$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/6290e7da-30f8-3239-8853-239e5420675a.roa File: 6290e7da-30f8-3239-8853-239e5420675a.roa (raw, json) Hash identifier: 8j1DxpfQFuGT9oay8CrhIDLZ4bltlZQsibLH2nUulCU= Subject key identifier: 57:F1:FC:71:3A:93:91:42:00:B2:40:DD:1E:1A:B4:19:0F:98:09:33 Certificate issuer: /CN=d6a09d39-891c-447e-84f7-e3f10a608451 Certificate serial: 010D0C9F4328584EABB6EDC3DA00E5057D6A2580 Authority key identifier: 83:28:D5:41:12:A2:6F:A2:CA:EA:7C:6D:6B:B1:48:96:D0:A5:36:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/6290e7da-30f8-3239-8853-239e5420675a.roa Signing time: Thu 30 Jul 2026 13:00:12 +0000 ROA not before: Thu 30 Jul 2026 13:00:12 +0000 ROA not after: Wed 28 Oct 2026 13:00:12 +0000 asID: 25687 IP address blocks: 199.244.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/d6a09d39-891c-447e-84f7-e3f10a608451.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/d6a09d39-891c-447e-84f7-e3f10a608451.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ab:b6:ed:c3:da:00:e5:05:7d:6a:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6a09d39-891c-447e-84f7-e3f10a608451 Validity Not Before: Jul 30 13:00:12 2026 GMT Not After : Oct 28 13:00:12 2026 GMT Subject: CN=6f9a0d33-e5dc-4cdb-b5cb-83f465ce5bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:0f:71:e9:43:85:dd:73:b8:83:f8:7a:23: 9a:2b:17:c5:25:cd:5b:56:55:d2:0e:ed:9c:97:fd: d3:cd:6d:44:1d:eb:5b:66:fd:5f:60:c2:b5:d9:38: 83:67:02:f3:00:c4:92:33:3d:68:9e:4d:a5:30:7b: bf:04:44:f0:22:91:ad:23:6e:e1:19:8b:47:e8:35: ae:fe:61:a7:5d:3e:fd:29:64:21:9e:9f:02:0c:6c: 4b:a4:f7:f7:69:da:ed:df:39:b9:32:ac:1a:71:9b: da:53:c6:e6:80:8c:66:10:0d:5a:5d:47:98:56:9e: f1:9d:4b:55:63:cb:5d:49:f6:a4:3e:57:a8:5b:f4: 1f:11:c8:11:61:d0:3e:d3:4f:45:c8:24:f2:5b:26: 3d:df:20:e4:e2:6b:73:b3:3a:fd:e5:ce:e2:b4:a3: d3:5e:05:24:81:f6:68:89:a2:65:c8:58:3f:f7:8e: 4e:6a:2e:b1:4b:99:3b:ac:fa:36:a2:39:a6:4c:bc: 41:51:37:1b:11:a8:15:d6:be:e1:93:f8:dc:6b:c4: f2:00:9f:af:bf:8b:66:4c:74:36:ce:c6:e3:c6:59: e0:be:9b:84:5c:7b:f7:fc:03:bb:96:0d:f3:ec:dc: 48:56:3e:39:4f:e5:f4:2a:50:ba:c0:7e:ad:80:e2: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F1:FC:71:3A:93:91:42:00:B2:40:DD:1E:1A:B4:19:0F:98:09:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/6290e7da-30f8-3239-8853-239e5420675a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/d6a09d39-891c-447e-84f7-e3f10a608451.crl X509v3 Authority Key Identifier: keyid:83:28:D5:41:12:A2:6F:A2:CA:EA:7C:6D:6B:B1:48:96:D0:A5:36:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451.cer sbgp-ipAddrBlock: critical IPv4: 199.244.