$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/844ba2fa-aad0-3721-98c2-12891a1907d3.roa File: 844ba2fa-aad0-3721-98c2-12891a1907d3.roa (raw, json) Hash identifier: Cknci/tCRJnMJiiO3gTC90r9Niu1fGSDVt6zPGkHYCc= Subject key identifier: 78:76:47:40:BF:F3:22:19:74:C0:8E:0A:58:EA:F7:11:0F:B0:8B:F1 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C4F68A1009041117C720 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/844ba2fa-aad0-3721-98c2-12891a1907d3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 209.53.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c4:f6:8a:10:09:04:11:17:c7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fb30ed13-b598-4727-83ac-6c3668dc27b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:27:a6:f2:4c:b7:fe:ae:d4:51:13:1f:09:76: c1:69:87:f0:4e:9b:1c:e9:c5:ab:50:7d:94:30:a5: 32:35:d3:1a:9d:05:5e:98:fb:cc:4f:cc:1d:ee:72: 48:ea:f3:6a:32:df:45:c8:0c:5b:5e:a4:cf:3f:07: fc:c7:db:b7:1a:42:ca:05:2a:10:9f:47:22:05:ce: 8a:5e:e1:fa:37:35:da:00:e5:94:4b:16:e7:e1:76: 46:37:9e:8c:95:f9:12:67:03:5e:0c:3b:c8:2b:78: aa:8b:a6:13:9d:1d:b2:cc:f3:8d:e1:5c:61:2b:61: 72:af:77:d3:09:47:3b:1a:e7:cd:ac:12:55:96:ca: 43:2a:c4:2a:ae:b8:69:8b:01:ff:57:78:11:d1:4e: 97:74:63:b3:1e:41:4e:2d:bd:95:ed:e9:9c:8a:df: e4:fe:f0:8e:d8:de:2f:bb:97:32:53:31:a1:f4:51: 00:01:39:59:bd:e4:25:ef:db:e3:95:5b:a9:26:8b: 62:1d:1a:17:a3:d4:d9:ef:51:d2:9d:57:de:fc:58: 7c:34:98:c8:27:40:ef:3e:8c:e2:75:34:1c:bd:76: b0:5f:cd:13:7d:93:aa:18:68:7d:38:23:8c:c8:07: 65:7c:65:db:a5:0c:b1:9f:6c:fa:26:db:d6:e0:2b: e2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:76:47:40:BF:F3:22:19:74:C0:8E:0A:58:EA:F7:11:0F:B0:8B:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/844ba2fa-aad0-3721-98c2-12891a1907d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a3:52:09:86:0a:f7:5e:b1:0b:c1:63:c9:10:f0:dd:07:d6: ae:4b:f5:bb:61:08:fb:56:84:29:e9:a1:ff:31:43:83:8c:62: cf:8d:60:2a:48:c1:0e:6f:4d:6e:98:f4:db:91:cf:42:e7:57: b4:54:37:28:dd:51:dc:b3:cc:bf:9b:35:7c:bd:7c:f0:a6:57: 0d:b2:f0:d9:79:04:4a:f7:2b:81:c4:51:f3:2f:8c:e8:88:9a: a3:39:f0:6b:00:44:27:78:d1:8f:ad:89:aa:d0:68:6e:92:bd: ad:a4:96:4d:20:c7:22:40:26:57:35:9c:48:a4:d0:b9:9b:de: 13:49:ce:29:f7:a6:04:a5:e4:09:65:63:bf:c6:50:74:54:6f: fe:8d:e8:4f:16:10:bf:c8:b8:c5:4d:91:7a:af:ba:b5:13:b8: 43:ed:a5:9e:bf:b7:0f:b2:ac:64:e5:31:cf:a9:dd:ee:ee:88: a8:5f:52:b2:df:a4:17:35:7d:7b:a2:9b:84:9e:af:0e:55:29: 02:d0:52:74:23:75:dc:b0:d5:37:5b:11:46:a9:06:51:10:6b: 56:63:49:ba:60:8d:c3:53:ee:ed:ca:02:e8:a2:81:3b:bf:1b: 8d:5c:02:a3:8a:26:e8:59:c8:70:ab:49:0e:32:ce:67:fb:56: 31:d0:cb:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8T2ihAJBBEXxyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmIzMGVkMTMtYjU5OC00NzI3LTgzYWMtNmMzNjY4ZGMyN2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCem8ky3/q7UURMfCXbBaYfwTpsc6cWrUH2U MKUyNdManQVemPvMT8wd7nJI6vNqMt9FyAxbXqTPPwf8x9u3GkLKBSoQn0ciBc6K XuH6NzXaAOWUSxbn4XZGN56MlfkSZwNeDDvIK3iqi6YTnR2yzPON4VxhK2Fyr3fT CUc7GufNrBJVlspDKsQqrrhpiwH/V3gR0U6XdGOzHkFOLb2V7emcit/k/vCO2N4v u5cyUzGh9FEAATlZveQl79vjlVupJotiHRoXo9TZ71HSnVfe/Fh8NJjIJ0DvPozi dTQcvXawX80TfZOqGGh9OCOMyAdlfGXbpQyxn2z6JtvW4CvijQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHh2R0C/8yIZdMCOCljq9xEPsIvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvODQ0YmEyZmEtYWFkMC0z NzIxLTk4YzItMTI4OTFhMTkwN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACjUgmGCvdesQvBY8kQ8N0H1q5L9bthCPtWhCnpof8xQ4OMYs+NYCpI wQ5vTW6Y9NuRz0LnV7RUNyjdUdyzzL+bNXy9fPCmVw2y8Nl5BEr3K4HEUfMvjOiI mqM58GsARCd40Y+tiarQaG6Sva2klk0gxyJAJlc1nEik0Lmb3hNJzin3pgSl5All Y7/GUHRUb/6N6E8WEL/IuMVNkXqvurUTuEPtpZ6/tw+yrGTlMc+p3e7uiKhfUrLf pBc1fXuim4Serw5VKQLQUnQjddyw1TdbEUapBlEQa1ZjSbpgjcNT7u3KAuiigTu/ G41cAqOKJuhZyHCrSQ4yzmf7VjHQy+Q= -----END CERTIFICATE-----Generated at Thu Oct 8 21:10:49 2026 by rpki-client