$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa File: f96003a4-5e6a-3408-ad84-035ada29fedc.roa (raw, json) Hash identifier: 50DGfDwM6UdWuusMoyDOJKcnneuUQulg3ydaODcrnp8= Subject key identifier: DC:21:0E:AE:28:42:88:28:76:E9:A6:8A:3E:EE:3B:62:BB:3B:98:65 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584F49740F56C46668F6FC0F3180 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399635 IP address blocks: 209.221.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0f:56:c4:66:68:f6:fc:0f:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=83c80a4e-db04-4c2a-82d5-df3da40996ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:82:3f:64:8e:03:55:f8:50:2a:35:3f:e9:dc: e5:ab:39:a5:66:ff:ba:63:f1:5c:2f:38:54:43:0b: 25:c2:2b:d3:47:f7:da:1a:4c:e6:ce:4b:fa:34:9c: af:4b:f3:1c:17:8c:27:8b:81:df:27:31:a2:46:e4: cb:96:0a:9c:a4:4f:b0:06:25:d0:5f:e7:40:62:9a: 82:28:93:e0:d8:87:c0:52:04:1e:96:3f:97:8e:39: 27:12:be:85:87:4c:93:f7:23:21:30:54:39:e9:5e: 54:ce:68:8e:b8:c9:8b:3b:d2:65:6e:35:4b:3a:3e: f2:30:1e:4d:bd:76:ce:ac:80:af:a2:7c:40:a8:21: 85:c0:9c:19:0c:eb:e9:44:42:34:4b:08:c9:26:56: d7:c0:7a:ce:eb:59:d0:8a:31:e8:cc:07:4c:87:b6: b2:be:48:ef:b5:26:20:e8:f3:4b:f6:4e:c3:d1:27: af:21:ce:3a:75:28:9c:5f:e3:fe:34:dc:0b:ae:f4: 4c:a7:bd:a2:a9:7a:06:14:1f:5d:ff:b8:a9:d1:da: d4:33:71:8a:0f:76:f3:6a:46:57:21:48:6e:a8:e6: 64:6b:30:31:17:10:05:06:67:66:04:13:e1:47:9a: 85:e4:4c:28:b1:9b:23:81:a0:3d:71:b8:4a:f1:0e: a9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:21:0E:AE:28:42:88:28:76:E9:A6:8A:3E:EE:3B:62:BB:3B:98:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/f96003a4-5e6a-3408-ad84-035ada29fedc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.221.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:17:0d:b6:3b:0b:dd:20:52:2b:84:f5:55:47:e0:0f:87:9e: a7:ef:4a:a1:a2:45:ce:5b:31:4d:d4:34:07:70:c5:d1:6c:f7: b6:f5:5c:e6:ab:49:59:7d:33:c6:82:29:67:b0:a2:20:47:dd: 32:6a:4d:f5:79:9d:ef:f2:31:4c:f6:71:38:c5:1c:83:61:d5: e4:33:b2:54:21:31:b1:09:ab:a0:df:88:03:aa:9d:91:66:07: 68:bb:c2:f6:e8:89:9f:e7:03:41:44:f0:04:a9:80:ee:d7:c4: e0:95:0b:61:59:a1:bd:b0:a2:c0:60:f7:4d:fd:a3:06:54:34: 48:e3:48:3d:2b:c7:b7:63:5e:11:a4:90:b6:a9:65:4b:3e:5b: 51:4f:54:7e:33:b1:b9:43:46:29:6e:73:da:9f:43:14:c5:07: 00:2a:eb:7f:fc:a4:56:8b:3d:a8:93:8b:b3:c0:07:7c:0b:77: ad:25:46:8e:0a:e8:dc:c4:62:53:ad:11:d1:e2:d1:65:9d:8c: 9f:c0:f8:69:b0:e0:59:f2:14:19:95:52:73:62:c2:7b:8c:78: 69:69:80:c2:65:b5:72:2b:76:19:a9:01:90:50:1d:e9:d5:70: 91:7c:3b:f6:4f:46:bf:8e:46:b7:d6:d3:99:90:c3:b0:c0:6e: a8:7e:28:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdA9WxGZo9vwPMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODNjODBhNGUtZGIwNC00YzJhLTgyZDUtZGYzZGE0MDk5NmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14I/ZI4DVfhQKjU/6dzlqzmlZv+6Y/FcLzhU QwslwivTR/faGkzmzkv6NJyvS/McF4wni4HfJzGiRuTLlgqcpE+wBiXQX+dAYpqC KJPg2IfAUgQelj+XjjknEr6Fh0yT9yMhMFQ56V5UzmiOuMmLO9JlbjVLOj7yMB5N vXbOrICvonxAqCGFwJwZDOvpREI0SwjJJlbXwHrO61nQijHozAdMh7ayvkjvtSYg 6PNL9k7D0SevIc46dSicX+P+NNwLrvRMp72iqXoGFB9d/7ip0drUM3GKD3bzakZX IUhuqOZkazAxFxAFBmdmBBPhR5qF5EwosZsjgaA9cbhK8Q6pewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwhDq4oQogodummij7uO2K7O5hlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZjk2MDAzYTQtNWU2YS0z NDA4LWFkODQtMDM1YWRhMjlmZWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsXDbY7C90gUiuE9VVH4A+HnqfvSqGiRc5bMU3UNAdwxdFs97b1XOar SVl9M8aCKWewoiBH3TJqTfV5ne/yMUz2cTjFHINh1eQzslQhMbEJq6DfiAOqnZFm B2i7wvboiZ/nA0FE8ASpgO7XxOCVC2FZob2wosBg9039owZUNEjjSD0rx7djXhGk kLapZUs+W1FPVH4zsblDRiluc9qfQxTFBwAq63/8pFaLPaiTi7PAB3wLd60lRo4K 6NzEYlOtEdHi0WWdjJ/A+Gmw4FnyFBmVUnNiwnuMeGlpgMJltXIrdhmpAZBQHenV cJF8O/ZPRr+ORrfW05mQw7DAbqh+KGo= -----END CERTIFICATE-----Generated at Sun Oct 11 17:27:51 2026 by rpki-client