$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0fcae37-0612-3124-8c85-6ca3cc15f7c8.roa File: c0fcae37-0612-3124-8c85-6ca3cc15f7c8.roa (raw, json) Hash identifier: lWTwSMlfbVtdF6aAbbWv8JLqlZbJIPTWl3PF6g7zh/U= Subject key identifier: 55:42:1E:98:A1:5F:A2:95:DC:17:97:60:78:53:34:7C:14:D6:B0:B1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F3FAD4916BD0C8413BA3430CA Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0fcae37-0612-3124-8c85-6ca3cc15f7c8.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 701 IP address blocks: 209.158.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:49:16:bd:0c:84:13:ba:34:30:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=6f5dd67a-c7c3-4655-acf6-f1492bf481b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2c:c9:a1:90:1a:61:bb:21:f2:09:4e:91:a1: d8:6e:9b:90:1f:3a:96:64:b7:79:00:e8:03:e7:6a: c1:2f:20:25:00:3f:61:98:61:ca:e6:19:8c:d1:7f: 62:01:30:3d:3b:ec:9e:64:d1:31:5c:79:d3:4e:24: 2a:ca:a3:4a:85:08:01:7c:81:35:ff:a4:2c:0d:9a: 85:28:3e:d6:22:71:25:0d:e4:aa:de:2d:90:99:54: 82:6b:54:dd:cb:60:2f:51:5a:ac:e8:be:df:a8:4e: 25:96:91:51:9e:d7:30:57:ba:d5:cf:13:72:10:c9: c8:67:50:c0:3d:e5:25:1e:dd:c7:27:9f:f9:44:43: cd:33:26:9c:ff:ac:f4:97:1c:d3:68:6a:9c:72:66: 82:da:ca:13:ac:c9:d0:62:0c:4b:b4:76:1a:3d:12: 5d:6e:08:58:58:8f:8c:6b:39:05:79:52:be:18:91: d9:c2:ac:22:4d:e9:f6:2a:de:5f:5d:be:8b:a6:96: 99:5a:09:33:7b:d2:09:7f:d6:75:50:0a:75:12:b3: 77:45:ed:9f:09:fd:f2:3d:9d:8c:ae:46:15:83:45: 4d:08:1d:b1:af:b1:30:ee:37:26:c2:89:91:a6:78: ce:fb:bc:43:b4:d5:61:53:e7:a1:7e:2a:d6:a7:d1: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:42:1E:98:A1:5F:A2:95:DC:17:97:60:78:53:34:7C:14:D6:B0:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c0fcae37-0612-3124-8c85-6ca3cc15f7c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 209.158.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:ea:c0:2c:0c:6a:20:84:b7:b1:95:3a:66:5e:1c:81:20:ba: b2:10:d6:e9:93:cc:27:35:4d:2a:58:9b:b0:40:73:e5:20:39: eb:8d:09:a5:46:a7:47:0c:18:6d:5b:a5:ae:63:fa:5a:62:ac: 05:56:46:4c:31:58:e9:e7:1c:de:ce:56:58:05:73:b8:34:50: cd:c7:6b:9c:d1:35:ea:ae:e0:c0:ac:c0:a7:37:50:01:cf:0b: e1:15:93:3c:3c:91:d1:c6:8e:45:5e:ba:0f:1e:08:6c:ef:92: b1:fb:ae:91:5e:59:70:f9:06:84:ec:11:80:0a:bc:29:43:f8: 90:be:45:e1:1c:34:1e:c0:d1:57:ce:f8:8a:f9:c7:bf:aa:50: 8d:8e:74:fd:14:51:17:60:f9:c9:f5:b2:a7:a7:ff:4c:9c:be: 40:f9:8b:db:fa:5d:91:b3:bb:cc:c7:14:e5:8b:ba:8a:48:e7: a3:c5:e3:9d:dc:12:e3:ea:46:0b:21:d9:78:6f:b9:71:78:85: 23:7c:41:0d:3a:7d:8a:d4:7c:aa:3d:90:5a:dc:9f:18:60:f9: 81:13:0b:ab:ea:38:81:0f:dc:3f:04:29:dd:a8:9e:69:d7:13: 50:59:34:a0:3f:45:bc:d3:7d:5b:80:48:9c:7b:95:61:68:2a: 6c:88:47:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUkWvQyEE7o0MMowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NmY1ZGQ2N2EtYzdjMy00NjU1LWFjZjYtZjE0OTJiZjQ4MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CzJoZAaYbsh8glOkaHYbpuQHzqWZLd5AOgD 52rBLyAlAD9hmGHK5hmM0X9iATA9O+yeZNExXHnTTiQqyqNKhQgBfIE1/6QsDZqF KD7WInElDeSq3i2QmVSCa1Tdy2AvUVqs6L7fqE4llpFRntcwV7rVzxNyEMnIZ1DA PeUlHt3HJ5/5REPNMyac/6z0lxzTaGqccmaC2soTrMnQYgxLtHYaPRJdbghYWI+M azkFeVK+GJHZwqwiTen2Kt5fXb6LppaZWgkze9IJf9Z1UAp1ErN3Re2fCf3yPZ2M rkYVg0VNCB2xr7Ew7jcmwomRpnjO+7xDtNVhU+ehfirWp9ESbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFVCHpihX6KV3BeXYHhTNHwU1rCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzBmY2FlMzctMDYxMi0z MTI0LThjODUtNmNhM2NjMTVmN2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Z6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLqwCwMaiCEt7GVOmZeHIEgurIQ1umTzCc1TSpYm7BAc+UgOeuNCaVG p0cMGG1bpa5j+lpirAVWRkwxWOnnHN7OVlgFc7g0UM3Ha5zRNequ4MCswKc3UAHP C+EVkzw8kdHGjkVeug8eCGzvkrH7rpFeWXD5BoTsEYAKvClD+JC+ReEcNB7A0VfO +Ir5x7+qUI2OdP0UURdg+cn1sqen/0ycvkD5i9v6XZGzu8zHFOWLuopI56PF453c EuPqRgsh2XhvuXF4hSN8QQ06fYrUfKo9kFrcnxhg+YETC6vqOIEP3D8EKd2onmnX E1BZNKA/RbzTfVuASJx7lWFoKmyIR8Y= -----END CERTIFICATE-----Generated at Tue Sep 22 18:59:23 2026 by rpki-client