$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa File: a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa (raw, json) Hash identifier: 79QdxnKPdu9w6J6NJtrwhu0sT2LyP99jdxh1kDzMLrM= Subject key identifier: 2A:21:8F:52:15:C9:28:EB:9B:76:F2:FC:24:85:29:B7:0A:6B:F1:6C Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C6895623402CE7FBE240 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 209.171.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c6:89:56:23:40:2c:e7:fb:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=989f41c2-1fd6-45bc-8adb-814d5ff1defa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8d:db:f7:c9:3a:10:d7:ce:87:6b:c3:2a:f6: e9:0c:2e:47:06:7e:12:95:6e:b3:10:1d:55:67:58: 95:cf:1b:20:12:58:39:3e:06:a5:fd:26:44:03:30: 50:d3:35:dd:27:ee:1f:42:c8:01:e0:bc:9b:28:e7: f2:17:24:4b:1b:22:15:e0:76:2f:d3:23:20:1c:e9: 7a:fa:40:42:74:f3:aa:cc:f9:8f:8d:8b:79:ee:97: 28:80:5f:80:c5:95:8f:c7:29:f9:66:98:a0:54:df: e2:a9:5c:dd:30:09:34:3e:47:b4:6d:0e:56:22:3a: ed:5b:28:ba:1a:79:40:04:73:d4:d0:b1:37:d1:9c: 83:11:80:f5:82:06:d6:b2:ac:a2:27:03:26:03:f2: e9:8b:06:90:ec:92:f1:d9:7e:93:de:12:60:bc:df: ac:31:53:bf:42:e7:5d:f8:ce:fa:48:07:b4:ae:fe: 88:4c:be:2a:1b:47:fd:df:56:95:10:fb:3e:82:77: bc:53:3a:ea:52:1e:da:62:0b:1b:a1:e1:85:23:ac: 7a:b8:db:c5:f7:6d:a6:49:7e:2b:36:8d:ef:a9:16: 08:b0:db:51:34:35:d4:ef:10:6e:56:5b:23:3b:b0: f8:d6:c3:37:08:e0:4e:99:2e:75:7e:e2:56:38:6b: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:21:8F:52:15:C9:28:EB:9B:76:F2:FC:24:85:29:B7:0A:6B:F1:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/a61cbd4d-6cea-32bd-9c67-7b13bf2c148a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.171.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:b4:b1:fd:c4:0b:f4:ca:61:ae:a3:6c:cc:20:13:82:9e:e0: 5a:02:b5:c4:05:5c:53:a1:c0:76:fd:01:cf:8e:c4:7e:4a:56: ea:8e:06:a7:9c:a7:d1:45:ac:1b:d3:5d:0e:34:b4:87:32:ec: 24:b5:90:ca:29:b8:87:02:39:9f:b1:62:08:97:22:f6:02:f6: 06:ce:1f:55:f9:eb:1b:f4:10:7e:ac:fd:6c:72:2a:0d:c7:3a: 1d:6b:8e:ee:8f:bf:bd:9b:cd:ac:f7:d4:58:be:1c:e6:d2:fe: 71:d9:d8:b7:a1:08:f9:f1:51:72:08:fa:56:4c:20:bd:1f:4d: 92:fa:c4:03:8f:d2:ba:e7:b4:58:24:ef:3e:3d:6d:f8:94:0a: 84:cc:5b:ff:2a:ed:ae:ff:d5:6d:8f:a1:c8:1c:39:0e:42:fe: 34:89:17:3a:0e:1b:f3:62:6a:4b:4d:9d:5a:36:ba:0f:5e:6d: 33:82:46:e2:6e:3b:ba:ef:fd:e5:51:a4:81:0a:ea:b6:06:75: 3a:15:b6:9b:f4:9f:6e:80:00:33:8a:05:a5:bd:11:cb:4e:17: b1:45:f9:37:d2:68:1c:51:99:ca:95:e2:ed:3b:dd:bf:d1:11: 1c:89:f2:59:00:9e:8f:ba:84:83:bd:6a:f9:20:13:61:a7:92: ba:2b:a3:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8aJViNALOf74kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTg5ZjQxYzItMWZkNi00NWJjLThhZGItODE0ZDVmZjFkZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Y3b98k6ENfOh2vDKvbpDC5HBn4SlW6zEB1V Z1iVzxsgElg5Pgal/SZEAzBQ0zXdJ+4fQsgB4LybKOfyFyRLGyIV4HYv0yMgHOl6 +kBCdPOqzPmPjYt57pcogF+AxZWPxyn5ZpigVN/iqVzdMAk0Pke0bQ5WIjrtWyi6 GnlABHPU0LE30ZyDEYD1ggbWsqyiJwMmA/LpiwaQ7JLx2X6T3hJgvN+sMVO/Qudd +M76SAe0rv6ITL4qG0f931aVEPs+gne8UzrqUh7aYgsboeGFI6x6uNvF922mSX4r No3vqRYIsNtRNDXU7xBuVlsjO7D41sM3COBOmS51fuJWOGtBcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCohj1IVySjrm3by/CSFKbcKa/FsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYTYxY2JkNGQtNmNlYS0z MmJkLTljNjctN2IxM2JmMmMxNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0asQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJu0sf3EC/TKYa6jbMwgE4Ke4FoCtcQFXFOhwHb9Ac+OxH5KVuqOBqec p9FFrBvTXQ40tIcy7CS1kMopuIcCOZ+xYgiXIvYC9gbOH1X56xv0EH6s/WxyKg3H Oh1rju6Pv72bzaz31Fi+HObS/nHZ2LehCPnxUXII+lZMIL0fTZL6xAOP0rrntFgk 7z49bfiUCoTMW/8q7a7/1W2PocgcOQ5C/jSJFzoOG/NiaktNnVo2ug9ebTOCRuJu O7rv/eVRpIEK6rYGdToVtpv0n26AADOKBaW9EctOF7FF+TfSaBxRmcqV4u073b/R ERyJ8lkAno+6hIO9avkgE2Gnkroro0U= -----END CERTIFICATE-----Generated at Sat Sep 26 05:29:23 2026 by rpki-client