$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/0dcbca59-28da-3099-bf76-d1adfd1cd66f.roa File: 0dcbca59-28da-3099-bf76-d1adfd1cd66f.roa (raw, json) Hash identifier: LULtOnI5+no/8I66ozJIfdLF/xFhGZqdGE56oFT4ezI= Subject key identifier: 70:5A:B8:72:7E:17:C6:78:CC:6D:78:4F:81:01:B9:C5:DE:80:B9:73 Certificate issuer: /CN=f21479d9-2438-42c1-aa46-ead35f2d33e2 Certificate serial: 010D0C9F4328584F4988A15962649700E0DB39C0 Authority key identifier: A2:DF:25:37:13:19:AE:61:BC:BD:B7:DE:C6:C7:B5:CD:B3:AB:D0:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/0dcbca59-28da-3099-bf76-d1adfd1cd66f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10823 IP address blocks: 209.204.64.0/20 maxlen: 20 209.204.80.0/21 maxlen: 21 209.204.96.0/20 maxlen: 20 209.204.120.0/22 maxlen: 22 209.204.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:a1:59:62:64:97:00:e0:db:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f21479d9-2438-42c1-aa46-ead35f2d33e2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=501e2e72-1d14-4380-9922-77d32f346b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:c3:49:ed:12:76:32:9a:1e:b2:e8:ed:03: d2:8d:b5:16:e7:c2:39:92:e2:e6:49:f9:14:2c:dd: 97:4e:c1:ff:bb:c7:0f:bd:d2:fd:f0:ec:68:9c:bc: e0:70:0d:15:75:5f:d0:99:57:b5:9f:95:61:0f:e9: b2:7a:3a:a2:ee:99:0b:6d:f5:c9:47:05:59:26:3d: e1:99:87:19:3a:ef:8f:51:d8:ba:95:f5:55:0d:2e: e2:9b:1f:6e:07:8b:e3:f1:e2:0b:aa:af:01:09:ec: b8:88:66:de:83:13:45:e0:75:7c:bf:07:cd:8c:ed: 85:d9:cc:e8:5e:3f:00:19:b8:03:22:6e:08:63:37: ab:4f:52:89:40:4f:d5:7f:5f:9f:11:8b:41:a6:d0: 9d:9e:69:26:a2:a2:3c:fb:09:41:51:0a:44:63:d3: 6c:9a:99:79:b5:11:60:97:82:40:6a:e2:f9:23:48: 79:4f:bf:42:22:6f:a7:97:53:1f:97:b4:00:4e:c4: 3d:bd:9b:8b:fd:4f:c6:cc:8e:df:93:68:51:c0:5a: 6b:09:b2:b9:59:b7:6b:eb:fa:16:e9:b0:03:c8:e2: 2d:4a:38:b7:09:de:f5:22:41:a8:c7:c8:78:d3:59: 80:e3:18:ed:a4:b3:1c:0e:b0:b0:2b:84:d4:2a:5b: ce:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5A:B8:72:7E:17:C6:78:CC:6D:78:4F:81:01:B9:C5:DE:80:B9:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/0dcbca59-28da-3099-bf76-d1adfd1cd66f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.crl X509v3 Authority Key Identifier: keyid:A2:DF:25:37:13:19:AE:61:BC:BD:B7:DE:C6:C7:B5:CD:B3:AB:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer sbgp-ipAddrBlock: critical IPv4: 209.204.64.0-209.204.87.255 209.204.96.0/20 209.204.120.0/22 209.204.