$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/753e05a9-ca59-34ee-8ad0-ac75ca66811e.roa File: 753e05a9-ca59-34ee-8ad0-ac75ca66811e.roa (raw, json) Hash identifier: 9+3MeuUoNNISqwQ6Gz7dAH26ywi+8neBxMjEvoKgyjU= Subject key identifier: 2A:A7:2E:0C:B4:B2:DA:5A:CA:09:BD:09:3B:4E:7A:F0:53:58:1A:9B Certificate issuer: /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Certificate serial: 010D0C9F4328584F0FD32F91EF199284D84CFB00 Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/753e05a9-ca59-34ee-8ad0-ac75ca66811e.roa Signing time: Fri 04 Sep 2026 09:38:05 +0000 ROA not before: Fri 04 Sep 2026 09:38:05 +0000 ROA not after: Thu 03 Dec 2026 10:38:05 +0000 asID: 10489 IP address blocks: 209.250.0.0/24 maxlen: 24 209.250.1.0/24 maxlen: 24 209.250.2.0/24 maxlen: 24 209.250.3.0/24 maxlen: 24 209.250.4.0/24 maxlen: 24 209.250.5.0/24 maxlen: 24 209.250.6.0/24 maxlen: 24 209.250.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0f:d3:2f:91:ef:19:92:84:d8:4c:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4 Validity Not Before: Sep 4 09:38:05 2026 GMT Not After : Dec 3 10:38:05 2026 GMT Subject: CN=dc43beaa-d4ef-40e7-83d1-af6484cbc033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:71:77:24:dd:12:32:88:62:96:23:49:17:99: c6:04:5c:7b:d3:01:b8:a0:cd:c8:fb:fc:7c:28:64: 47:f2:40:39:bd:c6:3b:bd:e9:70:ca:e6:e0:12:95: bf:60:59:33:ef:f9:3b:3f:5b:c9:e1:ae:79:79:7b: 85:2f:15:89:97:f3:76:29:84:6c:ac:4d:a3:1a:b0: d8:fd:ff:ab:5d:61:f6:be:fe:5b:91:f3:02:09:c3: 5c:c3:21:23:75:6c:2b:52:e7:67:43:51:30:83:b9: 20:34:98:19:43:7a:6d:a3:19:61:6f:aa:04:31:68: 3f:ca:16:1d:e6:b0:1d:43:ac:66:dd:80:be:ee:0f: e7:31:ae:8b:84:54:e5:58:46:97:2d:9f:2e:1e:c9: b0:dd:64:ff:9a:22:c5:b5:6f:bb:ee:92:64:9e:63: 8b:9a:83:21:0e:0f:57:09:6a:a9:de:4a:4d:a3:8c: a2:04:c2:96:5a:d7:9d:ca:07:42:75:9a:7c:c3:21: b7:c4:57:5f:82:52:fb:a5:1c:b7:24:66:7b:1b:83: 99:10:b6:d2:ae:5c:5e:9c:f4:8a:ee:0d:64:3d:37: 65:05:f4:c1:b0:52:f3:59:a7:cc:e5:13:5e:d7:ae: 02:48:5a:b6:f4:39:1b:90:72:6a:b7:11:00:5b:7e: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A7:2E:0C:B4:B2:DA:5A:CA:09:BD:09:3B:4E:7A:F0:53:58:1A:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/753e05a9-ca59-34ee-8ad0-ac75ca66811e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl X509v3 Authority Key Identifier: keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer sbgp-ipAddrBlock: critical IPv4: 209.250.