$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/72de5635-1343-3d96-9a79-e23be9d45b85.roa File: 72de5635-1343-3d96-9a79-e23be9d45b85.roa (raw, json) Hash identifier: A/9Q3ae5o3fPA+Ky+MU0mRKF8w/x2Xu494Cs5BtiO/I= Subject key identifier: B4:DE:3F:20:B3:C9:8D:19:2F:0E:56:EE:0A:06:05:32:42:67:AC:C3 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C79A908AB39A6E65D980 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/72de5635-1343-3d96-9a79-e23be9d45b85.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 209.115.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c7:9a:90:8a:b3:9a:6e:65:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=158b4cf3-f3c0-40cc-a6dc-f62594e1a09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9b:ac:df:62:6e:a0:85:f6:08:d1:7c:aa:6a: 43:ed:41:5f:89:df:fd:e7:6f:9c:31:47:1d:ef:23: eb:39:27:41:8e:ad:92:62:ce:9f:e8:36:7f:41:06: b0:ce:80:13:91:f6:d1:da:69:16:a3:0e:ee:43:e2: 9e:25:db:d9:da:a2:4e:65:31:54:54:d5:05:6a:2b: 8e:5b:31:e3:a7:95:be:5a:45:36:ea:74:6d:d3:97: a3:c2:9f:79:75:16:cf:00:d5:61:f6:97:b8:50:9b: 55:8f:c2:32:83:c9:c3:7d:88:c4:66:87:ef:44:9c: ef:8f:3c:3e:6e:43:60:b3:0e:f6:e5:2e:54:a1:6b: 75:8b:28:79:2a:df:84:72:6b:0c:bc:f1:f7:90:d5: 0c:67:44:6d:04:df:f7:d0:f2:31:d7:df:59:d9:ec: d1:ad:94:1d:0c:5c:c1:dd:15:17:1d:f4:29:79:f5: f6:bb:7d:32:ca:78:2e:d0:9a:97:a0:78:c2:1a:e0: 09:c7:43:76:4d:76:9e:6c:a6:28:f5:5f:4d:b2:28: 48:d8:02:0d:7d:2b:9a:ca:d7:f8:d0:a2:bb:f1:9a: ae:d1:10:43:a6:a3:9f:9f:4b:bc:26:89:f1:1f:2f: 7a:88:04:11:b8:fe:5f:6b:62:92:7c:6c:9c:72:65: 18:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DE:3F:20:B3:C9:8D:19:2F:0E:56:EE:0A:06:05:32:42:67:AC:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/72de5635-1343-3d96-9a79-e23be9d45b85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.115.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:99:97:27:ba:35:53:ab:61:9a:18:55:6b:58:3a:70:df:62: c5:47:9b:ff:14:02:9a:30:6a:04:49:1f:9a:b4:53:d9:92:93: c0:ae:27:f9:de:9b:a5:a1:1e:29:c6:99:f8:0e:a4:ca:f4:d7: 51:72:a8:7e:dc:e6:25:15:97:a1:01:75:a2:e0:ca:86:23:c8: 09:7e:eb:e0:c9:7d:02:69:18:53:9f:12:27:a0:33:35:28:6f: c3:df:01:2f:74:fa:70:3a:96:f8:1a:8f:d7:87:15:b4:88:d0: 84:07:02:02:5b:2e:bb:ed:b1:a3:ae:32:ba:3d:28:a7:37:df: 4b:ff:ad:01:c8:c7:f6:11:e7:9a:71:c1:5a:cb:42:e6:de:93: b3:c5:4f:eb:44:6f:77:6c:43:27:c8:b3:72:d0:de:14:2a:59: 21:a9:ee:30:be:44:d3:09:c4:33:0f:a7:7a:63:71:d9:be:db: c3:d6:0d:f4:9d:e5:68:6f:5c:4f:a5:d0:13:fe:eb:ed:fc:ee: 8a:c6:74:6d:c9:42:cf:8d:6c:5c:35:a3:2a:27:7b:08:c4:8c: 7b:8d:c0:55:21:67:10:33:c4:7c:fb:c5:94:71:ff:a4:f8:62: 1f:31:ae:21:cf:91:ae:d1:35:d9:04:ef:24:32:a1:91:d6:6a: fb:16:fe:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8eakIqzmm5l2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTU4YjRjZjMtZjNjMC00MGNjLWE2ZGMtZjYyNTk0ZTFhMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zus32JuoIX2CNF8qmpD7UFfid/952+cMUcd 7yPrOSdBjq2SYs6f6DZ/QQawzoATkfbR2mkWow7uQ+KeJdvZ2qJOZTFUVNUFaiuO WzHjp5W+WkU26nRt05ejwp95dRbPANVh9pe4UJtVj8Iyg8nDfYjEZofvRJzvjzw+ bkNgsw725S5UoWt1iyh5Kt+EcmsMvPH3kNUMZ0RtBN/30PIx199Z2ezRrZQdDFzB 3RUXHfQpefX2u30yyngu0JqXoHjCGuAJx0N2TXaebKYo9V9NsihI2AINfSuaytf4 0KK78Zqu0RBDpqOfn0u8JonxHy96iAQRuP5fa2KSfGyccmUYuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTePyCzyY0ZLw5W7goGBTJCZ6zDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzJkZTU2MzUtMTM0My0z ZDk2LTlhNzktZTIzYmU5ZDQ1Yjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0XOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaZlye6NVOrYZoYVWtYOnDfYsVHm/8UApowagRJH5q0U9mSk8CuJ/ne m6WhHinGmfgOpMr011FyqH7c5iUVl6EBdaLgyoYjyAl+6+DJfQJpGFOfEiegMzUo b8PfAS90+nA6lvgaj9eHFbSI0IQHAgJbLrvtsaOuMro9KKc330v/rQHIx/YR55px wVrLQubek7PFT+tEb3dsQyfIs3LQ3hQqWSGp7jC+RNMJxDMPp3pjcdm+28PWDfSd 5WhvXE+l0BP+6+387orGdG3JQs+NbFw1oyonewjEjHuNwFUhZxAzxHz7xZRx/6T4 Yh8xriHPka7RNdkE7yQyoZHWavsW/sU= -----END CERTIFICATE-----Generated at Sun Oct 4 02:17:51 2026 by rpki-client