$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5f126845-9e09-400f-8f56-940456cc23f2/798da0e8-d433-3ce4-8819-f0fbac08ee95.roa File: 798da0e8-d433-3ce4-8819-f0fbac08ee95.roa (raw, json) Hash identifier: yBpbTCljhnkrmEAMJUTlmhuV1fdfSTbR9HHOqG7Ttjs= Subject key identifier: 38:E2:FC:6E:D4:A8:05:6D:93:D1:41:F0:EF:3F:F5:74:50:B3:F7:8B Certificate issuer: /CN=5f126845-9e09-400f-8f56-940456cc23f2 Certificate serial: 010D0C9F4328584F2ABD02974ABBEE780A073180 Authority key identifier: 55:5F:D6:AB:C0:45:85:F5:5C:A5:5F:D2:8F:0F:AA:B9:1C:D1:20:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5f126845-9e09-400f-8f56-940456cc23f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5f126845-9e09-400f-8f56-940456cc23f2/798da0e8-d433-3ce4-8819-f0fbac08ee95.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 29734 IP address blocks: 209.150.128.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5f126845-9e09-400f-8f56-940456cc23f2/5f126845-9e09-400f-8f56-940456cc23f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5f126845-9e09-400f-8f56-940456cc23f2/5f126845-9e09-400f-8f56-940456cc23f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5f126845-9e09-400f-8f56-940456cc23f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:02:97:4a:bb:ee:78:0a:07:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f126845-9e09-400f-8f56-940456cc23f2 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=b82404a4-46d0-4df7-8bdf-a0c16262d9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:20:8f:e8:dd:4d:73:98:33:53:28:28:73: ba:9e:0c:62:1e:ff:8b:fa:ff:a8:ac:f9:32:a0:0d: 4b:59:9c:a4:0d:80:1e:15:8f:eb:43:b2:6b:a3:c9: 65:93:1b:cc:a0:0e:3f:59:02:9e:3e:73:07:25:6f: 3b:ed:ad:5c:77:0b:55:38:1c:d3:c2:c5:71:4f:1b: c8:02:32:d3:16:bd:19:b4:cb:b8:64:46:2f:91:d1: e5:cd:bd:5f:f6:7f:8d:a0:2f:31:7e:8d:9d:2b:a7: 65:af:d3:cc:70:f2:db:c5:53:e5:e7:8e:ea:8c:22: 17:7b:5b:38:20:27:ea:b9:4b:19:14:26:86:1f:f7: 21:c7:90:dd:a0:db:03:1d:eb:66:59:96:9b:46:b7: 46:0a:92:58:08:18:bb:82:47:d5:47:24:37:45:28: 69:91:81:c3:0a:8e:18:92:64:bd:21:62:01:98:64: 9a:c9:9d:87:59:32:72:11:c0:c8:56:0e:84:4a:02: 7f:03:a1:73:f8:39:40:5f:49:fb:bb:59:8d:10:10: eb:6b:7e:2e:b3:95:0e:8d:45:c5:e6:2d:23:b6:a7: 53:1c:50:18:75:ed:9c:76:57:f8:0f:0e:0b:2e:99: fd:2c:ff:75:bc:e2:1a:09:98:d2:b0:93:93:84:0d: 8b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E2:FC:6E:D4:A8:05:6D:93:D1:41:F0:EF:3F:F5:74:50:B3:F7:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5f126845-9e09-400f-8f56-940456cc23f2/798da0e8-d433-3ce4-8819-f0fbac08ee95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5f126845-9e09-400f-8f56-940456cc23f2/5f126845-9e09-400f-8f56-940456cc23f2.crl X509v3 Authority Key Identifier: keyid:55:5F:D6:AB:C0:45:85:F5:5C:A5:5F:D2:8F:0F:AA:B9:1C:D1:20:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5f126845-9e09-400f-8f56-940456cc23f2.cer sbgp-ipAddrBlock: critical IPv4: 209.150.