$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4277c72e-b98e-3190-9bb7-21098d80e07c.roa File: 4277c72e-b98e-3190-9bb7-21098d80e07c.roa (raw, json) Hash identifier: Z1KD+ZsNyLaa5rgzeehu1lfnPYVeWu2zOeA2YzB/ovg= Subject key identifier: 68:52:F9:C7:40:63:D4:FE:D7:EF:B2:09:5D:38:53:A4:60:34:B9:20 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584EA0157A149B0566C087732DC0 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4277c72e-b98e-3190-9bb7-21098d80e07c.roa Signing time: Sun 26 Jul 2026 09:00:12 +0000 ROA not before: Sun 26 Jul 2026 09:00:12 +0000 ROA not after: Sat 24 Oct 2026 09:00:12 +0000 asID: 25645 IP address blocks: 209.42.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:15:7a:14:9b:05:66:c0:87:73:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Jul 26 09:00:12 2026 GMT Not After : Oct 24 09:00:12 2026 GMT Subject: CN=2473578a-b356-4fe9-bd64-74f3880f94b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:e7:29:74:b1:78:5c:c7:dd:dc:73:90:50: 93:41:c1:f2:09:69:50:3c:65:d5:68:e0:58:fc:0f: 5f:fe:1c:2e:89:96:d8:f9:11:9c:d5:0b:2c:4d:7e: 3e:58:e7:a7:52:74:29:39:e9:ae:6f:1e:7b:8f:63: 24:a1:02:90:ad:2d:d3:b7:c4:38:51:6f:e6:7b:2d: 0d:60:39:d9:e8:34:c1:a7:50:5c:34:3a:77:a8:e8: 17:01:ab:73:38:67:29:ce:05:61:e8:70:0d:96:54: 42:3d:fa:99:2c:5f:60:14:14:67:87:61:99:57:33: d4:f7:88:4d:14:35:24:6d:92:19:2b:f0:50:2a:38: ee:41:39:ee:f1:f6:22:7a:14:67:88:53:a4:15:1b: e3:72:6b:aa:8f:cc:a9:ad:c5:f4:b3:d7:2b:00:6d: c4:56:4b:b7:80:28:8d:f9:f4:c8:fd:de:86:75:e1: 03:75:90:c5:bd:13:fc:a3:12:56:62:b2:5b:3e:06: 9a:a8:b6:2f:c0:7e:35:54:f9:96:fb:af:42:30:40: e1:f8:9b:4d:83:ae:f3:e8:a0:05:c7:fa:cc:90:60: 00:95:b5:a4:4f:db:f4:74:b7:be:80:a0:aa:e2:b5: a8:bf:3b:bb:43:62:0c:1d:e0:9c:f0:db:e5:13:0a: a9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:52:F9:C7:40:63:D4:FE:D7:EF:B2:09:5D:38:53:A4:60:34:B9:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/4277c72e-b98e-3190-9bb7-21098d80e07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.42.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:1c:7b:85:b2:25:a0:be:84:3b:0c:f0:f5:23:d6:67:1d:c1: 09:27:ec:78:de:a1:9e:d0:46:7b:5e:f8:4a:65:30:93:65:ce: cb:77:b3:37:55:cf:ec:f2:3e:09:af:2f:58:45:af:eb:81:32: aa:90:37:fe:56:84:a6:52:82:21:a8:3d:47:c5:ee:9a:5f:a4: a8:19:ee:55:81:09:33:0a:fc:14:2a:45:44:a7:f8:03:21:29: b8:36:9d:eb:25:af:c0:3b:9c:f0:29:71:90:e2:83:a3:8d:94: e9:15:b7:29:30:af:5a:7a:79:c6:1a:eb:30:d2:d4:97:90:b9: e6:af:46:a5:bf:6f:38:95:c9:d2:40:21:3a:54:d1:54:d2:e7: c8:c5:5e:51:77:63:ab:98:16:09:13:b1:d6:7b:33:ce:79:2c: 8b:04:c3:11:f3:1a:ed:db:5c:cd:6f:83:d1:e9:1e:cb:ef:ad: f3:97:7b:b5:c7:5c:fb:b4:06:32:37:66:e9:7e:aa:5d:c7:ab: d2:63:77:22:da:87:41:e2:72:44:8e:64:6d:ff:72:47:c6:6f: aa:9b:49:85:1b:67:0e:e3:b4:78:27:d5:bb:4b:d3:59:8a:f4: 2f:0e:2c:fc:78:78:88:bd:05:be:38:96:55:35:0c:e2:85:4c: 20:0f:e9:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFXoUmwVmwIdzLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk MjQ3MzU3OGEtYjM1Ni00ZmU5LWJkNjQtNzRmMzg4MGY5NGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJnnKXSxeFzH3dxzkFCTQcHyCWlQPGXVaOBY /A9f/hwuiZbY+RGc1QssTX4+WOenUnQpOemubx57j2MkoQKQrS3Tt8Q4UW/mey0N YDnZ6DTBp1BcNDp3qOgXAatzOGcpzgVh6HANllRCPfqZLF9gFBRnh2GZVzPU94hN FDUkbZIZK/BQKjjuQTnu8fYiehRniFOkFRvjcmuqj8yprcX0s9crAG3EVku3gCiN +fTI/d6GdeEDdZDFvRP8oxJWYrJbPgaaqLYvwH41VPmW+69CMEDh+JtNg67z6KAF x/rMkGAAlbWkT9v0dLe+gKCq4rWovzu7Q2IMHeCc8NvlEwqp7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhS+cdAY9T+1++yCV04U6RgNLkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvNDI3N2M3MmUtYjk4ZS0z MTkwLTliYjctMjEwOThkODBlMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SqlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8ce4WyJaC+hDsM8PUj1mcdwQkn7HjeoZ7QRnte+EplMJNlzst3szdV z+zyPgmvL1hFr+uBMqqQN/5WhKZSgiGoPUfF7ppfpKgZ7lWBCTMK/BQqRUSn+AMh Kbg2neslr8A7nPApcZDig6ONlOkVtykwr1p6ecYa6zDS1JeQueavRqW/bziVydJA ITpU0VTS58jFXlF3Y6uYFgkTsdZ7M855LIsEwxHzGu3bXM1vg9HpHsvvrfOXe7XH XPu0BjI3Zul+ql3Hq9JjdyLah0HickSOZG3/ckfGb6qbSYUbZw7jtHgn1btL01mK 9C8OLPx4eIi9Bb44llU1DOKFTCAP6VE= -----END CERTIFICATE-----Generated at Thu Sep 3 20:47:36 2026 by rpki-client