$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5db6d69b-412b-3266-902d-230d81c1875f.roa File: 5db6d69b-412b-3266-902d-230d81c1875f.roa (raw, json) Hash identifier: 9B6AJUA+LQeGHeZOPIeU97TOXUt52k9RHgRKqOVMFYs= Subject key identifier: 6A:93:55:8A:9A:85:8B:F8:FE:23:7D:9A:2E:13:BF:30:85:BE:80:91 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C1063F2FF88F959D4F40 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5db6d69b-412b-3266-902d-230d81c1875f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7861 IP address blocks: 209.29.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c1:06:3f:2f:f8:8f:95:9d:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=87b19eb5-ab03-4718-8601-1869702d515a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:47:e9:8f:b5:62:6d:f8:0f:42:3b:4a:bb: c4:d1:5a:94:e5:c9:d0:17:0b:29:60:0e:25:30:fc: ce:13:0a:60:3c:b2:ed:f8:25:f0:04:b7:98:96:46: 5b:e3:7e:25:90:b8:56:66:71:2e:f9:d5:1c:40:36: 6e:6a:e1:c9:55:d7:0e:29:88:e3:8c:a5:f1:b9:b9: a9:86:50:c6:37:d8:a8:d4:0b:5a:47:90:db:c3:77: 4f:d3:cb:0b:b2:80:32:2f:74:a2:d0:ae:52:5e:56: 44:9c:54:52:75:05:9b:93:5f:ba:a7:36:8d:02:5b: bb:53:68:31:71:07:9d:17:e7:b1:6d:f7:fb:3c:48: 83:f8:f8:b1:4b:54:80:92:cf:bf:fa:0f:6d:fe:b0: 13:46:4b:d2:6e:8e:ef:c2:bb:b9:9c:cb:d2:5c:d4: 65:dd:e7:d3:9b:4e:d6:c9:0b:96:ad:07:c3:16:36: e6:f4:5c:85:c1:2b:7c:0d:4d:9f:ad:ca:30:ce:51: 91:4f:e2:2a:a0:e9:fe:21:8b:eb:88:10:0c:43:32: 8f:9f:38:d7:23:9a:7f:b1:e0:3f:d7:a7:6e:fc:34: ff:69:f0:c9:4c:83:dd:3f:ca:9f:28:9c:41:3a:d7: e3:72:0a:53:e3:9d:df:5e:90:16:76:2e:0a:9e:32: 9e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:93:55:8A:9A:85:8B:F8:FE:23:7D:9A:2E:13:BF:30:85:BE:80:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5db6d69b-412b-3266-902d-230d81c1875f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.29.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption df:85:ce:1b:ef:5c:78:a6:04:9c:0b:d1:84:e1:9f:a0:7a:e9: d1:89:0d:32:38:10:f1:6c:0b:64:e5:50:3d:c6:ea:74:12:71: b9:2a:24:87:2b:a1:b6:a8:07:45:c3:e7:e6:50:9f:6d:b3:3b: d1:67:2f:0c:20:1f:dd:32:54:fd:cd:fc:2c:57:3f:aa:da:bb: 4b:01:6b:e0:6c:4f:b6:cf:6e:94:21:78:54:ec:5c:97:4e:23: 94:53:78:d3:fe:bb:8a:45:11:5c:5f:74:70:5c:da:03:7f:e3: be:78:36:aa:dd:c9:61:58:34:54:22:87:7a:18:30:48:3c:1d: ef:3d:34:55:3b:d1:28:a9:12:e7:17:d6:b8:2e:31:41:31:45: ae:91:fa:de:33:c7:61:2b:ad:e8:11:9f:b8:86:c9:52:b9:a9: 90:05:de:5a:95:6f:08:52:3e:50:f6:1a:04:ee:8d:af:6f:17: 8d:cd:a1:3c:e0:39:fd:00:a1:e0:18:96:06:29:34:90:49:8a: d9:26:ee:0d:b1:e4:e5:14:75:17:2d:c7:31:27:ec:69:87:6c: 64:25:63:48:7c:a8:27:3d:7f:92:9d:3e:3e:be:0d:d4:0b:48: ff:6a:e1:05:3d:89:b2:22:d8:43:f3:06:5b:4d:52:9b:a4:32: 03:59:06:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8EGPy/4j5WdT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODdiMTllYjUtYWIwMy00NzE4LTg2MDEtMTg2OTcwMmQ1MTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDtH6Y+1Ym34D0I7SrvE0VqU5cnQFwspYA4l MPzOEwpgPLLt+CXwBLeYlkZb434lkLhWZnEu+dUcQDZuauHJVdcOKYjjjKXxubmp hlDGN9io1AtaR5Dbw3dP08sLsoAyL3Si0K5SXlZEnFRSdQWbk1+6pzaNAlu7U2gx cQedF+exbff7PEiD+PixS1SAks+/+g9t/rATRkvSbo7vwru5nMvSXNRl3efTm07W yQuWrQfDFjbm9FyFwSt8DU2frcowzlGRT+IqoOn+IYvriBAMQzKPnzjXI5p/seA/ 16du/DT/afDJTIPdP8qfKJxBOtfjcgpT453fXpAWdi4KnjKeJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqTVYqahYv4/iN9mi4TvzCFvoCRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWRiNmQ2OWItNDEyYi0z MjY2LTkwMmQtMjMwZDgxYzE4NzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0R3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN+FzhvvXHimBJwL0YThn6B66dGJDTI4EPFsC2TlUD3G6nQScbkqJIcr obaoB0XD5+ZQn22zO9FnLwwgH90yVP3N/CxXP6rau0sBa+BsT7bPbpQheFTsXJdO I5RTeNP+u4pFEVxfdHBc2gN/4754NqrdyWFYNFQih3oYMEg8He89NFU70SipEucX 1rguMUExRa6R+t4zx2ErregRn7iGyVK5qZAF3lqVbwhSPlD2GgTuja9vF43NoTzg Of0AoeAYlgYpNJBJitkm7g2x5OUUdRctxzEn7GmHbGQlY0h8qCc9f5KdPj6+DdQL SP9q4QU9ibIi2EPzBltNUpukMgNZBrg= -----END CERTIFICATE-----Generated at Wed Oct 14 17:25:55 2026 by rpki-client