$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d29ca1b5-ebe2-3ef4-a2a6-e555cc9d07a1.roa File: d29ca1b5-ebe2-3ef4-a2a6-e555cc9d07a1.roa (raw, json) Hash identifier: C6ux6l5qj//Vc4G3TYJRdjYIkY6JBJQsd2rMO3ewjuA= Subject key identifier: 56:DF:58:71:A5:A1:02:66:98:26:68:F1:5A:EE:6F:21:F8:BC:15:08 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584F8F3DF077DC43FE4DE2303B00 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d29ca1b5-ebe2-3ef4-a2a6-e555cc9d07a1.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 54888 IP address blocks: 209.237.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Nov 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:f0:77:dc:43:fe:4d:e2:30:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=c49917fb-01c0-4ef3-827d-463b154a5122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9c:82:8b:f9:a9:8c:6c:c7:0b:a3:f1:0f:5f: af:eb:97:fa:16:93:70:cc:a0:e1:df:d0:5f:bb:3f: cb:3d:51:b5:78:09:e2:d7:c0:c3:42:56:bf:32:89: 20:84:30:3e:9d:6a:02:e4:5f:b8:7e:2d:59:e3:03: e2:e0:86:f8:7c:45:9b:8a:90:36:62:00:4f:3c:6f: b1:a2:6c:72:b9:ef:aa:33:c4:32:1d:33:f8:7f:0f: 8d:a1:54:b5:f6:50:6a:a9:0d:7a:be:71:94:d9:55: 06:17:ed:95:b2:39:d1:87:37:f4:db:87:a8:3a:eb: 73:f4:31:cc:1b:8a:d9:f8:05:9c:de:f0:15:c7:f1: 06:ae:13:60:40:d8:96:1b:09:48:63:18:59:95:8e: 57:9a:17:63:00:69:3c:90:b3:53:f2:9e:dd:0e:94: ed:07:78:9f:61:99:65:aa:bd:f9:7e:56:51:26:b3: 6a:14:e0:5b:6c:20:d7:b0:8a:2f:14:e3:7a:b3:1a: f9:1d:7f:50:01:d8:2f:0e:e9:49:09:a9:9a:ee:ba: ea:a3:a8:b6:72:d7:ca:18:df:ca:1d:04:83:be:b4: b9:9c:2a:88:3c:ee:dc:61:c2:27:6d:c8:17:aa:f5: 82:12:25:ae:96:d7:d4:37:46:df:f5:21:4f:2e:63: ee:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:DF:58:71:A5:A1:02:66:98:26:68:F1:5A:EE:6F:21:F8:BC:15:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d29ca1b5-ebe2-3ef4-a2a6-e555cc9d07a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:12:bc:15:fc:45:c5:07:67:14:81:55:35:8a:6d:92:4d:48: bf:e5:ac:8d:1a:73:ff:55:7e:e9:c7:8b:fc:72:cd:86:80:35: 2f:90:85:d8:9b:df:cd:d3:8c:71:86:ef:a7:a1:38:8d:f9:f6: d8:07:2f:ba:c6:48:58:32:0f:2f:d9:1c:0b:3b:e6:c0:2b:42: 1d:8d:b5:85:80:5a:2c:c7:b0:50:4b:b2:f9:03:22:9c:58:bc: 94:d9:51:ac:5e:42:65:4e:37:7e:25:dd:8c:12:dc:d3:9d:69: 12:ef:5a:19:25:73:12:03:4b:f5:c2:ce:50:80:fb:5e:14:20: 43:34:2c:6a:39:26:b7:af:d5:e0:3d:3d:0d:e8:aa:25:87:85: 0d:e1:ab:47:6f:75:d5:54:00:6b:4a:42:7e:c4:34:91:29:f8: f4:a5:63:04:b6:7f:9e:ca:09:1c:e2:5a:91:cc:2d:f5:07:c2: 12:02:c2:17:fb:10:f0:43:30:62:8c:56:80:26:1a:97:73:50: f1:80:ea:9a:cb:29:6b:c2:bc:c5:80:d2:43:54:91:9b:4f:b6: 31:16:4c:f8:51:61:3f:31:69:4e:c7:7d:bd:7f:55:74:31:29: d5:51:28:cc:2e:80:f0:0a:9b:fb:93:d3:7a:5d:c6:b7:55:62: 91:00:17:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPfB33EP+TeIwOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk YzQ5OTE3ZmItMDFjMC00ZWYzLTgyN2QtNDYzYjE1NGE1MTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJyCi/mpjGzHC6PxD1+v65f6FpNwzKDh39Bf uz/LPVG1eAni18DDQla/MokghDA+nWoC5F+4fi1Z4wPi4Ib4fEWbipA2YgBPPG+x omxyue+qM8QyHTP4fw+NoVS19lBqqQ16vnGU2VUGF+2VsjnRhzf024eoOutz9DHM G4rZ+AWc3vAVx/EGrhNgQNiWGwlIYxhZlY5XmhdjAGk8kLNT8p7dDpTtB3ifYZll qr35flZRJrNqFOBbbCDXsIovFON6sxr5HX9QAdgvDulJCama7rrqo6i2ctfKGN/K HQSDvrS5nCqIPO7cYcInbcgXqvWCEiWultfUN0bf9SFPLmPu1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbfWHGloQJmmCZo8VrubyH4vBUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZDI5Y2ExYjUtZWJlMi0z ZWY0LWEyYTYtZTU1NWNjOWQwN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgSvBX8RcUHZxSBVTWKbZJNSL/lrI0ac/9VfunHi/xyzYaANS+Qhdib 383TjHGG76ehOI359tgHL7rGSFgyDy/ZHAs75sArQh2NtYWAWizHsFBLsvkDIpxY vJTZUaxeQmVON34l3YwS3NOdaRLvWhklcxIDS/XCzlCA+14UIEM0LGo5Jrev1eA9 PQ3oqiWHhQ3hq0dvddVUAGtKQn7ENJEp+PSlYwS2f57KCRziWpHMLfUHwhICwhf7 EPBDMGKMVoAmGpdzUPGA6prLKWvCvMWA0kNUkZtPtjEWTPhRYT8xaU7Hfb1/VXQx KdVRKMwugPAKm/uT03pdxrdVYpEAF48= -----END CERTIFICATE-----Generated at Sat Nov 14 22:40:58 2026 by rpki-client