$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/ad70148b-73be-3a2f-b582-410330333317.roa File: ad70148b-73be-3a2f-b582-410330333317.roa (raw, json) Hash identifier: uzQQe8CvixnBk9jUagezCvWNslWN8egOkYSW2tTMypw= Subject key identifier: D5:DB:2A:9B:5C:48:C5:AB:4E:89:EE:FC:78:E3:56:C9:A6:4F:DE:7F Certificate issuer: /CN=f21479d9-2438-42c1-aa46-ead35f2d33e2 Certificate serial: 010D0C9F4328584EA787EA1BD4582588781FA300 Authority key identifier: A2:DF:25:37:13:19:AE:61:BC:BD:B7:DE:C6:C7:B5:CD:B3:AB:D0:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/ad70148b-73be-3a2f-b582-410330333317.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 10823 IP address blocks: 209.204.64.0/21 maxlen: 21 209.204.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:ea:1b:d4:58:25:88:78:1f:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f21479d9-2438-42c1-aa46-ead35f2d33e2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6ced25d2-89cb-4511-b568-06652c2cfced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9d:20:96:d7:27:5d:ba:77:bf:d4:ff:16:de: 84:09:32:53:26:cb:ef:31:2f:36:2f:20:b4:76:8b: b7:20:1b:ea:3e:c9:06:0e:b2:0f:80:7b:a7:cc:89: 71:58:52:23:07:ae:c1:9f:4b:97:96:ef:38:ef:ad: a0:0e:83:49:83:8d:9b:61:2e:0d:f8:c7:9b:b3:9c: 34:56:7e:d9:e3:ae:c8:c1:42:be:ed:28:8b:f3:92: 60:10:30:9b:76:50:e2:98:7f:0f:6c:4e:33:01:95: 64:a7:1e:4d:66:d6:55:7d:a6:7b:eb:e1:51:3b:23: 95:7b:b7:64:60:43:fe:65:fe:88:9c:ce:bb:fa:45: 84:b3:96:ee:43:9a:d7:e8:4f:80:71:f0:ec:83:55: 5e:ae:e4:4a:c5:f0:8c:1f:48:5d:aa:21:dc:2e:b4: 68:87:1b:49:45:4a:f6:60:dc:c6:8b:f6:ff:ad:fb: 59:a8:36:f8:96:63:65:a6:14:c3:20:41:c9:57:ff: 5d:6a:b2:f1:b6:be:23:33:34:0d:cc:e5:ba:20:ab: 32:69:7f:9b:07:b6:33:79:e7:70:22:0b:74:30:21: a5:01:ab:ea:c0:e6:fa:e5:20:f3:36:a0:e1:2c:47: 4e:a5:20:85:74:61:a6:00:fd:15:06:bb:79:75:d5: 27:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:DB:2A:9B:5C:48:C5:AB:4E:89:EE:FC:78:E3:56:C9:A6:4F:DE:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/ad70148b-73be-3a2f-b582-410330333317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.crl X509v3 Authority Key Identifier: keyid:A2:DF:25:37:13:19:AE:61:BC:BD:B7:DE:C6:C7:B5:CD:B3:AB:D0:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f21479d9-2438-42c1-aa46-ead35f2d33e2.cer sbgp-ipAddrBlock: critical IPv4: 209.204.64.0/21 209.204.