$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/2c6e38b3-abb9-39ae-88e0-e5a8a752d208.roa File: 2c6e38b3-abb9-39ae-88e0-e5a8a752d208.roa (raw, json) Hash identifier: oXzEMeVVCBm0Gng3ow68Q6d5Rr1Q2jVTHMQ8bh1K87M= Subject key identifier: 6A:E6:B4:94:F2:5C:48:88:85:CA:BB:1C:90:22:E2:52:A8:94:28:60 Certificate issuer: /CN=2521532d-a0f2-43a5-a2a8-640c423476ff Certificate serial: 010D0C9F4328584F506D40886C95626F62516640 Authority key identifier: 02:D1:ED:CA:38:4C:15:8C:31:28:4B:ED:20:C4:D6:D9:CF:6C:EB:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/2c6e38b3-abb9-39ae-88e0-e5a8a752d208.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 6461 IP address blocks: 167.254.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/2521532d-a0f2-43a5-a2a8-640c423476ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/2521532d-a0f2-43a5-a2a8-640c423476ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:40:88:6c:95:62:6f:62:51:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2521532d-a0f2-43a5-a2a8-640c423476ff Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=539c2cfe-3025-4ba5-a9fc-2620de43ea9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7a:55:6e:a4:94:2a:4a:a3:79:0d:c3:d1:ef: df:fe:1d:c3:b1:c4:31:fc:7e:f4:d0:95:da:a1:31: 8d:b2:eb:73:b8:5b:16:3c:aa:bf:04:da:27:32:b9: fa:bc:6e:78:69:7c:5c:b0:b0:25:9b:8b:67:2c:db: 04:52:09:0f:d4:5a:3b:c9:4f:64:ba:e1:54:3f:c1: 04:b9:32:6d:ea:79:91:5c:71:a7:e0:85:8f:22:97: a2:91:05:23:0c:e8:15:9d:49:f6:4c:a6:30:39:b0: 5a:45:aa:35:72:98:4c:c9:f4:0b:f5:a6:62:0f:9e: 33:5b:e2:d4:1f:e7:02:6b:ca:90:96:3a:64:a0:36: ee:9b:23:f1:a1:3b:4b:0b:ca:85:3d:01:1e:6f:43: 5e:13:ff:7c:37:45:f0:e9:9f:6c:1b:a0:58:24:cc: 0e:31:57:07:99:93:fc:72:e7:bf:b9:d2:5d:94:6f: 90:1c:58:b2:60:1d:3d:79:a1:1b:60:00:7b:c1:23: df:60:43:e3:ea:69:16:bf:3e:b3:16:ee:2d:b7:f9: 24:66:75:a8:4e:06:7e:4d:6e:d2:e0:ca:0d:45:f9: 51:2f:87:f3:06:7d:ed:e9:5b:04:f8:3f:ab:68:ff: c4:f8:e7:2d:cc:e1:83:a5:35:da:3c:72:e4:a3:29: 37:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E6:B4:94:F2:5C:48:88:85:CA:BB:1C:90:22:E2:52:A8:94:28:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/2c6e38b3-abb9-39ae-88e0-e5a8a752d208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/2521532d-a0f2-43a5-a2a8-640c423476ff.crl X509v3 Authority Key Identifier: keyid:02:D1:ED:CA:38:4C:15:8C:31:28:4B:ED:20:C4:D6:D9:CF:6C:EB:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff.cer sbgp-ipAddrBlock: critical IPv4: 167.254.