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d6:4f:19:3a:c4:06:67:1c:96:bb:53:3e:1f:ac:c7:be:43: 7f:53:fa:5d:35:58:86:50:14:02:4d:92:b6:93:9a:2b:cd:94: 98:2b:98:bf:da:d0:11:a0:3f:61:82:b1:d0:b5:55:ca:2c:9f: a5:ae:92:da:44:17:76:4e:49:c0:0a:c8:2a:37:17:c5:3b:9c: c5:ff:bc:5f:cd:10:20:21:63:0d:a0:e1:08:97:b2:fe:18:ea: 90:d4:14:6a:b7:9d:b9:3a:fd:dc:54:97:ef:ed:2a:14:5b:07: f4:3f:d4:e0:32:44:9f:a1:26:94:dd:b8:43:b7:83:e7:b3:57: d4:8d:64:d4:ea:3f:1c:21:c9:f5:e3:48:08:89:74:69:a3:fd: f3:2e:5c:6c:e7:77:51:5c:a4:a7:5c:a8:74:1c:af:62:2d:58: 66:35:13:92:12:dd:85:79:88:91:3d:d3:43:ee:9e:2d:44:ea: 6c:b8:82:59:e3:c7:6f:29:0a:59:9e:cb:f1:64:24:bd:bf:6c: dc:55:d1:5c:db:cd:a3:a9:b3:b9:a7:fc:0b:8a:37:14:5e:fa: a4:8c:c8:dc:3b:02:b2:9b:0a:df:cd:d8:5e:69:d9:9b:73:8c: c6:c8:82:75:5c:01:96:b5:6b:3c:00:15:5f:a2:08:be:4a:65: f5:05:7b:a2 -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWE9JiKFZYmSXAODbOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjIxNDc5ZDktMjQzOC00MmMxLWFhNDYtZWFkMzVmMmQz M2UyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTAxZTJlNzItMWQxNC00MzgwLTk5MjItNzdkMzJmMzQ2YjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRHDSe0SdjKaHrLo7QPSjbUW58I5kuLmSfkU LN2XTsH/u8cPvdL98OxonLzgcA0VdV/QmVe1n5VhD+myejqi7pkLbfXJRwVZJj3h mYcZOu+PUdi6lfVVDS7imx9uB4vj8eILqq8BCey4iGbegxNF4HV8vwfNjO2F2czo Xj8AGbgDIm4IYzerT1KJQE/Vf1+fEYtBptCdnmkmoqI8+wlBUQpEY9Nsmpl5tRFg l4JAauL5I0h5T79CIm+nl1Mfl7QATsQ9vZuL/U/GzI7fk2hRwFprCbK5Wbdr6/oW 6bADyOItSji3Cd71IkGox8h401mA4xjtpLMcDrCwK4TUKlvO2wIDAQABo4IDbzCC A2swHQYDVR0OBBYEFHBauHJ+F8Z4zG14T4EBucXegLlzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMjE0 NzlkOS0yNDM4LTQyYzEtYWE0Ni1lYWQzNWYyZDMzZTIvMGRjYmNhNTktMjhkYS0z MDk5LWJmNzYtZDFhZGZkMWNkNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjIxNDc5ZDktMjQzOC00MmMxLWFh NDYtZWFkMzVmMmQzM2UyL2YyMTQ3OWQ5LTI0MzgtNDJjMS1hYTQ2LWVhZDM1ZjJk MzNlMi5jcmwwHwYDVR0jBBgwFoAUot8lNxMZrmG8vbfexse1zbOr0GIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMjE0NzlkOS0yNDM4LTQyYzEtYWE0Ni1lYWQz NWYyZDMzZTIuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAbRzEAD BAPRzFADBATRzGADBALRzHgDBADRzH0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACtZPGTrEBmcclrtTPh+s x75Df1P6XTVYhlAUAk2StpOaK82UmCuYv9rQEaA/YYKx0LVVyiyfpa6S2kQXdk5J wArIKjcXxTucxf+8X80QICFjDaDhCJey/hjqkNQUareduTr93FSX7+0qFFsH9D/U 4DJEn6EmlN24Q7eD57NX1I1k1Oo/HCHJ9eNICIl0aaP98y5cbOd3UVykp1yodByv Yi1YZjUTkhLdhXmIkT3TQ+6eLUTqbLiCWePHbykKWZ7L8WQkvb9s3FXRXNvNo6mz uaf8C4o3FF76pIzI3DsCspsK383YXmnZm3OMxsiCdVwBlrVrPAAVX6IIvkpl9QV7 og== -----END CERTIFICATE-----Generated at Sun Sep 27 14:08:01 2026 by rpki-client