$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/3649bbf8-d422-3179-9dc2-6f5d75eb0d5d.roa File: 3649bbf8-d422-3179-9dc2-6f5d75eb0d5d.roa (raw, json) Hash identifier: g9ifnJHRDzZfjI0dCYRLg/wlEvPaI1kFYvtwP7bNQPI= Subject key identifier: 15:AA:BD:4F:DC:0C:80:A0:17:81:2C:47:4F:17:33:4C:2F:2D:18:98 Certificate issuer: /CN=d06852c4-a6c0-43d5-ba94-22fab637697a Certificate serial: 010D0C9F4328584F4974D533157156640F7B0380 Authority key identifier: 30:01:74:AA:E6:45:3E:F4:B4:CD:2F:99:D7:6A:DE:37:8D:43:11:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/3649bbf8-d422-3179-9dc2-6f5d75eb0d5d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 206.72.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:d5:33:15:71:56:64:0f:7b:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d06852c4-a6c0-43d5-ba94-22fab637697a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bd774424-fa06-4682-8afd-072dacc06659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:25:a1:93:d4:c3:02:3d:aa:34:68:f6:51:07: 3d:8e:48:f4:e0:57:67:72:55:14:66:9e:a9:28:cd: 4e:5a:e0:b4:fa:85:5e:42:f8:14:b8:2d:a0:df:d7: 0b:fa:3e:e1:95:0c:33:86:a0:ff:62:da:e2:13:29: e2:d5:1a:f8:0c:15:02:89:3b:25:9e:9f:b2:4d:4d: c8:8e:e4:1d:15:f9:f0:d8:15:af:9d:da:2d:b3:29: 97:b7:62:7c:35:06:90:8d:79:0a:24:ce:3d:58:73: a2:7d:4c:aa:f6:5d:9d:6e:43:f4:f4:16:63:83:04: ed:d5:42:a2:f1:03:db:fc:8c:e4:f0:b9:0e:f6:e7: c5:59:ac:f5:e6:7d:e1:0c:43:f8:6e:48:8c:a2:68: cc:89:c8:6c:2f:92:67:f0:ca:9f:17:98:9f:9e:39: 66:84:eb:15:c1:59:ae:e2:02:d0:b8:24:dd:ff:8d: 19:33:6a:d9:88:ac:59:04:3e:0e:e5:b8:aa:61:ce: a7:77:7f:42:b0:bc:95:62:4c:8a:7a:c2:c8:83:29: 76:a5:1c:fa:bb:d1:75:23:71:fe:fc:48:8e:9f:e8: dc:a8:79:0d:1b:14:46:92:0e:06:c6:e4:4f:cf:e2: 12:51:5c:05:a7:2e:ee:79:e9:85:5f:88:9f:dc:2c: 1c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AA:BD:4F:DC:0C:80:A0:17:81:2C:47:4F:17:33:4C:2F:2D:18:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/3649bbf8-d422-3179-9dc2-6f5d75eb0d5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a/d06852c4-a6c0-43d5-ba94-22fab637697a.crl X509v3 Authority Key Identifier: keyid:30:01:74:AA:E6:45:3E:F4:B4:CD:2F:99:D7:6A:DE:37:8D:43:11:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d06852c4-a6c0-43d5-ba94-22fab637697a.cer sbgp-ipAddrBlock: critical IPv4: 206.72.