$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fdf3fae6-0252-3bda-a826-286a240b5e91.roa File: fdf3fae6-0252-3bda-a826-286a240b5e91.roa (raw, json) Hash identifier: 1xK2pGxvI7GYddJgF7GiZCsgFgBFRMvpy2THUHvt7LE= Subject key identifier: 1C:97:81:A5:56:26:EA:DC:FE:E5:F0:06:3D:E4:4F:92:18:9B:F2:E3 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584F6F231647A8ECC593767CA0E0 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fdf3fae6-0252-3bda-a826-286a240b5e91.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 33059 IP address blocks: 209.42.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:16:47:a8:ec:c5:93:76:7c:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=88139b3b-3649-4cfa-bca7-df58ec7b0afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e3:15:e5:4a:53:f1:46:09:53:21:70:9f:2a: 86:2a:da:fe:e5:28:36:6a:9c:17:d7:9d:35:ee:39: c4:6a:4f:8e:2b:51:ee:6a:77:f2:9f:37:68:6d:d1: f3:3d:6a:85:ec:a2:3a:6f:cc:83:48:13:6b:22:d3: 5c:90:6e:be:97:f1:da:89:ac:d8:ba:ea:90:df:5b: e3:94:70:29:64:45:80:69:41:42:44:85:26:5d:eb: a2:ca:c7:10:5a:48:26:4c:49:86:b7:02:5f:f8:c8: 8a:70:db:ff:7b:9f:26:2f:59:e7:b7:b8:99:6a:c0: 29:66:85:b8:0d:aa:38:b9:bc:bd:e2:98:a8:a1:5c: bf:c6:53:ee:3e:6b:a7:57:5f:ee:4c:3f:cc:38:44: 6d:2b:0d:24:87:c5:ae:ba:c4:bc:7d:fb:9c:0f:1e: 2b:31:98:df:b1:9c:6d:87:5a:5e:c4:3d:93:33:e4: de:c4:42:79:35:36:fd:09:27:0e:79:2b:e0:40:43: 93:a7:f7:4a:3b:40:1d:84:b2:4b:a5:dc:4f:30:57: b7:c8:a1:0e:36:12:56:00:42:7c:08:eb:9c:29:ba: d4:a5:da:bd:9f:56:09:18:70:6a:ba:21:24:c0:35: f7:ac:b4:e0:b0:58:b3:76:05:5e:c9:ef:37:a2:89: 5c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:97:81:A5:56:26:EA:DC:FE:E5:F0:06:3D:E4:4F:92:18:9B:F2:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fdf3fae6-0252-3bda-a826-286a240b5e91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.42.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:38:05:ee:2f:ec:f8:2b:81:85:df:c7:22:37:65:a0:d0:0b: 28:53:f3:8a:51:94:f6:93:df:b7:15:ed:42:6f:27:60:0a:4a: ec:b7:63:4c:69:59:5f:0f:a8:a7:3b:52:f3:82:53:f5:8a:3d: 4f:03:e5:67:54:6c:3f:6a:b6:9a:a9:93:3d:23:89:68:8c:c0: 07:71:26:d6:97:eb:0d:0e:14:4b:aa:a0:f7:a9:58:7a:08:40: d9:1a:3d:e3:04:1d:53:b9:3d:9b:4b:98:a1:8d:79:d9:72:48: 29:a3:47:37:10:0f:02:36:bc:4c:b5:fd:e4:22:45:b3:44:c4: a3:ad:86:b9:69:8c:63:6f:c0:be:d1:fa:4f:40:44:0c:68:b5: f9:d6:b3:27:57:4f:30:9b:ff:da:72:27:df:80:01:5b:c6:80: 05:25:ad:07:54:f6:aa:a1:c1:bf:55:fd:36:cd:06:db:11:2a: 2d:a4:e3:5a:66:47:5c:59:e7:e7:44:8a:0c:66:e9:53:26:a1: 01:97:9b:9d:79:7a:f5:bf:f2:bf:09:92:54:cb:f5:67:09:ee: f1:4d:48:a7:a0:95:c6:7f:19:18:b4:5c:f6:e7:e9:38:c3:9a: 71:ae:19:f8:0e:47:61:9e:8d:08:ce:3f:58:2b:08:cf:98:97: 8d:06:7b:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIxZHqOzFk3Z8oOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ODgxMzliM2ItMzY0OS00Y2ZhLWJjYTctZGY1OGVjN2IwYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeMV5UpT8UYJUyFwnyqGKtr+5Sg2apwX1501 7jnEak+OK1HuanfynzdobdHzPWqF7KI6b8yDSBNrItNckG6+l/HaiazYuuqQ31vj lHApZEWAaUFCRIUmXeuiyscQWkgmTEmGtwJf+MiKcNv/e58mL1nnt7iZasApZoW4 Dao4uby94piooVy/xlPuPmunV1/uTD/MOERtKw0kh8WuusS8ffucDx4rMZjfsZxt h1pexD2TM+TexEJ5NTb9CScOeSvgQEOTp/dKO0AdhLJLpdxPMFe3yKEONhJWAEJ8 COucKbrUpdq9n1YJGHBquiEkwDX3rLTgsFizdgVeye83oolc3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByXgaVWJurc/uXwBj3kT5IYm/LjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZmRmM2ZhZTYtMDI1Mi0z YmRhLWE4MjYtMjg2YTI0MGI1ZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SqnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM4Be4v7PgrgYXfxyI3ZaDQCyhT84pRlPaT37cV7UJvJ2AKSuy3Y0xp WV8PqKc7UvOCU/WKPU8D5WdUbD9qtpqpkz0jiWiMwAdxJtaX6w0OFEuqoPepWHoI QNkaPeMEHVO5PZtLmKGNedlySCmjRzcQDwI2vEy1/eQiRbNExKOthrlpjGNvwL7R +k9ARAxotfnWsydXTzCb/9pyJ9+AAVvGgAUlrQdU9qqhwb9V/TbNBtsRKi2k41pm R1xZ5+dEigxm6VMmoQGXm515evW/8r8JklTL9WcJ7vFNSKeglcZ/GRi0XPbn6TjD mnGuGfgOR2GejQjOP1grCM+Yl40Ge4w= -----END CERTIFICATE-----Generated at Thu Oct 8 16:01:18 2026 by rpki-client