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:67:a8:2d:4c:f6:29:fb:dc:6f:4e:41:e2:7c:d0:a8:79:ae: 29:b0:7d:97:68:0f:32:72:1e:12:c0:c5:c4:cc:62:41:56:20: df:c0:59:37:e1:44:a9:5c:26:42:c3:8b:d6:9a:7c:88:e9:cc: ad:23:be:3d:16:05:a5:68:2c:e2:84:6d:8a:c5:ec:c6:8d:d5: 46:89:e0:ce:da:98:48:3a:77:88:1e:dd:b2:52:cb:23:3a:83: 82:7b:6d:f5:cd:e1:8a:9b:79:ba:30:bb:04:31:dc:34:ed:17: 7e:ee:0e:78:83:8a:f4:7f:5b:05:2d:07:14:a7:05:e0:ad:84: cc:71:bd:e0:6c:0b:b0:48:9f:c9:c5:c0:90:fb:67:30:29:d3: 51:86:bf:67:a5:27:a1:58:62:34:a5:1f:19:73:23:09:1f:78: 56:c3:a4:ac:3d:9b:ff:6e:a1:38:6a:81:91:3c:f0:e2:c0:a0: 83:ec:ce:1b:32:84:b8:38:34:db:27:ad:63:2e:67:94:2e:93: ec:b4:0c:8c:95:32:3d:74:19:a0:67:dd:98:59:ad:f0:b2:f1: 3d:5b:64:36:d8:b7:6e:a3:b3:43:d5:27:96:82:fb:83:56:ef: 72:84:cb:ac:7d:c6:65:bd:50:ef:6a:98:04:bd:65:1c:34:79: ea:36:8a:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUCIbJVib2JRZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUyMTUzMmQtYTBmMi00M2E1LWEyYTgtNjQwYzQyMzQ3 NmZmMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NTM5YzJjZmUtMzAyNS00YmE1LWE5ZmMtMjYyMGRlNDNlYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHpVbqSUKkqjeQ3D0e/f/h3DscQx/H700JXa oTGNsutzuFsWPKq/BNonMrn6vG54aXxcsLAlm4tnLNsEUgkP1Fo7yU9kuuFUP8EE uTJt6nmRXHGn4IWPIpeikQUjDOgVnUn2TKYwObBaRao1cphMyfQL9aZiD54zW+LU H+cCa8qQljpkoDbumyPxoTtLC8qFPQEeb0NeE/98N0Xw6Z9sG6BYJMwOMVcHmZP8 cue/udJdlG+QHFiyYB09eaEbYAB7wSPfYEPj6mkWvz6zFu4tt/kkZnWoTgZ+TW7S 4MoNRflRL4fzBn3t6VsE+D+raP/E+OctzOGDpTXaPHLkoyk31wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrmtJTyXEiIhcq7HJAi4lKolChgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yNTIx NTMyZC1hMGYyLTQzYTUtYTJhOC02NDBjNDIzNDc2ZmYvMmM2ZTM4YjMtYWJiOS0z OWFlLTg4ZTAtZTVhOGE3NTJkMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMjUyMTUzMmQtYTBmMi00M2E1LWEy YTgtNjQwYzQyMzQ3NmZmLzI1MjE1MzJkLWEwZjItNDNhNS1hMmE4LTY0MGM0MjM0 NzZmZi5jcmwwHwYDVR0jBBgwFoAUAtHtyjhMFYwxKEvtIMTW2c9s65gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yNTIxNTMyZC1hMGYyLTQzYTUtYTJhOC02NDBj NDIzNDc2ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/7kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1nqC1M9in73G9OQeJ80Kh5rimwfZdoDzJyHhLAxcTMYkFWIN/AWTfh RKlcJkLDi9aafIjpzK0jvj0WBaVoLOKEbYrF7MaN1UaJ4M7amEg6d4ge3bJSyyM6 g4J7bfXN4YqbebowuwQx3DTtF37uDniDivR/WwUtBxSnBeCthMxxveBsC7BIn8nF wJD7ZzAp01GGv2elJ6FYYjSlHxlzIwkfeFbDpKw9m/9uoThqgZE88OLAoIPszhsy hLg4NNsnrWMuZ5Quk+y0DIyVMj10GaBn3ZhZrfCy8T1bZDbYt26js0PVJ5aC+4NW 73KEy6x9xmW9UO9qmAS9ZRw0eeo2ijI= -----END CERTIFICATE-----Generated at Sat Oct 24 18:53:54 2026 by rpki-client