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:ea:58:bc:41:b5:e1:ac:f8:a6:4b:74:65:5b:f5:5c:29:a6: 06:46:f1:11:c4:e9:a7:db:f0:ef:d1:a6:e7:09:e4:8e:29:a2: 63:49:b2:1c:8a:ac:82:04:8c:f2:64:de:af:fd:46:3b:7b:bb: 34:0a:ed:31:cb:55:c7:a0:c7:ed:2d:3b:82:70:25:e5:90:ea: a3:76:43:3d:83:d7:e2:2c:0a:9d:26:51:bc:2c:20:3d:54:86: b9:ab:d2:18:98:d3:08:5b:59:cd:c1:08:42:97:c2:80:ec:99: 8d:07:05:b3:b6:86:25:12:aa:ab:3d:48:5a:60:84:aa:61:db: b6:03:27:6b:b1:3e:4c:73:21:54:66:19:f1:af:7e:e0:43:9d: 70:36:49:36:87:42:ea:96:bd:ef:a5:f6:b9:85:bd:73:76:bb: 56:1c:bf:ce:54:0c:e5:de:88:99:8c:9a:03:57:1d:89:d7:52: 9a:7f:45:d7:80:7f:5c:d7:a0:55:d1:67:10:87:cd:2d:48:8e: dd:df:18:c4:46:c8:a5:54:88:3a:b2:99:d7:eb:1b:e1:85:66: b1:2a:42:db:48:c6:be:ec:92:b2:cb:d8:9a:90:70:02:bc:25: e6:84:37:a3:59:25:9d:7a:fd:93:a7:26:0e:71:9f:f1:03:f0: cc:c0:d1:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQKXSrvueAoHMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWYxMjY4NDUtOWUwOS00MDBmLThmNTYtOTQwNDU2Y2My M2YyMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk YjgyNDA0YTQtNDZkMC00ZGY3LThiZGYtYTBjMTYyNjJkOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf0gj+jdTXOYM1MoKHO6ngxiHv+L+v+orPky oA1LWZykDYAeFY/rQ7Jro8llkxvMoA4/WQKePnMHJW877a1cdwtVOBzTwsVxTxvI AjLTFr0ZtMu4ZEYvkdHlzb1f9n+NoC8xfo2dK6dlr9PMcPLbxVPl547qjCIXe1s4 ICfquUsZFCaGH/chx5DdoNsDHetmWZabRrdGCpJYCBi7gkfVRyQ3RShpkYHDCo4Y kmS9IWIBmGSayZ2HWTJyEcDIVg6ESgJ/A6Fz+DlAX0n7u1mNEBDra34us5UOjUXF 5i0jtqdTHFAYde2cdlf4Dw4LLpn9LP91vOIaCZjSsJOThA2LawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDji/G7UqAVtk9FB8O8/9XRQs/eLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi81ZjEy Njg0NS05ZTA5LTQwMGYtOGY1Ni05NDA0NTZjYzIzZjIvNzk4ZGEwZTgtZDQzMy0z Y2U0LTg4MTktZjBmYmFjMDhlZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNWYxMjY4NDUtOWUwOS00MDBmLThm NTYtOTQwNDU2Y2MyM2YyLzVmMTI2ODQ1LTllMDktNDAwZi04ZjU2LTk0MDQ1NmNj MjNmMi5jcmwwHwYDVR0jBBgwFoAUVV/Wq8BFhfVcpV/Sjw+quRzRIHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi81ZjEyNjg0NS05ZTA5LTQwMGYtOGY1Ni05NDA0 NTZjYzIzZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0ZaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHqWLxBteGs+KZLdGVb9VwppgZG8RHE6afb8O/RpucJ5I4pomNJshyK rIIEjPJk3q/9Rjt7uzQK7THLVcegx+0tO4JwJeWQ6qN2Qz2D1+IsCp0mUbwsID1U hrmr0hiY0whbWc3BCEKXwoDsmY0HBbO2hiUSqqs9SFpghKph27YDJ2uxPkxzIVRm GfGvfuBDnXA2STaHQuqWve+l9rmFvXN2u1Ycv85UDOXeiJmMmgNXHYnXUpp/RdeA f1zXoFXRZxCHzS1Ijt3fGMRGyKVUiDqymdfrG+GFZrEqQttIxr7skrLL2JqQcAK8 JeaEN6NZJZ16/ZOnJg5xn/ED8MzA0ZE= -----END CERTIFICATE-----Generated at Sun Oct 11 10:26:22 2026 by rpki-client