$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/6290e7da-30f8-3239-8853-239e5420675a.roa File: 6290e7da-30f8-3239-8853-239e5420675a.roa (raw, json) Hash identifier: +Yd1Kj8e9tSKdDsB2IBOkCJc5GC/yQ0RXrs/S8lUFlw= Subject key identifier: EB:85:0A:69:5C:40:2D:51:5D:69:2A:4E:B3:EE:6B:50:09:5E:08:72 Certificate issuer: /CN=d6a09d39-891c-447e-84f7-e3f10a608451 Certificate serial: 010D0C9F4328584F4F07EEC99250328C4C30BE40 Authority key identifier: 83:28:D5:41:12:A2:6F:A2:CA:EA:7C:6D:6B:B1:48:96:D0:A5:36:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/6290e7da-30f8-3239-8853-239e5420675a.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 25687 IP address blocks: 199.244.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/d6a09d39-891c-447e-84f7-e3f10a608451.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/d6a09d39-891c-447e-84f7-e3f10a608451.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:07:ee:c9:92:50:32:8c:4c:30:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6a09d39-891c-447e-84f7-e3f10a608451 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=93f11b67-0b07-466a-ac7f-e512c77efaba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:96:1a:4e:85:8b:7a:c4:e3:1c:a7:0e:39:21: 82:9b:ab:04:bd:0a:02:47:2f:0c:d8:b5:1b:ff:5e: 42:a4:2c:5c:7a:e5:7f:46:29:f3:72:66:6c:36:9b: 1f:40:5b:49:22:2c:50:ad:bb:27:e6:7d:6f:e9:d9: df:37:43:36:dd:e6:8c:65:03:8c:76:a9:fa:ea:7c: 76:78:99:40:d4:c8:74:3e:ee:7b:e4:7c:1a:89:60: 89:5b:b0:83:9e:16:73:21:60:e0:e8:a2:2c:44:29: c0:a6:02:e3:c1:fc:0e:91:25:7a:46:0f:5f:48:cd: 45:b8:cb:66:cd:20:56:6e:e8:27:7a:6a:8e:e6:75: 52:a0:15:9f:78:9e:d0:bd:5e:c6:6b:1c:9d:eb:d9: 25:2e:ec:ac:f2:31:cc:ce:54:f9:6d:b8:be:dd:c1: d3:44:97:47:01:78:38:15:52:ca:df:99:14:53:03: 04:f3:fb:a8:97:87:e2:88:33:3d:93:3d:79:32:3c: ad:d2:2e:59:28:c9:cd:bd:11:52:d4:6a:a9:33:ae: db:a4:8a:1d:31:9e:cc:34:ae:ae:4b:24:fc:bf:01: 83:fa:16:bb:6e:27:ff:e6:95:ec:a4:4c:fc:71:b2: 76:35:9c:d2:6a:48:0c:bf:00:96:65:0e:54:64:26: 50:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:85:0A:69:5C:40:2D:51:5D:69:2A:4E:B3:EE:6B:50:09:5E:08:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/6290e7da-30f8-3239-8853-239e5420675a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451/d6a09d39-891c-447e-84f7-e3f10a608451.crl X509v3 Authority Key Identifier: keyid:83:28:D5:41:12:A2:6F:A2:CA:EA:7C:6D:6B:B1:48:96:D0:A5:36:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d6a09d39-891c-447e-84f7-e3f10a608451.cer sbgp-ipAddrBlock: critical IPv4: 199.244.