$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/3ced8e6c-0664-389b-9b4a-20f5ab27decf.roa File: 3ced8e6c-0664-389b-9b4a-20f5ab27decf.roa (raw, json) Hash identifier: un6jI+xyBcZ+5NdMK2bjwM++39JJKQdhwDhhpaziK/s= Subject key identifier: B0:D3:2F:56:44:B7:18:42:FD:21:5E:15:D7:FF:2B:DA:26:31:79:BC Certificate issuer: /CN=dbf66384-fa53-47fb-938a-f1e5064023e5 Certificate serial: 010D0C9F4328584EFA27C9B891BA6D75A6F7A080 Authority key identifier: D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/3ced8e6c-0664-389b-9b4a-20f5ab27decf.roa Signing time: Thu 27 Aug 2026 15:20:46 +0000 ROA not before: Thu 27 Aug 2026 15:20:46 +0000 ROA not after: Wed 25 Nov 2026 16:20:46 +0000 asID: 22616 IP address blocks: 129.176.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fa:27:c9:b8:91:ba:6d:75:a6:f7:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbf66384-fa53-47fb-938a-f1e5064023e5 Validity Not Before: Aug 27 15:20:46 2026 GMT Not After : Nov 25 16:20:46 2026 GMT Subject: CN=6974d83e-d89c-4f90-8b1d-188e4bc1d127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:00:c1:57:fb:4f:66:a7:ef:6a:ba:d9:7b:2a: f4:28:df:a9:dd:ff:de:8a:dd:6e:c9:75:6a:28:8c: d3:ba:6c:59:67:fa:ff:c6:47:25:33:b4:4e:7b:d3: e2:a5:3c:60:01:cd:b6:65:0c:76:5c:aa:bf:3d:4d: 2c:ef:5a:68:83:9e:d7:1f:ae:fe:9f:6b:ca:cb:b1: d5:91:61:ce:03:c6:87:66:f1:21:8d:03:95:eb:4c: 72:33:20:c8:0f:c3:82:15:b8:7d:82:f2:48:89:67: f1:9c:6e:95:0c:75:3e:7e:ec:52:67:54:58:41:fc: 4a:a7:60:b4:bc:da:c8:82:cf:a6:df:ea:6a:69:61: 58:76:4c:27:76:0a:b9:f3:34:6b:99:30:aa:d7:f8: d4:18:b9:28:03:3a:42:c3:10:a3:a5:0e:f5:fe:0c: 1f:46:4c:bf:d5:c4:63:a2:59:78:fb:c0:a1:fe:0d: 35:07:85:6a:dc:43:e9:2e:21:fd:ac:7d:95:55:68: 0e:da:2b:75:03:f0:55:bd:b4:cb:2f:c9:74:78:89: c9:83:c3:9c:7b:0f:4e:ec:81:4f:04:3f:3c:4f:c6: 30:36:b2:c6:b0:84:d4:f3:e3:2b:df:97:2c:55:fe: 02:36:69:c9:ef:f7:a8:67:8f:ee:b2:78:ae:62:82: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D3:2F:56:44:B7:18:42:FD:21:5E:15:D7:FF:2B:DA:26:31:79:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/3ced8e6c-0664-389b-9b4a-20f5ab27decf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5/dbf66384-fa53-47fb-938a-f1e5064023e5.crl X509v3 Authority Key Identifier: keyid:D9:C0:2F:5B:B7:00:E4:FF:91:9B:FB:00:38:68:2B:83:5F:E3:AA:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dbf66384-fa53-47fb-938a-f1e5064023e5.cer sbgp-ipAddrBlock: critical IPv4: 129.176.