$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fdf3fae6-0252-3bda-a826-286a240b5e91.roa File: fdf3fae6-0252-3bda-a826-286a240b5e91.roa (raw, json) Hash identifier: 5/as9vKmQdE9g93mvQrBixx9Oc6mfJ6Cs3Axgs4I59o= Subject key identifier: 23:23:E3:39:66:23:09:9D:30:1B:59:CD:03:7F:D7:42:C5:CF:C8:4A Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584ECD37353555D70188BE1F2C80 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fdf3fae6-0252-3bda-a826-286a240b5e91.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 33059 IP address blocks: 209.42.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:35:35:55:d7:01:88:be:1f:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=7cf394a4-0787-48b0-bd5d-1f25934b068f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ff:3b:ca:09:a1:b1:9f:0e:3d:4d:94:3d:36: 24:8a:50:47:08:9c:eb:93:ec:2b:f7:0e:95:ef:9b: 92:34:9e:e4:33:d2:f8:9e:98:f5:1c:a1:b9:54:b9: d8:10:59:75:ae:91:ea:e8:47:c2:f4:fa:33:29:94: 8d:ca:58:0a:aa:b0:9f:40:70:cd:69:ea:9d:72:d4: 1b:64:89:be:c8:d7:81:fe:55:b1:e5:c4:01:e2:31: c2:f9:ac:53:d4:e6:4c:1f:c6:3e:62:eb:84:01:e9: 3b:65:8c:f5:c2:51:22:4c:c2:8f:d9:bd:fb:ed:65: 5a:8a:b8:9b:04:ed:88:0d:d7:3f:4e:ad:91:cc:e9: d9:f8:f7:e9:38:e7:5e:cb:01:8f:8d:9a:cd:5b:49: 7e:39:d4:ab:00:3d:e8:4d:9b:0c:05:e6:64:38:1e: b0:aa:92:c2:42:c8:98:bc:49:c6:d3:29:ac:9c:ea: 60:a2:f6:0f:73:15:d4:dc:43:7f:fd:34:2b:bc:e5: 21:0e:5a:17:94:7b:01:4b:68:d0:f1:10:3c:ee:3b: 8c:64:e7:0a:aa:60:10:64:44:a6:8f:a4:87:dc:c4: cd:27:14:28:17:d4:0c:04:ee:fd:96:af:49:20:5b: d5:c8:94:91:87:b3:3f:e7:27:cb:b5:17:e3:16:87: 90:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:23:E3:39:66:23:09:9D:30:1B:59:CD:03:7F:D7:42:C5:CF:C8:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/fdf3fae6-0252-3bda-a826-286a240b5e91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 209.42.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:e2:9e:77:8e:f7:0c:ba:de:3d:1b:1a:a9:56:c9:9a:ac:10: 16:60:ef:b7:ca:76:75:e0:2c:bd:a0:d2:30:fd:63:1c:56:f4: b5:a0:71:36:a0:b7:86:7d:74:5a:b8:e3:01:fe:7b:b3:08:71: ec:60:d8:8f:d3:f9:e7:82:c5:82:01:15:d9:f1:c5:4e:55:4b: e5:00:aa:2a:cf:33:71:98:a0:45:41:a6:f2:a2:50:93:2b:db: a3:a1:80:22:e5:30:f0:fe:0e:dd:dd:e3:6b:7e:d0:ae:c7:95: 20:68:3e:ff:aa:73:96:07:48:b9:69:4e:46:fd:6b:50:ef:e6: 60:62:f9:00:ba:f4:fc:c9:e7:72:fd:61:a0:07:7e:30:6e:83: 26:ea:13:61:cd:59:56:f2:7c:25:19:a3:20:9b:ae:00:02:ae: 33:aa:ae:a5:8e:2e:c7:a5:1f:1b:f0:22:9a:db:8f:8a:8c:c0: bb:6d:32:3c:c3:83:7c:8e:f2:d9:8b:48:0d:8f:d0:04:72:76: 8e:d4:32:c2:c1:11:93:d0:7b:34:da:e9:48:b5:44:39:cf:09: 93:a6:4f:74:72:7e:ea:4e:e1:aa:45:eb:ab:3d:b4:12:c3:ca: 6f:e2:77:d0:c4:54:33:70:33:ca:1b:93:b3:37:f6:9d:aa:05: 4c:3c:21:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNzU1VdcBiL4fLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk N2NmMzk0YTQtMDc4Ny00OGIwLWJkNWQtMWYyNTkzNGIwNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf87ygmhsZ8OPU2UPTYkilBHCJzrk+wr9w6V 75uSNJ7kM9L4npj1HKG5VLnYEFl1rpHq6EfC9PozKZSNylgKqrCfQHDNaeqdctQb ZIm+yNeB/lWx5cQB4jHC+axT1OZMH8Y+YuuEAek7ZYz1wlEiTMKP2b377WVairib BO2IDdc/Tq2RzOnZ+PfpOOdeywGPjZrNW0l+OdSrAD3oTZsMBeZkOB6wqpLCQsiY vEnG0ymsnOpgovYPcxXU3EN//TQrvOUhDloXlHsBS2jQ8RA87juMZOcKqmAQZESm j6SH3MTNJxQoF9QMBO79lq9JIFvVyJSRh7M/5yfLtRfjFoeQewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMj4zlmIwmdMBtZzQN/10LFz8hKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvZmRmM2ZhZTYtMDI1Mi0z YmRhLWE4MjYtMjg2YTI0MGI1ZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SqnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbinneO9wy63j0bGqlWyZqsEBZg77fKdnXgLL2g0jD9YxxW9LWgcTag t4Z9dFq44wH+e7MIcexg2I/T+eeCxYIBFdnxxU5VS+UAqirPM3GYoEVBpvKiUJMr 26OhgCLlMPD+Dt3d42t+0K7HlSBoPv+qc5YHSLlpTkb9a1Dv5mBi+QC69PzJ53L9 YaAHfjBugybqE2HNWVbyfCUZoyCbrgACrjOqrqWOLselHxvwIprbj4qMwLttMjzD g3yO8tmLSA2P0ARydo7UMsLBEZPQezTa6Ui1RDnPCZOmT3RyfupO4apF66s9tBLD ym/id9DEVDNwM8obk7M39p2qBUw8ISA= -----END CERTIFICATE-----Generated at Fri Sep 4 00:18:44 2026 by rpki-client