$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa File: 0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa (raw, json) Hash identifier: +PiPnGtQt+glky1LneICfxnHfHo+cIdU6kU9m07Lhzo= Subject key identifier: C3:45:D0:A4:F4:1A:D2:22:8E:99:3D:5C:4D:27:D1:AA:FA:A7:D1:9C Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584EDC920B379BCCD406A8D06B80 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 25899 IP address blocks: 209.237.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:0b:37:9b:cc:d4:06:a8:d0:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=5bdfe261-efc8-4f4b-ad70-8c644782f50d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7c:28:60:b1:5e:7f:0b:41:59:ac:83:a9:54: 19:c9:29:72:93:62:43:47:ea:8c:71:76:b9:d2:fe: 74:20:fb:78:42:00:83:90:9e:12:f1:5e:87:31:c1: 94:a4:b8:28:88:af:27:10:09:99:bb:09:5a:ab:8f: f5:52:01:18:49:12:9b:01:7e:50:84:c5:5c:67:e0: 94:e0:61:7c:c8:d5:13:28:1c:36:c7:eb:05:2c:98: 06:9f:d5:39:c5:e0:81:93:2e:5e:d5:30:1f:3a:b0: 07:36:fa:8e:56:3c:68:c5:d5:5f:25:29:f9:c6:92: 54:1b:b6:b3:ba:51:13:1e:be:62:8d:57:5e:c3:48: fd:68:47:5b:0a:ac:f0:e7:b5:0e:9a:bd:04:1d:31: 1f:e3:6e:cf:a8:a6:3f:f5:f7:e2:ed:4c:b8:e4:f9: 37:8d:31:aa:66:cf:df:27:5a:bb:7c:c2:f4:15:6e: 36:6b:da:2f:bf:17:68:46:3e:6e:e5:6c:1a:2b:b1: 08:1f:e9:42:77:fc:86:77:75:e9:08:9e:6e:c1:5f: 13:67:61:45:a8:43:b4:53:40:95:4f:0a:59:8b:06: c7:5b:e9:a1:c8:6a:d2:6b:23:3f:28:bb:b4:91:46: 7b:d2:e4:38:ed:ff:69:29:29:27:b4:de:50:97:18: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:45:D0:A4:F4:1A:D2:22:8E:99:3D:5C:4D:27:D1:AA:FA:A7:D1:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c1:72:45:c0:8a:72:b0:1f:d5:42:22:a2:e6:86:f2:23:a4: 07:d8:56:32:dd:b8:63:91:a2:ee:1d:df:04:f0:5f:40:5b:c1: c3:8c:95:31:57:01:83:a4:d3:5b:d5:29:6f:78:a8:50:78:39: 7a:5b:46:87:a2:19:cd:53:cf:a5:42:c0:90:a8:98:37:32:e0: a7:b8:18:bf:76:89:24:f5:2b:f3:17:b1:6a:61:ca:4e:b9:af: 87:43:27:75:c3:98:bb:70:4e:45:92:ab:94:9d:db:4a:d4:45: f5:95:39:3e:a8:74:df:e0:3e:eb:2e:7d:36:5f:07:6c:68:d5: 4a:3e:ac:cd:23:72:48:a0:82:72:4e:6b:d2:a4:05:6c:2f:83: d4:11:18:ba:c0:13:ec:3c:64:f7:71:b4:75:09:b4:47:50:a8: bf:81:ba:d4:a5:53:0a:f6:22:38:45:50:1f:1c:19:05:8d:36: 2d:27:40:13:d1:0d:f7:c3:60:79:ae:dc:a1:11:79:2d:8a:43: 28:e8:4f:58:eb:5d:0c:71:8b:79:20:86:4a:7a:05:84:bc:25: 34:6d:7c:81:5c:fd:1b:0e:e7:02:cc:1a:aa:9e:9e:e7:2f:03: ae:54:a1:dc:e8:7d:9a:66:33:bf:94:cc:b1:b9:ae:1b:99:ac: 66:31:9c:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckgs3m8zUBqjQa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk NWJkZmUyNjEtZWZjOC00ZjRiLWFkNzAtOGM2NDQ3ODJmNTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHwoYLFefwtBWayDqVQZySlyk2JDR+qMcXa5 0v50IPt4QgCDkJ4S8V6HMcGUpLgoiK8nEAmZuwlaq4/1UgEYSRKbAX5QhMVcZ+CU 4GF8yNUTKBw2x+sFLJgGn9U5xeCBky5e1TAfOrAHNvqOVjxoxdVfJSn5xpJUG7az ulETHr5ijVdew0j9aEdbCqzw57UOmr0EHTEf427PqKY/9ffi7Uy45Pk3jTGqZs/f J1q7fML0FW42a9ovvxdoRj5u5WwaK7EIH+lCd/yGd3XpCJ5uwV8TZ2FFqEO0U0CV TwpZiwbHW+mhyGrSayM/KLu0kUZ70uQ47f9pKSkntN5Qlxj/VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNF0KT0GtIijpk9XE0n0ar6p9GcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMGFiYWQzNTktMmQ2OS0z NGJkLTlkOGMtYWM4MTAwZDVjZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3BckXAinKwH9VCIqLmhvIjpAfYVjLduGORou4d3wTwX0BbwcOMlTFX AYOk01vVKW94qFB4OXpbRoeiGc1Tz6VCwJComDcy4Ke4GL92iST1K/MXsWphyk65 r4dDJ3XDmLtwTkWSq5Sd20rURfWVOT6odN/gPusufTZfB2xo1Uo+rM0jckiggnJO a9KkBWwvg9QRGLrAE+w8ZPdxtHUJtEdQqL+ButSlUwr2IjhFUB8cGQWNNi0nQBPR DffDYHmu3KEReS2KQyjoT1jrXQxxi3kghkp6BYS8JTRtfIFc/RsO5wLMGqqenucv A65UodzofZpmM7+UzLG5rhuZrGYxnCk= -----END CERTIFICATE-----Generated at Mon Aug 31 11:24:13 2026 by rpki-client