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:b3:e1:d6:a5:86:82:51:33:b9:46:ac:2e:32:9b:39:9f:07: e9:8a:ba:c2:7f:c8:ab:b8:a7:32:eb:a1:90:b5:c6:cc:dd:c0: 5f:7a:83:14:17:7f:e1:09:62:4e:92:0f:9a:8f:01:71:0d:8b: 72:18:43:91:a5:19:ea:5e:8c:ed:1a:65:0c:e2:5c:37:d6:34: 9b:51:c0:3b:7e:51:c5:19:ae:5f:68:3c:49:66:20:1e:36:e0: 56:eb:78:56:f7:aa:d0:e9:ed:e2:b2:e8:c6:44:38:0a:e3:16: 45:01:12:13:64:81:ff:ae:1e:7b:91:c2:df:b2:59:db:e3:f1: 75:d1:9c:1f:d2:6f:f4:9c:b6:7a:48:3d:0f:d9:62:c6:25:99: 51:bc:31:de:1a:07:63:db:6a:65:2a:32:a1:4b:f1:02:cf:5e: fc:d6:42:56:5b:60:9d:10:a1:fa:5d:c2:5c:d0:a6:9c:66:dd: 42:65:ad:b7:d1:f3:c0:ef:a8:cf:1f:c1:e6:79:be:21:35:91: f3:f9:18:01:a8:f0:50:cb:b6:37:c2:40:23:44:9b:8c:4f:a1: 10:4f:80:46:a6:8b:40:e6:ae:58:24:48:e6:d1:6e:17:46:b6: ea:a2:2e:f5:4a:29:8b:e3:ee:25:ba:59:32:77:ac:a0:0e:5f: b7:c4:5e:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6rtu3D2gDlBX1qJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZhMDlkMzktODkxYy00NDdlLTg0ZjctZTNmMTBhNjA4 NDUxMB4XDTI2MDczMDEzMDAxMloXDTI2MTAyODEzMDAxMlowLzEtMCsGA1UEAxMk NmY5YTBkMzMtZTVkYy00Y2RiLWI1Y2ItODNmNDY1Y2U1YmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c0PcelDhd1zuIP4eiOaKxfFJc1bVlXSDu2c l/3TzW1EHetbZv1fYMK12TiDZwLzAMSSMz1onk2lMHu/BETwIpGtI27hGYtH6DWu /mGnXT79KWQhnp8CDGxLpPf3adrt3zm5MqwacZvaU8bmgIxmEA1aXUeYVp7xnUtV Y8tdSfakPleoW/QfEcgRYdA+009FyCTyWyY93yDk4mtzszr95c7itKPTXgUkgfZo iaJlyFg/945Oai6xS5k7rPo2ojmmTLxBUTcbEagV1r7hk/jca8TyAJ+vv4tmTHQ2 zsbjxlngvpuEXHv3/AO7lg3z7NxIVj45T+X0KlC6wH6tgOJZcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfx/HE6k5FCALJA3R4atBkPmAkzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNmEw OWQzOS04OTFjLTQ0N2UtODRmNy1lM2YxMGE2MDg0NTEvNjI5MGU3ZGEtMzBmOC0z MjM5LTg4NTMtMjM5ZTU0MjA2NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDZhMDlkMzktODkxYy00NDdlLTg0 ZjctZTNmMTBhNjA4NDUxL2Q2YTA5ZDM5LTg5MWMtNDQ3ZS04NGY3LWUzZjEwYTYw ODQ1MS5jcmwwHwYDVR0jBBgwFoAUgyjVQRKib6LK6nxta7FIltClNqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNmEwOWQzOS04OTFjLTQ0N2UtODRmNy1lM2Yx MGE2MDg0NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/RVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiz4dalhoJRM7lGrC4ymzmfB+mKusJ/yKu4pzLroZC1xszdwF96gxQX f+EJYk6SD5qPAXENi3IYQ5GlGepejO0aZQziXDfWNJtRwDt+UcUZrl9oPElmIB42 4FbreFb3qtDp7eKy6MZEOArjFkUBEhNkgf+uHnuRwt+yWdvj8XXRnB/Sb/SctnpI PQ/ZYsYlmVG8Md4aB2PbamUqMqFL8QLPXvzWQlZbYJ0QofpdwlzQppxm3UJlrbfR 88DvqM8fweZ5viE1kfP5GAGo8FDLtjfCQCNEm4xPoRBPgEami0DmrlgkSObRbhdG tuqiLvVKKYvj7iW6WTJ3rKAOX7fEXk4= -----END CERTIFICATE-----Generated at Mon Aug 31 10:37:49 2026 by rpki-client