$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8d1ac93-6ad5-3841-9e9d-32e43385a52a.roa File: a8d1ac93-6ad5-3841-9e9d-32e43385a52a.roa (raw, json) Hash identifier: rmTKZQL0p6GCsJrB2iEjLlwQi/MKqJgwyberqMJZNgM= Subject key identifier: 62:6A:B7:1B:EE:DD:1F:54:D6:FE:22:3F:DD:A4:4C:C3:24:9E:2D:7E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F15CD03ABEE5FEA10AE45E2C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8d1ac93-6ad5-3841-9e9d-32e43385a52a.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 213120 IP address blocks: 209.200.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:03:ab:ee:5f:ea:10:ae:45:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=c1e4c9c4-1db5-498b-99ab-ef1c0ae0db89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4f:74:d9:7c:2e:82:a5:fd:5a:99:4d:e2:55: dd:46:f7:a9:22:17:2b:64:83:9f:0b:84:1f:a3:68: d1:80:ea:2b:f8:52:a4:dd:6c:1f:ff:82:68:60:1f: 89:a6:03:98:ae:a9:da:c8:22:f7:85:d2:07:59:85: 60:9c:98:7d:14:f8:7d:44:66:70:c5:b1:4e:ee:dc: 62:22:ef:32:b2:f5:21:67:a5:30:49:85:82:f1:86: 5c:63:68:d0:6a:4e:2b:de:38:63:55:c3:a4:a5:d3: 09:97:2c:cf:c8:76:eb:e0:9b:65:de:fe:c5:59:c1: 63:be:16:36:25:34:05:b8:79:bb:16:86:be:7e:6a: ce:e3:ca:8a:04:a5:b9:be:9a:69:c5:74:62:64:3f: 78:4c:9e:b9:89:96:a9:c6:6e:1f:0d:e4:a1:1a:d3: 69:ed:22:92:b0:88:7d:48:c5:cf:ce:4c:61:8e:db: c3:1a:19:cf:e0:62:46:d8:cf:85:6e:78:23:15:71: ed:7b:80:0d:52:0b:93:c9:76:35:6e:a9:d6:63:82: df:d7:59:96:81:7e:b1:ec:ad:68:21:92:34:47:fa: e0:d7:b3:44:d1:27:e4:b2:e5:2c:1b:f2:99:a1:33: f2:ed:3d:69:f5:e4:79:e1:52:b0:1a:68:4b:be:95: 95:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6A:B7:1B:EE:DD:1F:54:D6:FE:22:3F:DD:A4:4C:C3:24:9E:2D:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a8d1ac93-6ad5-3841-9e9d-32e43385a52a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:fa:c1:c1:af:e3:52:08:b6:a2:c2:de:91:bd:8c:db:b2:11: 7b:e8:de:9a:c0:70:30:dd:03:69:2a:b9:69:ac:54:55:53:ac: 01:bc:a8:69:9d:09:29:f1:e6:99:d5:f5:c7:08:f5:c4:3d:b1: 40:71:ca:cc:54:15:22:28:52:16:e2:e8:7b:7a:b0:c0:ef:7f: 19:8c:7c:e1:2d:b6:57:cb:0a:57:d4:09:79:44:89:de:ef:e0: ff:92:eb:42:2d:62:24:1f:c4:a5:f9:a9:ad:e1:30:73:33:23: b2:40:61:3b:da:07:0e:10:9c:97:a2:2f:e2:19:18:bb:40:c6: e5:83:56:55:48:ff:c4:0e:03:cb:c1:5f:1c:e4:c4:bb:29:51: a9:66:2a:17:02:50:b4:77:24:67:8d:e7:54:a5:f1:d4:cb:14: a3:07:08:a9:ba:39:dc:bd:d7:f6:a4:82:06:90:60:9e:cd:94: 95:57:a9:c4:69:52:93:e9:28:fa:d7:6e:e9:c7:eb:0a:49:41: 98:22:bf:27:98:9e:81:ee:24:6c:45:c6:8f:a1:5e:f5:18:3d: 66:9e:38:8b:ee:4a:5d:d8:82:e2:9b:5f:eb:4d:93:a6:0d:2b: 3d:d9:52:13:ba:63:03:fc:b1:f4:c1:21:1d:6b:7b:91:2f:b7: 16:82:4b:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzQOr7l/qEK5F4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YzFlNGM5YzQtMWRiNS00OThiLTk5YWItZWYxYzBhZTBkYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk902XwugqX9WplN4lXdRvepIhcrZIOfC4Qf o2jRgOor+FKk3Wwf/4JoYB+JpgOYrqnayCL3hdIHWYVgnJh9FPh9RGZwxbFO7txi Iu8ysvUhZ6UwSYWC8YZcY2jQak4r3jhjVcOkpdMJlyzPyHbr4Jtl3v7FWcFjvhY2 JTQFuHm7Foa+fmrO48qKBKW5vpppxXRiZD94TJ65iZapxm4fDeShGtNp7SKSsIh9 SMXPzkxhjtvDGhnP4GJG2M+FbngjFXHte4ANUguTyXY1bqnWY4Lf11mWgX6x7K1o IZI0R/rg17NE0SfksuUsG/KZoTPy7T1p9eR54VKwGmhLvpWVTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJqtxvu3R9U1v4iP92kTMMkni1+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYThkMWFjOTMtNmFkNS0z ODQxLTllOWQtMzJlNDMzODVhNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf6wcGv41IItqLC3pG9jNuyEXvo3prAcDDdA2kquWmsVFVTrAG8qGmd CSnx5pnV9ccI9cQ9sUBxysxUFSIoUhbi6Ht6sMDvfxmMfOEttlfLClfUCXlEid7v 4P+S60ItYiQfxKX5qa3hMHMzI7JAYTvaBw4QnJeiL+IZGLtAxuWDVlVI/8QOA8vB XxzkxLspUalmKhcCULR3JGeN51Sl8dTLFKMHCKm6Ody91/akggaQYJ7NlJVXqcRp UpPpKPrXbunH6wpJQZgivyeYnoHuJGxFxo+hXvUYPWaeOIvuSl3YguKbX+tNk6YN Kz3ZUhO6YwP8sfTBIR1re5EvtxaCS6s= -----END CERTIFICATE-----Generated at Sat Sep 26 07:18:34 2026 by rpki-client