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e7:a7:a8:c1:92:35:a9:88:27:77:a2:66:14:80:54:81:1f: d5:15:da:11:46:f1:bd:fd:9a:95:fc:c1:b8:e2:ac:ca:02:b4: bc:ab:03:be:89:d1:61:56:f0:23:5c:22:97:7a:13:38:b1:78: 11:47:7f:28:a1:9d:39:97:a1:f8:b4:a2:f0:e1:e5:02:2c:ad: 0f:9d:27:94:f5:dc:d0:5e:86:ae:50:77:02:e0:33:14:87:b0: 36:ca:2f:39:c7:66:3d:4d:03:58:84:f7:1f:3f:06:e0:d9:6f: b6:98:cf:d5:d4:d1:a1:35:2d:99:16:d1:70:15:45:12:1c:e7: 74:4c:c2:8b:c3:89:5b:21:0a:ce:88:ed:8e:28:a3:4b:fe:3b: 8c:6a:a0:ac:81:c5:8c:15:f9:18:e9:73:17:da:06:91:d7:9a: 71:6c:22:cc:ed:b5:9f:ed:b1:4a:8d:45:f0:1d:24:37:4f:f2: f7:93:d8:92:30:d4:38:c5:36:9c:85:98:b1:55:f0:60:83:af: bb:c7:86:72:66:2b:28:40:f8:c7:2c:98:2b:42:7e:30:be:ec: ba:66:3b:9d:01:d3:aa:c0:e2:67:98:cf:52:89:07:41:56:ca: 11:af:82:3f:59:57:6e:85:d2:bf:0e:9b:37:d8:73:37:c9:43: 9f:9a:24:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNUzFXFWZA97A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA2ODUyYzQtYTZjMC00M2Q1LWJhOTQtMjJmYWI2Mzc2 OTdhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmQ3NzQ0MjQtZmEwNi00NjgyLThhZmQtMDcyZGFjYzA2NjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSWhk9TDAj2qNGj2UQc9jkj04FdnclUUZp6p KM1OWuC0+oVeQvgUuC2g39cL+j7hlQwzhqD/YtriEyni1Rr4DBUCiTslnp+yTU3I juQdFfnw2BWvndotsymXt2J8NQaQjXkKJM49WHOifUyq9l2dbkP09BZjgwTt1UKi 8QPb/Izk8LkO9ufFWaz15n3hDEP4bkiMomjMichsL5Jn8MqfF5ifnjlmhOsVwVmu 4gLQuCTd/40ZM2rZiKxZBD4O5biqYc6nd39CsLyVYkyKesLIgyl2pRz6u9F1I3H+ /EiOn+jcqHkNGxRGkg4GxuRPz+ISUVwFpy7ueemFX4if3CwcDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWqvU/cDICgF4EsR08XM0wvLRiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMDY4 NTJjNC1hNmMwLTQzZDUtYmE5NC0yMmZhYjYzNzY5N2EvMzY0OWJiZjgtZDQyMi0z MTc5LTlkYzItNmY1ZDc1ZWIwZDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDA2ODUyYzQtYTZjMC00M2Q1LWJh OTQtMjJmYWI2Mzc2OTdhL2QwNjg1MmM0LWE2YzAtNDNkNS1iYTk0LTIyZmFiNjM3 Njk3YS5jcmwwHwYDVR0jBBgwFoAUMAF0quZFPvS0zS+Z12reN41DEdAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMDY4NTJjNC1hNmMwLTQzZDUtYmE5NC0yMmZh YjYzNzY5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzkjcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDnp6jBkjWpiCd3omYUgFSBH9UV2hFG8b39mpX8wbjirMoCtLyrA76J 0WFW8CNcIpd6EzixeBFHfyihnTmXofi0ovDh5QIsrQ+dJ5T13NBehq5QdwLgMxSH sDbKLznHZj1NA1iE9x8/BuDZb7aYz9XU0aE1LZkW0XAVRRIc53RMwovDiVshCs6I 7Y4oo0v+O4xqoKyBxYwV+RjpcxfaBpHXmnFsIszttZ/tsUqNRfAdJDdP8veT2JIw 1DjFNpyFmLFV8GCDr7vHhnJmKyhA+McsmCtCfjC+7LpmO50B06rA4meYz1KJB0FW yhGvgj9ZV26F0r8OmzfYczfJQ5+aJPw= -----END CERTIFICATE-----Generated at Sun Oct 25 09:23:25 2026 by rpki-client