$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa File: ea8c8f15-c687-3daa-b878-45a8368b74d7.roa (raw, json) Hash identifier: NfcsV/vc1CeuErAqxCWnqiFeHD1cBTVt0xaV3dcTBs4= Subject key identifier: 97:15:55:AB:D7:93:48:0A:74:3B:F6:20:66:00:95:DD:C5:05:1D:B0 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584EB6E1A836A8B57D3DA11ADD00 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa Signing time: Mon 03 Aug 2026 13:00:12 +0000 ROA not before: Mon 03 Aug 2026 13:00:12 +0000 ROA not after: Sun 01 Nov 2026 14:00:12 +0000 asID: 55246 IP address blocks: 209.237.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:e1:a8:36:a8:b5:7d:3d:a1:1a:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Aug 3 13:00:12 2026 GMT Not After : Nov 1 14:00:12 2026 GMT Subject: CN=963b0d74-2b45-4a79-b5b4-5109a3032c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a7:f7:47:aa:fe:bd:3e:43:fc:2e:1d:5c:eb: fa:22:55:5f:33:72:c4:7e:26:5e:d8:f3:01:0e:60: 72:15:99:6f:00:ae:41:4b:af:60:71:ef:82:b1:06: 75:15:56:47:73:61:6e:2d:34:c2:d6:46:bf:e8:7a: 03:d2:e8:c9:e0:4d:24:e2:a5:2b:ce:cc:09:e2:6f: 06:18:3d:fa:be:18:79:81:23:ab:c8:b7:e6:4c:bb: af:9d:9d:c2:58:7e:93:f6:77:86:4a:42:74:05:96: 7a:3c:bb:ec:63:95:81:ba:c3:ae:87:3f:b2:78:98: 5d:b5:b2:50:fa:77:2e:e6:cf:d8:22:a7:de:72:e6: 41:47:13:71:0b:14:f9:2b:16:fc:98:37:c7:e3:b1: 40:6b:10:60:73:83:4b:64:2b:3e:65:74:79:c0:56: 64:59:7d:a4:50:30:f8:83:c0:ee:40:21:9a:f5:27: f8:f2:9e:88:92:67:b0:4c:6a:49:14:34:2c:29:0a: bc:95:65:22:3c:ad:3c:7d:b3:a3:97:c7:68:dd:ab: 6a:40:c5:6b:88:f5:3a:52:b7:17:9f:17:6f:c2:77: ac:c3:d7:f4:84:3f:f4:22:50:c7:f9:58:d2:78:54: 2e:ab:66:b4:53:37:e6:00:37:3f:79:5e:59:c8:ea: 37:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:15:55:AB:D7:93:48:0A:74:3B:F6:20:66:00:95:DD:C5:05:1D:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/ea8c8f15-c687-3daa-b878-45a8368b74d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:17:6d:0e:4a:ce:9b:ff:6e:58:ca:3f:73:ec:88:b4:3a:04: 89:36:b6:6a:8b:f4:1b:9f:7b:88:78:ba:c9:43:a6:b9:63:9b: dc:51:94:99:7e:67:e8:e4:ba:e7:77:ce:a1:d3:fd:42:1e:4f: b7:fc:52:8c:75:7a:9f:02:35:95:7f:7b:5a:f0:18:97:7c:c6: cd:9f:04:44:13:a7:e2:b3:d3:13:2b:df:dd:b2:ef:c4:09:7b: ba:3f:94:c3:18:95:e8:43:42:32:81:0a:a1:88:2b:b1:31:9b: 76:88:ed:1a:04:c9:7e:3a:52:de:12:30:b5:5a:b4:c2:e7:03: c5:0c:17:bb:2f:58:4d:03:3e:3e:7d:64:7a:6f:69:68:78:1e: 3b:6c:ae:81:5c:ef:c4:55:18:41:a1:dc:2b:9b:33:5f:39:39: 4c:a9:5d:aa:9d:c7:ff:5f:17:fd:e6:e3:46:5f:b1:6f:a4:5d: 36:64:90:8c:c3:22:92:4a:69:af:95:0c:c5:56:b1:18:cf:1e: 1e:04:cc:74:59:06:67:b6:43:3c:60:ba:34:57:8c:46:aa:3b: 5b:39:c0:63:81:ea:b0:fb:99:73:01:bf:db:50:9c:75:1c:b4: 15:54:a3:bc:ce:2c:6d:28:a5:0f:e0:3a:e8:0d:25:c3:37:5d: 18:88:2a:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624ag2qLV9PaEa3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk OTYzYjBkNzQtMmI0NS00YTc5LWI1YjQtNTEwOWEzMDMyYzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaf3R6r+vT5D/C4dXOv6IlVfM3LEfiZe2PMB DmByFZlvAK5BS69gce+CsQZ1FVZHc2FuLTTC1ka/6HoD0ujJ4E0k4qUrzswJ4m8G GD36vhh5gSOryLfmTLuvnZ3CWH6T9neGSkJ0BZZ6PLvsY5WBusOuhz+yeJhdtbJQ +ncu5s/YIqfecuZBRxNxCxT5Kxb8mDfH47FAaxBgc4NLZCs+ZXR5wFZkWX2kUDD4 g8DuQCGa9Sf48p6IkmewTGpJFDQsKQq8lWUiPK08fbOjl8do3atqQMVriPU6UrcX nxdvwnesw9f0hD/0IlDH+VjSeFQuq2a0UzfmADc/eV5ZyOo3wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcVVavXk0gKdDv2IGYAld3FBR2wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZWE4YzhmMTUtYzY4Ny0z ZGFhLWI4NzgtNDVhODM2OGI3NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4XbQ5Kzpv/bljKP3PsiLQ6BIk2tmqL9Bufe4h4uslDprljm9xRlJl+ Z+jkuud3zqHT/UIeT7f8Uox1ep8CNZV/e1rwGJd8xs2fBEQTp+Kz0xMr392y78QJ e7o/lMMYlehDQjKBCqGIK7Exm3aI7RoEyX46Ut4SMLVatMLnA8UMF7svWE0DPj59 ZHpvaWh4HjtsroFc78RVGEGh3CubM185OUypXaqdx/9fF/3m40ZfsW+kXTZkkIzD IpJKaa+VDMVWsRjPHh4EzHRZBme2QzxgujRXjEaqO1s5wGOB6rD7mXMBv9tQnHUc tBVUo7zOLG0opQ/gOugNJcM3XRiIKoM= -----END CERTIFICATE-----Generated at Mon Sep 21 06:31:37 2026 by rpki-client