$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/db4a5e6e-5f27-358a-9461-929e1f08f72e.roa File: db4a5e6e-5f27-358a-9461-929e1f08f72e.roa (raw, json) Hash identifier: sLsMKSBd0J5PJiQXv4IkbH7zdMx6NOAxGsDJe7Hqw+w= Subject key identifier: 37:8D:99:0C:3F:70:2B:11:FB:C4:A6:80:01:65:F7:6B:24:88:C1:32 Certificate issuer: /CN=e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1 Certificate serial: 010D0C9F4328584FA85DCCC1C1763A1197221A00 Authority key identifier: 0F:1A:B0:3F:4A:8E:84:18:30:E6:F2:72:72:39:BD:0E:91:86:9D:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/db4a5e6e-5f27-358a-9461-929e1f08f72e.roa Signing time: Thu 29 Oct 2026 01:00:12 +0000 ROA not before: Thu 29 Oct 2026 01:00:12 +0000 ROA not after: Wed 27 Jan 2027 02:00:12 +0000 asID: 19572 IP address blocks: 209.173.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a8:5d:cc:c1:c1:76:3a:11:97:22:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1 Validity Not Before: Oct 29 01:00:12 2026 GMT Not After : Jan 27 02:00:12 2027 GMT Subject: CN=911f21d8-54d0-463e-9658-6cc5f3475029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:0e:ae:c2:09:55:0a:5c:bb:98:c6:74:51: 8d:81:dd:c9:6b:11:68:cb:5c:47:01:88:c9:a2:94: 46:77:2a:68:49:f5:91:63:c7:5b:84:52:73:ce:f7: 7c:ed:f2:0a:51:e1:91:d9:a0:d0:72:da:7a:2d:fb: e4:67:73:c6:26:07:c0:21:33:53:62:1c:4e:74:41: e2:bb:b6:90:a4:4d:ca:9f:5a:b2:7b:1b:6e:ed:2f: dc:d6:a6:0d:3a:7d:dd:4b:07:ef:fe:5f:e3:d8:81: 37:89:58:6c:29:19:03:35:c8:72:8e:cc:e8:41:43: d7:81:ef:4f:07:6b:d1:a0:19:0f:6b:2a:93:5b:f0: 95:aa:3f:65:7b:81:95:56:a8:46:e6:9c:08:5f:e2: 19:2e:26:06:2f:a1:ce:1f:38:5a:24:d8:4e:c9:ff: 71:df:f7:ea:ce:d1:76:9a:b9:00:78:f8:2f:47:ba: 6e:34:6e:d8:2e:22:06:44:35:4c:cd:1f:4c:fe:28: 70:26:35:d3:15:d2:69:fc:db:dd:94:c1:95:20:23: 56:39:6c:53:3d:1b:5f:ae:54:e3:cc:7a:fa:a9:3d: 91:49:40:de:4c:5c:e0:fd:1c:3d:16:2d:8d:76:12: 6a:6f:8f:59:9e:a9:31:c9:e9:dd:85:a7:7b:98:2b: e4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8D:99:0C:3F:70:2B:11:FB:C4:A6:80:01:65:F7:6B:24:88:C1:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/db4a5e6e-5f27-358a-9461-929e1f08f72e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.crl X509v3 Authority Key Identifier: keyid:0F:1A:B0:3F:4A:8E:84:18:30:E6:F2:72:72:39:BD:0E:91:86:9D:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.cer sbgp-ipAddrBlock: critical IPv4: 209.173.