$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/725ce269-cd02-4273-9f87-1202f11a28bb/fd1ff2a6-0536-38da-b8af-e1bdde7bf029.roa File: fd1ff2a6-0536-38da-b8af-e1bdde7bf029.roa (raw, json) Hash identifier: 7KklkSlA1IZbCfDc3u2Id5bRRnX30j7huvRh5JHbs8s= Subject key identifier: 0E:05:CC:4F:C4:B9:D2:CB:D2:28:83:2D:EC:06:E6:19:AB:58:25:39 Certificate issuer: /CN=725ce269-cd02-4273-9f87-1202f11a28bb Certificate serial: 010D0C9F4328584F1467AAF369AE7FA096504600 Authority key identifier: 68:03:DC:2A:37:FD:C0:8C:73:03:80:9D:92:90:26:1E:58:01:C8:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/725ce269-cd02-4273-9f87-1202f11a28bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/725ce269-cd02-4273-9f87-1202f11a28bb/fd1ff2a6-0536-38da-b8af-e1bdde7bf029.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 398175 IP address blocks: 209.127.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/725ce269-cd02-4273-9f87-1202f11a28bb/725ce269-cd02-4273-9f87-1202f11a28bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/725ce269-cd02-4273-9f87-1202f11a28bb/725ce269-cd02-4273-9f87-1202f11a28bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/725ce269-cd02-4273-9f87-1202f11a28bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:aa:f3:69:ae:7f:a0:96:50:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725ce269-cd02-4273-9f87-1202f11a28bb Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=f88f3986-8500-4905-a0d9-6a6bb3610a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:16:13:44:86:94:27:10:f6:90:50:df:c1:d1: 2b:3e:dc:29:f5:6d:c0:36:fd:62:9f:68:d8:c9:4a: 99:30:bf:2c:9d:c0:7b:2d:0e:44:6d:d0:77:46:3e: c1:4c:ed:d7:90:9b:b5:1c:dd:7f:b6:bb:58:0e:81: be:1b:62:74:02:6a:fd:e2:6e:50:c6:9b:2d:d5:c1: de:04:aa:d3:cd:60:6c:77:e5:d8:83:b3:aa:bd:02: c2:d3:c8:5f:30:9f:5e:a5:ed:a7:77:8c:11:94:89: be:82:df:bd:4c:05:29:36:a6:fd:a1:b0:6f:e6:a8: 01:84:b9:7b:84:0a:cd:aa:cd:fb:b8:e5:cf:3a:9f: 97:ab:1f:f2:09:08:29:d2:66:2e:ec:5c:5e:a4:97: 14:f8:0b:d1:2d:dc:c5:8f:88:b8:05:18:72:76:42: ac:77:4d:fc:02:43:30:3a:b7:8d:ff:8c:06:60:32: ad:12:f4:84:ff:4c:d6:1e:c3:d3:c5:f3:5a:c0:f3: 0a:9b:71:99:a2:f8:52:8b:19:e1:90:a3:7a:cd:eb: 14:fd:00:52:08:86:9d:d6:38:6d:95:68:18:34:58: ae:97:3a:c4:43:08:72:21:9b:21:20:f8:28:20:5f: 86:75:48:aa:1b:a0:db:5f:f5:09:e9:08:4a:93:86: cf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:05:CC:4F:C4:B9:D2:CB:D2:28:83:2D:EC:06:E6:19:AB:58:25:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/725ce269-cd02-4273-9f87-1202f11a28bb/fd1ff2a6-0536-38da-b8af-e1bdde7bf029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/725ce269-cd02-4273-9f87-1202f11a28bb/725ce269-cd02-4273-9f87-1202f11a28bb.crl X509v3 Authority Key Identifier: keyid:68:03:DC:2A:37:FD:C0:8C:73:03:80:9D:92:90:26:1E:58:01:C8:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/725ce269-cd02-4273-9f87-1202f11a28bb.cer sbgp-ipAddrBlock: critical IPv4: 209.127.