$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ffafbaae-e4fd-3134-b97f-3f16a9da02b8.roa File: ffafbaae-e4fd-3134-b97f-3f16a9da02b8.roa (raw, json) Hash identifier: hCtCPbyQKFFOSMM5LrRhxyy4kw5UL0lEMua9wNs27Nc= Subject key identifier: 80:25:11:D1:C4:D4:03:D5:B3:27:AB:E5:A9:D0:4B:8F:89:19:29:BD Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119 Certificate serial: 010D0C9F4328584F9FFDD0E5F6D9230FAE654200 Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ffafbaae-e4fd-3134-b97f-3f16a9da02b8.roa Signing time: Mon 26 Oct 2026 01:00:13 +0000 ROA not before: Mon 26 Oct 2026 01:00:13 +0000 ROA not after: Sun 24 Jan 2027 02:00:13 +0000 asID: 19955 IP address blocks: 209.221.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:fd:d0:e5:f6:d9:23:0f:ae:65:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119 Validity Not Before: Oct 26 01:00:13 2026 GMT Not After : Jan 24 02:00:13 2027 GMT Subject: CN=3d8046c0-f587-4d86-83c8-31dffb01532a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7b:97:6a:54:fd:be:6d:87:6d:a4:28:e0:0e: b3:35:8b:44:2e:ee:17:19:b6:f9:47:ff:79:f2:c1: 55:82:08:01:da:27:9a:2e:ee:17:90:db:4b:01:6d: 77:c5:3d:e5:0f:b8:de:3f:71:3c:d1:64:d5:8d:32: cc:6c:5b:21:87:6f:00:6a:4c:74:e2:76:a0:37:ea: 47:94:47:cf:55:89:53:6f:d4:43:09:7b:ec:90:9b: 27:fd:77:51:e7:b9:71:63:b8:da:80:59:47:28:cd: 5b:c5:4b:4b:4e:70:5f:07:5f:16:6c:38:33:79:09: b9:3d:b2:89:6c:c4:88:53:d2:73:dc:82:c4:0c:d2: 66:ab:a4:f9:d0:2b:53:90:50:5a:c3:cb:62:fe:9f: 3f:3b:97:46:15:56:61:ee:c1:f4:57:77:f0:52:82: a6:ed:4e:79:29:4f:26:df:c5:d7:03:54:25:1a:b7: aa:fa:d6:a4:22:4d:15:f5:9f:a8:8e:45:1b:73:41: 69:f3:ba:f6:09:18:9b:c0:2d:35:98:64:76:ff:06: c8:25:68:a8:98:31:ac:09:67:f9:fc:ad:ee:83:ac: 76:49:14:a0:79:d1:26:29:39:50:d3:1f:a3:23:cd: ca:6c:f4:43:0c:b6:08:93:c0:3d:1a:21:cd:ab:04: fa:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:25:11:D1:C4:D4:03:D5:B3:27:AB:E5:A9:D0:4B:8F:89:19:29:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ffafbaae-e4fd-3134-b97f-3f16a9da02b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl X509v3 Authority Key Identifier: keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer sbgp-ipAddrBlock: critical IPv4: 209.221.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:fc:b2:79:3e:26:7d:13:bf:e2:3d:69:72:d9:8f:e9:89:47: 71:b2:47:1a:47:05:0b:c1:d2:2f:d0:00:84:07:8a:05:36:42: 6b:89:c1:cf:8b:4b:15:d1:7c:69:db:33:1e:d2:e9:39:52:89: c0:5e:62:ef:06:7b:46:31:09:b5:a1:30:15:7e:1b:c8:7c:54: 80:74:80:0c:55:63:6a:2b:fa:c2:90:c8:e7:86:1b:a5:e7:ad: 83:1f:f9:ae:a7:40:82:98:cc:04:12:62:98:e5:ea:69:d1:9d: 0d:b4:38:95:89:36:2a:3b:dc:55:7a:bf:6e:7e:31:ed:5c:81: d3:ef:c0:e4:16:0f:75:16:58:87:bd:f6:47:9f:06:85:6d:14: 3e:9c:88:48:81:64:74:33:d5:cb:65:9c:f8:2e:37:f5:92:bb: ba:7f:92:dc:1f:de:50:d6:f6:d0:7f:30:a8:60:4b:24:f7:1a: 25:1f:86:81:21:82:b9:c3:97:1c:79:5e:4b:16:22:0e:16:9e: ea:33:e8:8f:3d:fb:74:ff:68:47:d6:b5:23:f2:bb:89:03:d9: f1:43:1f:44:c9:31:0a:26:8f:6b:39:ba:d5:39:42:f3:7b:6b: 79:ed:be:9a:79:15:cb:90:9c:97:35:21:41:82:e0:20:bd:f2: 38:b8:d9:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+f/dDl9tkjD65lQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh MTE5MB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk M2Q4MDQ2YzAtZjU4Ny00ZDg2LTgzYzgtMzFkZmZiMDE1MzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnuXalT9vm2HbaQo4A6zNYtELu4XGbb5R/95 8sFVgggB2ieaLu4XkNtLAW13xT3lD7jeP3E80WTVjTLMbFshh28Aakx04nagN+pH lEfPVYlTb9RDCXvskJsn/XdR57lxY7jagFlHKM1bxUtLTnBfB18WbDgzeQm5PbKJ bMSIU9Jz3ILEDNJmq6T50CtTkFBaw8ti/p8/O5dGFVZh7sH0V3fwUoKm7U55KU8m 38XXA1QlGreq+takIk0V9Z+ojkUbc0Fp87r2CRibwC01mGR2/wbIJWiomDGsCWf5 /K3ug6x2SRSgedEmKTlQ0x+jI83KbPRDDLYIk8A9GiHNqwT68wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAlEdHE1APVsyer5anQS4+JGSm9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1 ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvZmZhZmJhYWUtZTRmZC0z MTM0LWI5N2YtM2YxNmE5ZGEwMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL8snk+Jn0Tv+I9aXLZj+mJR3GyRxpHBQvB0i/QAIQHigU2QmuJwc+L SxXRfGnbMx7S6TlSicBeYu8Ge0YxCbWhMBV+G8h8VIB0gAxVY2or+sKQyOeGG6Xn rYMf+a6nQIKYzAQSYpjl6mnRnQ20OJWJNio73FV6v25+Me1cgdPvwOQWD3UWWIe9 9kefBoVtFD6ciEiBZHQz1ctlnPguN/WSu7p/ktwf3lDW9tB/MKhgSyT3GiUfhoEh grnDlxx5XksWIg4Wnuoz6I89+3T/aEfWtSPyu4kD2fFDH0TJMQomj2s5utU5QvN7 a3ntvpp5FcuQnJc1IUGC4CC98ji42S0= -----END CERTIFICATE-----Generated at Sun Nov 15 21:28:32 2026 by rpki-client