$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa File: 626acb6f-a9f2-3ded-95e5-811dd7647975.roa (raw, json) Hash identifier: JNbB5gAnpfvsXjM4fNj66Utgra/leplZzwHT7pyZSc4= Subject key identifier: EB:92:09:8F:EC:F0:BE:02:8A:BF:E4:FE:DF:BA:84:5A:6A:35:F1:9F Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F6C583878870D8F5155B83100 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 54359 IP address blocks: 209.52.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:38:78:87:0d:8f:51:55:b8:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=d47007b5-3d6d-4266-83de-aaca2df88be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:e1:8e:81:64:df:d1:51:f1:69:26:3c:dd: 17:50:5b:ee:df:79:91:f8:d1:39:98:24:a3:c1:43: 5e:bb:b9:8f:94:4e:90:f3:0a:34:94:a9:c4:b7:d3: f4:d2:ee:0c:e6:c6:f0:8d:96:4c:c0:f8:fe:9f:c7: ea:6d:5a:e8:1a:46:ee:6e:5e:b4:42:73:08:a8:9c: de:a5:a8:ff:a4:b0:a5:19:19:ee:7a:35:d7:b5:a1: 80:c4:e0:42:14:e0:1c:70:1e:9a:2e:1c:75:0e:ea: fe:d8:76:c9:36:dc:12:97:86:a6:74:33:26:19:e8: 1c:78:e3:29:e2:8e:4d:af:c2:65:4d:cf:99:62:1d: b7:df:c2:dd:ea:6b:bc:5e:5c:6b:9a:42:ff:8d:60: 3d:de:23:04:6b:cd:a9:75:23:40:9c:ea:da:a1:fc: 6c:34:18:5b:7c:2c:ba:89:61:85:d2:48:f0:a2:57: bc:ed:1d:55:fd:cf:80:0c:fa:3e:f1:e8:43:a3:f0: cd:29:c0:88:6d:b8:24:6a:eb:c8:b7:b1:40:c4:31: d9:4b:a1:65:f1:7a:d6:91:60:97:c4:21:40:4d:cf: a3:1d:1f:c6:59:23:01:48:f8:04:7c:21:b1:5c:71: 09:74:64:00:ad:8b:28:27:8b:8b:f0:de:d3:cb:73: ae:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:92:09:8F:EC:F0:BE:02:8A:BF:E4:FE:DF:BA:84:5A:6A:35:F1:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/626acb6f-a9f2-3ded-95e5-811dd7647975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:52:42:3d:66:f5:38:f5:6f:60:e9:30:a6:73:fc:95:58:b9: 38:e9:45:93:46:f0:f6:d1:0f:e1:1f:e1:23:d4:cb:22:62:54: 34:3d:dd:ce:31:31:7c:15:d2:e6:7d:bb:40:eb:21:0d:55:1e: 89:92:93:1f:27:57:e7:ab:9c:0b:70:ec:bb:f4:12:fc:b5:8e: ae:34:ca:d5:01:8d:74:28:06:a1:02:e3:6b:e5:a1:f1:c5:2e: 19:61:76:a6:da:41:ab:7b:c7:e9:ef:15:c1:8a:2e:f0:82:31: 85:13:c8:fb:09:ab:06:74:28:19:73:61:e7:c2:00:37:89:c1: 47:f4:0f:32:8b:91:0c:91:9a:29:3f:e6:6d:4c:15:57:d9:a9: 07:5f:96:de:7f:c3:2a:14:39:94:a6:95:5b:ae:9e:ba:2e:6f: 0c:7b:d7:ab:49:e6:45:4b:a8:79:cc:2c:95:c6:f2:f8:01:20: de:2c:d4:ce:68:dc:50:fb:e1:30:63:a9:f1:a8:18:08:42:9f: c0:3c:c5:b0:23:a9:05:af:59:06:49:98:50:ef:6c:d8:f3:6b: 83:24:5a:14:bf:86:ac:24:43:8f:31:63:d8:2c:ee:ea:73:f4: 00:38:54:1e:dd:6f:91:8a:8d:57:6a:5d:32:c1:28:ff:95:b8: b3:66:2b:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDh4hw2PUVW4MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ZDQ3MDA3YjUtM2Q2ZC00MjY2LTgzZGUtYWFjYTJkZjg4YmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB7hjoFk39FR8WkmPN0XUFvu33mR+NE5mCSj wUNeu7mPlE6Q8wo0lKnEt9P00u4M5sbwjZZMwPj+n8fqbVroGkbubl60QnMIqJze paj/pLClGRnuejXXtaGAxOBCFOAccB6aLhx1Dur+2HbJNtwSl4amdDMmGegceOMp 4o5Nr8JlTc+ZYh2338Ld6mu8XlxrmkL/jWA93iMEa82pdSNAnOraofxsNBhbfCy6 iWGF0kjwole87R1V/c+ADPo+8ehDo/DNKcCIbbgkauvIt7FAxDHZS6Fl8XrWkWCX xCFATc+jHR/GWSMBSPgEfCGxXHEJdGQArYsoJ4uL8N7Ty3OuwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuSCY/s8L4Cir/k/t+6hFpqNfGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjI2YWNiNmYtYTlmMi0z ZGVkLTk1ZTUtODExZGQ3NjQ3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TTsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRSQj1m9Tj1b2DpMKZz/JVYuTjpRZNG8PbRD+Ef4SPUyyJiVDQ93c4x MXwV0uZ9u0DrIQ1VHomSkx8nV+ernAtw7Lv0Evy1jq40ytUBjXQoBqEC42vlofHF LhlhdqbaQat7x+nvFcGKLvCCMYUTyPsJqwZ0KBlzYefCADeJwUf0DzKLkQyRmik/ 5m1MFVfZqQdflt5/wyoUOZSmlVuunroubwx716tJ5kVLqHnMLJXG8vgBIN4s1M5o 3FD74TBjqfGoGAhCn8A8xbAjqQWvWQZJmFDvbNjza4MkWhS/hqwkQ48xY9gs7upz 9AA4VB7db5GKjVdqXTLBKP+VuLNmKzM= -----END CERTIFICATE-----Generated at Sun Oct 11 15:33:44 2026 by rpki-client