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:df:13:3a:e5:09:a4:82:87:1e:c1:07:37:b7:d1:19:de:9d: 1e:a3:0f:6c:39:3e:75:b4:36:3d:76:e3:fe:07:5b:29:d1:39: b4:74:df:6a:d6:99:d8:8d:64:f4:a1:81:7c:95:76:4e:fc:19: 70:a3:89:06:a8:38:59:0b:04:3d:c8:31:49:40:5b:ed:c2:ea: c4:aa:0c:02:73:d6:0d:4c:3b:ab:13:7c:20:a9:58:6c:de:7b: a8:d0:e7:32:77:14:e9:33:a3:b2:bb:1d:8d:04:73:e9:b2:4c: cc:5c:41:01:b7:e1:48:2c:70:06:8c:ae:ed:3e:1b:e2:4d:c4: e8:34:31:e0:73:ac:e6:75:89:42:ba:0a:bc:4b:5c:ec:83:ca: 3e:a4:4c:e7:72:d8:da:5e:65:bc:c6:db:ab:eb:6f:70:98:1f: 4c:ea:db:22:6c:ed:9c:f2:4e:6a:f4:af:0b:5d:1b:af:ba:f4: 43:43:30:8f:ea:c9:38:ca:cb:73:e3:7f:be:2f:6d:38:ab:cf: 0d:49:dd:b7:17:b5:d0:d4:0a:9d:4c:0e:00:51:5f:1f:0a:24: 3d:0d:52:a5:b3:51:81:10:f6:30:30:12:09:b9:d5:c4:0e:43: 0f:36:12:a4:2a:a7:e8:45:13:af:fa:9f:18:5b:b5:da:d2:78: d3:8e:5f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6rzaa5/oJZQRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzI1Y2UyNjktY2QwMi00MjczLTlmODctMTIwMmYxMWEy OGJiMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk Zjg4ZjM5ODYtODUwMC00OTA1LWEwZDktNmE2YmIzNjEwYTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRYTRIaUJxD2kFDfwdErPtwp9W3ANv1in2jY yUqZML8sncB7LQ5EbdB3Rj7BTO3XkJu1HN1/trtYDoG+G2J0Amr94m5Qxpst1cHe BKrTzWBsd+XYg7OqvQLC08hfMJ9epe2nd4wRlIm+gt+9TAUpNqb9obBv5qgBhLl7 hArNqs37uOXPOp+Xqx/yCQgp0mYu7FxepJcU+AvRLdzFj4i4BRhydkKsd038AkMw OreN/4wGYDKtEvSE/0zWHsPTxfNawPMKm3GZovhSixnhkKN6zesU/QBSCIad1jht lWgYNFiulzrEQwhyIZshIPgoIF+GdUiqG6DbX/UJ6QhKk4bPXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4FzE/EudLL0iiDLewG5hmrWCU5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83MjVj ZTI2OS1jZDAyLTQyNzMtOWY4Ny0xMjAyZjExYTI4YmIvZmQxZmYyYTYtMDUzNi0z OGRhLWI4YWYtZTFiZGRlN2JmMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzI1Y2UyNjktY2QwMi00MjczLTlm ODctMTIwMmYxMWEyOGJiLzcyNWNlMjY5LWNkMDItNDI3My05Zjg3LTEyMDJmMTFh MjhiYi5jcmwwHwYDVR0jBBgwFoAUaAPcKjf9wIxzA4CdkpAmHlgByPYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83MjVjZTI2OS1jZDAyLTQyNzMtOWY4Ny0xMjAy ZjExYTI4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0X/mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELfEzrlCaSChx7BBze30RnenR6jD2w5PnW0Nj124/4HWynRObR032rW mdiNZPShgXyVdk78GXCjiQaoOFkLBD3IMUlAW+3C6sSqDAJz1g1MO6sTfCCpWGze e6jQ5zJ3FOkzo7K7HY0Ec+myTMxcQQG34UgscAaMru0+G+JNxOg0MeBzrOZ1iUK6 CrxLXOyDyj6kTOdy2NpeZbzG26vrb3CYH0zq2yJs7ZzyTmr0rwtdG6+69ENDMI/q yTjKy3Pjf74vbTirzw1J3bcXtdDUCp1MDgBRXx8KJD0NUqWzUYEQ9jAwEgm51cQO Qw82EqQqp+hFE6/6nxhbtdrSeNOOX9c= -----END CERTIFICATE-----Generated at Tue Oct 6 18:39:34 2026 by rpki-client