$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa File: 40385235-f792-3e3f-8a68-b1affa65f084.roa (raw, json) Hash identifier: 7ucCbD7NTfCv42YT/F2NLX5qxQ5PsvlcYKpDoNSgHNg= Subject key identifier: 9A:A6:CA:22:23:7F:BD:5E:3F:A9:47:2D:2A:5C:14:55:43:6C:C2:14 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584EBB11B97C1BFB63865C088C80 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 397422 IP address blocks: 209.237.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:b9:7c:1b:fb:63:86:5c:08:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=e6e6dc3a-2b83-4947-833c-9b8630d9dc3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0d:a1:ef:62:0e:90:5c:a1:8f:fe:be:13:3e: bc:cc:0e:f4:ca:18:c1:ea:2e:ea:5c:0c:55:c3:f4: ce:98:e0:b8:33:b9:49:d5:2f:4d:b4:50:b1:e8:c6: ce:ae:cd:35:e7:7b:ef:fd:04:e4:e4:2a:c5:23:b0: 5b:c6:67:db:d3:0e:b7:04:bb:a7:07:3d:dc:ed:1e: 04:7c:97:af:bf:d6:2c:59:07:99:cc:62:be:ad:ff: ec:13:c8:67:8f:5a:26:04:48:ff:9c:47:28:e1:1b: 0e:0a:df:98:cc:8b:4d:ac:ce:dc:9b:1a:4a:20:87: 9e:b3:f9:c1:1d:97:27:52:c5:25:ac:22:e8:1e:3b: 34:54:2d:d1:7e:da:d2:cd:b7:da:fd:42:e6:0d:22: dd:87:f6:fc:19:a1:bf:d5:3a:38:bd:72:87:82:5e: 17:35:6e:68:9e:bf:b8:28:7b:dd:24:a2:bb:40:2c: 2d:70:47:0b:39:bf:30:e6:5e:fb:17:13:12:5b:b8: dc:97:e6:3c:1d:95:6a:30:35:83:27:30:7c:8b:0b: 6c:03:82:e3:e3:bc:e7:9f:6d:69:b4:ff:8c:ca:a3: 8a:79:90:26:f2:f7:02:0b:63:16:63:41:93:80:a3: 4f:9c:86:b0:16:9b:8d:fc:cd:03:4c:5e:31:4e:6a: 7f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A6:CA:22:23:7F:BD:5E:3F:A9:47:2D:2A:5C:14:55:43:6C:C2:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9a:22:f1:2b:df:26:40:41:65:30:31:33:2d:99:c8:ec:b0: b4:c6:dd:37:7c:1b:6e:71:a6:45:b1:7a:fa:aa:ab:48:34:76: fc:9e:72:ac:c4:bb:72:f7:d1:fc:a2:5c:a2:93:a8:ed:b9:67: 3a:b6:75:9d:22:56:19:05:1c:10:6d:aa:17:3e:e3:a0:52:3e: 83:de:f2:16:78:d7:25:57:b0:da:74:dd:08:46:91:8b:dd:6c: 86:e8:79:7a:a3:11:94:81:ef:77:0f:a5:5e:a0:c8:bc:40:39: 7b:11:b7:a1:0b:89:82:08:dd:f4:52:ce:81:4f:f1:07:5d:40: e4:0b:7c:e6:4d:cf:de:f2:41:ca:76:d2:31:9e:e5:4b:a5:37: 5b:e1:c6:58:05:f8:ca:ea:6f:08:72:58:ba:55:73:20:23:f6: 40:6e:97:75:68:1e:21:d1:08:19:5d:71:f4:d3:59:a6:9d:7a: 43:18:c1:1f:c7:a5:9e:27:ea:84:ea:bc:cc:38:72:34:81:53: 02:24:91:90:7c:8b:6e:d8:62:12:a3:1f:24:6a:38:c5:41:1c: 9a:67:b9:64:0d:6d:df:16:68:27:0c:14:82:3a:e2:57:f2:05: a7:c9:07:05:63:a0:ae:a1:ed:03:13:64:80:e3:f6:e2:24:6a: 3f:0d:e1:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67Ebl8G/tjhlwIjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk ZTZlNmRjM2EtMmI4My00OTQ3LTgzM2MtOWI4NjMwZDlkYzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ2h72IOkFyhj/6+Ez68zA70yhjB6i7qXAxV w/TOmOC4M7lJ1S9NtFCx6MbOrs0153vv/QTk5CrFI7Bbxmfb0w63BLunBz3c7R4E fJevv9YsWQeZzGK+rf/sE8hnj1omBEj/nEco4RsOCt+YzItNrM7cmxpKIIees/nB HZcnUsUlrCLoHjs0VC3RftrSzbfa/ULmDSLdh/b8GaG/1To4vXKHgl4XNW5onr+4 KHvdJKK7QCwtcEcLOb8w5l77FxMSW7jcl+Y8HZVqMDWDJzB8iwtsA4Lj47znn21p tP+MyqOKeZAm8vcCC2MWY0GTgKNPnIawFpuN/M0DTF4xTmp/KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqmyiIjf71eP6lHLSpcFFVDbMIUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNDAzODUyMzUtZjc5Mi0z ZTNmLThhNjgtYjFhZmZhNjVmMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGaIvEr3yZAQWUwMTMtmcjssLTG3Td8G25xpkWxevqqq0g0dvyecqzE u3L30fyiXKKTqO25Zzq2dZ0iVhkFHBBtqhc+46BSPoPe8hZ41yVXsNp03QhGkYvd bIboeXqjEZSB73cPpV6gyLxAOXsRt6ELiYII3fRSzoFP8QddQOQLfOZNz97yQcp2 0jGe5UulN1vhxlgF+MrqbwhyWLpVcyAj9kBul3VoHiHRCBldcfTTWaadekMYwR/H pZ4n6oTqvMw4cjSBUwIkkZB8i27YYhKjHyRqOMVBHJpnuWQNbd8WaCcMFII64lfy BafJBwVjoK6h7QMTZIDj9uIkaj8N4VE= -----END CERTIFICATE-----Generated at Mon Aug 31 11:24:24 2026 by rpki-client