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c4:78:82:09:a6:2b:2d:fe:c4:c2:a5:8e:6c:a4:b4:e1:e0: 2e:a6:bf:fe:5f:c0:be:c4:6c:9d:11:a6:a5:b5:16:56:9c:5b: 63:70:47:9d:ce:c0:d4:aa:da:7f:0d:0a:3b:88:c6:60:14:7b: 47:31:ea:dd:93:d8:0f:40:e8:c5:d4:ca:19:67:8b:22:64:c4: b8:03:ef:b3:40:78:c0:1f:29:8a:5e:62:21:61:1b:79:6b:e5: 86:3c:da:62:fd:a4:78:80:47:4c:b5:37:c4:35:22:d4:60:4f: d7:4b:eb:72:ee:3e:31:c4:f4:91:a2:55:4a:60:2c:31:86:a9: 3a:37:72:23:5e:c9:c8:4f:25:81:a8:da:58:55:aa:e0:f4:50: 4c:f6:95:77:1d:ee:a5:bf:cd:e3:07:32:38:7c:d1:2a:da:27: 65:ad:1a:b8:bb:c8:6e:b8:08:c3:88:3c:47:d7:5f:20:2e:41: ad:7e:d4:fd:c3:86:a7:d7:dd:e4:4b:cc:8b:46:59:d9:9d:91: e7:cf:9b:1f:68:3a:51:8f:a9:80:7e:f6:24:01:04:b0:2b:72: f5:44:5a:81:e3:33:a1:4e:b0:63:53:0a:89:10:32:ca:d4:0a: 1e:d6:de:fa:34:f9:ee:fe:be:30:e9:a2:18:3c:91:ad:5b:d6: ce:82:f9:d8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6nh+ob1FgliHgfowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjIxNDc5ZDktMjQzOC00MmMxLWFhNDYtZWFkMzVmMmQz M2UyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmNlZDI1ZDItODljYi00NTExLWI1NjgtMDY2NTJjMmNmY2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp0gltcnXbp3v9T/Ft6ECTJTJsvvMS82LyC0 dou3IBvqPskGDrIPgHunzIlxWFIjB67Bn0uXlu84762gDoNJg42bYS4N+Mebs5w0 Vn7Z467IwUK+7SiL85JgEDCbdlDimH8PbE4zAZVkpx5NZtZVfaZ76+FROyOVe7dk YEP+Zf6InM67+kWEs5buQ5rX6E+AcfDsg1VeruRKxfCMH0hdqiHcLrRohxtJRUr2 YNzGi/b/rftZqDb4lmNlphTDIEHJV/9darLxtr4jMzQNzOW6IKsyaX+bB7Yzeedw Igt0MCGlAavqwOb65SDzNqDhLEdOpSCFdGGmAP0VBrt5ddUn5QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNXbKptcSMWrTonu/HjjVsmmT95/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMjE0 NzlkOS0yNDM4LTQyYzEtYWE0Ni1lYWQzNWYyZDMzZTIvYWQ3MDE0OGItNzNiZS0z YTJmLWI1ODItNDEwMzMwMzMzMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjIxNDc5ZDktMjQzOC00MmMxLWFh NDYtZWFkMzVmMmQzM2UyL2YyMTQ3OWQ5LTI0MzgtNDJjMS1hYTQ2LWVhZDM1ZjJk MzNlMi5jcmwwHwYDVR0jBBgwFoAUot8lNxMZrmG8vbfexse1zbOr0GIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mMjE0NzlkOS0yNDM4LTQyYzEtYWE0Ni1lYWQz NWYyZDMzZTIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQD0cxAAwQA 0cx3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACPEeIIJpist/sTCpY5spLTh4C6mv/5fwL7EbJ0RpqW1Flac W2NwR53OwNSq2n8NCjuIxmAUe0cx6t2T2A9A6MXUyhlniyJkxLgD77NAeMAfKYpe YiFhG3lr5YY82mL9pHiAR0y1N8Q1ItRgT9dL63LuPjHE9JGiVUpgLDGGqTo3ciNe ychPJYGo2lhVquD0UEz2lXcd7qW/zeMHMjh80SraJ2WtGri7yG64CMOIPEfXXyAu Qa1+1P3DhqfX3eRLzItGWdmdkefPmx9oOlGPqYB+9iQBBLArcvVEWoHjM6FOsGNT CokQMsrUCh7W3vo0+e7+vjDpohg8ka1b1s6C+dg= -----END CERTIFICATE-----Generated at Thu Sep 24 10:07:11 2026 by rpki-client