$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/f3dd99b0-a2fb-3d3a-b611-e39475ae54bd.roa File: f3dd99b0-a2fb-3d3a-b611-e39475ae54bd.roa (raw, json) Hash identifier: E8iN49cp6CroGV0fwtZVDbsfiGOzizIBww631AoA70M= Subject key identifier: FC:19:6B:1D:36:6F:30:6D:8D:D5:8D:B2:52:30:6A:6B:BB:C5:E7:4A Certificate issuer: /CN=cc8e57f5-c971-4f28-a6f5-b3c62be56cea Certificate serial: 010D0C9F4328584F549D5B21522DDB3031831900 Authority key identifier: D7:E9:89:F4:FE:1A:A3:D4:77:5D:72:A2:D3:6B:F3:6F:09:AF:79:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/f3dd99b0-a2fb-3d3a-b611-e39475ae54bd.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 402522 IP address blocks: 209.135.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5b:21:52:2d:db:30:31:83:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc8e57f5-c971-4f28-a6f5-b3c62be56cea Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=d429e22e-ddfb-45be-9bba-12d923896d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b0:ee:93:b2:bf:75:c9:40:37:e8:b8:86:b5: 6f:7d:84:aa:d5:24:4b:78:1d:da:c6:45:e4:ce:7c: b3:a6:8d:53:33:4b:d3:fb:a6:12:1e:29:cb:3d:31: 00:3c:fd:ae:7a:30:ac:26:4c:71:38:17:49:13:3d: fc:45:c3:2f:5b:92:d8:ec:79:58:86:81:5a:2b:4f: a1:31:9a:d8:e7:90:fe:c1:1e:a2:dc:d3:e4:b6:f3: f1:e1:c2:49:4c:3e:f3:ce:a6:f0:51:35:70:b8:7a: 13:ba:4b:cb:2d:7e:4d:ba:37:62:f1:78:be:e3:e7: 3c:d1:90:91:98:f5:f5:2e:e1:00:4d:93:4b:04:cc: 8f:41:24:47:ce:f2:4a:de:b0:cf:7f:d6:f3:71:dd: 7f:a8:e3:20:49:10:1e:ee:34:1b:21:bf:fa:87:d4: 67:f7:0c:b1:9c:44:ca:ac:d2:79:87:d3:9d:19:58: a7:cc:26:29:d6:71:fb:98:3c:d2:08:70:6a:7e:aa: 36:ad:ec:a2:ad:9c:af:f0:9e:ae:a7:d4:bf:be:b3: cb:27:93:b4:2e:08:10:bf:e2:a6:77:dc:fc:7c:14: 6e:52:5a:f3:3a:08:3c:22:9f:1b:50:b8:ac:d3:1e: 18:da:bb:af:ab:37:3e:a7:7d:d6:7e:06:5e:3b:3b: 20:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:19:6B:1D:36:6F:30:6D:8D:D5:8D:B2:52:30:6A:6B:BB:C5:E7:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/f3dd99b0-a2fb-3d3a-b611-e39475ae54bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.crl X509v3 Authority Key Identifier: keyid:D7:E9:89:F4:FE:1A:A3:D4:77:5D:72:A2:D3:6B:F3:6F:09:AF:79:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cc8e57f5-c971-4f28-a6f5-b3c62be56cea.cer sbgp-ipAddrBlock: critical IPv4: 209.135.