$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec789c94-aaf3-3bcc-99c2-b089684f59ff.roa File: ec789c94-aaf3-3bcc-99c2-b089684f59ff.roa (raw, json) Hash identifier: //L72LCnxwxa9Zh9Y73PRrLubN5t7DSPTxvZMX4FgjE= Subject key identifier: FF:30:F5:50:9E:1E:83:27:00:09:92:C6:4A:CB:97:E6:44:04:58:8B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F374D5589A735EF0816D91B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec789c94-aaf3-3bcc-99c2-b089684f59ff.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 32787 IP address blocks: 209.200.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:55:89:a7:35:ef:08:16:d9:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=d3a534db-f95b-4734-bd24-d71bef57f814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6f:4f:14:5b:bc:0e:bf:41:16:08:fa:1a:e4: 2e:fb:74:9f:90:12:aa:00:ec:cc:49:c0:2e:3b:59: c9:f2:22:6d:98:db:21:bf:12:e2:74:02:bc:29:60: 66:db:b2:57:9d:56:21:2f:62:b8:e0:01:2b:17:85: 5b:b9:81:12:12:fc:fa:67:ad:16:a6:5f:52:4e:37: 85:f2:b7:e2:b4:39:e2:ae:94:02:46:f4:50:9b:df: 36:9a:c3:cb:d4:0f:8a:52:db:94:50:46:59:1e:18: 02:28:f7:db:29:2f:85:52:85:9a:d2:0c:a8:a3:f0: 13:97:13:d5:fc:70:0d:1b:c9:b9:d3:b7:09:1c:fe: 18:d6:d1:98:ed:b5:f5:2f:20:ee:ff:25:59:2b:0f: 55:d5:ba:78:cb:39:55:da:0f:d4:fd:9b:83:a9:af: 4f:d2:40:7c:77:7d:d1:73:c7:7d:a2:c6:64:02:43: c2:06:8b:a0:10:0e:73:7b:fa:82:9b:2e:c6:10:1a: 56:5c:57:ef:76:2f:ca:a4:fe:3c:ef:f7:02:92:71: 52:60:ce:76:7f:fe:05:c0:6a:ff:5e:d4:69:1c:38: a9:65:15:0d:b4:95:7d:75:94:75:0d:ea:a3:ff:9e: 76:db:05:2e:e5:80:9a:cd:d9:81:e2:43:95:e0:35: 00:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:30:F5:50:9E:1E:83:27:00:09:92:C6:4A:CB:97:E6:44:04:58:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec789c94-aaf3-3bcc-99c2-b089684f59ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:9f:b4:0c:f8:38:a2:26:b1:b3:14:ad:a9:e5:a8:69:b7:c7: ce:04:cd:a8:07:3f:34:e0:c8:6f:90:46:7b:ef:fe:f2:ae:5d: 10:fa:b8:37:2e:e4:df:bb:62:b6:04:d6:99:26:80:71:85:e2: 81:14:8e:f9:d0:c5:f6:56:47:14:f2:a0:c5:20:66:9c:00:d9: ca:6c:ac:a6:a8:05:68:10:4a:f8:9b:d5:08:c2:cb:a1:5d:22: 47:b0:c7:b6:3d:61:12:ff:1b:fb:9d:04:5a:20:05:a8:40:e3: 8a:4f:6a:f9:17:ae:98:3e:af:17:29:48:f6:b0:6a:28:54:26: ef:88:67:77:6d:bb:81:dc:5f:17:37:f8:43:58:81:19:82:50: 3e:86:64:6f:b8:0c:84:2f:ab:f5:fa:b4:7d:99:c9:58:40:89: a1:6b:9a:8e:c1:be:a2:14:c7:b9:50:41:90:c6:49:6b:db:f6: 9a:39:d9:cd:5b:31:71:3c:07:d7:f0:a1:27:a0:76:d9:6a:40: 49:bd:09:6a:a0:8d:6f:50:0f:b5:7c:f8:51:8a:2f:19:e7:4e: fb:b6:d0:17:a1:d1:91:d6:6d:d6:88:d9:41:a9:3f:d3:47:4d: 4e:e5:35:6a:f6:a2:e1:19:fb:2c:c5:9d:ec:35:d2:17:b7:f0: f4:05:a7:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TVWJpzXvCBbZGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk ZDNhNTM0ZGItZjk1Yi00NzM0LWJkMjQtZDcxYmVmNTdmODE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG9PFFu8Dr9BFgj6GuQu+3SfkBKqAOzMScAu O1nJ8iJtmNshvxLidAK8KWBm27JXnVYhL2K44AErF4VbuYESEvz6Z60Wpl9STjeF 8rfitDnirpQCRvRQm982msPL1A+KUtuUUEZZHhgCKPfbKS+FUoWa0gyoo/ATlxPV /HANG8m507cJHP4Y1tGY7bX1LyDu/yVZKw9V1bp4yzlV2g/U/ZuDqa9P0kB8d33R c8d9osZkAkPCBougEA5ze/qCmy7GEBpWXFfvdi/KpP487/cCknFSYM52f/4FwGr/ XtRpHDipZRUNtJV9dZR1Deqj/5522wUu5YCazdmB4kOV4DUAdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8w9VCeHoMnAAmSxkrLl+ZEBFiLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWM3ODljOTQtYWFmMy0z YmNjLTk5YzItYjA4OTY4NGY1OWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ci9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqftAz4OKImsbMUranlqGm3x84EzagHPzTgyG+QRnvv/vKuXRD6uDcu 5N+7YrYE1pkmgHGF4oEUjvnQxfZWRxTyoMUgZpwA2cpsrKaoBWgQSvib1QjCy6Fd Ikewx7Y9YRL/G/udBFogBahA44pPavkXrpg+rxcpSPawaihUJu+IZ3dtu4HcXxc3 +ENYgRmCUD6GZG+4DIQvq/X6tH2ZyVhAiaFrmo7BvqIUx7lQQZDGSWvb9po52c1b MXE8B9fwoSegdtlqQEm9CWqgjW9QD7V8+FGKLxnnTvu20Beh0ZHWbdaI2UGpP9NH TU7lNWr2ouEZ+yzFnew10he38PQFp5Q= -----END CERTIFICATE-----Generated at Mon Sep 21 23:00:47 2026 by rpki-client