39UBtN1dFWvWWsJTGcd/ScqOSxaGCb9nQDBp9Tn0dH34pPjLNOsLQx csRroO6E3uFqFACMp0Fy95XbkxbsL93jUhZzvb69jWUhgblET7Ont4ZV78scu/q8 VZmZNpcL5G2zFzZzBYs4MooGP3vfN4KRkN4NYrlwjXOXUA/UsLMD18Ew+TD6wd6+ 4Rrf2hLb+wvYwc8gf3CgkusZI3++d2Gu8VKw41zxQFWmJqZOxwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFK23EaaVIU4q3Yp5kR4Cm1PyVAV4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5 NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvYmQ4OWRhOGItYmQzMi0z M2EyLTgwOTMtMWI1ZjQ0YmM3YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi NzRlMDNmNzEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA/cAwQD 0FZ4MA0EAgACMAcDBQAmBjhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG0wGWv6tjoiHfqpn7R++V74MvWk EV7bRZdAsoe36xVDvbe6ypgUBPjL7bc47Mmsd79izcWi9BgtYzKFJUN5BjIqLd5C o1BS2PkLnK2NznBBRVgS5dRys4AkeFsKv4mkLG/0xfImMIQRNxpk1J7W0gHCo1Sw qy2KK66DI1CGvDoTHEb8DEcjG8zv9mEuVh9RRlwFlIQF4kZRSEDXbngi53aX4wVm Y9VUpwSxjR3NN91i6t+gVu0oZPl+Bx/It8HWhK9O2CZ2N8ZyEEZ5CuIsK+vUCN4n 5oC+ou9PBNPdr66B/QT3AWJn8hwHgYqaV5HyZBUCFN3TrzUt9olCbDY7H5U= -----END CERTIFICATE-----Generated at Tue Oct 20 20:12:15 2026 by rpki-client