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:87:47:ff:99:00:24:61:77:ab:0d:94:ad:5d:4c:91:3e:a2: 3e:07:00:d5:ea:17:92:b2:d4:41:1e:ad:f5:be:85:b8:14:89: c0:b3:83:6b:7c:1f:98:42:89:df:2c:f5:da:c4:90:4b:dd:db: 2c:35:51:4a:f6:8c:49:a2:3c:4c:a9:c8:91:00:8d:22:fa:f1: 73:f9:8b:fa:9e:84:05:8c:be:55:0b:d0:42:13:b4:e9:63:0d: 5d:5a:c9:cb:cb:c2:bf:dd:af:2c:ed:3a:0d:2c:ad:68:6a:43: 88:13:e7:ff:b2:39:c1:db:8a:c4:b4:57:28:91:51:8d:15:19: fd:f9:58:c3:f2:71:4b:55:c0:21:44:96:83:6c:f0:1e:61:88: 67:aa:4a:41:62:44:fa:4c:05:2a:56:36:75:df:b2:48:dd:92: 58:32:60:e6:1f:d3:24:d0:12:54:b8:cb:7d:a8:e1:2f:d9:d1: 6e:9f:3e:77:84:83:f6:fc:25:ad:13:87:7e:44:a1:03:d4:36: 74:bc:6d:16:47:94:19:03:b6:4d:79:a0:c8:80:ef:42:15:6e: b4:42:51:eb:58:6a:e1:60:ac:48:56:b7:58:92:f1:10:9c:a4: 1a:55:3e:41:70:0f:7c:13:9f:7e:6e:2e:c9:a7:5f:92:9d:de: 26:15:e6:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+oXczBwXY6EZciGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTg3NTNhYTgtZDFjOC00Y2Y4LTk1ZDQtYzhmZGFhOTcz ZWQxMB4XDTI2MTAyOTAxMDAxMloXDTI3MDEyNzAyMDAxMlowLzEtMCsGA1UEAxMk OTExZjIxZDgtNTRkMC00NjNlLTk2NTgtNmNjNWYzNDc1MDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEwOrsIJVQpcu5jGdFGNgd3JaxFoy1xHAYjJ opRGdypoSfWRY8dbhFJzzvd87fIKUeGR2aDQctp6LfvkZ3PGJgfAITNTYhxOdEHi u7aQpE3Kn1qyextu7S/c1qYNOn3dSwfv/l/j2IE3iVhsKRkDNchyjszoQUPXge9P B2vRoBkPayqTW/CVqj9le4GVVqhG5pwIX+IZLiYGL6HOHzhaJNhOyf9x3/fqztF2 mrkAePgvR7puNG7YLiIGRDVMzR9M/ihwJjXTFdJp/NvdlMGVICNWOWxTPRtfrlTj zHr6qT2RSUDeTFzg/Rw9Fi2NdhJqb49Znqkxyendhad7mCvkVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeNmQw/cCsR+8SmgAFl92skiMEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9lODc1 M2FhOC1kMWM4LTRjZjgtOTVkNC1jOGZkYWE5NzNlZDEvZGI0YTVlNmUtNWYyNy0z NThhLTk0NjEtOTI5ZTFmMDhmNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZTg3NTNhYTgtZDFjOC00Y2Y4LTk1 ZDQtYzhmZGFhOTczZWQxL2U4NzUzYWE4LWQxYzgtNGNmOC05NWQ0LWM4ZmRhYTk3 M2VkMS5jcmwwHwYDVR0jBBgwFoAUDxqwP0qOhBgw5vJycjm9DpGGnYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9lODc1M2FhOC1kMWM4LTRjZjgtOTVkNC1jOGZk YWE5NzNlZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0a34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeHR/+ZACRhd6sNlK1dTJE+oj4HANXqF5Ky1EEerfW+hbgUicCzg2t8 H5hCid8s9drEkEvd2yw1UUr2jEmiPEypyJEAjSL68XP5i/qehAWMvlUL0EITtOlj DV1aycvLwr/dryztOg0srWhqQ4gT5/+yOcHbisS0VyiRUY0VGf35WMPycUtVwCFE loNs8B5hiGeqSkFiRPpMBSpWNnXfskjdklgyYOYf0yTQElS4y32o4S/Z0W6fPneE g/b8Ja0Th35EoQPUNnS8bRZHlBkDtk15oMiA70IVbrRCUetYauFgrEhWt1iS8RCc pBpVPkFwD3wTn35uLsmnX5Kd3iYV5iE= -----END CERTIFICATE-----Generated at Sun Nov 15 08:33:43 2026 by rpki-client