$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d83fa997-305c-3126-ba23-d3ee6d99bd2d.roa File: d83fa997-305c-3126-ba23-d3ee6d99bd2d.roa (raw, json) Hash identifier: gB21JTSmM+b3Ub6tDNKFAdli8P2mN8DAOR3hJDl2K2Y= Subject key identifier: CE:B1:86:15:31:3E:1F:6B:4E:2F:AA:58:21:8E:3C:33:62:A5:56:28 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584F43DD4F4EF729B354D10FB4B0 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d83fa997-305c-3126-ba23-d3ee6d99bd2d.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 21782 IP address blocks: 67.209.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:4f:4e:f7:29:b3:54:d1:0f:b4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=76a7dccf-b5cb-40e3-be04-0714976a2cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:54:2e:17:ce:b7:19:44:4b:90:9a:03:29:b4: 02:6f:a5:b6:32:a9:ee:42:d3:10:bf:26:8d:52:36: 75:4b:15:10:98:e6:d0:c2:0f:e0:65:95:cf:04:9a: 8d:a6:2c:dd:6e:9d:83:4d:3e:9e:18:24:4c:b4:22: 60:7b:00:fe:49:17:5b:51:5c:b3:da:71:b3:98:84: ab:7c:e5:ee:9a:1e:7e:74:6e:a8:3f:e3:4d:6a:59: 57:ed:cf:69:d7:8d:09:42:b0:fd:00:b1:d1:95:90: 90:95:43:cb:08:e4:ad:21:02:b0:ad:54:77:f9:73: 94:c5:4e:48:1e:e5:53:65:5e:4b:8a:7a:35:d8:8b: f4:5b:94:d3:7d:c6:d9:39:80:f4:6a:96:bb:36:e4: 45:9f:55:a6:e9:ae:e6:4d:69:25:64:3b:78:65:c3: 8f:e9:4f:7c:fa:61:d5:18:ad:73:94:8e:33:70:ae: f9:d2:4a:f2:73:79:e1:47:8f:5f:51:ce:0b:53:84: f6:b5:c8:50:53:f0:56:c4:be:0c:d2:8f:52:05:0c: a0:96:c4:9e:be:09:76:52:3b:01:c8:6b:55:f8:ab: 2e:9f:c8:60:5d:a7:9e:9b:6f:70:90:7d:05:3f:3a: 12:69:16:8d:3f:f0:b3:54:f7:54:c7:ce:29:6f:67: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B1:86:15:31:3E:1F:6B:4E:2F:AA:58:21:8E:3C:33:62:A5:56:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d83fa997-305c-3126-ba23-d3ee6d99bd2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 67.209.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:bd:31:24:19:6e:20:06:7a:bc:99:11:28:62:28:fe:6e:6a: b2:cd:77:23:23:6c:59:9f:35:d7:1e:47:b9:3b:3d:04:39:eb: 1f:c3:6c:5a:07:43:21:f0:a7:87:8c:e1:0f:17:55:09:7d:06: f9:7a:a2:eb:a4:95:6f:c0:7a:35:42:f0:39:5b:44:79:14:36: bf:5f:a0:15:24:e5:84:68:88:20:74:1c:2c:75:a4:5b:90:4a: 8d:d4:d9:91:e2:85:45:c7:ba:72:11:35:61:8e:76:66:08:96: a0:34:97:c6:87:88:ed:8e:1e:e6:3e:2e:c1:29:89:19:6f:c1: ae:aa:3e:03:15:f0:c9:84:30:fb:21:36:70:89:fc:fa:34:c3: a2:86:c3:eb:36:58:ff:e3:6b:9f:e9:c2:06:70:0a:bc:15:1d: f9:ca:f7:fc:c4:40:dc:f4:a2:59:ff:1d:3c:09:88:69:d9:f7: aa:c9:56:8e:68:c7:0f:8c:14:a1:b5:58:b8:5c:41:db:cc:5a: 97:28:bb:86:a9:a7:6e:01:2e:02:7b:c7:f3:6e:d9:86:78:14: 9d:72:68:1a:c6:48:ee:d5:61:51:ac:7f:5a:c0:bb:19:d7:db: 80:30:1b:70:d3:2c:36:04:44:d3:72:69:92:ff:cc:df:dc:ab: 9d:93:e9:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3U9O9ymzVNEPtLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk NzZhN2RjY2YtYjVjYi00MGUzLWJlMDQtMDcxNDk3NmEyY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFQuF863GURLkJoDKbQCb6W2MqnuQtMQvyaN UjZ1SxUQmObQwg/gZZXPBJqNpizdbp2DTT6eGCRMtCJgewD+SRdbUVyz2nGzmISr fOXumh5+dG6oP+NNallX7c9p140JQrD9ALHRlZCQlUPLCOStIQKwrVR3+XOUxU5I HuVTZV5Lino12Iv0W5TTfcbZOYD0apa7NuRFn1Wm6a7mTWklZDt4ZcOP6U98+mHV GK1zlI4zcK750kryc3nhR49fUc4LU4T2tchQU/BWxL4M0o9SBQyglsSevgl2UjsB yGtV+Ksun8hgXaeem29wkH0FPzoSaRaNP/CzVPdUx84pb2d60wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6xhhUxPh9rTi+qWCGOPDNipVYoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvZDgzZmE5OTctMzA1Yy0z MTI2LWJhMjMtZDNlZTZkOTliZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9HcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi9MSQZbiAGeryZEShiKP5uarLNdyMjbFmfNdceR7k7PQQ56x/DbFoH QyHwp4eM4Q8XVQl9Bvl6ouuklW/AejVC8DlbRHkUNr9foBUk5YRoiCB0HCx1pFuQ So3U2ZHihUXHunIRNWGOdmYIlqA0l8aHiO2OHuY+LsEpiRlvwa6qPgMV8MmEMPsh NnCJ/Po0w6KGw+s2WP/ja5/pwgZwCrwVHfnK9/zEQNz0oln/HTwJiGnZ96rJVo5o xw+MFKG1WLhcQdvMWpcou4app24BLgJ7x/Nu2YZ4FJ1yaBrGSO7VYVGsf1rAuxnX 24AwG3DTLDYERNNyaZL/zN/cq52T6Zg= -----END CERTIFICATE-----Generated at Thu Sep 24 21:17:18 2026 by rpki-client