$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457/da304c7a-5ed1-3525-8c64-f8c6c6a83e24.roa File: da304c7a-5ed1-3525-8c64-f8c6c6a83e24.roa (raw, json) Hash identifier: m4wQUiE3/Fqa3clW6sCsjQM2FlsLG5yDLVE8ZpM3dog= Subject key identifier: 19:90:49:7D:05:D6:C6:7E:BB:E6:2F:8C:EA:6C:FB:D1:3C:D3:5E:DB Certificate issuer: /CN=69f557b3-7b94-42c2-98b7-d0ca92c25457 Certificate serial: 010D0C9F4328584F27F26188753A6D2E1CF9B680 Authority key identifier: B8:EA:04:8F:42:C3:13:BB:8B:4A:35:50:54:EE:D7:CF:43:98:1D:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457/da304c7a-5ed1-3525-8c64-f8c6c6a83e24.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 32453 IP address blocks: 209.151.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457/69f557b3-7b94-42c2-98b7-d0ca92c25457.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457/69f557b3-7b94-42c2-98b7-d0ca92c25457.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:61:88:75:3a:6d:2e:1c:f9:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f557b3-7b94-42c2-98b7-d0ca92c25457 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=e74094cb-bbd0-47e1-af9f-0a7284a2d9c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:52:b3:61:fa:9b:5a:f1:ed:a5:d0:b4:d7: bd:e9:e5:cf:83:d5:aa:f6:82:61:db:da:35:47:ec: d0:d0:ad:e2:b4:92:f9:20:27:86:87:a7:52:8c:71: 03:1a:e2:c0:1a:b7:5d:d5:2b:bd:5a:99:29:d1:84: 43:36:4e:74:64:65:2e:e4:1e:69:47:ae:f5:32:79: 14:d3:bd:e4:ed:a6:03:20:b0:70:fe:88:c2:03:b9: 5c:69:4f:d3:60:87:b1:1f:cc:53:f9:9c:f8:56:3b: 52:12:05:7e:c3:d5:4a:3a:75:3b:e5:bf:f4:b4:c1: 6f:70:95:5b:38:ca:64:aa:0a:63:01:82:6c:68:85: cb:4f:53:c3:a0:ae:a4:09:f6:ce:7e:f4:3a:e8:63: 62:51:86:a6:a1:38:c1:36:11:5d:19:1c:e9:ac:55: 6f:04:12:eb:01:fa:25:d6:8a:73:98:5a:c6:20:a0: fd:ca:ce:b8:da:ee:4c:26:b2:96:f3:6b:48:1b:db: 81:ec:2f:8b:dc:4d:e9:aa:90:65:e1:54:60:5f:f6: 0c:01:b4:f1:47:37:69:5a:2b:6f:e6:17:1f:92:4a: 14:22:98:75:ab:41:e0:f8:2c:dc:4c:ca:23:f5:2f: b8:d4:6f:f9:a1:30:eb:3c:a4:36:71:23:3d:73:fd: 09:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:90:49:7D:05:D6:C6:7E:BB:E6:2F:8C:EA:6C:FB:D1:3C:D3:5E:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457/da304c7a-5ed1-3525-8c64-f8c6c6a83e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457/69f557b3-7b94-42c2-98b7-d0ca92c25457.crl X509v3 Authority Key Identifier: keyid:B8:EA:04:8F:42:C3:13:BB:8B:4A:35:50:54:EE:D7:CF:43:98:1D:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457.cer sbgp-ipAddrBlock: critical IPv4: 209.151.