$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/0dcbca59-28da-3099-bf76-d1adfd1cd66f.roa File: 0dcbca59-28da-3099-bf76-d1adfd1cd66f.roa (raw, json) Hash identifier: HBHvt4wFfKlRqPe+huQUaS1iaoTUU0i5EVI3FhQHb6Y= Subject key identifier: AC:A4:A8:23:4D:D9:B6:DA:23:1F:5A:70:32:A2:F0:79:17:26:37:76 Certificate issuer: /CN=f21479d9-2438-42c1-aa46-ead35f2d33e2 Certificate serial: 010D0C9F4328584EBD297D56DB53AC776748A700 Authority key identifier: A2:DF:25:37:13:19:AE:61:BC:BD:B7:DE:C6:C7:B5:CD:B3:AB:D0:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/0dcbca59-28da-3099-bf76-d1adfd1cd66f.roa Signing time: Wed 05 Aug 2026 18:59:53 +0000 ROA not before: Wed 05 Aug 2026 18:59:53 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 10823 IP address blocks: 209.204.64.0/20 maxlen: 20 209.204.80.0/21 maxlen: 21 209.204.96.0/20 maxlen: 20 209.204.120.0/22 maxlen: 22 209.204.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:29:7d:56:db:53:ac:77:67:48:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f21479d9-2438-42c1-aa46-ead35f2d33e2 Validity Not Before: Aug 5 18:59:53 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=fce3c487-d9cf-45c8-a2e7-0bb13afb679c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d2:67:26:49:a0:f5:e2:d0:13:1d:dd:5f:72: aa:e6:0c:17:b4:83:a4:9c:ea:15:3f:38:28:6c:88: 5a:04:4f:15:42:4b:3b:1e:c0:29:00:69:f9:e0:d3: 70:19:af:be:d0:05:51:b1:b8:77:d9:df:a8:a6:20: 86:74:55:a6:e5:7d:01:d1:5d:fe:cd:25:6b:d0:13: 12:3e:e8:1a:19:89:f7:ab:5f:eb:cf:c8:a8:55:17: 06:bc:c1:1b:20:68:8b:80:18:7d:74:1b:b1:3a:92: cd:86:95:3c:96:aa:4e:f4:ce:f7:17:a2:9d:b9:8c: e9:a1:c2:d0:81:79:80:0b:90:9e:47:5b:4d:64:d1: 59:e9:8d:e6:f6:c2:d3:13:05:39:c1:a1:d0:4d:b6: 2e:5c:c2:86:30:0b:5e:68:75:be:f2:b1:d8:ad:07: 8d:78:89:46:eb:51:40:47:5e:c8:f9:8e:71:45:7b: d0:a4:4c:bc:0b:a4:97:d0:96:1c:47:c0:e1:4f:9c: 03:2d:62:90:45:81:c9:cc:a8:df:53:07:7a:16:5d: 8f:65:84:fa:6f:74:fd:e0:ea:3e:87:62:3c:dd:84: 9e:e4:44:fb:48:f7:31:08:6f:61:2d:aa:0e:82:73: f2:b6:40:c1:fb:c1:8e:28:20:81:05:b6:5a:45:00: e5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A4:A8:23:4D:D9:B6:DA:23:1F:5A:70:32:A2:F0:79:17:26:37:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/0dcbca59-28da-3099-bf76-d1adfd1cd66f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.crl X509v3 Authority Key Identifier: keyid:A2:DF:25:37:13:19:AE:61:BC:BD:B7:DE:C6:C7:B5:CD:B3:AB:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer sbgp-ipAddrBlock: critical IPv4: 209.204.64.0-209.204.87.255 209.204.96.0/20 209.204.120.0/22 209.204.