$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/2bd60d98-10cc-33f0-9607-95917802076a.roa File: 2bd60d98-10cc-33f0-9607-95917802076a.roa (raw, json) Hash identifier: BrVB+DXZ/dyeuRaLUpPeZBrGTdDIM9a9d/AjM5jOda0= Subject key identifier: 6E:1D:FA:DC:B6:F7:A9:CB:5E:33:11:4A:E8:01:D3:66:49:FA:F7:5F Certificate issuer: /CN=de519df3-4594-450e-ac51-a7e085408381 Certificate serial: 010D0C9F4328584F49741FAF3F5597B33D3122C0 Authority key identifier: 59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/2bd60d98-10cc-33f0-9607-95917802076a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399955 IP address blocks: 209.205.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:1f:af:3f:55:97:b3:3d:31:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de519df3-4594-450e-ac51-a7e085408381 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4b4bcec3-0076-4a5a-b0c5-7c7232b0818c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ef:0b:c2:50:e4:1b:c5:3b:4f:8c:5b:31:a3: d3:0d:1c:4c:b9:65:0e:63:31:12:30:80:b3:e6:69: 30:fb:a3:d2:e1:d0:cb:50:53:40:19:8a:1d:24:ff: ff:85:dd:c5:22:fc:d8:2b:75:85:58:69:38:74:52: bd:81:b6:1e:7f:e1:9d:ea:6b:51:b7:85:e8:bb:9d: 47:88:fc:40:1a:2d:55:de:65:5a:3f:df:16:fc:fe: 40:2a:a2:a1:11:24:8b:4d:04:23:f0:c6:bf:42:4d: e3:5f:f3:ee:28:a1:81:dc:1d:24:f5:80:e9:b5:63: 88:2a:0f:84:30:4f:e6:2e:eb:5b:42:4e:f8:e6:d5: f1:44:74:d4:7e:ec:4b:c4:be:08:d4:d7:cb:1f:cc: 10:d3:84:32:b4:89:40:8b:b3:27:0f:04:bb:2d:c5: 2a:88:47:44:71:9e:73:eb:b8:ca:3c:bc:46:94:81: 93:39:c9:9f:89:b7:52:3a:ab:43:3e:21:c3:d3:9f: 34:8e:ea:ec:6a:a4:95:d2:e7:ae:8b:10:24:84:93: 40:86:1a:e4:fd:0a:4a:e6:37:1e:c4:15:60:3d:85: c1:9a:d1:c8:97:63:68:f5:28:15:f1:05:e2:0c:6d: 9e:13:e8:bf:a8:aa:b3:29:51:46:f2:f9:ae:b9:1a: 81:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1D:FA:DC:B6:F7:A9:CB:5E:33:11:4A:E8:01:D3:66:49:FA:F7:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/2bd60d98-10cc-33f0-9607-95917802076a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl X509v3 Authority Key Identifier: keyid:59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer sbgp-ipAddrBlock: critical IPv4: 209.205.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:77:82:4c:07:ba:d0:0c:dd:6d:d3:d5:a8:8c:c5:dd:82:39: ae:42:c9:bf:24:f4:d8:c2:b0:b3:d6:db:e0:a8:37:55:fc:00: ff:18:d3:5c:87:e3:7a:32:b5:70:fa:20:0d:d7:8a:9f:2d:1d: 6b:52:dc:3e:41:64:f3:21:9c:32:da:ae:ff:2b:ba:fb:6f:a2: 0d:48:fb:ca:30:42:7b:d4:17:b2:ca:ad:7a:a0:a0:e0:6e:90: 25:21:2c:ff:8e:08:04:33:f2:dc:2b:9e:57:d6:d8:f3:a2:ca: 40:a5:60:bb:b7:8d:db:c4:ec:1a:a9:16:f9:af:26:0c:45:a6: 5a:91:3e:08:83:0c:b2:65:b5:7e:16:82:72:61:db:14:d9:d3: 87:21:c7:50:96:b5:b7:60:d2:bf:e3:bd:10:c7:b9:64:17:57: 01:5b:6b:4f:d6:88:dd:95:68:6b:a1:bb:32:2a:69:f7:f6:d1: 33:c2:a6:76:02:0d:35:62:90:14:26:c1:75:0d:3f:8f:a3:60: 9b:3d:ff:0d:db:ef:7f:b9:2c:f4:d1:94:27:cc:72:ce:1e:5d: 78:cf:ba:60:cb:3c:43:c7:64:67:47:03:67:ef:7b:ae:bf:0d: a4:06:8f:f7:1f:f1:3f:f5:74:e9:02:12:49:d4:ee:16:39:97: 70:9a:a8:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdB+vP1WXsz0xIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1MTlkZjMtNDU5NC00NTBlLWFjNTEtYTdlMDg1NDA4 MzgxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGI0YmNlYzMtMDA3Ni00YTVhLWIwYzUtN2M3MjMyYjA4MThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+8LwlDkG8U7T4xbMaPTDRxMuWUOYzESMICz 5mkw+6PS4dDLUFNAGYodJP//hd3FIvzYK3WFWGk4dFK9gbYef+Gd6mtRt4Xou51H iPxAGi1V3mVaP98W/P5AKqKhESSLTQQj8Ma/Qk3jX/PuKKGB3B0k9YDptWOIKg+E ME/mLutbQk745tXxRHTUfuxLxL4I1NfLH8wQ04QytIlAi7MnDwS7LcUqiEdEcZ5z 67jKPLxGlIGTOcmfibdSOqtDPiHD0580jursaqSV0ueuixAkhJNAhhrk/QpK5jce xBVgPYXBmtHIl2No9SgV8QXiDG2eE+i/qKqzKVFG8vmuuRqBkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4d+ty296nLXjMRSugB02ZJ+vdfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUx OWRmMy00NTk0LTQ1MGUtYWM1MS1hN2UwODU0MDgzODEvMmJkNjBkOTgtMTBjYy0z M2YwLTk2MDctOTU5MTc4MDIwNzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGU1MTlkZjMtNDU5NC00NTBlLWFj NTEtYTdlMDg1NDA4MzgxL2RlNTE5ZGYzLTQ1OTQtNDUwZS1hYzUxLWE3ZTA4NTQw ODM4MS5jcmwwHwYDVR0jBBgwFoAUWZ5KRx4ypygRBMpIFYzUGC2wuRwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUxOWRmMy00NTk0LTQ1MGUtYWM1MS1hN2Uw ODU0MDgzODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0c3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp3gkwHutAM3W3T1aiMxd2COa5Cyb8k9NjCsLPW2+CoN1X8AP8Y01yH 43oytXD6IA3Xip8tHWtS3D5BZPMhnDLarv8ruvtvog1I+8owQnvUF7LKrXqgoOBu kCUhLP+OCAQz8twrnlfW2POiykClYLu3jdvE7BqpFvmvJgxFplqRPgiDDLJltX4W gnJh2xTZ04chx1CWtbdg0r/jvRDHuWQXVwFba0/WiN2VaGuhuzIqaff20TPCpnYC DTVikBQmwXUNP4+jYJs9/w3b73+5LPTRlCfMcs4eXXjPumDLPEPHZGdHA2fve66/ DaQGj/cf8T/1dOkCEknU7hY5l3CaqP0= -----END CERTIFICATE-----Generated at Tue Sep 29 05:05:00 2026 by rpki-client