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:df:1f:f9:61:01:fa:b9:21:da:29:7a:e1:cc:b5:ba:1f:dc: b5:bc:71:72:b2:1b:12:60:54:78:54:72:0d:ea:8e:d4:9a:8d: 21:0c:3c:23:76:9c:80:2f:1d:1e:e6:17:0e:1e:e8:b7:df:84: ae:eb:12:14:ee:57:b0:ca:06:85:23:c7:c2:c6:92:4e:b2:50: 29:37:86:61:8e:e7:6e:b7:eb:f1:33:85:4a:b2:d4:a8:54:e3: 63:20:af:9d:4c:d0:a2:44:17:ea:12:45:35:62:01:d0:af:79: 0b:e1:a6:a8:d2:fa:c5:11:7a:27:e6:19:22:6a:24:83:61:ec: ad:e4:09:d3:3d:e3:20:76:c3:7a:18:44:1f:3e:78:63:47:34: ca:b7:ca:1c:00:89:25:d4:16:ad:5b:eb:7a:10:8d:a5:03:6a: a1:54:7d:b0:63:f3:fc:74:44:1b:c6:bb:48:95:f6:77:24:1d: 59:48:34:d5:18:5a:9f:b0:31:d5:0c:00:42:4c:41:87:02:3e: ca:79:68:67:c2:dc:f0:3e:80:76:99:bc:50:4f:ab:2d:50:9a: c7:6f:a0:9f:56:6c:3c:f7:65:62:ea:23:57:58:08:04:60:73: 8c:6e:17:f8:c5:85:e8:ab:a6:a3:cd:72:b5:2e:f3:11:3e:43: bc:99:60:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVshUi3bMDGDGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M4ZTU3ZjUtYzk3MS00ZjI4LWE2ZjUtYjNjNjJiZTU2 Y2VhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZDQyOWUyMmUtZGRmYi00NWJlLTliYmEtMTJkOTIzODk2ZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7Duk7K/dclAN+i4hrVvfYSq1SRLeB3axkXk znyzpo1TM0vT+6YSHinLPTEAPP2uejCsJkxxOBdJEz38RcMvW5LY7HlYhoFaK0+h MZrY55D+wR6i3NPktvPx4cJJTD7zzqbwUTVwuHoTukvLLX5Nujdi8Xi+4+c80ZCR mPX1LuEATZNLBMyPQSRHzvJK3rDPf9bzcd1/qOMgSRAe7jQbIb/6h9Rn9wyxnETK rNJ5h9OdGVinzCYp1nH7mDzSCHBqfqo2reyirZyv8J6up9S/vrPLJ5O0LggQv+Km d9z8fBRuUlrzOgg8Ip8bULis0x4Y2ruvqzc+p33WfgZeOzsgiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwZax02bzBtjdWNslIwamu7xedKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jYzhl NTdmNS1jOTcxLTRmMjgtYTZmNS1iM2M2MmJlNTZjZWEvZjNkZDk5YjAtYTJmYi0z ZDNhLWI2MTEtZTM5NDc1YWU1NGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2M4ZTU3ZjUtYzk3MS00ZjI4LWE2 ZjUtYjNjNjJiZTU2Y2VhL2NjOGU1N2Y1LWM5NzEtNGYyOC1hNmY1LWIzYzYyYmU1 NmNlYS5jcmwwHwYDVR0jBBgwFoAU1+mJ9P4ao9R3XXKi02vzbwmvefYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jYzhlNTdmNS1jOTcxLTRmMjgtYTZmNS1iM2M2 MmJlNTZjZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YeCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFXfH/lhAfq5IdopeuHMtbof3LW8cXKyGxJgVHhUcg3qjtSajSEMPCN2 nIAvHR7mFw4e6LffhK7rEhTuV7DKBoUjx8LGkk6yUCk3hmGO52636/EzhUqy1KhU 42Mgr51M0KJEF+oSRTViAdCveQvhpqjS+sUReifmGSJqJINh7K3kCdM94yB2w3oY RB8+eGNHNMq3yhwAiSXUFq1b63oQjaUDaqFUfbBj8/x0RBvGu0iV9nckHVlINNUY Wp+wMdUMAEJMQYcCPsp5aGfC3PA+gHaZvFBPqy1QmsdvoJ9WbDz3ZWLqI1dYCARg c4xuF/jFheirpqPNcrUu8xE+Q7yZYKY= -----END CERTIFICATE-----Generated at Fri Oct 23 11:24:49 2026 by rpki-client