$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/628c5d61-8309-334d-aade-3672888d9fa7.roa File: 628c5d61-8309-334d-aade-3672888d9fa7.roa (raw, json) Hash identifier: PQ15nZuRZb7saolww7ljX0WBb1c7nCczPst/DOTREjE= Subject key identifier: E8:90:ED:08:11:05:7D:34:A6:57:EE:59:A3:3E:04:E1:DE:86:5C:B8 Certificate issuer: /CN=6458e920-a559-49b5-bb6e-4c2bb89943a3 Certificate serial: 010D0C9F4328584F498874ED2E2781A2B6B21C80 Authority key identifier: D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/628c5d61-8309-334d-aade-3672888d9fa7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 185.224.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:74:ed:2e:27:81:a2:b6:b2:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6458e920-a559-49b5-bb6e-4c2bb89943a3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=06ece281-a1d9-4a51-a0b0-a3d8e5e143b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:33:06:1a:44:96:08:65:81:ab:91:e3:28:a5: df:30:f7:16:32:36:80:5d:61:29:d3:58:d9:d4:3d: 33:37:99:e0:8c:9a:d3:49:21:89:18:0b:dd:df:63: 1c:83:3f:2e:d0:e8:82:e9:5a:bb:ed:86:71:88:d0: 85:81:55:52:91:3a:fb:04:74:37:98:e2:3c:82:54: 41:df:3b:f9:eb:65:11:11:fa:dc:33:b0:f2:04:72: 19:39:cc:d3:42:cd:d7:5f:a2:54:07:69:73:20:0b: 17:96:08:ff:9a:a1:a2:d3:d8:f2:7a:5a:76:de:81: 1d:69:63:93:69:52:c7:5c:10:98:21:ce:19:4a:d6: 29:b3:d6:90:10:c3:e6:c2:ef:94:39:b9:01:1c:c8: f4:2f:cc:81:0e:4e:34:60:87:fc:e7:f8:eb:5d:36: 24:03:56:6b:2a:97:84:e1:5e:a2:f3:12:2b:2e:fc: 25:56:a1:87:42:52:b2:59:c4:67:b4:8f:35:72:11: 2d:72:2f:2f:c4:ba:ff:2d:6d:4e:33:b0:e3:dc:ac: 80:27:18:6a:6d:fa:c6:94:11:cd:bc:df:91:d8:fe: b3:89:df:7a:4f:93:c2:92:81:76:be:ba:75:e0:2e: 60:1f:09:20:7e:11:f1:e2:5d:da:03:4d:54:cd:63: aa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:90:ED:08:11:05:7D:34:A6:57:EE:59:A3:3E:04:E1:DE:86:5C:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/628c5d61-8309-334d-aade-3672888d9fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3/6458e920-a559-49b5-bb6e-4c2bb89943a3.crl X509v3 Authority Key Identifier: keyid:D7:92:C4:A9:8A:71:8A:AA:4E:6C:5B:F2:81:C8:62:4B:11:DE:04:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6458e920-a559-49b5-bb6e-4c2bb89943a3.cer sbgp-ipAddrBlock: critical IPv4: 185.224.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:63:76:c7:b8:7d:6f:6b:e3:68:0a:0d:ff:d5:67:27:47:1a: 95:11:b5:6c:07:ad:b0:b3:c5:14:b6:14:8e:57:1b:7e:29:0e: 77:77:12:81:f5:a5:bd:01:7d:75:d2:94:e1:28:fe:fe:62:74: eb:66:b6:6b:ce:00:23:49:27:6c:b9:bb:ca:3b:fc:5e:1b:d1: ca:af:e9:f6:24:eb:cb:92:55:83:2d:bb:26:a5:20:a0:00:1a: 77:8a:08:55:da:ae:11:3b:72:66:d3:ab:1d:90:23:e3:53:44: 3c:56:3f:a0:b4:1d:48:81:d2:95:59:18:11:c4:a9:28:9a:2a: e1:a7:e1:bf:06:ce:bc:30:95:82:a7:93:2c:4b:b9:c1:20:97: 50:ac:1e:cd:d6:df:50:95:96:a7:2f:03:4e:6f:ff:47:22:a0: 14:78:a4:14:b7:35:5b:20:19:72:07:3d:d8:9b:21:36:6e:ca: 86:12:c1:68:28:cf:ea:9a:d1:d0:ff:e7:94:db:40:04:dc:7a: 1b:65:4a:05:70:ed:a8:b9:cc:d2:b5:ba:57:7c:32:c1:d8:77: 7d:8e:20:f1:89:0c:e9:23:08:4b:f3:33:cc:e1:aa:00:f3:51: 8a:d0:eb:b6:5f:b1:70:39:f3:a0:8b:92:16:77:0b:78:67:3c: 18:a6:ef:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiHTtLieBorayHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ1OGU5MjAtYTU1OS00OWI1LWJiNmUtNGMyYmI4OTk0 M2EzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDZlY2UyODEtYTFkOS00YTUxLWEwYjAtYTNkOGU1ZTE0M2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjMGGkSWCGWBq5HjKKXfMPcWMjaAXWEp01jZ 1D0zN5ngjJrTSSGJGAvd32Mcgz8u0OiC6Vq77YZxiNCFgVVSkTr7BHQ3mOI8glRB 3zv562UREfrcM7DyBHIZOczTQs3XX6JUB2lzIAsXlgj/mqGi09jyelp23oEdaWOT aVLHXBCYIc4ZStYps9aQEMPmwu+UObkBHMj0L8yBDk40YIf85/jrXTYkA1ZrKpeE 4V6i8xIrLvwlVqGHQlKyWcRntI81chEtci8vxLr/LW1OM7Dj3KyAJxhqbfrGlBHN vN+R2P6zid96T5PCkoF2vrp14C5gHwkgfhHx4l3aA01UzWOq2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiQ7QgRBX00plfuWaM+BOHehly4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4 ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJiYjg5OTQzYTMvNjI4YzVkNjEtODMwOS0z MzRkLWFhZGUtMzY3Mjg4OGQ5ZmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjQ1OGU5MjAtYTU1OS00OWI1LWJi NmUtNGMyYmI4OTk0M2EzLzY0NThlOTIwLWE1NTktNDliNS1iYjZlLTRjMmJiODk5 NDNhMy5jcmwwHwYDVR0jBBgwFoAU15LEqYpxiqpObFvygchiSxHeBD4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NDU4ZTkyMC1hNTU5LTQ5YjUtYmI2ZS00YzJi Yjg5OTQzYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBueBCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJjdse4fW9r42gKDf/VZydHGpURtWwHrbCzxRS2FI5XG34pDnd3EoH1 pb0BfXXSlOEo/v5idOtmtmvOACNJJ2y5u8o7/F4b0cqv6fYk68uSVYMtuyalIKAA GneKCFXarhE7cmbTqx2QI+NTRDxWP6C0HUiB0pVZGBHEqSiaKuGn4b8GzrwwlYKn kyxLucEgl1CsHs3W31CVlqcvA05v/0cioBR4pBS3NVsgGXIHPdibITZuyoYSwWgo z+qa0dD/55TbQATcehtlSgVw7ai5zNK1uld8MsHYd32OIPGJDOkjCEvzM8zhqgDz UYrQ67ZfsXA586CLkhZ3C3hnPBim7yU= -----END CERTIFICATE-----Generated at Thu Oct 8 07:20:32 2026 by rpki-client