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:08:ae:fa:a2:36:91:da:58:22:04:0b:87:cd:15:2e:a5:37: 22:d2:22:0b:a7:ca:d4:85:5b:75:64:86:b0:73:93:ef:e6:20: 16:79:f8:8e:e9:08:00:f4:a4:c0:53:b5:0d:59:69:8b:7b:f6: d5:dd:be:f1:90:c9:96:48:c1:cd:5b:98:2f:ed:51:ff:aa:a1: d6:a0:d9:83:c9:5c:e3:53:9f:d3:6e:c6:12:22:13:86:87:88: 83:ba:31:9c:9c:a1:74:31:c3:79:b9:1f:0e:f1:04:be:d6:01: 4f:75:39:24:b1:12:21:26:50:7d:26:b9:85:8c:83:e5:92:72: d0:93:6b:9c:a6:96:ee:df:63:65:82:12:63:29:05:18:d0:d8: 4d:1f:e5:de:14:9e:56:f0:15:f6:25:79:72:87:e8:5f:81:5d: a0:9f:02:a3:1c:63:24:d8:6e:b4:ee:d6:1d:54:ba:65:06:b1: b8:18:16:0f:1a:fe:fd:fb:e8:09:98:67:9d:0f:52:6d:59:e4: 3e:ad:e6:e1:73:d1:d0:8f:dd:5f:02:4e:cf:c8:9d:1a:7a:ff: a5:7d:80:eb:87:df:dc:c3:47:7e:88:3a:8e:4c:23:3f:e2:6d: 5e:31:8c:6b:68:5b:33:80:aa:45:08:9d:03:45:ee:6e:ae:46: 51:9b:35:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8P0y+R7xmShNhM+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk2YjZjNjUtMTFiYi00MDVlLWEzNGEtYjcxNmZjZGM3 ZGQ0MB4XDTI2MDkwNDA5MzgwNVoXDTI2MTIwMzEwMzgwNVowLzEtMCsGA1UEAxMk ZGM0M2JlYWEtZDRlZi00MGU3LTgzZDEtYWY2NDg0Y2JjMDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXF3JN0SMohiliNJF5nGBFx70wG4oM3I+/x8 KGRH8kA5vcY7velwyubgEpW/YFkz7/k7P1vJ4a55eXuFLxWJl/N2KYRsrE2jGrDY /f+rXWH2vv5bkfMCCcNcwyEjdWwrUudnQ1Ewg7kgNJgZQ3ptoxlhb6oEMWg/yhYd 5rAdQ6xm3YC+7g/nMa6LhFTlWEaXLZ8uHsmw3WT/miLFtW+77pJknmOLmoMhDg9X CWqp3kpNo4yiBMKWWtedygdCdZp8wyG3xFdfglL7pRy3JGZ7G4OZELbSrlxenPSK 7g1kPTdlBfTBsFLzWafM5RNe164CSFq29DkbkHJqtxEAW35SswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqnLgy0stpaygm9CTtOevBTWBqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZi NmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2ZmNkYzdkZDQvNzUzZTA1YTktY2E1OS0z NGVlLThhZDAtYWM3NWNhNjY4MTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjk2YjZjNjUtMTFiYi00MDVlLWEz NGEtYjcxNmZjZGM3ZGQ0L2Y5NmI2YzY1LTExYmItNDA1ZS1hMzRhLWI3MTZmY2Rj N2RkNC5jcmwwHwYDVR0jBBgwFoAUXA5zSiCBvLBmexmGdhkHGO6ne+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mOTZiNmM2NS0xMWJiLTQwNWUtYTM0YS1iNzE2 ZmNkYzdkZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0foAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkIrvqiNpHaWCIEC4fNFS6lNyLSIgunytSFW3VkhrBzk+/mIBZ5+I7p CAD0pMBTtQ1ZaYt79tXdvvGQyZZIwc1bmC/tUf+qodag2YPJXONTn9NuxhIiE4aH iIO6MZycoXQxw3m5Hw7xBL7WAU91OSSxEiEmUH0muYWMg+WSctCTa5ymlu7fY2WC EmMpBRjQ2E0f5d4UnlbwFfYleXKH6F+BXaCfAqMcYyTYbrTu1h1UumUGsbgYFg8a /v376AmYZ50PUm1Z5D6t5uFz0dCP3V8CTs/InRp6/6V9gOuH39zDR36IOo5MIz/i bV4xjGtoWzOAqkUInQNF7m6uRlGbNUk= -----END CERTIFICATE-----Generated at Mon Sep 21 18:08:33 2026 by rpki-client