$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/c7154dd3-30b5-3358-ba6e-ec14811a4892.roa File: c7154dd3-30b5-3358-ba6e-ec14811a4892.roa (raw, json) Hash identifier: E54vZ26vwUuWvrJov8qSOc5gRjcEMr5d2dHHAfSFV/o= Subject key identifier: 4B:66:75:3E:E0:61:F3:86:0E:0D:7C:80:42:86:E9:E9:8D:85:B0:75 Certificate issuer: /CN=acfb2995-9ee5-423c-a521-8d6490303e2d Certificate serial: 010D0C9F4328584F85787DC283B030F751EE4E80 Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/c7154dd3-30b5-3358-ba6e-ec14811a4892.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 16932 IP address blocks: 209.5.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:7d:c2:83:b0:30:f7:51:ee:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=60cabfa9-6ac2-4327-83d1-fac66e95f963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:42:bd:f5:90:0b:bd:a6:a0:d3:cd:86:f7: 2c:49:e6:a4:b8:93:31:18:c0:8e:44:6e:7d:3d:7d: e9:e5:41:c0:f2:da:ec:08:b7:f5:50:af:aa:e4:64: ab:83:19:a1:94:60:08:59:09:a5:3c:4e:9c:53:68: f2:31:1f:e5:d7:f4:16:de:34:0f:f9:b2:ac:00:9a: 71:99:7b:5f:75:9d:88:3f:e5:d6:c6:73:71:b1:0b: c9:93:c9:2e:3a:89:cc:4c:eb:47:98:f7:fd:4a:b6: f5:ea:ec:a6:cd:ed:85:e0:db:1f:20:43:c6:c8:6e: 25:68:66:c4:e6:fe:62:4f:3b:35:f6:59:56:47:b3: a4:26:cb:9b:1e:ca:74:9c:1c:2b:fb:03:75:7e:94: fa:6a:c2:5c:7d:88:5a:8d:f4:4f:bc:8d:0f:47:d2: 98:f1:d1:a8:da:5a:6c:3d:15:f7:ec:d8:1b:6b:d5: 33:73:6c:fe:80:9f:0f:a2:a8:9c:33:e5:e4:89:23: cc:e9:b9:92:ab:9f:cc:75:bd:f5:86:80:cf:52:da: 8f:55:9c:96:ba:8f:ac:3b:31:24:f1:13:5f:3f:ba: 57:bb:c4:10:52:e6:b4:60:9a:fa:74:ec:78:24:21: c1:32:6f:5d:b7:7e:ba:87:ae:8b:bd:84:8e:7d:23: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:66:75:3E:E0:61:F3:86:0E:0D:7C:80:42:86:E9:E9:8D:85:B0:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/c7154dd3-30b5-3358-ba6e-ec14811a4892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl X509v3 Authority Key Identifier: keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer sbgp-ipAddrBlock: critical IPv4: 209.5.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:df:11:ef:1a:30:7b:52:f4:22:8a:f1:8e:1b:98:60:db:39: fb:22:81:79:4b:8a:a5:b1:f3:1f:7e:5b:b5:0b:3c:91:40:e4: 4d:7f:c1:5d:e9:18:b5:9d:c5:d6:20:e4:6c:e1:94:a6:d0:a2: f0:b9:58:1c:dc:3c:a1:1e:28:e7:1a:a2:99:77:06:ee:a4:26: 29:1a:dd:ca:44:9f:0d:fd:77:51:a9:61:58:29:e2:43:18:8f: 0c:94:be:92:74:56:f3:12:a8:e5:0e:ec:f6:fc:61:a7:2a:e2: 4a:e8:db:6e:63:c7:89:96:0c:dd:33:4d:f6:8e:04:d6:ca:f7: 5a:24:ad:47:82:f2:13:e8:e9:8d:2c:78:f3:30:7e:0e:b5:32: bc:46:38:46:dc:ae:2e:43:95:5e:00:83:0d:7d:54:7d:52:06: b0:b4:77:45:ae:41:bc:b6:9f:3f:9f:89:30:39:c2:ef:1a:42: 36:60:a8:a3:61:4c:95:a8:a1:b4:2d:67:13:ea:bf:8c:dc:4a: da:c3:7f:06:90:79:8c:95:80:0f:1d:be:b2:b2:1b:14:2c:f2: 1c:d7:18:f8:2a:4c:20:91:6d:72:30:b1:6a:ab:fe:2e:de:21: 53:ab:26:21:4d:ea:40:8f:cc:d4:50:53:be:91:57:d1:5e:0c: 3a:3e:fb:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+FeH3Cg7Aw91HuToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWNmYjI5OTUtOWVlNS00MjNjLWE1MjEtOGQ2NDkwMzAz ZTJkMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk NjBjYWJmYTktNmFjMi00MzI3LTgzZDEtZmFjNjZlOTVmOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcNCvfWQC72moNPNhvcsSeakuJMxGMCORG59 PX3p5UHA8trsCLf1UK+q5GSrgxmhlGAIWQmlPE6cU2jyMR/l1/QW3jQP+bKsAJpx mXtfdZ2IP+XWxnNxsQvJk8kuOonMTOtHmPf9Srb16uymze2F4NsfIEPGyG4laGbE 5v5iTzs19llWR7OkJsubHsp0nBwr+wN1fpT6asJcfYhajfRPvI0PR9KY8dGo2lps PRX37Ngba9Uzc2z+gJ8PoqicM+XkiSPM6bmSq5/Mdb31hoDPUtqPVZyWuo+sOzEk 8RNfP7pXu8QQUua0YJr6dOx4JCHBMm9dt366h66LvYSOfSOkMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtmdT7gYfOGDg18gEKG6emNhbB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hY2Zi Mjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0OTAzMDNlMmQvYzcxNTRkZDMtMzBiNS0z MzU4LWJhNmUtZWMxNDgxMWE0ODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWNmYjI5OTUtOWVlNS00MjNjLWE1 MjEtOGQ2NDkwMzAzZTJkL2FjZmIyOTk1LTllZTUtNDIzYy1hNTIxLThkNjQ5MDMw M2UyZC5jcmwwHwYDVR0jBBgwFoAUehSoKkY4vznA/kUKxvqKtp/wp5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hY2ZiMjk5NS05ZWU1LTQyM2MtYTUyMS04ZDY0 OTAzMDNlMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0QV6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHfEe8aMHtS9CKK8Y4bmGDbOfsigXlLiqWx8x9+W7ULPJFA5E1/wV3p GLWdxdYg5GzhlKbQovC5WBzcPKEeKOcaopl3Bu6kJika3cpEnw39d1GpYVgp4kMY jwyUvpJ0VvMSqOUO7Pb8Yacq4kro225jx4mWDN0zTfaOBNbK91okrUeC8hPo6Y0s ePMwfg61MrxGOEbcri5DlV4Agw19VH1SBrC0d0WuQby2nz+fiTA5wu8aQjZgqKNh TJWoobQtZxPqv4zcStrDfwaQeYyVgA8dvrKyGxQs8hzXGPgqTCCRbXIwsWqr/i7e IVOrJiFN6kCPzNRQU76RV9FeDDo++yA= -----END CERTIFICATE-----Generated at Sun Nov 15 15:04:55 2026 by rpki-client