$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa File: b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa (raw, json) Hash identifier: IzyB35hlX+e9duL1yz+5JEtPHSMMFa71koV4Bybvy6I= Subject key identifier: 27:57:24:39:AF:A8:29:DB:46:24:BD:6B:A0:A1:95:F7:65:41:88:96 Certificate issuer: /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Certificate serial: 010D0C9F4328584F3CE29D14B63CD016EC8F5100 Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 198.174.212.0/23 maxlen: 24 198.174.214.0/23 maxlen: 24 204.221.17.0/24 maxlen: 24 204.221.18.0/23 maxlen: 24 204.221.144.0/22 maxlen: 24 206.9.80.0/24 maxlen: 24 206.145.178.0/23 maxlen: 24 206.145.224.0/23 maxlen: 24 206.146.48.0/22 maxlen: 24 209.32.64.0/21 maxlen: 24 209.32.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:9d:14:b6:3c:d0:16:ec:8f:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=f3b6b4eb-d321-4620-8b31-55ddadc67ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8c:70:25:13:51:3a:5b:5b:5a:c8:a0:6f:c9: 91:70:30:2e:fa:4f:11:69:2e:00:d3:33:6f:16:5e: d8:de:21:86:6b:1f:51:2b:b7:9c:40:65:3c:4e:9d: d2:31:1a:4b:06:f1:b6:c6:91:f7:a4:76:3e:8c:5d: 8d:02:e3:df:04:6e:17:2e:7e:6b:90:12:80:d2:d7: 44:8d:bd:35:e6:33:33:46:9b:3a:72:c6:67:bc:16: 3f:fe:e5:97:ed:f9:42:d9:96:ce:36:08:e4:ff:24: c6:df:b8:76:86:85:de:76:b2:ca:f8:55:5d:a4:87: 3e:80:40:1c:0b:56:40:39:e2:9a:2c:3c:48:4c:73: 0f:f7:c2:b2:36:6d:78:c9:6f:42:55:9c:75:c9:ca: 0b:3f:34:7f:c0:d7:fe:09:91:c1:f5:4e:28:51:f5: 69:a8:bd:1a:f6:8c:5d:6d:97:27:0b:77:8a:f9:a7: c0:6b:d4:76:55:15:ab:d6:75:18:10:49:4d:f4:53: d3:6f:90:b5:85:b3:aa:fd:32:2e:c3:af:29:5a:7b: f6:b9:44:28:37:5f:7d:45:98:c7:b9:db:ac:85:94: 1d:81:08:a3:2f:9a:03:aa:38:0e:08:1e:87:9c:24: 82:e9:23:41:0f:09:e9:ed:fa:05:17:ff:67:da:32: 57:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:57:24:39:AF:A8:29:DB:46:24:BD:6B:A0:A1:95:F7:65:41:88:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/b009589d-c2ae-3e7c-ae62-0db5040f93ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl X509v3 Authority Key Identifier: keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer sbgp-ipAddrBlock: critical IPv4: 198.174.212.0/22 204.221.17.0-204.221.19.255 204.221.144.0/22 206.9.80.0/24 206.145.178.0/23 206.145.224.0/23 206.146.48.0/22 209.32.64.0/21 209.32.