$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa File: 49eed83d-dd99-34f1-86ae-41393812eaf5.roa (raw, json) Hash identifier: 3Mx2w6MGyYtLXhT2YsvmKl7Bqqdk4P8df+Vk48vlDM8= Subject key identifier: AE:26:DD:D7:1D:FE:A9:A7:1A:EB:AF:97:EC:B9:46:8B:A2:10:14:6E Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584F4975F13F7405F17600CFE600 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11233 IP address blocks: 209.237.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:f1:3f:74:05:f1:76:00:cf:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d1dcd6b9-de22-4c42-9a26-50785c679808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:d0:a5:95:d7:41:65:96:49:b0:47:49:ad: 99:90:e3:6a:2c:5e:14:d6:95:33:11:61:87:64:9e: dd:bb:90:09:85:7f:99:ae:40:f0:6c:95:59:50:37: ae:75:02:63:2e:c7:12:d4:ca:f3:0d:53:d9:f8:26: 5e:4b:33:0b:bf:b5:53:9b:f2:3b:67:1b:81:b9:a0: 87:bc:dc:4a:f3:38:2c:e7:45:f6:9c:e1:39:37:34: 75:20:e8:cf:35:77:2b:e6:e5:43:69:d3:e2:ea:8e: c7:59:8c:2e:38:a7:be:e3:0e:de:91:62:ed:2f:92: 5b:24:73:50:9a:c2:ab:d0:d8:13:35:5b:da:81:2a: 42:8a:03:28:65:42:64:d5:c0:d2:2d:a2:9b:ba:3c: 83:f1:c9:88:d5:72:8b:5c:20:c3:f0:7e:d5:52:c5: 53:69:fd:f1:ae:45:ba:ab:42:12:f9:74:81:76:d0: 79:1a:26:1b:1a:b3:98:c6:85:8b:99:e3:8a:b9:82: d4:e5:86:35:fb:6d:02:df:66:22:65:00:5e:89:c9: 85:19:4e:3c:fb:19:3a:27:e7:f1:73:b2:2e:fb:bf: 45:fe:f9:b5:fd:36:a0:1b:44:3c:5b:a8:3d:22:96: 44:8f:aa:87:cf:81:4f:47:c1:64:28:86:16:f4:26: 05:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:26:DD:D7:1D:FE:A9:A7:1A:EB:AF:97:EC:B9:46:8B:A2:10:14:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/49eed83d-dd99-34f1-86ae-41393812eaf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0b:06:91:6e:3a:e7:b6:1f:60:5b:85:7a:b6:51:bb:7a:8d: 20:c9:03:41:62:34:c7:7a:ee:bf:ff:c0:74:95:70:92:8d:5e: ac:11:83:02:95:72:5a:39:0f:e8:82:ae:95:dd:2c:b7:e2:51: 7e:bd:aa:13:75:b7:b2:52:e4:9c:20:a6:85:0d:14:a9:e0:0d: c6:59:a8:8d:db:ef:04:c8:45:49:48:2e:c6:c7:46:fa:78:06: a3:b0:c5:e3:b5:aa:8d:9e:01:3a:f3:89:9b:b9:32:80:74:3c: 73:8e:bf:af:f5:e8:5d:c4:37:2b:49:a5:01:ae:f9:3d:4a:92: a0:df:52:90:26:f5:6d:8e:07:15:e2:4d:b9:f0:e3:b9:25:3a: 61:7c:70:7e:07:be:66:31:5b:75:6e:c9:16:aa:7b:7e:21:05: ff:34:44:78:e6:67:e4:ab:e7:20:3d:8f:01:6c:3e:a0:52:1d: 41:0a:ec:f4:b9:9a:97:32:1a:7f:88:a4:5b:b0:ee:59:c4:82: 16:95:4a:eb:b3:df:53:28:9a:5d:37:64:d6:9b:b2:28:44:6e: e2:68:a4:bf:b8:65:f7:62:44:7e:87:3d:cf:c5:87:3d:1c:aa: bf:ae:8e:02:f8:c2:a4:e4:f5:9f:a0:67:f1:09:1b:79:16:1f: b2:b5:92:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdfE/dAXxdgDP5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDFkY2Q2YjktZGUyMi00YzQyLTlhMjYtNTA3ODVjNjc5ODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdfQpZXXQWWWSbBHSa2ZkONqLF4U1pUzEWGH ZJ7du5AJhX+ZrkDwbJVZUDeudQJjLscS1MrzDVPZ+CZeSzMLv7VTm/I7ZxuBuaCH vNxK8zgs50X2nOE5NzR1IOjPNXcr5uVDadPi6o7HWYwuOKe+4w7ekWLtL5JbJHNQ msKr0NgTNVvagSpCigMoZUJk1cDSLaKbujyD8cmI1XKLXCDD8H7VUsVTaf3xrkW6 q0IS+XSBdtB5GiYbGrOYxoWLmeOKuYLU5YY1+20C32YiZQBeicmFGU48+xk6J+fx c7Iu+79F/vm1/TagG0Q8W6g9IpZEj6qHz4FPR8FkKIYW9CYFcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4m3dcd/qmnGuuvl+y5RouiEBRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNDllZWQ4M2QtZGQ5OS0z NGYxLTg2YWUtNDEzOTM4MTJlYWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMLBpFuOue2H2BbhXq2Ubt6jSDJA0FiNMd67r//wHSVcJKNXqwRgwKV clo5D+iCrpXdLLfiUX69qhN1t7JS5JwgpoUNFKngDcZZqI3b7wTIRUlILsbHRvp4 BqOwxeO1qo2eATrziZu5MoB0PHOOv6/16F3ENytJpQGu+T1KkqDfUpAm9W2OBxXi Tbnw47klOmF8cH4HvmYxW3VuyRaqe34hBf80RHjmZ+Sr5yA9jwFsPqBSHUEK7PS5 mpcyGn+IpFuw7lnEghaVSuuz31Moml03ZNabsihEbuJopL+4ZfdiRH6HPc/Fhz0c qr+ujgL4wqTk9Z+gZ/EJG3kWH7K1koA= -----END CERTIFICATE-----Generated at Mon Sep 28 01:07:45 2026 by rpki-client