$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa File: d18ff211-0ee2-3022-8c45-6711b4123785.roa (raw, json) Hash identifier: JpHSYsA3JN7TMgwETk06O43DaC8M7VpmBZd6tUCHCHA= Subject key identifier: 36:4E:5C:9D:2B:C2:A3:3D:13:F8:A2:0F:A5:3C:B4:2C:B8:0D:99:6B Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C9B78C95A11F8182F9A0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 209.29.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c9:b7:8c:95:a1:1f:81:82:f9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b98d4a58-cbe5-4540-b563-c44e64f1d7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:db:84:83:48:3c:b2:6d:d3:3f:2b:fd:d2:59: d3:fc:2a:0f:e1:e3:8f:7b:22:49:9b:46:2b:b8:b2: 2d:d1:1b:63:ed:04:10:26:5f:05:ae:01:cb:59:de: cb:50:53:17:c6:67:51:44:2a:64:e4:ac:85:6c:e2: 83:43:17:5c:73:24:aa:15:c7:06:f9:9c:7a:66:87: bf:77:a0:18:44:e7:9f:6f:79:a9:2e:f7:12:bf:71: 13:7b:67:5d:c0:3c:be:53:60:66:80:23:bc:4a:0c: 00:65:ca:60:8f:58:a3:f6:db:6f:ee:55:d2:88:11: 10:03:93:86:1a:dd:d3:75:56:c5:f5:5f:6c:45:ba: fa:82:1a:a0:67:b8:2b:e0:27:c9:e7:9d:a1:e5:e7: 7f:56:99:30:52:0c:c3:ac:e9:46:93:3e:98:c5:84: b3:89:a2:73:df:5c:ea:b7:7d:60:28:a9:8e:b3:9b: dd:85:a5:e5:b1:f9:20:e5:04:94:24:d6:8f:bd:15: 81:d1:28:98:be:f3:1e:d5:36:4c:51:ce:d9:6a:94: 77:cb:a9:e6:1f:df:37:d2:f3:81:2e:28:bc:0f:22: 26:a8:16:c4:33:e4:ef:1e:33:6a:e9:47:5b:35:ac: 1d:17:47:6f:ba:1a:b3:88:90:69:89:8e:00:92:58: 97:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4E:5C:9D:2B:C2:A3:3D:13:F8:A2:0F:A5:3C:B4:2C:B8:0D:99:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d18ff211-0ee2-3022-8c45-6711b4123785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d6:e8:37:ba:4f:af:73:41:59:82:2f:20:d9:16:0b:52:bf: 5f:c4:18:ec:e2:8a:5d:fa:a0:84:8b:59:c8:fc:27:78:ab:e5: d1:fc:3f:9b:7b:b8:bd:c1:d7:e7:c6:06:5a:a6:4e:99:b3:15: ce:55:a1:94:99:a1:40:27:31:ec:cb:a8:3c:f8:a8:d2:93:82: 6b:54:42:44:83:f2:2a:b3:a2:5e:10:d6:e5:ed:87:43:79:b6: 09:91:a5:54:08:dd:45:b7:07:bf:cf:41:75:ba:be:5f:77:e9: 43:2a:83:c6:2d:1c:bd:44:40:0f:19:5d:b7:2c:60:41:4a:fc: 69:51:59:ee:41:a5:7a:3d:9b:9c:bb:a0:27:89:c1:2a:a0:ad: 08:ce:dd:02:9c:9e:e7:ae:3e:2f:2c:fc:10:d8:24:c6:f9:05: e5:e0:9b:da:35:37:0c:79:90:f0:f8:e9:88:a9:f9:43:c4:9d: b4:67:e0:aa:3b:fe:82:1f:ab:19:f8:d5:c7:06:fd:4b:50:08: 32:74:2c:db:34:ce:df:de:8b:7d:8d:23:25:36:f0:a5:08:81: 69:db:10:6f:dd:49:6a:ac:24:3f:25:c2:d5:59:95:67:46:30: 4a:fc:0f:e6:5c:7c:0d:b5:bb:a9:38:a5:00:2a:e8:40:76:8f: c2:f3:57:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8m3jJWhH4GC+aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjk4ZDRhNTgtY2JlNS00NTQwLWI1NjMtYzQ0ZTY0ZjFkN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19uEg0g8sm3TPyv90lnT/CoP4eOPeyJJm0Yr uLIt0Rtj7QQQJl8FrgHLWd7LUFMXxmdRRCpk5KyFbOKDQxdccySqFccG+Zx6Zoe/ d6AYROefb3mpLvcSv3ETe2ddwDy+U2BmgCO8SgwAZcpgj1ij9ttv7lXSiBEQA5OG Gt3TdVbF9V9sRbr6ghqgZ7gr4CfJ552h5ed/VpkwUgzDrOlGkz6YxYSziaJz31zq t31gKKmOs5vdhaXlsfkg5QSUJNaPvRWB0SiYvvMe1TZMUc7ZapR3y6nmH9830vOB Lii8DyImqBbEM+TvHjNq6UdbNawdF0dvuhqziJBpiY4AkliXXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZOXJ0rwqM9E/iiD6U8tCy4DZlrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZDE4ZmYyMTEtMGVlMi0z MDIyLThjNDUtNjcxMWI0MTIzNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0R1rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbW6De6T69zQVmCLyDZFgtSv1/EGOziil36oISLWcj8J3ir5dH8P5t7 uL3B1+fGBlqmTpmzFc5VoZSZoUAnMezLqDz4qNKTgmtUQkSD8iqzol4Q1uXth0N5 tgmRpVQI3UW3B7/PQXW6vl936UMqg8YtHL1EQA8ZXbcsYEFK/GlRWe5BpXo9m5y7 oCeJwSqgrQjO3QKcnueuPi8s/BDYJMb5BeXgm9o1Nwx5kPD46Yip+UPEnbRn4Ko7 /oIfqxn41ccG/UtQCDJ0LNs0zt/ei32NIyU28KUIgWnbEG/dSWqsJD8lwtVZlWdG MEr8D+ZcfA21u6k4pQAq6EB2j8LzV4s= -----END CERTIFICATE-----Generated at Sun Oct 11 16:38:35 2026 by rpki-client