$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ad2a9b2a-9a8f-3e70-a6cc-83a44ea8c9f1.roa File: ad2a9b2a-9a8f-3e70-a6cc-83a44ea8c9f1.roa (raw, json) Hash identifier: YsAIZI9k3RdHSBPKc3bM4L3KO8WIs3ZrP9a+w9T7UXY= Subject key identifier: 18:A1:FD:80:07:06:8F:52:6A:08:22:EB:26:1C:36:DA:42:71:23:95 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584EED51F5CAF3B68AAB87713980 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ad2a9b2a-9a8f-3e70-a6cc-83a44ea8c9f1.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 63179 IP address blocks: 209.237.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:f5:ca:f3:b6:8a:ab:87:71:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=5af0e016-9b88-41a8-995f-430e0121cf6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:86:90:d3:65:51:88:39:2c:33:e9:2e:20:08: ba:a4:2f:e3:ea:9a:58:c0:5c:df:aa:63:27:9e:e2: e5:e1:ec:ca:59:87:51:43:4f:fe:1a:ba:67:f6:2f: 9b:85:97:45:cc:a9:ca:bc:66:b4:16:7c:5f:65:77: 45:b2:d5:6d:8e:9b:e8:bb:d4:1a:0e:fc:ce:55:4b: 93:b5:f5:c8:e8:4d:05:33:85:74:ce:40:28:8c:19: 8c:c7:13:2d:a8:62:05:2f:20:b6:60:eb:be:56:20: 1b:56:20:b3:0b:4e:c8:50:b6:1e:f3:9f:55:71:93: 4b:c6:3b:19:de:16:56:75:fb:49:e7:eb:e3:ba:48: 70:74:94:e1:4d:99:c3:95:43:37:f0:69:f5:47:ec: 9d:a3:57:6f:48:33:33:d9:19:0b:43:f9:de:bc:1d: 51:05:8a:f8:27:f6:eb:fe:4d:10:4c:c4:03:86:b8: 96:f5:7a:d2:ba:ee:64:7a:f5:8b:bc:d9:f4:c9:5d: 06:38:0e:f9:a9:f5:3a:17:0d:e2:15:c6:63:58:b1: f9:89:5a:a5:f7:d9:5a:1e:63:ce:67:a3:91:bb:0c: 9a:36:57:60:d3:40:a2:d8:77:f7:70:91:f1:20:15: a7:64:ce:68:dd:10:12:2a:76:c6:98:23:ac:3e:b4: f1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A1:FD:80:07:06:8F:52:6A:08:22:EB:26:1C:36:DA:42:71:23:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ad2a9b2a-9a8f-3e70-a6cc-83a44ea8c9f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:92:cf:12:5e:4a:98:91:56:2a:5e:47:3b:6c:6f:89:97:02: 4d:a4:a1:11:2e:43:c4:4c:d9:1f:39:b9:35:0a:63:aa:98:a9: df:8a:c5:24:fc:fc:64:fa:31:d0:d9:9e:9a:c2:aa:ad:2f:d5: fa:8d:da:09:34:53:29:48:56:16:69:4f:5c:e6:2f:74:94:1e: c1:d9:b2:28:59:48:46:48:d7:e0:e6:ab:ee:90:56:01:13:53: 2e:38:d7:01:c7:6f:35:20:66:62:2d:56:61:12:97:6e:44:1b: f2:4e:e5:51:47:23:f5:e0:8a:dd:3c:59:a5:fc:95:c9:bb:90: 9d:a3:b3:07:ee:68:ef:85:7b:20:0b:e5:b0:bb:b7:b1:cd:2c: bc:43:d4:54:9e:0f:0b:18:fc:a7:5d:54:3e:f3:e1:47:3d:fa: a5:b6:c5:4f:be:35:1f:d5:43:7f:dc:a9:d3:13:a9:de:69:65: 20:8f:b5:0a:1e:7f:09:30:85:e3:9b:d7:d3:ba:85:3a:bb:fa: f6:8e:c1:b9:a7:01:b9:fc:94:8f:3f:89:d9:93:e6:ef:50:c4: 60:ba:27:a1:37:09:d4:b0:d2:65:46:9f:d0:b4:ae:1f:c1:24: 57:53:41:b6:7e:e4:2e:5c:8b:19:29:1c:ee:21:02:e0:10:c9: 9d:30:c5:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUfXK87aKq4dxOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NWFmMGUwMTYtOWI4OC00MWE4LTk5NWYtNDMwZTAxMjFjZjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYaQ02VRiDksM+kuIAi6pC/j6ppYwFzfqmMn nuLl4ezKWYdRQ0/+Grpn9i+bhZdFzKnKvGa0FnxfZXdFstVtjpvou9QaDvzOVUuT tfXI6E0FM4V0zkAojBmMxxMtqGIFLyC2YOu+ViAbViCzC07IULYe859VcZNLxjsZ 3hZWdftJ5+vjukhwdJThTZnDlUM38Gn1R+ydo1dvSDMz2RkLQ/nevB1RBYr4J/br /k0QTMQDhriW9XrSuu5kevWLvNn0yV0GOA75qfU6Fw3iFcZjWLH5iVql99laHmPO Z6ORuwyaNldg00Ci2Hf3cJHxIBWnZM5o3RASKnbGmCOsPrTxtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBih/YAHBo9Saggi6yYcNtpCcSOVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYWQyYTliMmEtOWE4Zi0z ZTcwLWE2Y2MtODNhNDRlYThjOWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+SzxJeSpiRVipeRztsb4mXAk2koREuQ8RM2R85uTUKY6qYqd+KxST8 /GT6MdDZnprCqq0v1fqN2gk0UylIVhZpT1zmL3SUHsHZsihZSEZI1+Dmq+6QVgET Uy441wHHbzUgZmItVmESl25EG/JO5VFHI/Xgit08WaX8lcm7kJ2jswfuaO+FeyAL 5bC7t7HNLLxD1FSeDwsY/KddVD7z4Uc9+qW2xU++NR/VQ3/cqdMTqd5pZSCPtQoe fwkwheOb19O6hTq7+vaOwbmnAbn8lI8/idmT5u9QxGC6J6E3CdSw0mVGn9C0rh/B JFdTQbZ+5C5cixkpHO4hAuAQyZ0wxcg= -----END CERTIFICATE-----Generated at Fri Sep 25 22:16:50 2026 by rpki-client