$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f9dd89a-24d5-3892-b8df-1eb4a7cf3979.roa File: 7f9dd89a-24d5-3892-b8df-1eb4a7cf3979.roa (raw, json) Hash identifier: JTeObKLR2z+ygV4Zzujtip6H0hc3dnutqHgDXlruZkQ= Subject key identifier: 05:B1:3E:7E:EC:14:A6:88:7B:83:C7:B4:20:46:60:81:A0:88:6B:47 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4988404BCDB0FBFD952B7700 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f9dd89a-24d5-3892-b8df-1eb4a7cf3979.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 209.102.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:40:4b:cd:b0:fb:fd:95:2b:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6b5e97b9-e2bd-485e-af16-0641ff7d961b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:69:c6:bb:98:0b:61:3c:09:8a:67:6e:e0:ab: ab:8b:c5:5b:28:af:57:59:8a:37:78:c4:34:78:fa: 01:7c:ef:a9:e2:32:61:d0:52:8a:6a:2f:aa:c1:ea: 61:8d:e4:6c:ab:78:73:ae:4d:86:e3:0a:29:ae:32: 6f:b4:3f:94:d5:29:fb:03:21:e1:51:51:93:cc:9b: 48:e5:c3:41:46:61:de:71:1a:95:f6:bf:66:f2:c9: 98:f6:41:49:34:74:6d:46:0a:21:db:7b:ff:e3:dc: 3d:52:b0:4b:bf:5d:d0:d2:72:40:c3:92:3b:c8:09: 4b:22:f9:96:98:0d:aa:4d:d6:96:ec:67:84:a5:89: 3d:cf:fe:f2:c5:c3:b6:07:86:25:58:e0:d8:ae:5d: 34:14:ee:d0:bd:6f:d6:0e:1f:87:d1:7c:80:44:f2: 46:f3:25:c9:63:ef:87:5e:51:de:84:68:82:26:0b: d3:c3:2e:45:1b:02:2b:52:0b:0f:25:11:91:41:a7: 0b:e8:3d:a1:22:80:b0:55:9b:93:4f:28:d2:6b:60: 19:4c:58:b2:f2:f9:55:87:88:f8:a4:e9:ba:4b:aa: 8b:61:0e:32:73:94:43:1c:f5:69:73:73:89:05:95: 80:6c:ba:6a:e0:84:a3:55:4d:7d:64:11:0d:cb:6d: b2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B1:3E:7E:EC:14:A6:88:7B:83:C7:B4:20:46:60:81:A0:88:6B:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7f9dd89a-24d5-3892-b8df-1eb4a7cf3979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.102.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:09:00:b7:cb:2c:47:81:c2:36:1b:49:65:fc:a3:50:22:cd: d0:3b:69:de:27:3c:5f:c1:6d:d9:40:ba:14:49:24:7e:87:2b: 0e:57:9a:ca:f0:71:f3:d4:4a:d6:60:f2:d8:f1:26:4c:5d:2e: e6:bd:fc:9d:0c:f9:05:6f:5b:52:36:5c:aa:12:57:d2:80:5d: e1:0c:0c:a3:ef:ba:99:ac:0b:8d:0e:c1:e6:0a:d3:34:83:f5: c7:9f:8f:60:91:3d:8b:ec:1a:e7:30:7e:65:6d:66:8f:3e:7e: 73:ee:f3:33:d6:4e:fb:7c:d6:ba:9f:85:ff:9a:1b:b8:4f:35: a0:59:ef:2c:be:23:87:52:29:52:98:c4:5b:cb:b8:08:50:7a: af:b3:68:07:40:5c:28:29:4f:63:34:71:56:e8:73:d3:0c:03: 79:3b:6d:22:89:80:38:33:ce:46:32:08:17:c7:2c:ed:05:a8: 5b:7f:d6:65:1c:08:24:20:e9:77:8f:bf:f0:26:e1:2a:a4:06: 73:42:9a:7f:ca:dd:f2:50:c2:a1:ce:47:f5:45:4a:6d:9b:44: c5:3f:09:af:b7:db:15:bc:53:91:e4:c9:a5:71:af:f8:2a:ac: ff:47:5a:b9:61:7c:8e:d9:0c:02:7f:6b:16:02:c5:c0:ca:36: be:fa:00:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiEBLzbD7/ZUrdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmI1ZTk3YjktZTJiZC00ODVlLWFmMTYtMDY0MWZmN2Q5NjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomnGu5gLYTwJimdu4Kuri8VbKK9XWYo3eMQ0 ePoBfO+p4jJh0FKKai+qwephjeRsq3hzrk2G4woprjJvtD+U1Sn7AyHhUVGTzJtI 5cNBRmHecRqV9r9m8smY9kFJNHRtRgoh23v/49w9UrBLv13Q0nJAw5I7yAlLIvmW mA2qTdaW7GeEpYk9z/7yxcO2B4YlWODYrl00FO7QvW/WDh+H0XyARPJG8yXJY++H XlHehGiCJgvTwy5FGwIrUgsPJRGRQacL6D2hIoCwVZuTTyjSa2AZTFiy8vlVh4j4 pOm6S6qLYQ4yc5RDHPVpc3OJBZWAbLpq4ISjVU19ZBENy22yGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWxPn7sFKaIe4PHtCBGYIGgiGtHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvN2Y5ZGQ4OWEtMjRkNS0z ODkyLWI4ZGYtMWViNGE3Y2YzOTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0WbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQJALfLLEeBwjYbSWX8o1AizdA7ad4nPF/BbdlAuhRJJH6HKw5Xmsrw cfPUStZg8tjxJkxdLua9/J0M+QVvW1I2XKoSV9KAXeEMDKPvupmsC40OweYK0zSD 9cefj2CRPYvsGucwfmVtZo8+fnPu8zPWTvt81rqfhf+aG7hPNaBZ7yy+I4dSKVKY xFvLuAhQeq+zaAdAXCgpT2M0cVboc9MMA3k7bSKJgDgzzkYyCBfHLO0FqFt/1mUc CCQg6XePv/Am4SqkBnNCmn/K3fJQwqHOR/VFSm2bRMU/Ca+32xW8U5HkyaVxr/gq rP9HWrlhfI7ZDAJ/axYCxcDKNr76ACM= -----END CERTIFICATE-----Generated at Sun Oct 4 15:32:15 2026 by rpki-client