$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e6f17482-2e80-32d6-aed8-df301d8c4d4d.roa File: e6f17482-2e80-32d6-aed8-df301d8c4d4d.roa (raw, json) Hash identifier: iIuWtH8BB389efq1KJUZCSaPDMkqlMiMV2Z4LJnlyZ4= Subject key identifier: 12:F7:36:DC:80:EE:C3:10:4A:3D:45:B2:9A:EC:65:C5:D1:99:64:93 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973FB5E3D6D12D39E582300 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e6f17482-2e80-32d6-aed8-df301d8c4d4d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40934 IP address blocks: 209.121.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:fb:5e:3d:6d:12:d3:9e:58:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c5dd5bdd-84df-45fe-9a3f-aeab72cccd79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:04:8f:1b:4b:7d:2f:4e:0f:39:f8:2b:13:56: 3c:e8:d0:4e:e2:f2:2d:bb:86:c7:77:cc:e9:9c:48: 95:5e:d4:6c:04:6c:0e:d8:89:90:71:e8:f7:69:76: f4:9a:78:e2:48:f9:3d:ad:b3:a8:38:3f:05:22:7b: f1:a3:d2:ba:44:0e:5e:19:0d:0b:db:bc:8f:02:d6: 16:8e:ac:2a:d1:e8:ba:26:fb:d9:9f:0d:67:3d:dd: f3:e9:f7:c5:a8:ed:8d:0d:ea:61:1e:e0:c6:70:9b: a2:f4:90:17:af:be:f4:d5:38:99:f1:7d:95:6f:5b: f8:0a:80:f8:1a:04:5f:bd:eb:77:b9:26:ed:fb:35: a9:93:5c:55:35:a7:25:3c:fa:0d:0a:15:91:8c:aa: bd:2b:52:c1:92:76:57:e3:99:fd:b0:7a:1f:d2:d6: 01:ee:ca:6d:4b:2c:c6:b3:4e:b3:e3:f9:a9:80:ff: 36:59:10:45:5e:2b:d3:ac:1b:70:ed:8e:42:69:bf: d0:d1:6d:63:b6:ac:07:b8:6e:46:ec:bc:6b:5e:89: 15:cc:d8:7a:b9:c8:d0:81:da:d7:6d:45:00:c4:d9: f9:10:87:7a:95:03:b3:0f:21:f4:6a:0c:16:7f:d5: 7f:24:fd:2a:ec:8d:23:64:84:20:0d:f9:98:39:a9: 25:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F7:36:DC:80:EE:C3:10:4A:3D:45:B2:9A:EC:65:C5:D1:99:64:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e6f17482-2e80-32d6-aed8-df301d8c4d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.121.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:96:68:d3:1a:2b:fd:d9:68:40:32:6d:86:98:a7:a1:dc:8c: 31:49:24:32:b2:f0:dc:95:d8:28:b7:cb:03:e9:a0:23:fe:e3: 6d:88:18:c2:9f:ce:ef:56:e6:c5:a0:f8:f7:0f:3f:a9:66:c2: 3d:35:94:d5:3d:18:e1:43:b8:10:f6:9f:13:49:e7:55:25:72: d8:38:09:1e:05:8b:28:b1:a8:26:e2:5c:eb:e3:4f:bd:23:ac: 56:75:65:1d:12:99:3b:3b:de:50:9a:30:49:08:41:1e:e9:5d: 3c:51:7a:5d:c2:fc:49:17:30:3d:1f:bd:96:45:66:62:36:a1: 3b:2d:f4:ff:34:c5:65:2b:9f:37:01:30:15:06:39:ee:36:13: 66:39:64:3f:eb:ef:ca:a4:e0:e8:c2:42:8b:93:70:a6:a9:f4: 4c:c5:bf:fa:70:a1:13:17:8b:9a:77:8f:f9:56:84:67:52:49: 4a:bd:7f:67:4f:04:a5:3b:40:b4:09:2d:01:8a:ca:6b:45:ab: a9:40:5f:32:27:23:f2:58:75:d0:cc:01:b7:8e:b4:82:33:30: f6:4b:c0:fb:d3:09:dd:ac:d2:fe:d9:da:f2:d4:fa:d7:2e:2d: 39:00:f2:2d:54:87:37:8b:b1:20:76:06:c2:21:c0:06:a2:bd: 99:b4:b0:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/tePW0S055YIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzVkZDViZGQtODRkZi00NWZlLTlhM2YtYWVhYjcyY2NjZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwSPG0t9L04POfgrE1Y86NBO4vItu4bHd8zp nEiVXtRsBGwO2ImQcej3aXb0mnjiSPk9rbOoOD8FInvxo9K6RA5eGQ0L27yPAtYW jqwq0ei6JvvZnw1nPd3z6ffFqO2NDephHuDGcJui9JAXr7701TiZ8X2Vb1v4CoD4 GgRfvet3uSbt+zWpk1xVNaclPPoNChWRjKq9K1LBknZX45n9sHof0tYB7sptSyzG s06z4/mpgP82WRBFXivTrBtw7Y5Cab/Q0W1jtqwHuG5G7LxrXokVzNh6ucjQgdrX bUUAxNn5EId6lQOzDyH0agwWf9V/JP0q7I0jZIQgDfmYOakl6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBL3NtyA7sMQSj1FsprsZcXRmWSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZTZmMTc0ODItMmU4MC0z MmQ2LWFlZDgtZGYzMDFkOGM0ZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XkfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWWaNMaK/3ZaEAybYaYp6HcjDFJJDKy8NyV2Ci3ywPpoCP+422IGMKf zu9W5sWg+PcPP6lmwj01lNU9GOFDuBD2nxNJ51Ulctg4CR4FiyixqCbiXOvjT70j rFZ1ZR0SmTs73lCaMEkIQR7pXTxRel3C/EkXMD0fvZZFZmI2oTst9P80xWUrnzcB MBUGOe42E2Y5ZD/r78qk4OjCQouTcKap9EzFv/pwoRMXi5p3j/lWhGdSSUq9f2dP BKU7QLQJLQGKymtFq6lAXzInI/JYddDMAbeOtIIzMPZLwPvTCd2s0v7Z2vLU+tcu LTkA8i1UhzeLsSB2BsIhwAaivZm0sPA= -----END CERTIFICATE-----Generated at Sun Oct 4 01:00:03 2026 by rpki-client