$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa File: 588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa (raw, json) Hash identifier: lo+Zy1loQWwjf6w8H4W9q1oE2ud2FRtgUnlrbtlcdJY= Subject key identifier: 89:AF:61:8F:85:72:D2:6C:82:25:C1:34:33:CA:17:16:0C:78:CC:F5 Certificate issuer: /CN=99df77a9-4870-495f-bbda-89f8e0ae31d2 Certificate serial: 010D0C9F4328584F49888FAB5FA02122C8E20640 Authority key identifier: 16:8E:FE:48:0C:1B:58:1B:50:C1:6A:BE:E1:DD:D6:B3:9D:EB:97:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13725 IP address blocks: 209.205.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:8f:ab:5f:a0:21:22:c8:e2:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99df77a9-4870-495f-bbda-89f8e0ae31d2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=eb1fb3b1-4f48-457b-94e9-19d635aa3776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d1:74:4e:4a:05:fc:d3:0f:88:4a:21:64:30: 30:5e:2c:3c:7d:96:bd:a4:63:31:58:a6:46:f9:91: d2:05:7f:fe:43:ff:2b:8a:78:54:15:46:94:7f:36: 04:18:0d:70:a4:52:4b:2d:98:43:0f:38:84:09:3e: ae:b4:5e:fe:af:86:9a:2f:2e:41:4c:91:bc:c1:99: 63:dc:d9:27:d8:bc:ff:e3:81:67:a7:52:fb:e0:f1: 87:84:10:de:d1:ea:d8:40:eb:8f:cf:db:90:61:bb: 19:10:e5:5c:4a:30:f4:44:a5:6a:fe:01:46:de:c4: 8d:77:2c:c2:90:f3:b9:18:0c:e3:45:65:cc:7b:0c: e4:74:f0:a7:f8:c8:51:30:62:7c:92:5a:8c:78:f0: 9a:c9:74:6e:96:95:f5:2f:5d:ec:e4:24:3d:9a:c1: 46:81:82:f6:3b:16:4c:d8:23:e0:37:a9:08:83:2b: 64:d9:e4:46:fe:81:87:5d:b9:4e:b6:e5:ee:5e:2c: 6a:87:e3:71:2e:0c:65:4f:63:23:80:89:06:49:ab: 81:77:99:ea:19:01:33:b5:e7:43:f2:dd:bd:a1:be: a1:50:ca:c6:b8:96:fa:b1:82:11:09:10:72:19:5c: 17:7c:b9:3e:ce:2c:10:0d:dc:73:3b:68:b7:5b:11: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AF:61:8F:85:72:D2:6C:82:25:C1:34:33:CA:17:16:0C:78:CC:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/588005ff-7ff3-32e2-9065-8a16c15c6a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2/99df77a9-4870-495f-bbda-89f8e0ae31d2.crl X509v3 Authority Key Identifier: keyid:16:8E:FE:48:0C:1B:58:1B:50:C1:6A:BE:E1:DD:D6:B3:9D:EB:97:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99df77a9-4870-495f-bbda-89f8e0ae31d2.cer sbgp-ipAddrBlock: critical IPv4: 209.205.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:40:8b:54:0e:09:5f:c3:9a:3a:6d:0b:e6:d1:89:a1:d1:80: c8:fa:19:8b:84:c0:10:86:25:c0:19:ed:4e:d1:e0:bb:d9:61: c1:8d:ae:3c:07:0e:f3:d3:df:ac:cd:fa:24:47:fb:9d:d8:e9: f4:9e:14:30:52:cd:32:70:6d:a1:03:d0:9f:d5:9f:3c:6d:6b: 5b:7c:24:0c:2d:39:a8:1a:41:92:06:6c:d1:ed:cd:36:26:a7: 35:21:65:37:40:59:70:c1:2e:f3:5c:4f:9f:bf:21:3d:a5:bf: 40:f1:35:fa:5d:7c:fa:70:62:85:eb:53:e0:e2:df:f9:92:15: 3e:7d:b6:8c:0d:93:1b:66:40:34:9f:96:06:40:c6:a9:09:5a: de:57:47:62:d0:52:7d:ee:55:05:28:23:3d:06:b1:d6:f5:14: 88:96:a1:7c:fb:b0:a9:97:71:95:11:de:d7:e7:95:5a:d8:46: bd:dd:f1:43:df:f5:00:dc:ec:ad:4a:67:bb:8b:b1:9a:0d:ba: 5e:b4:3d:76:22:68:31:5e:ca:70:8f:df:45:70:4f:5f:a9:2e: 3b:86:b5:7b:56:15:53:c0:8a:10:67:95:15:b3:f3:0e:39:8d: 48:a5:00:64:a5:f8:b3:37:3d:a9:d7:4c:72:1e:f2:9b:15:b1: 27:de:88:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiI+rX6AhIsjiBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTlkZjc3YTktNDg3MC00OTVmLWJiZGEtODlmOGUwYWUz MWQyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWIxZmIzYjEtNGY0OC00NTdiLTk0ZTktMTlkNjM1YWEzNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntF0TkoF/NMPiEohZDAwXiw8fZa9pGMxWKZG +ZHSBX/+Q/8rinhUFUaUfzYEGA1wpFJLLZhDDziECT6utF7+r4aaLy5BTJG8wZlj 3Nkn2Lz/44Fnp1L74PGHhBDe0erYQOuPz9uQYbsZEOVcSjD0RKVq/gFG3sSNdyzC kPO5GAzjRWXMewzkdPCn+MhRMGJ8klqMePCayXRulpX1L13s5CQ9msFGgYL2OxZM 2CPgN6kIgytk2eRG/oGHXblOtuXuXixqh+NxLgxlT2MjgIkGSauBd5nqGQEztedD 8t29ob6hUMrGuJb6sYIRCRByGVwXfLk+ziwQDdxzO2i3WxGHcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImvYY+FctJsgiXBNDPKFxYMeMz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OWRm NzdhOS00ODcwLTQ5NWYtYmJkYS04OWY4ZTBhZTMxZDIvNTg4MDA1ZmYtN2ZmMy0z MmUyLTkwNjUtOGExNmMxNWM2YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTlkZjc3YTktNDg3MC00OTVmLWJi ZGEtODlmOGUwYWUzMWQyLzk5ZGY3N2E5LTQ4NzAtNDk1Zi1iYmRhLTg5ZjhlMGFl MzFkMi5jcmwwHwYDVR0jBBgwFoAUFo7+SAwbWBtQwWq+4d3Ws53rl30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OWRmNzdhOS00ODcwLTQ5NWYtYmJkYS04OWY4 ZTBhZTMxZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0c3uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpAi1QOCV/DmjptC+bRiaHRgMj6GYuEwBCGJcAZ7U7R4LvZYcGNrjwH DvPT36zN+iRH+53Y6fSeFDBSzTJwbaED0J/Vnzxta1t8JAwtOagaQZIGbNHtzTYm pzUhZTdAWXDBLvNcT5+/IT2lv0DxNfpdfPpwYoXrU+Di3/mSFT59towNkxtmQDSf lgZAxqkJWt5XR2LQUn3uVQUoIz0Gsdb1FIiWoXz7sKmXcZUR3tfnlVrYRr3d8UPf 9QDc7K1KZ7uLsZoNul60PXYiaDFeynCP30VwT1+pLjuGtXtWFVPAihBnlRWz8w45 jUilAGSl+LM3PanXTHIe8psVsSfeiKw= -----END CERTIFICATE-----Generated at Sun Sep 27 10:21:59 2026 by rpki-client