$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa File: f9eeb661-56ce-3c62-b28c-11e037b120b4.roa (raw, json) Hash identifier: tAv3IUacDFkGvrHAgqtK6b+8uxDgQ5wTys925iZN9VM= Subject key identifier: CA:46:0A:8B:53:84:9F:36:F6:2A:14:B8:67:9D:C5:6E:56:49:19:A5 Certificate issuer: /CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Certificate serial: 010D0C9F4328584F480D3AB3DC034F26C985E6E0 Authority key identifier: 23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 26793 IP address blocks: 69.5.128.0/19 maxlen: 24 162.216.76.0/22 maxlen: 24 173.240.192.0/20 maxlen: 24 205.237.160.0/19 maxlen: 24 206.127.176.0/20 maxlen: 24 2604:2800::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:3a:b3:dc:03:4f:26:c9:85:e6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de111c10-2de5-41fa-a9e4-1e49a0479199 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=a21ba83b-f4a3-4c0a-ba8a-9840fa42fee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c1:c8:ec:fc:09:85:c4:2d:46:b7:5b:30:82: ab:e5:4f:48:9b:3a:db:a0:a4:b7:e1:99:4a:60:0f: 96:32:8b:56:e7:53:72:49:9c:25:56:db:89:80:48: c2:07:c4:b0:97:cb:eb:1d:a8:80:bf:9c:4d:68:a9: 99:8c:a3:51:d4:83:d2:c8:26:cc:07:20:20:98:dc: 03:b0:4b:7f:e6:89:1a:35:21:f6:ca:fa:95:66:cb: f7:71:12:2f:80:de:54:09:02:8e:6d:14:3a:2b:02: d1:3c:7d:78:23:2b:8d:c9:07:21:a6:36:4b:74:c7: df:d6:06:2a:2e:0b:a4:9c:ec:87:65:94:83:b1:f9: a6:dc:19:81:0f:e8:5c:21:68:63:e3:04:fa:e5:0f: 21:16:f8:29:51:24:d1:ad:67:70:20:5c:61:53:d0: 88:10:0c:6d:c3:61:24:53:e9:3b:5c:28:6f:9a:d8: c0:41:11:44:84:ee:f0:2b:38:99:43:7d:0a:cf:09: d6:ed:b9:c7:7b:84:fc:f8:96:69:94:5a:d9:86:f1: 69:06:5c:f8:f5:60:d8:33:70:9e:b2:32:11:b6:dd: 44:39:95:05:c7:b1:65:92:9b:d9:74:7b:8c:55:e0: c7:6b:a3:e5:4b:67:0f:a1:f6:d4:76:2a:ea:50:ce: d9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:46:0A:8B:53:84:9F:36:F6:2A:14:B8:67:9D:C5:6E:56:49:19:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/f9eeb661-56ce-3c62-b28c-11e037b120b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199/de111c10-2de5-41fa-a9e4-1e49a0479199.crl X509v3 Authority Key Identifier: keyid:23:7F:B2:23:8D:10:59:B6:C8:AF:3F:38:4B:94:7A:7C:CA:92:69:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de111c10-2de5-41fa-a9e4-1e49a0479199.cer sbgp-ipAddrBlock: critical IPv4: 69.5.128.0/19 162.216.76.0/22 173.240.192.0/20 205.237.160.0/19 206.127.176.0/20 IPv6: 2604:2800::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:18:63:b4:b0:1d:97:b4:07:09:d0:13:4e:90:fe:96:d6:ef: 13:66:d2:f8:c4:3e:ff:2a:7e:41:c5:0b:a3:39:e9:01:34:1c: fc:bd:73:e9:da:a9:53:b6:cd:c8:2c:db:1a:97:c7:af:8c:8d: 3d:22:60:01:11:12:ba:9f:4c:0f:2b:bf:3f:4c:0f:c2:6a:83: c5:89:29:7e:43:85:e8:1e:8a:33:1d:dc:f1:45:aa:58:7c:5e: e2:fb:02:a2:2b:42:52:89:17:22:7f:35:e7:83:24:b4:5f:4f: 48:e8:3f:33:f3:43:46:0f:d8:3d:c6:6a:b1:80:65:f7:ad:54: 2a:75:f9:10:fc:2c:b6:62:7a:57:cd:f7:2f:b1:89:75:cf:6d: df:43:af:e7:c6:1c:ac:c6:d2:81:f2:0b:72:6b:10:3a:2b:87: 19:a4:6b:84:e6:53:6d:f3:14:1d:2f:79:fe:94:f1:18:12:d8: a3:22:78:4b:0c:bc:4f:57:6d:d6:0e:27:fd:32:01:5a:01:55: f8:77:b3:6d:2e:f0:78:1c:16:a4:47:02:96:f0:59:48:51:08: 48:c9:62:67:9c:f4:19:36:de:b7:b9:f1:24:1c:5f:77:14:28: c0:cb:f6:fd:c4:05:74:cb:0a:8d:e8:eb:25:17:b0:6a:09:b1: 19:3d:6e:47 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWE9IDTqz3ANPJsmF5uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUxMTFjMTAtMmRlNS00MWZhLWE5ZTQtMWU0OWEwNDc5 MTk5MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YTIxYmE4M2ItZjRhMy00YzBhLWJhOGEtOTg0MGZhNDJmZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcHI7PwJhcQtRrdbMIKr5U9ImzrboKS34ZlK YA+WMotW51NySZwlVtuJgEjCB8Swl8vrHaiAv5xNaKmZjKNR1IPSyCbMByAgmNwD sEt/5okaNSH2yvqVZsv3cRIvgN5UCQKObRQ6KwLRPH14IyuNyQchpjZLdMff1gYq LguknOyHZZSDsfmm3BmBD+hcIWhj4wT65Q8hFvgpUSTRrWdwIFxhU9CIEAxtw2Ek U+k7XChvmtjAQRFEhO7wKziZQ30KzwnW7bnHe4T8+JZplFrZhvFpBlz49WDYM3Ce sjIRtt1EOZUFx7FlkpvZdHuMVeDHa6PlS2cPofbUdirqUM7ZCwIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFMpGCotThJ829ioUuGedxW5WSRmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTEx MWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5YTA0NzkxOTkvZjllZWI2NjEtNTZjZS0z YzYyLWIyOGMtMTFlMDM3YjEyMGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGUxMTFjMTAtMmRlNS00MWZhLWE5 ZTQtMWU0OWEwNDc5MTk5L2RlMTExYzEwLTJkZTUtNDFmYS1hOWU0LTFlNDlhMDQ3 OTE5OS5jcmwwHwYDVR0jBBgwFoAUI3+yI40QWbbIrz84S5R6fMqSab8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTExMWMxMC0yZGU1LTQxZmEtYTllNC0xZTQ5 YTA0NzkxOTkuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFRQWAAwQC othMAwQErfDAAwQFze2gAwQEzn+wMA0EAgACMAcDBQAmBCgAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIsY Y7SwHZe0BwnQE06Q/pbW7xNm0vjEPv8qfkHFC6M56QE0HPy9c+naqVO2zcgs2xqX x6+MjT0iYAERErqfTA8rvz9MD8Jqg8WJKX5DhegeijMd3PFFqlh8XuL7AqIrQlKJ FyJ/NeeDJLRfT0joPzPzQ0YP2D3GarGAZfetVCp1+RD8LLZielfN9y+xiXXPbd9D r+fGHKzG0oHyC3JrEDorhxmka4TmU23zFB0vef6U8RgS2KMieEsMvE9XbdYOJ/0y AVoBVfh3s20u8HgcFqRHApbwWUhRCEjJYmec9Bk23re58SQcX3cUKMDL9v3EBXTL Co3o6yUXsGoJsRk9bkc= -----END CERTIFICATE-----Generated at Tue Sep 29 19:36:07 2026 by rpki-client