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3f:42:35:02:1c:b1:5b:3b:71:b9:79:9a:37:af:3d:5c:fc: e9:0c:10:3a:a7:b7:88:d4:ca:63:93:8e:a8:c9:1e:b0:73:c8: d3:56:d8:4b:ab:5f:4e:3f:27:37:86:41:69:12:24:bc:4a:05: 06:67:a6:a2:66:22:1b:69:84:76:1d:15:69:f5:75:41:ea:b7: 2d:10:84:5b:fd:28:e7:83:84:25:01:6f:27:a4:f7:56:3a:3a: 0a:f5:1e:6d:f6:ca:d7:ca:4c:b2:f0:0a:d4:24:9c:b0:cd:9e: 23:09:e5:e7:a5:6f:18:58:3b:c0:65:7a:6d:2f:58:0b:0e:a4: 28:67:b2:1d:fb:b3:ed:f8:18:93:2b:f3:2b:f8:dc:ab:0c:e4: 73:74:bc:ad:c6:61:d0:85:a4:2a:6e:75:da:f7:06:6f:c2:d1: 7d:9f:2c:2e:a6:d7:15:2e:50:0e:05:ea:fa:00:1b:2d:06:01: 9e:83:63:b3:db:97:42:a9:26:da:db:44:4c:bc:12:c9:db:4c: 55:64:4b:25:d5:bf:2c:ed:6b:b1:e5:7e:21:38:7e:c7:ca:ee: 53:d9:9e:bf:48:e6:7b:28:b4:f7:42:ef:17:da:89:6c:0f:fe: 0d:92:24:a5:53:ce:21:85:00:cb:bd:37:0f:f3:21:b0:14:28: a5:7c:e7:e3 -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWE69KX1W21Osd2dIpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjIxNDc5ZDktMjQzOC00MmMxLWFhNDYtZWFkMzVmMmQz M2UyMB4XDTI2MDgwNTE4NTk1M1oXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmNlM2M0ODctZDljZi00NWM4LWEyZTctMGJiMTNhZmI2NzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktJnJkmg9eLQEx3dX3Kq5gwXtIOknOoVPzgo bIhaBE8VQks7HsApAGn54NNwGa++0AVRsbh32d+opiCGdFWm5X0B0V3+zSVr0BMS PugaGYn3q1/rz8ioVRcGvMEbIGiLgBh9dBuxOpLNhpU8lqpO9M73F6KduYzpocLQ gXmAC5CeR1tNZNFZ6Y3m9sLTEwU5waHQTbYuXMKGMAteaHW+8rHYrQeNeIlG61FA R17I+Y5xRXvQpEy8C6SX0JYcR8DhT5wDLWKQRYHJzKjfUwd6Fl2PZYT6b3T94Oo+ h2I83YSe5ET7SPcxCG9hLaoOgnPytkDB+8GOKCCBBbZaRQDl/QIDAQABo4IDbzCC A2swHQYDVR0OBBYEFKykqCNN2bbaIx9acDKi8HkXJjd2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMjE0 NzlkOS0yNDM4LTQyYzEtYWE0Ni1lYWQzNWYyZDMzZTIvMGRjYmNhNTktMjhkYS0z MDk5LWJmNzYtZDFhZGZkMWNkNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjIxNDc5ZDktMjQzOC00MmMxLWFh NDYtZWFkMzVmMmQzM2UyL2YyMTQ3OWQ5LTI0MzgtNDJjMS1hYTQ2LWVhZDM1ZjJk MzNlMi5jcmwwHwYDVR0jBBgwFoAUot8lNxMZrmG8vbfexse1zbOr0GIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMjE0NzlkOS0yNDM4LTQyYzEtYWE0Ni1lYWQz NWYyZDMzZTIuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAbRzEAD BAPRzFADBATRzGADBALRzHgDBADRzH0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVT9CNQIcsVs7cbl5mjev PVz86QwQOqe3iNTKY5OOqMkesHPI01bYS6tfTj8nN4ZBaRIkvEoFBmemomYiG2mE dh0VafV1Qeq3LRCEW/0o54OEJQFvJ6T3Vjo6CvUebfbK18pMsvAK1CScsM2eIwnl 56VvGFg7wGV6bS9YCw6kKGeyHfuz7fgYkyvzK/jcqwzkc3S8rcZh0IWkKm512vcG b8LRfZ8sLqbXFS5QDgXq+gAbLQYBnoNjs9uXQqkm2ttETLwSydtMVWRLJdW/LO1r seV+ITh+x8ruU9mev0jmeyi090LvF9qJbA/+DZIkpVPOIYUAy703D/MhsBQopXzn 4w== -----END CERTIFICATE-----Generated at Thu Sep 24 20:10:08 2026 by rpki-client