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:94:f2:7a:bb:71:d8:77:71:63:b8:98:08:ee:79:9f:df:a4: bb:15:7f:9f:ec:99:aa:a5:0f:68:e4:86:2d:c2:3d:0e:2f:ab: 90:ed:4a:59:27:bd:ea:f6:23:87:1a:94:d5:bd:20:28:39:ec: 2e:a6:08:75:f4:5c:13:8c:47:0f:0d:6a:b5:5f:fd:2a:1a:43: ad:92:ee:4e:74:31:93:55:82:07:7b:14:d1:1a:15:94:31:c6: df:7b:97:75:39:df:ab:66:65:8b:4d:5d:5c:77:3a:0d:c4:df: e5:ce:c0:72:13:56:00:80:6c:48:32:c2:56:c1:63:75:63:4c: 8e:54:e4:08:40:6c:87:d9:88:e2:9a:66:92:16:26:67:e7:06: 76:51:c4:65:6b:bd:31:1a:fd:35:89:a9:f3:08:99:e1:01:4c: 79:ef:52:ef:6b:25:61:ef:8d:a5:b0:54:4b:de:30:30:48:aa: 01:b4:1f:0c:1c:e7:96:81:5d:9f:94:ce:59:a3:a2:c0:46:34: a6:aa:59:9f:9d:0c:fa:d6:f9:b8:b1:82:2a:b5:14:9c:06:1a: 58:c2:d7:70:9a:59:33:01:7a:89:0e:7a:09:43:72:df:67:cd: 85:f0:14:e4:f5:34:ad:89:ec:2d:53:72:e3:b3:86:ba:16:e6: c6:bf:f6:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8mGIdTptLhz5toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmNTU3YjMtN2I5NC00MmMyLTk4YjctZDBjYTkyYzI1 NDU3MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk ZTc0MDk0Y2ItYmJkMC00N2UxLWFmOWYtMGE3Mjg0YTJkOWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7dSs2H6m1rx7aXQtNe96eXPg9Wq9oJh29o1 R+zQ0K3itJL5ICeGh6dSjHEDGuLAGrdd1Su9Wpkp0YRDNk50ZGUu5B5pR671MnkU 073k7aYDILBw/ojCA7lcaU/TYIexH8xT+Zz4VjtSEgV+w9VKOnU75b/0tMFvcJVb OMpkqgpjAYJsaIXLT1PDoK6kCfbOfvQ66GNiUYamoTjBNhFdGRzprFVvBBLrAfol 1opzmFrGIKD9ys642u5MJrKW82tIG9uB7C+L3E3pqpBl4VRgX/YMAbTxRzdpWitv 5hcfkkoUIph1q0Hg+CzcTMoj9S+41G/5oTDrPKQ2cSM9c/0JbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmQSX0F1sZ+u+YvjOps+9E8017bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi82OWY1 NTdiMy03Yjk0LTQyYzItOThiNy1kMGNhOTJjMjU0NTcvZGEzMDRjN2EtNWVkMS0z NTI1LThjNjQtZjhjNmM2YTgzZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNjlmNTU3YjMtN2I5NC00MmMyLTk4 YjctZDBjYTkyYzI1NDU3LzY5ZjU1N2IzLTdiOTQtNDJjMi05OGI3LWQwY2E5MmMy NTQ1Ny5jcmwwHwYDVR0jBBgwFoAUuOoEj0LDE7uLSjVQVO7Xz0OYHeMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi82OWY1NTdiMy03Yjk0LTQyYzItOThiNy1kMGNh OTJjMjU0NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0ZeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWU8nq7cdh3cWO4mAjueZ/fpLsVf5/smaqlD2jkhi3CPQ4vq5DtSlkn ver2I4calNW9ICg57C6mCHX0XBOMRw8NarVf/SoaQ62S7k50MZNVggd7FNEaFZQx xt97l3U536tmZYtNXVx3Og3E3+XOwHITVgCAbEgywlbBY3VjTI5U5AhAbIfZiOKa ZpIWJmfnBnZRxGVrvTEa/TWJqfMImeEBTHnvUu9rJWHvjaWwVEveMDBIqgG0Hwwc 55aBXZ+UzlmjosBGNKaqWZ+dDPrW+bixgiq1FJwGGljC13CaWTMBeokOeglDct9n zYXwFOT1NK2J7C1TcuOzhroW5sa/9kI= -----END CERTIFICATE-----Generated at Sun Oct 11 08:05:47 2026 by rpki-client