$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3975f14-6151-3a97-81f4-8bff99a488b0.roa File: e3975f14-6151-3a97-81f4-8bff99a488b0.roa (raw, json) Hash identifier: 03eXfP6OTB5ndSRTGMNNRbs8UBD6FIjI4TigeIy/+y0= Subject key identifier: 68:CB:25:95:3E:55:E6:C7:FC:70:93:AC:0D:13:88:D8:B8:F7:6A:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497654D4D117B58997528740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3975f14-6151-3a97-81f4-8bff99a488b0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32787 IP address blocks: 209.200.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:54:d4:d1:17:b5:89:97:52:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2dd08fd6-cc85-414a-860d-346298a09274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:71:02:96:9a:62:8e:cf:22:ed:9d:06:06:27: ea:35:16:bd:b7:28:bd:42:d2:14:3f:d8:fa:e2:1f: b8:e3:66:17:e2:ea:f9:63:c1:49:9b:7a:f0:c6:fb: 82:75:85:af:04:ae:1a:ce:f2:9d:8f:49:ac:cc:27: 95:d8:76:93:06:41:59:7f:38:37:a9:b7:a4:76:b1: 0f:12:31:bc:49:ff:46:c2:c2:5c:0f:97:f0:cf:e3: 78:fd:ca:f5:d3:a5:b5:85:15:33:af:ea:1f:b0:99: 18:5b:a4:5c:19:6f:c9:08:5e:3c:4c:96:1d:e5:3a: 74:61:04:57:1d:c8:84:83:90:59:ae:62:bd:fe:e4: b1:e6:e5:6d:d7:9a:fd:39:ff:0e:d3:18:2f:58:8b: fc:13:1b:26:e5:f6:c9:bd:27:ea:da:a2:ad:da:9d: 86:6b:38:4a:2d:38:ce:27:70:51:a0:5f:5b:18:f6: e5:88:ea:4f:c1:f9:d7:4e:ca:79:c6:7e:24:fe:33: bb:27:b5:2d:43:d2:f3:75:a9:3e:9b:e5:1d:bb:fc: b5:33:75:04:4d:b4:0b:8d:90:35:9e:29:ea:99:33: dc:5a:f5:00:be:f4:2e:7b:1a:80:dd:23:2c:8a:cb: a6:e7:8f:ef:fd:af:a0:cf:47:e1:85:85:69:35:ed: 9f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CB:25:95:3E:55:E6:C7:FC:70:93:AC:0D:13:88:D8:B8:F7:6A:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3975f14-6151-3a97-81f4-8bff99a488b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:42:73:e0:40:ef:40:16:c9:02:d0:01:e4:c5:4d:e9:f9:d7: cb:24:15:e0:fb:51:60:e1:3e:2c:70:46:45:ca:53:01:63:d9: 42:11:f8:fb:71:dd:99:80:fe:fd:7c:ee:fe:05:32:78:8f:17: a7:24:2c:e3:ef:d7:7f:6a:dd:55:f0:87:e5:c9:75:89:b6:e8: e9:7f:e2:af:fb:c8:b8:52:6c:1d:9d:f5:2c:df:ee:75:2b:a3: fd:52:74:db:ad:ae:90:f5:23:70:b5:34:79:06:a6:22:8f:e9: 1e:dc:af:46:a1:1b:af:71:1d:a0:6c:01:50:15:2e:d8:39:e5: 1b:c2:96:f4:85:31:ea:76:f5:6f:3f:39:d0:64:2e:75:c1:26: 2d:23:7e:29:4c:e5:69:4b:d4:43:0f:9a:8c:bd:a8:65:72:62: 96:8d:b7:67:3a:10:ed:14:1c:ec:bc:dc:83:d8:1a:2c:4c:11: e1:f1:7e:2f:19:10:3d:bb:03:18:36:62:87:c9:cf:8e:28:ab: 56:05:47:df:f1:c9:0d:ae:f2:43:50:16:a9:43:35:3a:c6:20: 2a:87:bc:f3:2a:f4:67:12:61:61:dc:09:a1:48:e9:e5:d5:1f: d5:a6:e8:6e:59:82:60:e2:53:a3:55:ca:58:68:ab:4d:03:79: 5f:e8:21:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdlTU0Re1iZdSh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmRkMDhmZDYtY2M4NS00MTRhLTg2MGQtMzQ2Mjk4YTA5Mjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3EClppijs8i7Z0GBifqNRa9tyi9QtIUP9j6 4h+442YX4ur5Y8FJm3rwxvuCdYWvBK4azvKdj0mszCeV2HaTBkFZfzg3qbekdrEP EjG8Sf9GwsJcD5fwz+N4/cr106W1hRUzr+ofsJkYW6RcGW/JCF48TJYd5Tp0YQRX HciEg5BZrmK9/uSx5uVt15r9Of8O0xgvWIv8Exsm5fbJvSfq2qKt2p2GazhKLTjO J3BRoF9bGPbliOpPwfnXTsp5xn4k/jO7J7UtQ9Lzdak+m+Udu/y1M3UETbQLjZA1 ninqmTPcWvUAvvQuexqA3SMsisum54/v/a+gz0fhhYVpNe2f7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjLJZU+VebH/HCTrA0TiNi492o8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTM5NzVmMTQtNjE1MS0z YTk3LTgxZjQtOGJmZjk5YTQ4OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRCc+BA70AWyQLQAeTFTen518skFeD7UWDhPixwRkXKUwFj2UIR+Ptx 3ZmA/v187v4FMniPF6ckLOPv139q3VXwh+XJdYm26Ol/4q/7yLhSbB2d9Szf7nUr o/1SdNutrpD1I3C1NHkGpiKP6R7cr0ahG69xHaBsAVAVLtg55RvClvSFMep29W8/ OdBkLnXBJi0jfilM5WlL1EMPmoy9qGVyYpaNt2c6EO0UHOy83IPYGixMEeHxfi8Z ED27Axg2YofJz44oq1YFR9/xyQ2u8kNQFqlDNTrGICqHvPMq9GcSYWHcCaFI6eXV H9Wm6G5ZgmDiU6NVylhoq00DeV/oIag= -----END CERTIFICATE-----Generated at Sat Sep 26 10:48:40 2026 by rpki-client