$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b952b5e6-aab3-31c5-9372-9ae3e06dda1b.roa File: b952b5e6-aab3-31c5-9372-9ae3e06dda1b.roa (raw, json) Hash identifier: 3vltGXod0mY5HHwBr6G8KfkBB9TP9w7AxNnqG9Unz4k= Subject key identifier: C7:AE:5C:9C:60:A3:77:24:22:02:0B:DC:38:A4:E7:28:C5:A8:18:E9 Certificate issuer: /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Certificate serial: 010D0C9F4328584F2D87B9EA5A6E308F96D97900 Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b952b5e6-aab3-31c5-9372-9ae3e06dda1b.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 20055 IP address blocks: 209.188.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:b9:ea:5a:6e:30:8f:96:d9:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=1358e158-f93c-4aa4-a0f8-11fdc8c6ad63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6a:76:f8:1c:20:8b:82:bc:9a:58:8a:d9:cd: 28:94:a9:6c:76:8c:67:97:fa:85:cc:7a:5e:23:55: 57:b0:f0:36:c7:f8:1e:59:81:9e:ce:63:14:9f:cf: 27:b6:7f:b1:7c:1c:95:e5:f2:8c:87:01:26:a0:c7: 1a:d5:43:7f:d0:cd:ee:15:60:10:49:e3:3c:5d:75: f7:df:36:35:41:33:7d:dc:c4:73:e6:b1:88:3f:8d: f0:6c:a2:e9:5b:2f:73:57:ef:a1:50:2e:bb:86:ce: d3:c2:da:6a:fb:1f:32:5b:38:6f:7c:ae:b6:37:16: 6c:3b:b2:15:50:69:a7:06:a2:96:00:31:bf:5b:09: 49:1b:2f:94:78:51:12:0e:11:f3:87:37:cc:54:a2: 80:48:8f:5b:48:05:06:45:44:b7:d7:e5:8f:fb:b2: 8c:e0:68:58:1a:f5:80:c5:30:86:bb:04:9e:17:50: 56:b2:80:a1:b4:50:ef:5e:bd:be:c5:4a:08:37:31: 6f:53:82:57:e5:51:d6:f0:97:ee:7b:3d:53:89:ce: 6e:4c:a9:c5:4f:e6:9d:fa:df:ae:81:27:d3:96:ff: 01:c5:68:a0:17:3f:4b:ae:86:ff:30:f4:7c:68:26: d0:4a:d3:22:ed:72:c1:b8:18:44:bb:26:f1:4c:a6: d5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AE:5C:9C:60:A3:77:24:22:02:0B:DC:38:A4:E7:28:C5:A8:18:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/b952b5e6-aab3-31c5-9372-9ae3e06dda1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl X509v3 Authority Key Identifier: keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer sbgp-ipAddrBlock: critical IPv4: 209.188.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:e0:5c:6e:c9:9b:8b:b1:95:49:70:1a:dc:8a:1c:2a:60:dc: 5b:84:a8:c0:cd:b1:8e:46:f5:a3:51:50:19:cf:d9:91:0a:d1: cb:01:ba:93:ab:83:44:75:5c:b2:fb:79:0f:df:32:41:9a:3e: b0:da:6b:ea:dd:8c:fa:f6:7c:df:63:e9:e3:ea:35:06:3e:23: 67:76:e7:15:0d:fe:8a:2a:73:b7:72:a4:f8:4e:cb:89:01:8b: e5:f1:30:72:76:7c:99:32:a1:4f:4f:1b:95:f2:dc:ba:c8:71: 69:7e:72:eb:84:83:46:b7:8a:7c:b6:42:41:9c:a4:68:ef:48: 9e:b9:f4:a3:9b:55:01:78:3f:a8:9a:77:fc:8f:e8:12:ee:17: c7:40:50:74:25:d1:f0:aa:b8:dc:19:62:34:e4:a2:63:6d:42: 0e:f8:94:f4:9a:15:0a:f4:49:b2:3d:c4:b0:a6:98:33:97:29: 7c:38:78:7e:c8:2b:67:7a:2b:01:8a:30:2b:1e:b9:75:49:35: 25:08:6e:73:b8:04:b9:79:00:e4:09:d0:f7:3f:05:02:00:4b: b8:99:50:1e:3a:fb:a2:bf:87:b6:3c:6f:14:43:c8:3c:92:0c: 23:1b:f8:e1:95:fc:9f:88:3e:b7:04:08:64:1d:f4:af:46:09: 31:3b:6a:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th7nqWm4wj5bZeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMxZmJkOGItNGVkOS00ZjVkLWE4ZjAtNzU1OWQ5MWJm M2M4MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk MTM1OGUxNTgtZjkzYy00YWE0LWEwZjgtMTFmZGM4YzZhZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGp2+Bwgi4K8mliK2c0olKlsdoxnl/qFzHpe I1VXsPA2x/geWYGezmMUn88ntn+xfByV5fKMhwEmoMca1UN/0M3uFWAQSeM8XXX3 3zY1QTN93MRz5rGIP43wbKLpWy9zV++hUC67hs7Twtpq+x8yWzhvfK62NxZsO7IV UGmnBqKWADG/WwlJGy+UeFESDhHzhzfMVKKASI9bSAUGRUS31+WP+7KM4GhYGvWA xTCGuwSeF1BWsoChtFDvXr2+xUoINzFvU4JX5VHW8Jfuez1Tic5uTKnFT+ad+t+u gSfTlv8BxWigFz9Lrob/MPR8aCbQStMi7XLBuBhEuybxTKbV1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeuXJxgo3ckIgIL3Dik5yjFqBjpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFm YmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5ZDkxYmYzYzgvYjk1MmI1ZTYtYWFiMy0z MWM1LTkzNzItOWFlM2UwNmRkYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmMxZmJkOGItNGVkOS00ZjVkLWE4 ZjAtNzU1OWQ5MWJmM2M4L2ZjMWZiZDhiLTRlZDktNGY1ZC1hOGYwLTc1NTlkOTFi ZjNjOC5jcmwwHwYDVR0jBBgwFoAUbKtKsvVYO/RVBP3F8Yue3m5JAT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzFmYmQ4Yi00ZWQ5LTRmNWQtYThmMC03NTU5 ZDkxYmYzYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bxjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjgXG7Jm4uxlUlwGtyKHCpg3FuEqMDNsY5G9aNRUBnP2ZEK0csBupOr g0R1XLL7eQ/fMkGaPrDaa+rdjPr2fN9j6ePqNQY+I2d25xUN/ooqc7dypPhOy4kB i+XxMHJ2fJkyoU9PG5Xy3LrIcWl+cuuEg0a3iny2QkGcpGjvSJ659KObVQF4P6ia d/yP6BLuF8dAUHQl0fCquNwZYjTkomNtQg74lPSaFQr0SbI9xLCmmDOXKXw4eH7I K2d6KwGKMCseuXVJNSUIbnO4BLl5AOQJ0Pc/BQIAS7iZUB46+6K/h7Y8bxRDyDyS DCMb+OGV/J+IPrcECGQd9K9GCTE7asM= -----END CERTIFICATE-----Generated at Fri Sep 25 23:40:54 2026 by rpki-client