$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/68dfa06e-cc5d-379c-89df-464b45a31d84.roa File: 68dfa06e-cc5d-379c-89df-464b45a31d84.roa (raw, json) Hash identifier: tofxX/EbQ5XBlaZMvOqO80N6oEAFeCfGrLhC8H94ZBU= Subject key identifier: C4:56:96:76:3D:12:6B:68:C9:0A:AD:BB:F1:74:6D:99:57:01:91:F5 Certificate issuer: /CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb Certificate serial: 010D0C9F4328584F7B2E059BA0E588263ED43100 Authority key identifier: 04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/68dfa06e-cc5d-379c-89df-464b45a31d84.roa Signing time: Mon 12 Oct 2026 20:32:36 +0000 ROA not before: Mon 12 Oct 2026 20:32:36 +0000 ROA not after: Sun 10 Jan 2027 21:32:36 +0000 asID: 19871 IP address blocks: 209.237.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:2e:05:9b:a0:e5:88:26:3e:d4:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb Validity Not Before: Oct 12 20:32:36 2026 GMT Not After : Jan 10 21:32:36 2027 GMT Subject: CN=1f5e1c12-3dcb-41bf-87de-c5476ca1bc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:f8:9e:8b:61:e0:c4:72:ef:6f:6a:b2:c0: 5b:07:7b:c2:a7:18:54:d2:c8:67:ff:dc:64:52:f4: 3b:17:c2:46:92:af:2e:97:0d:a5:37:ca:96:39:95: 15:e9:cc:34:bd:dc:e8:42:2d:a7:12:b3:df:25:f9: c6:30:53:ed:af:0e:4c:ae:d1:76:c0:55:02:0a:1a: f7:49:91:58:b6:79:51:9f:00:6c:41:28:ea:6d:c8: ed:64:33:56:ed:c2:c3:c9:5b:d6:52:27:37:13:15: 5f:27:2e:8c:6d:22:7a:e4:da:5c:fd:43:f3:49:0d: 14:cd:9f:29:cf:1f:c2:a1:e7:f0:67:75:3a:9b:d8: 03:9c:4a:46:a3:ef:31:93:c6:d9:7d:78:b8:2e:25: 20:21:0c:9b:a1:19:1a:18:ac:9a:cb:ab:22:ee:bc: 0e:71:cd:79:72:df:81:56:70:fc:93:50:40:1f:07: 22:e3:f0:19:99:f2:82:5b:34:ff:9d:99:a3:64:e9: 51:03:45:80:57:de:44:2c:a5:2d:cf:4e:ea:51:9b: 4d:a3:1c:5b:e4:0e:a5:f9:45:ca:89:21:c2:fe:d6: 1b:fc:76:ac:92:05:50:82:74:61:b7:6c:06:5d:64: a7:d7:0f:27:49:e1:04:73:c5:31:a7:a8:16:bc:0a: dc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:56:96:76:3D:12:6B:68:C9:0A:AD:BB:F1:74:6D:99:57:01:91:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/68dfa06e-cc5d-379c-89df-464b45a31d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl X509v3 Authority Key Identifier: keyid:04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer sbgp-ipAddrBlock: critical IPv4: 209.237.