$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa File: f285d95a-b783-3400-8db8-8b30c968f7c0.roa (raw, json) Hash identifier: bSS5L1svymFbCjw9QZFv93hRQKNKaBU495/BavL3TCE= Subject key identifier: 29:6C:97:6A:E9:3F:CF:A2:F7:A4:48:5F:5E:C3:9A:4A:63:6C:30:EE Certificate issuer: /CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Certificate serial: 010D0C9F4328584ED431E0978423F81046DA7340 Authority key identifier: CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 174 IP address blocks: 204.15.220.0/22 maxlen: 24 208.86.120.0/21 maxlen: 24 2606:3840::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:e0:97:84:23:f8:10:46:da:73:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce95cb2-398f-4574-bae0-522b74e03f71 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=deddda2e-e61b-48e1-a507-f39a1f15b943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:61:f2:b1:ca:9c:9e:fb:3a:4a:08:2e:2b:85: 84:87:7d:d5:3d:3c:15:25:78:a1:97:41:a9:36:57: 55:85:0c:be:42:db:80:37:da:e9:35:57:17:a3:5a: 0f:a0:2a:ea:ef:a2:be:49:e2:8a:b2:ab:13:a7:97: 9e:53:b5:e9:27:38:51:54:72:51:4b:93:1b:2f:f9: 12:03:e1:32:45:9b:66:dc:f9:d8:3d:5a:9a:9b:fb: 31:90:c3:4f:fb:1c:28:13:9c:af:0e:8c:b9:5d:9f: a5:f8:94:b8:7e:07:27:e9:2c:1c:c2:ce:ed:49:9e: f3:52:6e:cd:1f:9f:30:eb:b5:9d:e8:40:ed:c6:30: e6:36:07:1a:78:8b:85:9b:6f:c7:8e:cb:f3:6d:af: a8:6b:bb:9e:9f:b3:51:e6:88:ba:9b:c9:e5:ce:03: 1a:c8:1c:da:64:32:6a:b7:bf:b9:37:cb:3b:d3:4a: 9e:08:42:f5:b8:d1:b7:6d:ed:5f:0d:f5:50:2d:c1: 2d:cf:98:45:bd:e9:be:38:3b:53:31:3f:71:df:0b: 54:96:96:40:7b:6d:8e:82:f3:bb:48:6e:85:6c:09: 56:b9:44:9c:d5:58:d6:57:14:e0:f0:14:75:b6:e9: 0b:ad:16:ad:68:1b:70:29:16:0c:6c:a9:55:96:3d: dd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6C:97:6A:E9:3F:CF:A2:F7:A4:48:5F:5E:C3:9A:4A:63:6C:30:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/f285d95a-b783-3400-8db8-8b30c968f7c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71/6ce95cb2-398f-4574-bae0-522b74e03f71.crl X509v3 Authority Key Identifier: keyid:CC:A9:17:F8:E6:45:3A:31:6D:87:06:F6:D1:6E:36:3E:6C:84:7F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6ce95cb2-398f-4574-bae0-522b74e03f71.cer sbgp-ipAddrBlock: critical IPv4: 204.15.220.0/22 208.86.120.0/21 IPv6: 2606:3840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:c6:71:02:1a:bf:1e:8b:97:6c:3f:18:4f:ba:16:16:15:8d: 69:fa:6b:b9:23:0c:2d:f9:ed:8a:e7:2e:a3:2f:29:dd:d9:41: 2a:1f:79:28:39:bf:77:b3:30:5b:bd:f0:d8:0b:c1:91:12:b9: 40:b4:ef:b6:5c:12:52:90:e7:0d:67:75:56:53:71:1d:60:d6: 86:38:0b:31:90:7f:b9:38:1f:88:ab:90:76:ce:20:1c:2e:62: 50:54:b0:6c:ca:84:7b:ed:10:2a:46:41:81:84:09:c1:04:ac: d9:13:0a:70:1a:d6:d3:f9:56:5e:9f:25:fe:47:9e:67:19:cb: ac:f4:05:2d:e7:e8:b9:c1:fc:97:36:3e:9e:01:18:13:60:72: 2d:0f:a2:81:51:9c:c2:32:ce:70:13:87:69:7d:6f:fb:61:df: 39:82:1b:26:2b:59:2a:e7:86:cc:bb:db:f5:6d:d7:3e:58:dc: 1b:01:0a:7a:55:81:d9:a4:f2:ea:b4:b6:03:2b:f6:f0:f7:c0: 1e:1e:db:f5:8f:26:a4:d4:86:ae:a2:3d:ce:9a:51:12:d0:3f: 3d:20:c1:f0:6d:38:7d:05:40:3b:1a:f2:95:b1:3f:7b:59:06: 89:e6:b5:44:58:95:22:e6:25:f0:de:84:8a:e4:3b:84:b6:93: bc:9e:01:70 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE7UMeCXhCP4EEbac0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNlOTVjYjItMzk4Zi00NTc0LWJhZTAtNTIyYjc0ZTAz ZjcxMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZGVkZGRhMmUtZTYxYi00OGUxLWE1MDctZjM5YTFmMTViOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmHyscqcnvs6SgguK4WEh33VPTwVJXihl0Gp NldVhQy+QtuAN9rpNVcXo1oPoCrq76K+SeKKsqsTp5eeU7XpJzhRVHJRS5MbL/kS A+EyRZtm3PnYPVqam/sxkMNP+xwoE5yvDoy5XZ+l+JS4fgcn6Swcws7tSZ7zUm7N H58w67Wd6EDtxjDmNgcaeIuFm2/Hjsvzba+oa7uen7NR5oi6m8nlzgMayBzaZDJq t7+5N8s700qeCEL1uNG3be1fDfVQLcEtz5hFvem+ODtTMT9x3wtUlpZAe22OgvO7 SG6FbAlWuUSc1VjWVxTg8BR1tukLrRataBtwKRYMbKlVlj3dnQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFClsl2rpP8+i96RIX17DmkpjbDDuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5 NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJiNzRlMDNmNzEvZjI4NWQ5NWEtYjc4My0z NDAwLThkYjgtOGIzMGM5NjhmN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmNlOTVjYjItMzk4Zi00NTc0LWJh ZTAtNTIyYjc0ZTAzZjcxLzZjZTk1Y2IyLTM5OGYtNDU3NC1iYWUwLTUyMmI3NGUw M2Y3MS5jcmwwHwYDVR0jBBgwFoAUzKkX+OZFOjFthwb20W42PmyEf7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82Y2U5NWNiMi0zOThmLTQ1NzQtYmFlMC01MjJi NzRlMDNmNzEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCzA/cAwQD 0FZ4MA0EAgACMAcDBQAmBjhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI7GcQIavx6Ll2w/GE+6FhYVjWn6 a7kjDC357YrnLqMvKd3ZQSofeSg5v3ezMFu98NgLwZESuUC077ZcElKQ5w1ndVZT cR1g1oY4CzGQf7k4H4irkHbOIBwuYlBUsGzKhHvtECpGQYGECcEErNkTCnAa1tP5 Vl6fJf5HnmcZy6z0BS3n6LnB/Jc2Pp4BGBNgci0PooFRnMIyznATh2l9b/th3zmC GyYrWSrnhsy72/Vt1z5Y3BsBCnpVgdmk8uq0tgMr9vD3wB4e2/WPJqTUhq6iPc6a URLQPz0gwfBtOH0FQDsa8pWxP3tZBonmtURYlSLmJfDehIrkO4S2k7yeAXA= -----END CERTIFICATE-----Generated at Sat Sep 5 08:53:12 2026 by rpki-client