$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa File: f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa (raw, json) Hash identifier: IMpk6alcGqTLNBRQPFfbTeVmDr9+hwvjscUvptC2b3U= Subject key identifier: 12:14:F4:B0:A5:DE:BC:06:1B:A4:FC:14:B1:B7:E3:48:01:04:1A:89 Certificate issuer: /CN=28ab384d-3018-413f-b253-d2f3ef552ffa Certificate serial: 010D0C9F4328584B3556EBE645E8F1A7C1E2DCA0 Authority key identifier: 6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 399253 IP address blocks: 209.209.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:eb:e6:45:e8:f1:a7:c1:e2:dc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28ab384d-3018-413f-b253-d2f3ef552ffa Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=a9c53ed9-00ab-47bf-90b2-2185a808aefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a3:10:f8:79:40:86:cc:ab:3d:cd:0d:09:0b: 60:34:0c:6d:7a:39:85:52:03:13:30:85:6a:24:05: e1:8a:cd:99:b3:ef:b9:18:38:d7:eb:1b:7e:8a:30: bd:f1:bd:05:cc:56:fb:f7:29:84:9a:d6:0b:32:e5: 27:14:86:62:f1:ea:97:7d:88:1a:da:21:f4:72:4b: 9f:64:4c:f4:fa:a2:ed:37:93:04:fe:00:f2:9a:28: 2d:9c:1e:6f:be:1d:ff:fe:df:e1:0a:e2:7f:18:f1: df:c4:b7:78:8d:cc:7b:74:7d:b7:a3:df:49:fe:07: f4:8e:09:ea:80:c6:d3:f8:81:70:69:23:83:a7:4f: a1:ff:17:34:bb:13:61:60:c1:99:0d:24:3a:93:b4: b6:b0:7b:d8:00:41:9d:d6:67:35:1d:e4:5d:2d:bd: c7:6e:cb:cf:f9:09:f7:c9:d1:ac:3f:86:1f:fd:87: 46:c3:bb:57:df:2c:98:a4:e3:70:00:74:5c:ca:cc: e6:56:83:8f:45:f1:79:07:71:9f:9c:d7:2a:77:c4: 1b:ae:58:99:69:af:24:59:63:f6:83:4a:01:91:7e: 4a:02:29:e5:6a:6b:d6:8c:e3:fb:7e:8c:5f:5b:97: fd:b2:69:ba:fb:21:56:a8:e4:77:4e:10:0a:5c:d6: 48:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:14:F4:B0:A5:DE:BC:06:1B:A4:FC:14:B1:B7:E3:48:01:04:1A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/f0b33ea1-45a2-39dd-8b27-754e4b5f6cf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa/28ab384d-3018-413f-b253-d2f3ef552ffa.crl X509v3 Authority Key Identifier: keyid:6E:B7:78:CA:90:AF:24:79:73:34:BF:74:58:8A:65:6A:6A:5F:28:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28ab384d-3018-413f-b253-d2f3ef552ffa.cer sbgp-ipAddrBlock: critical IPv4: 209.209.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:ed:7c:f9:e5:83:d6:7e:c5:19:62:fd:15:63:69:c5:d0:89: 15:8d:f8:d0:10:06:b4:3c:cc:d3:2a:5d:d4:94:ae:66:f4:a4: a3:91:25:73:93:9d:8d:8c:52:ff:fb:de:32:33:3b:66:0d:32: a5:bc:77:e5:78:7f:2f:2a:f8:26:b9:70:7e:a0:37:41:82:92: 62:1b:6c:15:9d:de:1a:07:da:44:c4:f9:47:f8:dd:c8:2f:7c: 43:0e:a1:97:09:e0:a3:59:d7:09:ef:22:4e:13:f1:44:6d:f9: f8:d2:3a:d2:04:5e:8b:0f:96:9f:2b:a4:fd:d1:6f:6d:7b:70: d3:fd:00:da:8c:a6:ad:35:bd:21:a3:8f:6c:f1:c8:31:89:f8: d1:4d:79:aa:13:01:6e:56:af:28:a6:8d:95:31:2b:69:51:36: 2b:17:fe:ad:fb:92:04:06:60:a4:dc:fa:4c:31:b7:8c:45:b9: f1:3a:4d:a5:6a:f6:b4:96:da:fc:7a:61:d3:5e:c4:cb:74:9f: 24:00:c7:b3:91:5f:33:d5:dc:0a:5c:c6:49:9c:f8:1c:07:68: 97:06:f2:e3:32:fc:64:af:c9:8c:2b:f3:fe:65:82:d1:47:ba: c8:c8:84:80:e8:05:b4:00:2a:af:74:5d:57:d2:11:31:ac:f2: 30:2f:c7:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VuvmRejxp8Hi3KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhYjM4NGQtMzAxOC00MTNmLWIyNTMtZDJmM2VmNTUy ZmZhMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk YTljNTNlZDktMDBhYi00N2JmLTkwYjItMjE4NWE4MDhhZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6MQ+HlAhsyrPc0NCQtgNAxtejmFUgMTMIVq JAXhis2Zs++5GDjX6xt+ijC98b0FzFb79ymEmtYLMuUnFIZi8eqXfYga2iH0ckuf ZEz0+qLtN5ME/gDymigtnB5vvh3//t/hCuJ/GPHfxLd4jcx7dH23o99J/gf0jgnq gMbT+IFwaSODp0+h/xc0uxNhYMGZDSQ6k7S2sHvYAEGd1mc1HeRdLb3HbsvP+Qn3 ydGsP4Yf/YdGw7tX3yyYpONwAHRcyszmVoOPRfF5B3GfnNcqd8QbrliZaa8kWWP2 g0oBkX5KAinlamvWjOP7foxfW5f9smm6+yFWqOR3ThAKXNZIRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIU9LCl3rwGG6T8FLG340gBBBqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOGFi Mzg0ZC0zMDE4LTQxM2YtYjI1My1kMmYzZWY1NTJmZmEvZjBiMzNlYTEtNDVhMi0z OWRkLThiMjctNzU0ZTRiNWY2Y2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjhhYjM4NGQtMzAxOC00MTNmLWIy NTMtZDJmM2VmNTUyZmZhLzI4YWIzODRkLTMwMTgtNDEzZi1iMjUzLWQyZjNlZjU1 MmZmYS5jcmwwHwYDVR0jBBgwFoAUbrd4ypCvJHlzNL90WIplampfKGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yOGFiMzg0ZC0zMDE4LTQxM2YtYjI1My1kMmYz ZWY1NTJmZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXtfPnlg9Z+xRli/RVjacXQiRWN+NAQBrQ8zNMqXdSUrmb0pKORJXOT nY2MUv/73jIzO2YNMqW8d+V4fy8q+Ca5cH6gN0GCkmIbbBWd3hoH2kTE+Uf43cgv fEMOoZcJ4KNZ1wnvIk4T8URt+fjSOtIEXosPlp8rpP3Rb217cNP9ANqMpq01vSGj j2zxyDGJ+NFNeaoTAW5WryimjZUxK2lRNisX/q37kgQGYKTc+kwxt4xFufE6TaVq 9rSW2vx6YdNexMt0nyQAx7ORXzPV3Apcxkmc+BwHaJcG8uMy/GSvyYwr8/5lgtFH usjIhIDoBbQAKq90XVfSETGs8jAvxz8= -----END CERTIFICATE-----Generated at Mon Nov 3 08:25:57 2025 by rpki-client