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:11:af:be:e6:32:66:d0:c3:dc:87:c3:2f:39:ee:70:f9:b9: 94:ff:85:19:35:bb:90:b1:c5:df:39:f1:ce:ba:3b:8e:84:d1: 58:26:7f:66:d0:16:81:08:ce:4f:3b:cb:bc:ba:78:7d:16:d2: f5:83:45:0d:89:0a:ee:46:14:4f:6d:b2:c7:96:04:7a:2d:a3: 21:2b:03:b5:11:dd:15:86:8b:a7:08:73:6f:66:80:f6:d3:04: 6b:17:94:5c:01:e2:44:a9:24:62:79:0d:0e:1e:7b:a4:a6:9c: 09:8e:ec:0a:76:ee:e2:b3:fe:cb:f6:b9:2f:22:bb:78:73:2f: 54:9f:13:1a:4d:4c:83:34:e4:df:3a:00:b6:41:1f:7e:90:80: e4:f9:16:e5:62:4a:64:ba:1d:1c:23:84:ae:28:79:9f:38:ac: c0:d5:f1:a3:40:1b:e9:6f:f5:96:9a:63:60:70:d0:df:e4:97: df:00:4a:ed:15:f2:23:b7:02:de:41:a0:45:c3:e2:67:95:aa: 4b:42:c0:82:ea:e9:d2:e5:00:f0:3b:30:1b:47:da:02:fb:25: 3d:0e:3c:43:35:80:e5:b7:c0:2d:76:42:b5:9b:19:1e:24:c9: 37:90:48:e1:9c:ef:29:cd:e8:00:81:d5:ec:43:9b:85:75:d8: 28:4f:a4:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE76J8m4kbptdab3oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJmNjYzODQtZmE1My00N2ZiLTkzOGEtZjFlNTA2NDAy M2U1MB4XDTI2MDgyNzE1MjA0NloXDTI2MTEyNTE2MjA0NlowLzEtMCsGA1UEAxMk Njk3NGQ4M2UtZDg5Yy00ZjkwLThiMWQtMTg4ZTRiYzFkMTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QDBV/tPZqfvarrZeyr0KN+p3f/eit1uyXVq KIzTumxZZ/r/xkclM7ROe9PipTxgAc22ZQx2XKq/PU0s71pog57XH67+n2vKy7HV kWHOA8aHZvEhjQOV60xyMyDID8OCFbh9gvJIiWfxnG6VDHU+fuxSZ1RYQfxKp2C0 vNrIgs+m3+pqaWFYdkwndgq58zRrmTCq1/jUGLkoAzpCwxCjpQ71/gwfRky/1cRj oll4+8Ch/g01B4Vq3EPpLiH9rH2VVWgO2it1A/BVvbTLL8l0eInJg8Ocew9O7IFP BD88T8YwNrLGsITU8+Mr35csVf4CNmnJ7/eoZ4/usniuYoJfnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDTL1ZEtxhC/SFeFdf/K9omMXm8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYmY2 NjM4NC1mYTUzLTQ3ZmItOTM4YS1mMWU1MDY0MDIzZTUvM2NlZDhlNmMtMDY2NC0z ODliLTliNGEtMjBmNWFiMjdkZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGJmNjYzODQtZmE1My00N2ZiLTkz OGEtZjFlNTA2NDAyM2U1L2RiZjY2Mzg0LWZhNTMtNDdmYi05MzhhLWYxZTUwNjQw MjNlNS5jcmwwHwYDVR0jBBgwFoAU2cAvW7cA5P+Rm/sAOGgrg1/jqskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYmY2NjM4NC1mYTUzLTQ3ZmItOTM4YS1mMWU1 MDY0MDIzZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgbDRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkRr77mMmbQw9yHwy857nD5uZT/hRk1u5Cxxd858c66O46E0Vgmf2bQ FoEIzk87y7y6eH0W0vWDRQ2JCu5GFE9tsseWBHotoyErA7UR3RWGi6cIc29mgPbT BGsXlFwB4kSpJGJ5DQ4ee6SmnAmO7Ap27uKz/sv2uS8iu3hzL1SfExpNTIM05N86 ALZBH36QgOT5FuViSmS6HRwjhK4oeZ84rMDV8aNAG+lv9ZaaY2Bw0N/kl98ASu0V 8iO3At5BoEXD4meVqktCwILq6dLlAPA7MBtH2gL7JT0OPEM1gOW3wC12QrWbGR4k yTeQSOGc7ynN6ACB1exDm4V12ChPpGw= -----END CERTIFICATE-----Generated at Sat Oct 3 08:46:05 2026 by rpki-client