$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa File: f285d95a-b783-3400-8db8-8b30c968f7c0.roa (raw, json) Hash identifier: fLSAowzO3URNHk5nhYV51J/vDQbhdfJkaAf/vqmB5GI= Subject key identifier: 56:28:37:5E:4B:52:38:8D:08:AD:4D:F6:84:21:6D:F2:67:26:D8:21 Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Certificate serial: 010D0C9F4328584F7782DCD0D65741708209F140 Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 174 IP address blocks: 204.15.220.0/22 maxlen: 24 208.86.120.0/21 maxlen: 24 2606:3840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:dc:d0:d6:57:41:70:82:09:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=a74dd5ea-72e5-4fae-bdba-a2aa66fb8689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:53:2a:b1:05:9f:73:a9:1a:04:ea:d2:7f:e9: 76:94:81:75:8f:63:64:4c:cf:95:ff:0e:a2:d5:65: 11:48:71:5a:7c:e5:8f:c3:ed:79:1f:4d:76:ac:f7: ab:90:21:8a:a1:b3:b5:bd:00:19:b1:b4:57:11:1f: 1f:2c:d8:ad:9e:18:12:06:93:db:8e:6c:53:1b:c7: 0c:89:9e:95:6a:d8:58:07:52:c8:1e:2a:b1:a9:d1: 5a:f8:52:e0:37:fb:fe:d2:85:be:82:0f:08:9b:d6: 65:77:89:e6:d3:69:21:09:8f:82:7e:8d:32:2a:94: c5:30:59:a6:5c:fd:b5:47:cf:69:63:70:6b:69:1f: e2:f9:35:1c:56:bc:43:b2:67:fd:fb:5b:5e:34:a4: f7:61:2a:c0:8f:29:35:9b:a1:ad:e6:b4:81:e4:d9: 2d:da:6a:0d:1e:70:a0:3e:45:c7:a4:1b:03:d9:1c: 6e:a6:18:f3:52:48:6a:e8:5e:f4:5e:ef:d4:d0:19: 5b:be:4d:26:aa:f1:03:34:bf:ed:67:2a:b2:0c:36: b2:af:31:fd:00:15:fe:0b:46:80:02:6e:84:f0:9c: 0f:cb:af:df:f1:1a:b9:a0:ff:d8:a6:01:a1:1a:e1: 8f:03:2d:56:04:72:06:eb:e9:0b:20:1e:78:af:b5: 77:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:28:37:5E:4B:52:38:8D:08:AD:4D:F6:84:21:6D:F2:67:26:D8:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl X509v3 Authority Key Identifier: keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer sbgp-ipAddrBlock: critical IPv4: 204.15.220.0/22 208.86.120.0/21 IPv6: 2606:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c9:0b:41:bb:23:0f:6d:13:5d:ab:bf:9f:12:5b:9f:7f:9b: 33:2f:90:38:9e:13:47:fe:02:19:41:c9:38:a8:fb:af:32:f6: 1a:94:2f:af:d2:93:c2:95:bc:62:6d:3b:5c:a3:fa:33:db:a1: 0a:79:68:f3:54:8d:95:e4:12:2e:1c:a6:bd:7f:85:66:15:5b: 6f:7e:e6:60:3e:83:c5:30:ba:15:01:9f:68:30:b5:45:fb:be: d4:40:74:72:d8:a0:4f:1b:f2:73:79:b9:32:ed:fa:42:85:4f: f1:1b:0b:d9:73:4b:cc:0f:c0:5d:cd:62:1b:68:c1:de:f9:3e: 3b:6c:83:03:0c:70:31:4b:16:0f:52:80:9b:f1:2f:9e:64:3a: d3:af:37:d9:56:03:a4:c3:2a:a3:c4:97:b3:bb:88:41:89:c9: 8e:9b:24:40:85:1b:e7:74:65:73:76:5c:d8:1d:af:11:07:fe: b5:70:f7:47:c6:49:d7:18:6a:a0:5c:73:b2:3f:06:2b:4f:93: c1:36:e4:96:cf:d9:67:ba:df:21:c6:ef:fd:e8:75:39:d7:ef: 69:a6:67:8b:8e:e7:53:c2:fe:ba:a2:da:21:d8:2c:26:f6:76: c3:9b:18:78:9a:64:18:30:a1:00:8a:9b:30:57:14:36:1f:bd: 07:88:76:c4 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE93gtzQ1ldBcIIJ8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz ZjcxMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YTc0ZGQ1ZWEtNzJlNS00ZmFlLWJkYmEtYTJhYTY2ZmI4Njg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51MqsQWfc6kaBOrSf+l2lIF1j2NkTM+V/w6i 1WURSHFafOWPw+15H012rPerkCGKobO1vQAZsbRXER8fLNitnhgSBpPbjmxTG8cM iZ6VathYB1LIHiqxqdFa+FLgN/v+0oW+gg8Im9Zld4nm02khCY+Cfo0yKpTFMFmm XP21R89pY3BraR/i+TUcVrxDsmf9+1teNKT3YSrAjyk1m6Gt5rSB5Nkt2moNHnCg PkXHpBsD2RxuphjzUkhq6F70Xu/U0Blbvk0mqvEDNL/tZyqyDDayrzH9ABX+C0aA Am6E8JwPy6/f8Rq5oP/YpgGhGuGPAy1WBHIG6+kLIB54r7V3uwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFYoN15LUjiNCK1N9oQhbfJnJtghMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5 NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvZjI4NWQ5NWEtYjc4My0z NDAwLThkYjgtOGIzMGM5NjhmN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi NzRlMDNmNzEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA/cAwQD 0FZ4MA0EAgACMAcDBQAmBjhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABjJC0G7Iw9tE12rv58SW59/mzMv kDieE0f+AhlByTio+68y9hqUL6/Sk8KVvGJtO1yj+jPboQp5aPNUjZXkEi4cpr1/ hWYVW29+5mA+g8UwuhUBn2gwtUX7vtRAdHLYoE8b8nN5uTLt+kKFT/EbC9lzS8wP wF3NYhtowd75PjtsgwMMcDFLFg9SgJvxL55kOtOvN9lWA6TDKqPEl7O7iEGJyY6b JECFG+d0ZXN2XNgdrxEH/rVw90fGSdcYaqBcc7I/BitPk8E25JbP2We63yHG7/3o dTnX72mmZ4uO51PC/rqi2iHYLCb2dsObGHiaZBgwoQCKmzBXFDYfvQeIdsQ= -----END CERTIFICATE-----Generated at Mon Oct 26 11:39:43 2026 by rpki-client