$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f8db3558-5be9-382a-aa31-7e42fffa9832.roa File: f8db3558-5be9-382a-aa31-7e42fffa9832.roa (raw, json) Hash identifier: Yw2UO7ZUuPZaKKHQDKT3ktS1J0XJZbos7W+FyDLUzZ0= Subject key identifier: 8D:36:1F:A5:3E:6B:71:67:D2:7B:B7:43:D6:A0:74:48:CE:2A:F2:B8 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973F6A5E569440C65C95800 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f8db3558-5be9-382a-aa31-7e42fffa9832.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 209.53.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f6:a5:e5:69:44:0c:65:c9:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e5bc407d-6f84-47d6-a6d7-a35d4b209fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:0f:2f:01:3c:ce:62:45:d0:76:96:66:bb: 0c:96:e3:54:db:d2:f6:15:58:6e:fa:c6:ae:3d:5b: fb:8b:5d:ac:9c:2f:37:62:3d:81:95:c0:1a:a7:6f: cf:b6:64:b5:75:19:01:e1:8e:cb:8f:ac:dd:7f:41: 08:e6:5f:46:06:f1:06:1e:d9:52:fa:a4:ad:1e:2f: a2:c7:4c:ea:51:1f:01:d4:22:f8:8c:f9:d4:d5:9d: 08:a8:b9:9c:21:13:6f:6b:dd:e9:e1:fa:93:65:e9: 22:66:67:80:c0:a2:0b:56:42:3d:92:8e:91:05:81: dc:03:b5:b2:4f:2a:3b:ac:2d:01:c9:5b:1e:0b:67: 26:59:f5:95:42:6f:b2:4e:8c:34:0b:0a:d3:c9:17: d5:e7:cc:b1:70:4a:57:b5:35:07:28:94:b7:42:40: ac:f2:14:63:69:13:a0:e9:1c:2a:e8:fe:a9:27:e5: 9e:54:5a:22:b1:6a:7e:a0:2f:97:d5:42:dd:ec:99: aa:52:c8:89:27:68:e1:c1:1f:d3:71:1e:4b:27:67: c3:c7:3e:16:18:0c:6b:92:f3:70:f7:19:9d:c5:4a: f0:c1:c8:6d:50:1d:dd:07:fd:71:17:16:08:34:bd: 6c:4d:f0:13:ea:d6:16:51:3d:23:48:a2:40:1f:8f: 3e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:36:1F:A5:3E:6B:71:67:D2:7B:B7:43:D6:A0:74:48:CE:2A:F2:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/f8db3558-5be9-382a-aa31-7e42fffa9832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.53.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:00:40:84:5c:1e:1d:b1:86:d1:8e:77:12:cc:8f:32:2e:66: 5c:49:5d:c3:2f:ce:af:f3:ff:34:d3:15:bd:67:74:6e:65:28: d3:fd:e3:fe:1f:c5:89:03:b1:c5:11:76:c8:d3:94:98:ce:f6: b0:32:8a:71:c0:67:89:ba:29:ad:a0:49:ae:1e:3c:3e:ff:32: cf:45:9a:c0:2b:0f:36:fc:1a:16:97:72:96:7a:d7:f3:20:6f: b0:63:e1:94:7f:57:43:85:9c:e8:b0:2e:ce:be:f7:4b:00:ea: e9:c8:08:6f:b5:75:ed:09:b3:35:86:19:a5:02:ea:cf:2a:a6: 63:9f:44:ab:b1:36:9c:61:8a:c9:78:10:ce:03:9a:69:4c:ec: f2:8d:ab:8c:34:2c:c6:81:eb:14:e5:67:fc:96:1d:c6:dc:af: 08:2d:12:c9:1f:d7:e2:ce:aa:9c:06:e1:6f:26:2a:13:26:31: 23:87:e5:67:e8:a9:bd:fe:14:d3:60:c6:ab:8c:e1:67:6b:b3: 0a:68:ae:c7:6e:89:1b:42:79:05:78:20:d8:cb:0c:88:21:85: a0:c9:49:d0:af:b3:33:76:b9:dc:c1:dc:ec:b2:0d:16:5f:78: 69:de:06:f0:8f:42:9c:38:26:a8:09:37:57:72:e3:21:60:38: 89:f6:cc:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/al5WlEDGXJWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTViYzQwN2QtNmY4NC00N2Q2LWE2ZDctYTM1ZDRiMjA5ZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU4PLwE8zmJF0HaWZrsMluNU29L2FVhu+sau PVv7i12snC83Yj2BlcAap2/PtmS1dRkB4Y7Lj6zdf0EI5l9GBvEGHtlS+qStHi+i x0zqUR8B1CL4jPnU1Z0IqLmcIRNva93p4fqTZekiZmeAwKILVkI9ko6RBYHcA7Wy Tyo7rC0ByVseC2cmWfWVQm+yTow0CwrTyRfV58yxcEpXtTUHKJS3QkCs8hRjaROg 6Rwq6P6pJ+WeVFoisWp+oC+X1ULd7JmqUsiJJ2jhwR/TcR5LJ2fDxz4WGAxrkvNw 9xmdxUrwwchtUB3dB/1xFxYINL1sTfAT6tYWUT0jSKJAH48+owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI02H6U+a3Fn0nu3Q9agdEjOKvK4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZjhkYjM1NTgtNWJlOS0z ODJhLWFhMzEtN2U0MmZmZmE5ODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcAQIRcHh2xhtGOdxLMjzIuZlxJXcMvzq/z/zTTFb1ndG5lKNP94/4f xYkDscURdsjTlJjO9rAyinHAZ4m6Ka2gSa4ePD7/Ms9FmsArDzb8GhaXcpZ61/Mg b7Bj4ZR/V0OFnOiwLs6+90sA6unICG+1de0JszWGGaUC6s8qpmOfRKuxNpxhisl4 EM4DmmlM7PKNq4w0LMaB6xTlZ/yWHcbcrwgtEskf1+LOqpwG4W8mKhMmMSOH5Wfo qb3+FNNgxquM4WdrswporsduiRtCeQV4INjLDIghhaDJSdCvszN2udzB3OyyDRZf eGneBvCPQpw4JqgJN1dy4yFgOIn2zEk= -----END CERTIFICATE-----Generated at Sun Sep 27 07:59:38 2026 by rpki-client