$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa File: 5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa (raw, json) Hash identifier: aU7cdhutrKe8ehuu0iGX6vflJUgOVEFfWo7ZEkVBhX4= Subject key identifier: AB:D6:C4:BB:AA:C8:13:DA:89:B7:74:02:46:68:90:DF:C9:BF:55:11 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584F49740F77D94C6A8A742BF080 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36298 IP address blocks: 209.166.148.0/24 maxlen: 24 209.166.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0f:77:d9:4c:6a:8a:74:2b:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c9cbe0cd-20d1-4b00-905b-490715612bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:70:f4:a1:8f:9a:d6:4a:ad:26:86:4c:ef: 62:87:17:64:d5:dd:3f:1d:fb:31:ca:db:0d:64:52: ac:af:f1:89:1e:3a:b4:ea:3b:01:76:91:ce:60:95: 50:13:86:e6:4b:3a:5c:a8:ec:a7:b3:7b:db:a9:bb: aa:73:7f:61:40:9b:3b:d5:09:a0:57:4a:f1:b8:6e: 87:80:4f:ff:56:42:a5:6d:da:1c:fe:1d:a2:c5:6f: b8:63:4e:7d:8e:7e:59:15:9f:10:52:b8:27:f0:b1: 30:67:05:9d:7b:eb:98:13:96:33:e9:4e:6d:1e:eb: 7e:a2:47:67:74:8f:51:98:3d:5a:96:ae:1d:a3:f3: f2:55:a2:42:0b:73:ef:be:d0:9e:0b:11:cb:8c:51: 1b:85:df:36:94:e1:30:21:14:4e:76:1b:a2:48:e1: 6c:d6:70:50:10:8d:7c:01:64:92:aa:67:da:65:a0: ae:72:f7:5e:0e:c0:d6:c5:83:1b:ec:b6:bf:3a:cf: 24:56:91:f4:be:fd:09:d9:a4:d2:db:58:03:b6:0e: 7e:5b:9b:78:ca:f5:63:46:0d:6a:00:76:a5:d0:eb: 74:2f:58:69:06:21:80:fd:02:b0:d3:5b:81:dc:b7: ae:6b:a8:0d:c9:26:fa:14:74:c8:63:00:f9:bf:8d: 40:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D6:C4:BB:AA:C8:13:DA:89:B7:74:02:46:68:90:DF:C9:BF:55:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5cc4d6c1-eff2-3a40-8619-5f616f8af19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.166.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f6:23:30:e0:4c:a7:b7:24:f0:14:cf:d7:9f:63:98:a1:4b: a3:87:2d:a7:7f:81:a9:45:40:e9:66:fb:63:ad:01:e7:fa:f0: 12:30:a7:2d:b4:a2:59:83:81:8a:10:21:2e:41:43:27:49:cf: 21:d4:cc:50:fe:3b:59:b8:16:36:0e:53:7a:63:04:7f:a8:d8: 47:e7:b4:0f:99:8b:fe:91:d5:2c:5f:c6:03:90:ba:47:5f:c5: 64:ac:22:e0:31:e8:43:a5:56:61:32:0c:6f:06:78:5c:01:96: b5:ea:7d:dd:d8:47:70:af:dd:92:40:47:4e:5e:6a:98:35:93: 3a:de:fd:9b:e2:78:09:6e:0e:b1:d3:a5:73:8a:55:fb:fa:b7: f8:1d:5e:06:a2:6b:7b:47:ab:70:8b:bc:7a:a1:58:fc:e5:ab: a6:b7:13:4c:65:a2:90:86:21:1b:9a:a4:3a:d6:09:29:c9:f7: 4d:ee:f5:57:3b:cd:6d:bd:3e:f7:ce:9d:88:57:c3:41:10:30: b0:53:7a:15:c1:40:4d:16:d1:81:03:16:51:b1:5d:52:b5:10: bc:ce:5c:76:23:a3:7a:08:41:6e:5b:fe:6a:51:16:14:53:9f: dc:00:68:91:c4:f5:c7:20:c7:e8:f0:3c:46:53:d2:2d:55:16: e0:8a:9e:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdA932UxqinQr8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzljYmUwY2QtMjBkMS00YjAwLTkwNWItNDkwNzE1NjEyYmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTRw9KGPmtZKrSaGTO9ihxdk1d0/HfsxytsN ZFKsr/GJHjq06jsBdpHOYJVQE4bmSzpcqOyns3vbqbuqc39hQJs71QmgV0rxuG6H gE//VkKlbdoc/h2ixW+4Y059jn5ZFZ8QUrgn8LEwZwWde+uYE5Yz6U5tHut+okdn dI9RmD1alq4do/PyVaJCC3PvvtCeCxHLjFEbhd82lOEwIRROdhuiSOFs1nBQEI18 AWSSqmfaZaCucvdeDsDWxYMb7La/Os8kVpH0vv0J2aTS21gDtg5+W5t4yvVjRg1q AHal0Ot0L1hpBiGA/QKw01uB3Leua6gNySb6FHTIYwD5v41AgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvWxLuqyBPaibd0AkZokN/Jv1URMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNWNjNGQ2YzEtZWZmMi0z YTQwLTg2MTktNWY2MTZmOGFmMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0aaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA72IzDgTKe3JPAUz9efY5ihS6OHLad/galFQOlm+2OtAef68BIwpy20 olmDgYoQIS5BQydJzyHUzFD+O1m4FjYOU3pjBH+o2EfntA+Zi/6R1SxfxgOQukdf xWSsIuAx6EOlVmEyDG8GeFwBlrXqfd3YR3Cv3ZJAR05eapg1kzre/ZvieAluDrHT pXOKVfv6t/gdXgaia3tHq3CLvHqhWPzlq6a3E0xlopCGIRuapDrWCSnJ903u9Vc7 zW29PvfOnYhXw0EQMLBTehXBQE0W0YEDFlGxXVK1ELzOXHYjo3oIQW5b/mpRFhRT n9wAaJHE9ccgx+jwPEZT0i1VFuCKnmM= -----END CERTIFICATE-----Generated at Thu Oct 8 19:36:21 2026 by rpki-client