$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2cb6e629-9fd2-31a7-9f3b-4f612c3ce72e.roa File: 2cb6e629-9fd2-31a7-9f3b-4f612c3ce72e.roa (raw, json) Hash identifier: gKtnqsw/rPTMv3POtYVGIfvIJ/VAwhp5I0YyWQDN01o= Subject key identifier: D0:5A:12:9A:46:3D:21:B9:58:36:56:FF:DC:6F:0E:1B:E0:AD:F1:89 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584EDDF730EF1AC5B0A9EAD01BE0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2cb6e629-9fd2-31a7-9f3b-4f612c3ce72e.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 53813 IP address blocks: 209.55.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:30:ef:1a:c5:b0:a9:ea:d0:1b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=a60bf7cd-ba28-4440-a64a-f2894eeb54b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:39:a1:0e:14:5e:a0:16:74:ba:f7:66:97:e8: e0:06:da:3e:de:bf:b8:95:28:60:18:74:73:24:11: 61:63:64:f0:ec:d9:f0:08:cc:29:f8:30:36:6b:5a: 86:31:91:d5:c5:63:60:0f:99:f4:b9:6b:4e:c0:d5: 7e:27:1d:68:74:7b:dc:34:4e:da:75:50:39:6e:5a: ca:b0:b6:d2:85:6c:ae:51:85:af:4e:f3:18:cf:0f: f8:b1:16:30:ae:1f:4d:43:02:93:1d:6b:34:66:17: 2c:19:a8:dc:b6:94:92:e8:3c:84:4d:99:10:d8:1e: 94:9e:cb:2a:b1:29:86:02:27:cb:92:58:79:9e:22: a4:3a:e5:ea:c0:63:73:d7:b5:59:8e:e1:4e:c9:fb: 69:d7:20:e7:a1:24:e2:04:fa:2f:35:ee:e1:2f:b6: 28:20:16:e6:bc:67:c9:8b:69:c3:03:d1:cd:f1:a2: 8a:e8:ef:c0:fa:76:36:5a:ee:c6:fd:64:5e:f6:9b: 04:7c:15:9c:a1:d8:b5:ef:a2:d9:30:86:b7:43:47: 5f:cd:49:19:94:1f:3d:43:ad:d3:33:eb:b9:f8:20: 3c:73:20:be:e7:05:99:c7:e6:73:94:bb:db:1c:0e: c7:39:e0:5d:6c:a8:2d:68:72:91:61:04:4d:13:0f: 3b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5A:12:9A:46:3D:21:B9:58:36:56:FF:DC:6F:0E:1B:E0:AD:F1:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2cb6e629-9fd2-31a7-9f3b-4f612c3ce72e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 209.55.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:2f:83:62:6b:37:7e:32:25:47:81:6b:4b:33:28:3f:17:6b: a7:cd:23:e3:9b:5d:83:be:3d:af:a7:78:ac:46:f2:71:83:fc: 32:4b:de:26:13:ad:c9:55:a9:3b:84:fe:b6:2b:15:57:c2:ee: eb:84:2f:53:c3:45:6d:23:d5:f9:e4:da:19:8b:64:03:55:e4: bc:e9:6d:5b:6b:80:82:bc:cd:f3:95:ee:cd:7c:c8:63:a9:d9: 9c:f0:8a:eb:f1:a4:05:e3:88:5b:3a:09:cc:e2:04:05:ed:7d: f1:8a:91:71:fa:30:00:fe:ac:63:45:8e:bc:fb:28:90:6c:59: 06:07:81:c3:b3:15:81:38:ff:77:b2:f3:20:6a:44:79:07:d0: 6e:cd:0f:ab:ba:8f:b8:3a:e1:60:8c:8a:92:63:db:7f:e1:e4: 1d:c6:b1:6f:0c:21:90:52:d4:1a:4e:23:1b:73:ab:25:20:f6: f1:25:05:62:54:f7:92:ef:fc:e5:a5:3f:d6:83:53:06:5f:17: 1e:62:19:0f:f1:f1:ed:46:5b:bc:68:d1:48:40:84:50:26:e5: be:a0:fd:3c:b8:b3:dd:d2:75:83:65:37:41:25:fc:33:a7:96: 7a:59:c9:ca:0d:6d:14:46:a5:44:f7:b9:1f:9a:aa:cc:6c:a9: a2:e9:2b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d9zDvGsWwqerQG+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk YTYwYmY3Y2QtYmEyOC00NDQwLWE2NGEtZjI4OTRlZWI1NGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjmhDhReoBZ0uvdml+jgBto+3r+4lShgGHRz JBFhY2Tw7NnwCMwp+DA2a1qGMZHVxWNgD5n0uWtOwNV+Jx1odHvcNE7adVA5blrK sLbShWyuUYWvTvMYzw/4sRYwrh9NQwKTHWs0ZhcsGajctpSS6DyETZkQ2B6Unssq sSmGAifLklh5niKkOuXqwGNz17VZjuFOyftp1yDnoSTiBPovNe7hL7YoIBbmvGfJ i2nDA9HN8aKK6O/A+nY2Wu7G/WRe9psEfBWcodi176LZMIa3Q0dfzUkZlB89Q63T M+u5+CA8cyC+5wWZx+ZzlLvbHA7HOeBdbKgtaHKRYQRNEw87rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNBaEppGPSG5WDZW/9xvDhvgrfGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMmNiNmU2MjktOWZkMi0z MWE3LTlmM2ItNGY2MTJjM2NlNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TeFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIYvg2JrN34yJUeBa0szKD8Xa6fNI+ObXYO+Pa+neKxG8nGD/DJL3iYT rclVqTuE/rYrFVfC7uuEL1PDRW0j1fnk2hmLZANV5LzpbVtrgIK8zfOV7s18yGOp 2ZzwiuvxpAXjiFs6CcziBAXtffGKkXH6MAD+rGNFjrz7KJBsWQYHgcOzFYE4/3ey 8yBqRHkH0G7ND6u6j7g64WCMipJj23/h5B3GsW8MIZBS1BpOIxtzqyUg9vElBWJU 95Lv/OWlP9aDUwZfFx5iGQ/x8e1GW7xo0UhAhFAm5b6g/Ty4s93SdYNlN0El/DOn lnpZycoNbRRGpUT3uR+aqsxsqaLpK50= -----END CERTIFICATE-----Generated at Sat Sep 19 14:08:09 2026 by rpki-client