$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa File: ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa (raw, json) Hash identifier: JeqSIP6rrsoCfA0jbsiFpuoNeNQtwRnTIeC87IhGW8U= Subject key identifier: FC:32:28:A0:95:61:01:CA:6E:7A:D1:A3:96:42:74:BF:24:B0:79:29 Certificate issuer: /CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Certificate serial: 010D0C9F4328584F2EED0D874F2230F7E0E08400 Authority key identifier: E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 394893 IP address blocks: 209.112.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:0d:87:4f:22:30:f7:e0:e0:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25ec66d9-6873-4655-8a15-555b07c2edb4 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=fb4b1dcb-ae72-40a0-9259-95298d16e300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:94:88:f1:4b:8d:2d:32:9b:a5:f5:d8:70: 45:c6:e2:6e:72:cf:e5:b8:bf:3b:93:e5:4a:c1:d0: 01:0a:40:38:93:66:f3:27:e9:ba:48:f3:c2:ff:6e: 0b:8b:a7:5d:28:e5:99:a7:1d:2f:92:38:04:a8:97: c9:7b:e1:b5:1f:ba:a6:16:71:2b:93:e6:dd:40:6d: f9:90:a5:0b:84:6a:a8:9d:54:75:90:1f:c3:6f:63: 10:92:cb:a2:92:ee:97:cd:e9:8f:12:5f:11:06:3d: 2f:d8:a0:46:e0:2e:8b:68:3c:f7:a6:83:a7:cd:b1: 7d:26:24:26:52:e0:3f:9c:bd:7e:ad:0a:f4:34:9b: dc:7d:98:7e:32:bf:82:b5:92:7a:03:9b:96:7b:2c: 22:e7:b1:f8:9d:f4:d3:de:2c:b7:19:f8:e5:6e:33: cf:f1:82:a4:88:1d:e5:7c:5f:0b:2d:06:4a:03:0e: f0:4d:f7:b3:d3:7e:af:2f:6c:38:97:4e:6a:f4:05: a1:fd:57:a2:97:31:c4:b7:63:c2:59:ce:e3:57:81: 7f:5f:a6:df:0b:47:1a:70:d8:ba:6c:f5:6a:1d:14: 3c:c3:af:cb:d2:d2:43:80:a3:71:99:54:9f:d8:cc: 40:07:d1:62:1f:34:98:25:18:39:d9:bc:92:f5:c9: 21:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:32:28:A0:95:61:01:CA:6E:7A:D1:A3:96:42:74:BF:24:B0:79:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/ff3babc3-a1f6-304a-8dc7-d7b29caa7ae1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4/25ec66d9-6873-4655-8a15-555b07c2edb4.crl X509v3 Authority Key Identifier: keyid:E1:23:69:ED:D3:70:E9:73:D3:00:00:65:C1:38:FC:B7:ED:B2:79:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/25ec66d9-6873-4655-8a15-555b07c2edb4.cer sbgp-ipAddrBlock: critical IPv4: 209.112.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:3e:32:ce:05:21:a8:76:19:4d:26:00:08:b2:55:02:ee:da: 3a:95:05:ad:1f:36:ab:31:27:cd:30:3d:e8:b5:5b:d3:8e:6c: d3:f1:9f:ed:7b:e5:de:7e:f2:e7:41:b5:08:1a:5e:69:4e:d7: b1:7b:a8:36:c8:4a:5a:25:57:ac:79:8c:8b:93:ae:b9:d9:56: 5f:87:aa:d1:58:39:58:8e:6c:6e:ce:c5:55:27:36:e9:30:29: 68:ae:6e:f3:b3:53:0f:78:18:92:52:df:5f:8f:c6:f2:73:02: 8b:61:a9:11:1c:e2:2b:55:f3:f4:c4:ff:f4:c3:50:5f:ca:e7: 78:39:3b:c8:8a:be:ee:2b:39:db:a9:68:ac:a4:68:34:d3:04: 70:1f:fc:5d:5e:51:62:84:02:ac:04:e6:71:0e:c6:f4:d9:9d: 88:16:b2:24:e2:9f:fd:04:21:18:09:f0:14:88:e7:fc:db:ff: 57:a4:0b:62:cf:21:a8:2f:c0:2f:ac:ae:1d:d1:a5:5c:7e:83: 75:af:7f:97:7d:56:32:70:a8:d6:7d:cb:db:52:6a:e5:88:af: de:88:b2:03:6f:5a:8c:9e:48:98:a3:1b:b7:11:30:61:67:f7: 05:5b:86:5f:4d:af:cb:1a:48:8e:8f:81:ca:bf:58:a0:bc:c8: 20:3c:90:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7Q2HTyIw9+DghAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjVlYzY2ZDktNjg3My00NjU1LThhMTUtNTU1YjA3YzJl ZGI0MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ZmI0YjFkY2ItYWU3Mi00MGEwLTkyNTktOTUyOThkMTZlMzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo6UiPFLjS0ym6X12HBFxuJucs/luL87k+VK wdABCkA4k2bzJ+m6SPPC/24Li6ddKOWZpx0vkjgEqJfJe+G1H7qmFnErk+bdQG35 kKULhGqonVR1kB/Db2MQksuiku6XzemPEl8RBj0v2KBG4C6LaDz3poOnzbF9JiQm UuA/nL1+rQr0NJvcfZh+Mr+CtZJ6A5uWeywi57H4nfTT3iy3GfjlbjPP8YKkiB3l fF8LLQZKAw7wTfez036vL2w4l05q9AWh/VeilzHEt2PCWc7jV4F/X6bfC0cacNi6 bPVqHRQ8w6/L0tJDgKNxmVSf2MxAB9FiHzSYJRg52byS9ckhvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwyKKCVYQHKbnrRo5ZCdL8ksHkpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVj NjZkOS02ODczLTQ2NTUtOGExNS01NTViMDdjMmVkYjQvZmYzYmFiYzMtYTFmNi0z MDRhLThkYzctZDdiMjljYWE3YWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjVlYzY2ZDktNjg3My00NjU1LThh MTUtNTU1YjA3YzJlZGI0LzI1ZWM2NmQ5LTY4NzMtNDY1NS04YTE1LTU1NWIwN2My ZWRiNC5jcmwwHwYDVR0jBBgwFoAU4SNp7dNw6XPTAABlwTj8t+2yeQYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNWVjNjZkOS02ODczLTQ2NTUtOGExNS01NTVi MDdjMmVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABc+Ms4FIah2GU0mAAiyVQLu2jqVBa0fNqsxJ80wPei1W9OObNPxn+17 5d5+8udBtQgaXmlO17F7qDbISlolV6x5jIuTrrnZVl+HqtFYOViObG7OxVUnNukw KWiubvOzUw94GJJS31+PxvJzAothqREc4itV8/TE//TDUF/K53g5O8iKvu4rOdup aKykaDTTBHAf/F1eUWKEAqwE5nEOxvTZnYgWsiTin/0EIRgJ8BSI5/zb/1ekC2LP IagvwC+srh3RpVx+g3Wvf5d9VjJwqNZ9y9tSauWIr96IsgNvWoyeSJijG7cRMGFn 9wVbhl9Nr8saSI6Pgcq/WKC8yCA8kNI= -----END CERTIFICATE-----Generated at Mon Sep 28 20:24:09 2026 by rpki-client