$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa File: 59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa (raw, json) Hash identifier: Xo/dxZ4Z96q4yv+aYgjsork1pyZKpDPabNasBKs57xw= Subject key identifier: 91:7D:B7:5B:83:40:19:BE:7E:04:4A:2B:3C:19:ED:20:9A:98:C8:66 Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b Certificate serial: 010D0C9F4328584F82ADAFD7424C80A2568B9080 Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 46450 IP address blocks: 209.20.134.0/24 maxlen: 24 209.20.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:af:d7:42:4c:80:a2:56:8b:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=53e49a7f-7f1c-4447-909d-a7dc3438d2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:a7:7c:13:5f:d6:c2:76:c7:d0:97:8d:3b: 1a:53:df:ac:f6:a4:ef:77:58:82:6f:e0:a8:31:4f: 4b:d9:fe:a4:02:08:a0:3d:80:03:c0:3c:d1:85:69: ce:e2:69:22:5f:30:bf:58:6b:af:7a:70:47:ee:1f: 0b:09:fc:69:62:cc:1c:63:dd:74:21:da:ad:e7:25: 87:98:6b:4d:12:86:94:6e:60:b2:2a:b2:3c:42:b5: de:b2:0b:15:77:21:44:e7:83:c6:46:a6:f5:ec:67: c7:9d:0b:ea:88:7f:95:d9:7f:7e:8f:eb:45:3e:cc: fa:ab:37:2d:9b:6b:ff:dd:66:0e:1c:e9:18:3f:b3: 29:97:ff:55:d0:fb:2f:44:a9:50:9f:f4:2e:d0:07: cc:44:f3:f8:5c:a3:40:3b:8b:79:89:9b:c2:4d:ef: db:aa:68:92:f7:b8:c1:11:13:03:40:c7:6d:c4:ed: 4f:69:c2:94:23:d8:2c:3a:7e:c2:36:04:3b:25:99: 9e:88:84:c4:41:30:cd:44:e0:ad:d8:cd:98:40:f0: 3c:02:87:e0:21:40:d2:80:ad:91:c9:6f:c6:c9:38: 3b:36:83:a8:f4:54:77:54:bb:2f:07:e2:a8:01:33: 5d:ba:09:d7:27:8c:64:58:34:be:35:1e:45:87:ba: c7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7D:B7:5B:83:40:19:BE:7E:04:4A:2B:3C:19:ED:20:9A:98:C8:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/59c26328-ddd6-3623-9759-3aa1b21cbaa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl X509v3 Authority Key Identifier: keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:eb:61:62:72:98:bf:e8:70:0c:03:0d:d8:73:69:93:cc:7d: d9:b4:36:59:47:8a:70:89:cf:aa:46:5a:79:e5:a5:f1:0f:47: 60:48:0f:12:24:5c:92:e9:ba:28:48:ef:85:6d:46:4c:2d:b2: db:61:7c:ae:a2:af:45:15:d5:d8:6b:a7:ba:50:13:55:61:d3: 1d:87:3d:dc:51:ca:54:b0:f1:fa:98:da:48:0d:7a:8a:17:cd: 0a:54:45:2e:56:58:d2:7d:b7:c1:16:d6:8b:06:01:66:5b:4e: 99:ba:8f:b8:43:5f:99:07:88:91:62:4a:c2:01:38:c3:a6:cf: 79:71:95:bb:59:33:d1:4f:1a:8f:27:de:22:24:99:47:3d:0a: 20:96:71:08:aa:7d:9a:f4:44:0a:ff:0b:e4:b1:ed:4e:c5:55: c5:ef:2b:96:e9:f2:76:d9:bb:da:d6:2a:21:d4:0a:6a:60:26: c1:0b:4e:cf:62:55:71:95:37:23:62:5c:81:26:86:91:74:c4: 22:ab:b5:b3:7e:8a:81:0e:21:86:cb:e2:47:56:3a:dd:00:2c: 23:3a:4e:9a:a8:e5:e7:39:fc:07:fa:d9:45:10:4d:e4:53:0c: 56:be:8a:78:7b:a1:c2:bb:1e:d0:93:a6:b6:d8:7e:60:5c:f5: 38:45:41:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Cra/XQkyAolaLkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz NjFiMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk NTNlNDlhN2YtN2YxYy00NDQ3LTkwOWQtYTdkYzM0MzhkMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh6nfBNf1sJ2x9CXjTsaU9+s9qTvd1iCb+Co MU9L2f6kAgigPYADwDzRhWnO4mkiXzC/WGuvenBH7h8LCfxpYswcY910Idqt5yWH mGtNEoaUbmCyKrI8QrXesgsVdyFE54PGRqb17GfHnQvqiH+V2X9+j+tFPsz6qzct m2v/3WYOHOkYP7Mpl/9V0PsvRKlQn/Qu0AfMRPP4XKNAO4t5iZvCTe/bqmiS97jB ERMDQMdtxO1PacKUI9gsOn7CNgQ7JZmeiITEQTDNROCt2M2YQPA8AofgIUDSgK2R yW/GyTg7NoOo9FR3VLsvB+KoATNdugnXJ4xkWDS+NR5Fh7rHfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJF9t1uDQBm+fgRKKzwZ7SCamMhmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNTljMjYzMjgtZGRkNi0z NjIzLTk3NTktM2FhMWIyMWNiYWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2 ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0RSGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvrYWJymL/ocAwDDdhzaZPMfdm0NllHinCJz6pGWnnlpfEPR2BIDxIk XJLpuihI74VtRkwtstthfK6ir0UV1dhrp7pQE1Vh0x2HPdxRylSw8fqY2kgNeooX zQpURS5WWNJ9t8EW1osGAWZbTpm6j7hDX5kHiJFiSsIBOMOmz3lxlbtZM9FPGo8n 3iIkmUc9CiCWcQiqfZr0RAr/C+Sx7U7FVcXvK5bp8nbZu9rWKiHUCmpgJsELTs9i VXGVNyNiXIEmhpF0xCKrtbN+ioEOIYbL4kdWOt0ALCM6Tpqo5ec5/Af62UUQTeRT DFa+inh7ocK7HtCTprbYfmBc9ThFQS4= -----END CERTIFICATE-----Generated at Thu Oct 29 15:47:36 2026 by rpki-client