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:1f:69:11:d9:4d:4b:43:6a:be:ce:22:76:4f:ad:f2:67:a3: c4:2c:00:d1:1b:4e:47:b0:a5:50:39:72:66:c3:03:c8:4c:e8: eb:5f:22:39:42:8b:1b:3e:d4:bd:ee:8e:b0:c8:23:e6:7c:43: d7:52:b8:ed:94:68:ee:d8:a3:72:14:c9:41:ca:4d:b0:ce:c9: 7f:d7:8b:8b:4c:49:af:3c:4a:84:bc:97:3a:46:55:17:31:4e: ed:0f:c7:bc:1e:15:2b:23:b6:73:70:18:fc:85:a5:ea:9c:cd: 3f:c2:54:c8:12:49:ed:38:5c:5d:4d:c8:b8:76:fa:f8:81:ed: 2e:b1:dd:3e:ec:89:b0:1a:c0:c3:d9:7d:be:57:35:a6:d7:b8: 81:5b:6e:82:a3:da:b4:ad:0c:2b:cf:f9:9a:ae:41:d1:2e:1d: 2e:ed:56:98:35:bd:bb:7c:2e:aa:fa:b6:87:07:f2:9b:81:f3: 04:4e:20:81:64:34:6b:8f:2b:83:9a:fb:b0:ea:67:9e:a2:ae: 2d:8b:2f:1f:21:bd:be:77:7a:12:3c:ff:79:9a:2b:3e:06:29: 77:9b:05:59:32:66:76:b0:4e:17:d2:50:b3:8b:04:87:7d:47: f5:5c:02:4d:08:a9:24:c6:43:2b:48:dd:20:9a:00:9d:5e:fe: 20:eb:f2:f3 -----BEGIN CERTIFICATE----- MIIGezCCBWOgAwIBAgIUAQ0Mn0MoWE884p0UtjzQFuyPUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGJjNDFkNTUtOWNiZC00MDNlLTlmYTctYTMzMzRmMWVk ZTNkMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjNiNmI0ZWItZDMyMS00NjIwLThiMzEtNTVkZGFkYzY3ZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4xwJRNROltbWsigb8mRcDAu+k8RaS4A0zNv Fl7Y3iGGax9RK7ecQGU8Tp3SMRpLBvG2xpH3pHY+jF2NAuPfBG4XLn5rkBKA0tdE jb015jMzRps6csZnvBY//uWX7flC2ZbONgjk/yTG37h2hoXedrLK+FVdpIc+gEAc C1ZAOeKaLDxITHMP98KyNm14yW9CVZx1ycoLPzR/wNf+CZHB9U4oUfVpqL0a9oxd bZcnC3eK+afAa9R2VRWr1nUYEElN9FPTb5C1hbOq/TIuw68pWnv2uUQoN199RZjH udushZQdgQijL5oDqjgOCB6HnCSC6SNBDwnp7foFF/9n2jJXZwIDAQABo4IDjTCC A4kwHQYDVR0OBBYEFCdXJDmvqCnbRiS9a6ChlfdlQYiWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0 MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMzNGYxZWRlM2QvYjAwOTU4OWQtYzJhZS0z ZTdjLWFlNjItMGRiNTA0MGY5M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGJjNDFkNTUtOWNiZC00MDNlLTlm YTctYTMzMzRmMWVkZTNkL2RiYzQxZDU1LTljYmQtNDAzZS05ZmE3LWEzMzM0ZjFl ZGUzZC5jcmwwHwYDVR0jBBgwFoAUvQmQei2aL1ZlthZM7CRjivLSCZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYmM0MWQ1NS05Y2JkLTQwM2UtOWZhNy1hMzMz NGYxZWRlM2QuY2VyMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCxq7UMAwD BADM3REDBALM3RADBALM3ZADBADOCVADBAHOkbIDBAHOkeADBALOkjADBAPRIEAD BAPRIHAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAbB9pEdlNS0Nqvs4idk+t8mejxCwA0RtOR7ClUDlyZsMD yEzo618iOUKLGz7Uve6OsMgj5nxD11K47ZRo7tijchTJQcpNsM7Jf9eLi0xJrzxK hLyXOkZVFzFO7Q/HvB4VKyO2c3AY/IWl6pzNP8JUyBJJ7ThcXU3IuHb6+IHtLrHd PuyJsBrAw9l9vlc1pte4gVtugqPatK0MK8/5mq5B0S4dLu1WmDW9u3wuqvq2hwfy m4HzBE4ggWQ0a48rg5r7sOpnnqKuLYsvHyG9vnd6Ejz/eZorPgYpd5sFWTJmdrBO F9JQs4sEh31H9VwCTQipJMZDK0jdIJoAnV7+IOvy8w== -----END CERTIFICATE-----Generated at Sun Sep 20 21:40:25 2026 by rpki-client