$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/4e59c20b-66ba-3899-be6e-00a615fb83f7.roa File: 4e59c20b-66ba-3899-be6e-00a615fb83f7.roa (raw, json) Hash identifier: BVC8gNl+RjFvgP5nBfSZg1kdaKyMyKLFQGsGcBxa4Y8= Subject key identifier: 2B:96:EF:15:B4:11:78:4B:08:70:ED:F6:70:74:68:F2:FB:C8:E6:5E Certificate issuer: /CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d Certificate serial: 010D0C9F4328584F4989632F22461BBC5698AE20 Authority key identifier: 28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/4e59c20b-66ba-3899-be6e-00a615fb83f7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22295 IP address blocks: 208.84.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:63:2f:22:46:1b:bc:56:98:ae:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=22d6caec-bb7e-49a8-9e5d-bcc4c4167c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:70:02:54:e1:89:ac:1b:ee:95:45:2e:c5:37: 9a:22:0f:a1:40:4e:f1:6c:ff:4a:af:9f:19:d2:54: 2f:a7:59:05:94:03:5d:44:9a:e0:6a:fe:3f:80:d2: 6c:90:be:6e:04:b6:9a:6f:03:42:ad:b1:89:85:78: d1:7d:bb:38:ff:4f:f9:b0:e0:57:1c:dc:b5:54:27: 13:d2:f5:81:c7:33:75:ae:25:d3:0c:bf:68:e1:8f: b7:fc:6d:3b:56:63:b2:08:1d:cd:7c:14:54:3a:93: 03:55:92:4f:f0:d4:d8:1b:d3:d2:9b:a1:db:ab:d5: c7:a3:09:66:fe:8a:4f:6f:5d:df:fb:d2:0e:1f:22: 96:57:8c:ae:8d:99:b3:76:fe:59:f5:00:f0:0a:70: 82:85:ea:b7:52:ee:f1:ce:ac:2c:82:89:cd:a8:76: 2a:de:ca:b9:1a:3c:4c:bf:42:31:e8:3c:fa:f4:0c: d4:e4:a0:7e:66:df:07:b7:65:5a:0e:d5:fc:b1:23: 39:8e:14:fd:28:d6:6c:af:53:81:1b:b0:63:96:9e: d2:b8:0c:11:76:71:12:bb:5e:08:49:6c:43:c0:5c: 88:a7:f5:18:c6:f7:56:1e:13:0e:ad:1d:2a:14:4b: 48:fa:2e:fd:89:6f:8a:a2:ad:5f:ac:b7:4f:cf:2c: cf:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:96:EF:15:B4:11:78:4B:08:70:ED:F6:70:74:68:F2:FB:C8:E6:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/4e59c20b-66ba-3899-be6e-00a615fb83f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl X509v3 Authority Key Identifier: keyid:28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer sbgp-ipAddrBlock: critical IPv4: 208.84.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:28:90:fe:64:1f:c1:f3:99:d3:5e:7a:86:4c:97:d8:48:df: 6c:d6:61:e0:30:88:89:ee:15:9e:fe:2f:e1:cb:df:d7:6d:e3: f4:37:17:c5:2e:17:e5:46:4b:64:c6:63:95:08:b2:8d:83:c6: 15:ab:4b:d3:e8:93:22:31:34:24:e7:8e:a0:70:46:72:0f:7e: 3d:ce:6e:39:2d:c0:ee:25:ce:80:5a:f9:c2:5e:84:85:9c:f0: 69:eb:5c:3c:cd:0c:91:e1:c3:a5:fb:c3:b7:20:7a:9f:e1:76: 5f:c3:c6:ad:f5:96:5e:4f:7e:cc:ba:06:06:66:86:35:41:a6: 8c:8e:1a:61:03:f5:1d:50:42:06:ef:19:a6:1b:e9:47:f6:dd: 11:e9:74:ea:4b:85:00:7a:ee:2b:b8:1a:3d:f7:99:aa:a9:fd: 78:90:7e:c5:b0:dc:fb:09:fd:6f:2a:8e:af:41:58:71:b8:d6: 55:8d:93:a1:33:22:f6:7e:75:de:6b:29:17:a1:80:ea:fd:11: 89:43:0d:a5:a2:26:97:7b:61:a5:85:8e:2e:72:bc:99:07:b8: d5:ee:28:94:07:54:62:e1:ea:3f:77:77:60:7a:c6:ad:8f:b1: de:19:94:1d:86:ce:57:69:10:3c:20:8c:1e:13:98:53:ae:4b: a2:f4:91:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiWMvIkYbvFaYriAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzN2JmNjgtNjdlNy00ZTY3LWEwOTMtYzg4YTNkN2Zl MDRkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjJkNmNhZWMtYmI3ZS00OWE4LTllNWQtYmNjNGM0MTY3YzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnACVOGJrBvulUUuxTeaIg+hQE7xbP9Kr58Z 0lQvp1kFlANdRJrgav4/gNJskL5uBLaabwNCrbGJhXjRfbs4/0/5sOBXHNy1VCcT 0vWBxzN1riXTDL9o4Y+3/G07VmOyCB3NfBRUOpMDVZJP8NTYG9PSm6Hbq9XHowlm /opPb13f+9IOHyKWV4yujZmzdv5Z9QDwCnCCheq3Uu7xzqwsgonNqHYq3sq5GjxM v0Ix6Dz69AzU5KB+Zt8Ht2VaDtX8sSM5jhT9KNZsr1OBG7Bjlp7SuAwRdnESu14I SWxDwFyIp/UYxvdWHhMOrR0qFEtI+i79iW+Koq1frLdPzyzPsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuW7xW0EXhLCHDt9nB0aPL7yOZeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ZjM3 YmY2OC02N2U3LTRlNjctYTA5My1jODhhM2Q3ZmUwNGQvNGU1OWMyMGItNjZiYS0z ODk5LWJlNmUtMDBhNjE1ZmI4M2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmYzN2JmNjgtNjdlNy00ZTY3LWEw OTMtYzg4YTNkN2ZlMDRkLzZmMzdiZjY4LTY3ZTctNGU2Ny1hMDkzLWM4OGEzZDdm ZTA0ZC5jcmwwHwYDVR0jBBgwFoAUKE/PkpbIsL6mmdN/BrN+mjnqi7EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82ZjM3YmY2OC02N2U3LTRlNjctYTA5My1jODhh M2Q3ZmUwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FRlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkokP5kH8HzmdNeeoZMl9hI32zWYeAwiInuFZ7+L+HL39dt4/Q3F8Uu F+VGS2TGY5UIso2DxhWrS9PokyIxNCTnjqBwRnIPfj3ObjktwO4lzoBa+cJehIWc 8GnrXDzNDJHhw6X7w7cgep/hdl/Dxq31ll5Pfsy6BgZmhjVBpoyOGmED9R1QQgbv GaYb6Uf23RHpdOpLhQB67iu4Gj33maqp/XiQfsWw3PsJ/W8qjq9BWHG41lWNk6Ez IvZ+dd5rKRehgOr9EYlDDaWiJpd7YaWFji5yvJkHuNXuKJQHVGLh6j93d2B6xq2P sd4ZlB2GzldpEDwgjB4TmFOuS6L0kVA= -----END CERTIFICATE-----Generated at Mon Sep 28 16:18:07 2026 by rpki-client