$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d29ca1b5-ebe2-3ef4-a2a6-e555cc9d07a1.roa File: d29ca1b5-ebe2-3ef4-a2a6-e555cc9d07a1.roa (raw, json) Hash identifier: svCOSa7Qv8XgRrI23V4jUM9tqxYWtMl/NuCEc1sFFVQ= Subject key identifier: 9B:C8:07:63:5E:D2:59:AD:13:92:FA:CC:8B:A3:8C:E5:02:74:90:A2 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584EED51F5BC54BA502EDB2DBE80 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d29ca1b5-ebe2-3ef4-a2a6-e555cc9d07a1.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 54888 IP address blocks: 209.237.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:f5:bc:54:ba:50:2e:db:2d:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=3963cc2f-f786-4b7f-927c-6daeb11a92fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b6:50:32:ef:23:0d:12:95:f5:99:72:6e:ea: b1:f4:40:00:a0:b4:b2:3b:02:a2:2d:16:78:24:e9: 01:fa:f8:9a:78:97:86:93:9f:9e:d5:31:92:7a:74: 99:7a:32:85:7e:1c:99:b3:d3:2e:54:8c:c9:13:41: c4:f7:b7:f6:ea:a2:36:f2:40:26:dc:d2:3a:d6:b1: 01:8a:cb:21:fc:9a:73:0b:a8:a7:74:40:17:ec:e1: 8f:57:57:f6:a4:9e:0d:e5:4a:62:23:34:f8:fa:5f: 0a:7c:e7:07:90:02:05:52:bd:05:3c:31:e5:a8:b6: 5f:11:a6:8a:35:00:0b:d2:88:a5:d7:dc:79:77:70: 4c:af:8a:c6:13:d7:1f:2e:53:60:bb:a9:36:b2:a2: a4:04:df:62:77:3f:38:0b:9b:b8:a4:0f:af:9a:d8: b4:6a:4c:2b:13:dc:57:04:97:bc:49:88:c6:96:0d: 84:e5:4c:ef:3d:5a:ad:20:53:40:19:11:fd:d1:14: 25:f2:de:76:a0:60:32:0f:e3:4d:5f:5b:23:7f:14: 70:1a:20:f6:91:33:d5:00:8a:23:54:30:cc:ce:32: 52:ad:13:0f:0d:03:b0:39:5c:d6:27:d6:a4:fc:31: 6d:d6:1e:74:02:fd:59:0c:45:a7:74:bc:f4:60:36: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C8:07:63:5E:D2:59:AD:13:92:FA:CC:8B:A3:8C:E5:02:74:90:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/d29ca1b5-ebe2-3ef4-a2a6-e555cc9d07a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 209.237.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:fa:c1:57:2d:ba:34:ea:7b:ce:14:cb:a3:3d:e2:3a:48:50: 62:51:b0:5f:22:3e:8a:e7:22:1b:bb:ce:0d:b4:c4:26:64:5b: b9:ab:4d:62:7f:50:c3:4b:22:ce:67:a6:e7:94:be:71:06:85: 50:77:41:8e:8f:0c:4f:3f:6e:71:9b:d3:86:80:98:a7:33:98: 2a:79:8d:64:45:49:48:4b:00:88:55:96:77:ec:46:ea:97:03: d0:7a:61:de:f3:75:a2:39:df:65:7e:07:48:9c:cb:ac:32:73: e0:1b:33:f6:99:8d:17:1f:1c:1c:4f:17:24:7c:79:19:52:2a: 77:79:92:8e:fa:6a:59:61:e5:5e:ad:96:ed:00:20:04:10:fe: b3:b8:ef:46:23:2c:48:ac:fe:83:df:30:4f:04:63:bf:97:a2: 9a:9e:41:79:ad:d6:92:63:2b:ba:52:b7:a1:75:e2:82:9c:a3: e8:0b:54:d9:65:35:00:84:aa:ca:b1:c9:e5:8a:89:2f:20:00: 87:d9:93:35:98:7a:23:33:61:fa:08:39:97:b2:fb:2a:f3:cd: 5e:fe:75:91:04:67:9c:d9:0f:a1:ba:91:b6:66:10:cc:87:67: 4b:0e:e5:cb:9d:b0:74:07:ca:0b:65:40:a3:dc:c6:12:02:eb: 54:f3:4d:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUfW8VLpQLtstvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk Mzk2M2NjMmYtZjc4Ni00YjdmLTkyN2MtNmRhZWIxMWE5MmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLZQMu8jDRKV9Zlybuqx9EAAoLSyOwKiLRZ4 JOkB+viaeJeGk5+e1TGSenSZejKFfhyZs9MuVIzJE0HE97f26qI28kAm3NI61rEB issh/JpzC6indEAX7OGPV1f2pJ4N5UpiIzT4+l8KfOcHkAIFUr0FPDHlqLZfEaaK NQAL0oil19x5d3BMr4rGE9cfLlNgu6k2sqKkBN9idz84C5u4pA+vmti0akwrE9xX BJe8SYjGlg2E5UzvPVqtIFNAGRH90RQl8t52oGAyD+NNX1sjfxRwGiD2kTPVAIoj VDDMzjJSrRMPDQOwOVzWJ9ak/DFt1h50Av1ZDEWndLz0YDZy7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvIB2Ne0lmtE5L6zIujjOUCdJCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZDI5Y2ExYjUtZWJlMi0z ZWY0LWEyYTYtZTU1NWNjOWQwN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHn6wVctujTqe84Uy6M94jpIUGJRsF8iPornIhu7zg20xCZkW7mrTWJ/ UMNLIs5npueUvnEGhVB3QY6PDE8/bnGb04aAmKczmCp5jWRFSUhLAIhVlnfsRuqX A9B6Yd7zdaI532V+B0icy6wyc+AbM/aZjRcfHBxPFyR8eRlSKnd5ko76allh5V6t lu0AIAQQ/rO470YjLEis/oPfME8EY7+XopqeQXmt1pJjK7pSt6F14oKco+gLVNll NQCEqsqxyeWKiS8gAIfZkzWYeiMzYfoIOZey+yrzzV7+dZEEZ5zZD6G6kbZmEMyH Z0sO5cudsHQHygtlQKPcxhIC61TzTVE= -----END CERTIFICATE-----Generated at Wed Sep 23 01:23:23 2026 by rpki-client