$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa File: 0c0b966f-cc08-36fa-8094-773d54a45b9d.roa (raw, json) Hash identifier: 7rjxV0dkd607cQOOKtY2pkMv01i79aXQexJ7wiRgmts= Subject key identifier: 65:06:28:F6:52:9F:F9:09:4B:67:DA:98:A7:40:46:66:B1:2F:14:E2 Certificate issuer: /CN=6827a74b-021f-4aa4-a558-67d2d6c22fe9 Certificate serial: 010D0C9F4328584F02421E35512CF60A2F09CCC0 Authority key identifier: C1:DB:0E:88:F2:C5:17:32:F0:52:F7:C0:4E:43:82:BA:B4:44:56:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 396982 IP address blocks: 209.209.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:1e:35:51:2c:f6:0a:2f:09:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6827a74b-021f-4aa4-a558-67d2d6c22fe9 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=072bc09e-3736-4b7e-9d8b-02aa8e0a1af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:ea:72:cb:ac:02:ce:4a:f1:60:22:8b:c4: 90:07:ac:5b:5c:23:28:4a:2b:09:64:1e:60:c6:30: f4:34:e8:c5:ab:fc:5b:40:3d:3f:11:92:5f:d3:4d: 84:9a:50:04:f2:66:26:9a:8d:63:e2:ee:7c:14:95: 88:59:b8:d0:3b:19:ca:b0:7a:f0:47:b2:59:4e:8f: 4b:5d:52:6a:77:42:f8:b0:4e:87:cb:10:3e:5d:da: 76:e9:e8:14:90:fb:25:a8:b1:46:f8:65:ac:6a:a8: 90:06:87:d3:95:ab:e8:63:3f:34:1c:8c:d2:99:c1: ee:61:75:03:52:c0:d7:b9:78:9d:9c:2f:47:9b:cd: 86:18:50:cd:cc:74:5a:37:6f:24:38:0c:6a:21:e4: 5a:a4:12:97:87:28:58:dc:a3:4c:fc:62:c8:0d:f9: 03:0c:b7:3b:d6:6e:7d:c0:a6:22:c6:e6:ff:e0:db: 27:1e:6a:a7:03:1c:83:c4:60:f1:06:0b:7f:61:db: 1f:05:38:b2:8c:70:8b:a9:39:17:30:69:2b:a3:00: 4f:96:00:ad:14:66:c3:0e:99:63:17:0b:3a:fb:42: 06:53:08:61:42:51:6f:53:1c:94:c5:2a:4f:95:10: 22:6e:b1:2c:94:a2:f4:c0:f4:d6:00:92:05:12:52: 2f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:06:28:F6:52:9F:F9:09:4B:67:DA:98:A7:40:46:66:B1:2F:14:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/0c0b966f-cc08-36fa-8094-773d54a45b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9/6827a74b-021f-4aa4-a558-67d2d6c22fe9.crl X509v3 Authority Key Identifier: keyid:C1:DB:0E:88:F2:C5:17:32:F0:52:F7:C0:4E:43:82:BA:B4:44:56:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6827a74b-021f-4aa4-a558-67d2d6c22fe9.cer sbgp-ipAddrBlock: critical IPv4: 209.209.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e5:00:d1:97:4a:5b:f5:93:97:a7:9c:9f:82:3f:6e:07:40: 3a:03:6c:31:34:93:d2:92:96:50:27:d8:f9:bd:57:f2:57:b2: d3:a2:0d:48:6f:aa:18:5b:85:93:74:86:75:46:b1:89:07:7c: 5a:f0:db:2f:28:e8:b4:6f:85:16:00:f6:f7:89:77:1a:7c:a1: d9:99:3e:e1:4d:ce:85:9c:65:ff:0c:f6:33:1d:65:26:16:b7: 11:30:85:d9:98:08:9f:bd:be:f2:7d:d5:79:02:6f:da:5e:98: 85:84:87:68:f6:65:43:79:5b:4f:10:04:f6:95:9c:1d:36:41: 88:aa:bb:a5:ee:d6:64:15:ce:78:2b:5c:4f:6e:d3:08:6b:f0: 6b:00:75:f3:30:b5:9c:ea:88:0b:a1:ac:9b:e7:51:49:3f:74: 1c:37:d1:31:d1:08:aa:ee:a8:cf:e8:c6:95:be:79:14:9c:40: ab:0e:bd:e2:38:7c:8b:54:7f:cd:a0:15:a7:6c:99:bf:ad:1a: 81:d7:f6:9a:8e:da:e7:3b:48:c3:b1:47:aa:21:70:36:be:93: ce:f6:3b:e8:0e:44:24:04:a5:a8:3d:17:b9:80:d0:43:42:6f: d1:d5:36:87:3b:3e:5e:8b:86:5c:97:06:fb:69:1b:35:d7:37: ea:0b:60:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQh41USz2Ci8JzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjgyN2E3NGItMDIxZi00YWE0LWE1NTgtNjdkMmQ2YzIy ZmU5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MDcyYmMwOWUtMzczNi00YjdlLTlkOGItMDJhYThlMGExYWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/DqcsusAs5K8WAii8SQB6xbXCMoSisJZB5g xjD0NOjFq/xbQD0/EZJf002EmlAE8mYmmo1j4u58FJWIWbjQOxnKsHrwR7JZTo9L XVJqd0L4sE6HyxA+Xdp26egUkPslqLFG+GWsaqiQBofTlavoYz80HIzSmcHuYXUD UsDXuXidnC9Hm82GGFDNzHRaN28kOAxqIeRapBKXhyhY3KNM/GLIDfkDDLc71m59 wKYixub/4NsnHmqnAxyDxGDxBgt/YdsfBTiyjHCLqTkXMGkrowBPlgCtFGbDDplj Fws6+0IGUwhhQlFvUxyUxSpPlRAibrEslKL0wPTWAJIFElIvPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUGKPZSn/kJS2famKdARmaxLxTiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82ODI3 YTc0Yi0wMjFmLTRhYTQtYTU1OC02N2QyZDZjMjJmZTkvMGMwYjk2NmYtY2MwOC0z NmZhLTgwOTQtNzczZDU0YTQ1YjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjgyN2E3NGItMDIxZi00YWE0LWE1 NTgtNjdkMmQ2YzIyZmU5LzY4MjdhNzRiLTAyMWYtNGFhNC1hNTU4LTY3ZDJkNmMy MmZlOS5jcmwwHwYDVR0jBBgwFoAUwdsOiPLFFzLwUvfATkOCurREVpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82ODI3YTc0Yi0wMjFmLTRhYTQtYTU1OC02N2Qy ZDZjMjJmZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnlANGXSlv1k5ennJ+CP24HQDoDbDE0k9KSllAn2Pm9V/JXstOiDUhv qhhbhZN0hnVGsYkHfFrw2y8o6LRvhRYA9veJdxp8odmZPuFNzoWcZf8M9jMdZSYW txEwhdmYCJ+9vvJ91XkCb9pemIWEh2j2ZUN5W08QBPaVnB02QYiqu6Xu1mQVzngr XE9u0whr8GsAdfMwtZzqiAuhrJvnUUk/dBw30THRCKruqM/oxpW+eRScQKsOveI4 fItUf82gFadsmb+tGoHX9pqO2uc7SMOxR6ohcDa+k872O+gORCQEpag9F7mA0ENC b9HVNoc7Pl6LhlyXBvtpGzXXN+oLYLM= -----END CERTIFICATE-----Generated at Sat Sep 26 09:19:57 2026 by rpki-client