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:81:be:3e:11:04:5a:81:20:54:d1:be:6d:b4:11:9f:92:83: db:fa:19:47:fa:97:41:7c:a1:d4:ac:c2:e6:f5:50:2f:8d:f1: ad:2e:68:c8:a4:cd:c2:37:c2:bf:97:1e:17:eb:ea:5f:da:c4: 07:02:86:7e:16:75:d9:38:6c:d0:41:48:5d:76:25:7d:55:f5: 8b:63:99:ad:0a:75:de:38:91:18:b6:2c:40:81:37:9a:c3:61: 05:70:ff:28:07:c9:21:68:0b:1d:38:a0:50:61:5b:4b:b7:e1: bf:b3:99:d5:5e:8d:12:74:11:11:da:70:8f:8d:12:e9:e4:61: 18:50:51:33:81:e0:54:5f:dc:4b:16:f9:5c:e3:47:f8:ad:82: 88:33:9d:8c:2d:f0:5e:56:69:92:c3:03:fa:43:c1:1c:51:ac: 73:01:0f:74:58:7c:0a:55:5f:e2:c6:43:2f:4c:c1:54:b1:8e: 50:15:52:86:d5:00:a3:07:06:92:0c:be:5c:d8:ac:32:83:b4: 8e:86:1e:44:f9:d3:47:d4:8d:1f:8a:a5:37:23:2a:df:5c:68: a2:5d:d4:01:f1:cf:ed:68:8f:c1:7e:3a:b1:93:a7:08:59:7b: 9c:83:43:9e:66:69:9d:61:74:be:59:ba:ad:cd:c2:10:f9:97: b3:8f:7d:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PB+7JklAyjEwwvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZhMDlkMzktODkxYy00NDdlLTg0ZjctZTNmMTBhNjA4 NDUxMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk OTNmMTFiNjctMGIwNy00NjZhLWFjN2YtZTUxMmM3N2VmYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJYaToWLesTjHKcOOSGCm6sEvQoCRy8M2LUb /15CpCxceuV/RinzcmZsNpsfQFtJIixQrbsn5n1v6dnfN0M23eaMZQOMdqn66nx2 eJlA1Mh0Pu575HwaiWCJW7CDnhZzIWDg6KIsRCnApgLjwfwOkSV6Rg9fSM1FuMtm zSBWbugnemqO5nVSoBWfeJ7QvV7Gaxyd69klLuys8jHMzlT5bbi+3cHTRJdHAXg4 FVLK35kUUwME8/uol4fiiDM9kz15Mjyt0i5ZKMnNvRFS1GqpM67bpIodMZ7MNK6u SyT8vwGD+ha7bif/5pXspEz8cbJ2NZzSakgMvwCWZQ5UZCZQzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuFCmlcQC1RXWkqTrPua1AJXghyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNmEw OWQzOS04OTFjLTQ0N2UtODRmNy1lM2YxMGE2MDg0NTEvNjI5MGU3ZGEtMzBmOC0z MjM5LTg4NTMtMjM5ZTU0MjA2NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDZhMDlkMzktODkxYy00NDdlLTg0 ZjctZTNmMTBhNjA4NDUxL2Q2YTA5ZDM5LTg5MWMtNDQ3ZS04NGY3LWUzZjEwYTYw ODQ1MS5jcmwwHwYDVR0jBBgwFoAUgyjVQRKib6LK6nxta7FIltClNqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kNmEwOWQzOS04OTFjLTQ0N2UtODRmNy1lM2Yx MGE2MDg0NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/RVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyBvj4RBFqBIFTRvm20EZ+Sg9v6GUf6l0F8odSswub1UC+N8a0uaMik zcI3wr+XHhfr6l/axAcChn4Wddk4bNBBSF12JX1V9Ytjma0Kdd44kRi2LECBN5rD YQVw/ygHySFoCx04oFBhW0u34b+zmdVejRJ0ERHacI+NEunkYRhQUTOB4FRf3EsW +VzjR/itgogznYwt8F5WaZLDA/pDwRxRrHMBD3RYfApVX+LGQy9MwVSxjlAVUobV AKMHBpIMvlzYrDKDtI6GHkT500fUjR+KpTcjKt9caKJd1AHxz+1oj8F+OrGTpwhZ e5yDQ55maZ1hdL5Zuq3NwhD5l7OPffA= -----END CERTIFICATE-----Generated at Wed Oct 21 05:05:46 2026 by rpki-client