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:1e:82:2a:59:74:6c:4a:c4:99:8c:d9:7f:44:71:fe:ad:fa: 0c:f2:3f:7d:8e:2c:1e:36:49:88:70:7c:28:c5:0a:c3:6e:1e: 07:f8:61:17:5e:9c:4f:b9:2a:fe:90:fd:40:06:8c:6e:74:bb: 31:4c:e1:bc:6f:39:3e:1e:ee:87:62:e8:c2:fe:65:e9:6f:d2: 69:96:81:68:ef:29:40:b4:90:d4:89:3f:82:b5:4b:5d:c5:d2: 82:92:4d:0d:63:08:6d:32:1a:2f:09:2f:e6:b0:a5:aa:99:28: 03:13:36:16:f6:39:59:43:c5:d6:ce:86:d4:3b:8a:ca:3c:c0: 03:6c:bb:78:53:ee:50:3f:a3:75:ba:54:2b:c1:4d:3b:00:52: 9b:53:47:18:2f:07:c6:7f:59:2f:2c:f9:8d:39:5d:e8:97:e6: 86:70:77:7e:09:58:2f:42:9a:91:00:f2:63:12:2b:26:b7:1f: 33:a4:b6:db:b6:c9:91:93:f7:49:3e:0a:a2:94:37:18:72:ab: 4b:d4:44:ec:4a:53:87:57:72:7f:61:dc:00:c2:51:a6:18:73: 8e:62:73:1c:12:83:aa:6b:a1:da:62:3e:c0:45:42:63:23:e8: b9:5c:78:8e:66:f8:bd:f5:5f:bc:76:0b:f0:76:23:6d:b4:82: 8e:11:79:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97LgWboOWIJj7UMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzMyZDRjMWMtNjhmZC00NmJhLTk0NTAtODQ2OTdmYmU0 YmNiMB4XDTI2MTAxMjIwMzIzNloXDTI3MDExMDIxMzIzNlowLzEtMCsGA1UEAxMk MWY1ZTFjMTItM2RjYi00MWJmLTg3ZGUtYzU0NzZjYTFiYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR34noth4MRy729qssBbB3vCpxhU0shn/9xk UvQ7F8JGkq8ulw2lN8qWOZUV6cw0vdzoQi2nErPfJfnGMFPtrw5MrtF2wFUCChr3 SZFYtnlRnwBsQSjqbcjtZDNW7cLDyVvWUic3ExVfJy6MbSJ65Npc/UPzSQ0UzZ8p zx/CoefwZ3U6m9gDnEpGo+8xk8bZfXi4LiUgIQyboRkaGKyay6si7rwOcc15ct+B VnD8k1BAHwci4/AZmfKCWzT/nZmjZOlRA0WAV95ELKUtz07qUZtNoxxb5A6l+UXK iSHC/tYb/HaskgVQgnRht2wGXWSn1w8nSeEEc8Uxp6gWvArcbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRWlnY9EmtoyQqtu/F0bZlXAZH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzJk NGMxYy02OGZkLTQ2YmEtOTQ1MC04NDY5N2ZiZTRiY2IvNjhkZmEwNmUtY2M1ZC0z NzljLTg5ZGYtNDY0YjQ1YTMxZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzMyZDRjMWMtNjhmZC00NmJhLTk0 NTAtODQ2OTdmYmU0YmNiLzMzMmQ0YzFjLTY4ZmQtNDZiYS05NDUwLTg0Njk3ZmJl NGJjYi5jcmwwHwYDVR0jBBgwFoAUBNJQfOBV9FoaAnDShIJDzDB5ccYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzJkNGMxYy02OGZkLTQ2YmEtOTQ1MC04NDY5 N2ZiZTRiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e2YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMAegipZdGxKxJmM2X9Ecf6t+gzyP32OLB42SYhwfCjFCsNuHgf4YRde nE+5Kv6Q/UAGjG50uzFM4bxvOT4e7odi6ML+Zelv0mmWgWjvKUC0kNSJP4K1S13F 0oKSTQ1jCG0yGi8JL+awpaqZKAMTNhb2OVlDxdbOhtQ7iso8wANsu3hT7lA/o3W6 VCvBTTsAUptTRxgvB8Z/WS8s+Y05XeiX5oZwd34JWC9CmpEA8mMSKya3HzOkttu2 yZGT90k+CqKUNxhyq0vUROxKU4dXcn9h3ADCUaYYc45icxwSg6prodpiPsBFQmMj 6LlceI5m+L31X7x2C/B2I220go4ReeM= -----END CERTIFICATE-----Generated at Thu Oct 22 14:36:02 2026 by rpki-client