$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4c123d96-4b01-35aa-82cb-a10612be318f.roa File: 4c123d96-4b01-35aa-82cb-a10612be318f.roa (raw, json) Hash identifier: CbwSMubk7tXsJehu3x3CvuQgC/OVHPCL5FQKDcpx5Fw= Subject key identifier: F6:4E:1F:14:FB:CF:48:D4:48:1B:73:43:4E:EC:60:55:43:C4:0B:9A Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584F4975298589B36B6DFF2A33C0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4c123d96-4b01-35aa-82cb-a10612be318f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 393368 IP address blocks: 209.237.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:29:85:89:b3:6b:6d:ff:2a:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4f9d7789-ea40-412b-bbbb-9c33f2567cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:93:76:8e:50:fe:70:25:93:8b:6c:a2:9f:84: 71:ae:9f:5c:87:90:12:fd:9f:ee:b5:d7:f8:e2:24: d1:4c:ae:83:42:c6:4a:ab:1b:14:0c:d3:2f:03:3b: 0f:64:36:f5:e5:ea:c9:c1:05:fc:5f:c8:ca:8f:64: aa:ab:b9:8f:b3:e0:86:79:8c:d1:15:a1:62:32:ef: 7e:0a:15:0a:3e:30:ed:51:56:87:91:c5:d5:5a:2d: 32:ce:40:1d:8b:bc:83:a8:5b:57:9b:4f:5b:d1:7a: 98:51:3a:38:62:87:ca:92:58:6f:53:95:b2:d8:57: 3f:0c:cc:f0:c5:61:d5:d0:1a:3a:d3:64:02:fc:0a: fb:eb:1c:62:28:f6:3a:c7:8b:49:49:5c:36:7a:23: e3:21:e4:de:09:3c:bf:1a:90:e2:cb:02:78:e8:96: f5:fe:f2:58:48:1d:cd:a3:ed:73:03:09:3c:3d:eb: 99:27:a8:e3:d1:ab:68:21:30:d1:bf:bd:b9:ed:81: 48:78:6f:43:cf:2b:df:38:49:27:88:9f:70:f5:03: 70:e3:a7:77:67:e4:3c:26:54:3c:fb:62:78:e0:7e: c8:23:fc:f2:91:6e:1a:d0:f8:f3:02:b4:69:db:f6: af:72:55:93:15:48:f3:ea:d5:c1:80:5c:0f:e6:34: 1e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4E:1F:14:FB:CF:48:D4:48:1B:73:43:4E:EC:60:55:43:C4:0B:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4c123d96-4b01-35aa-82cb-a10612be318f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e8:e0:61:03:ed:dc:d7:08:23:03:b4:0f:48:14:1d:12:b6: 82:4f:b4:a8:83:c5:c8:43:58:02:2b:50:0b:27:c2:1a:6c:e1: de:29:85:d1:5c:81:d8:74:69:fa:d3:e1:81:f2:1d:eb:39:21: 6a:88:a6:1b:66:a8:d1:94:11:5c:c8:21:21:6b:95:05:f6:c7: 66:17:17:fc:6e:e4:d1:9c:75:6f:4e:a9:5d:9a:3c:28:b9:f4: ec:01:fe:33:4c:5e:3b:33:56:6c:15:75:c3:a4:e7:16:7f:cd: f5:33:90:2a:0d:0e:85:b6:be:58:86:fc:2b:91:7e:69:6a:63: 22:ff:25:56:c3:af:9c:6e:c5:c7:d0:35:45:85:ef:cc:2c:13: aa:9c:b7:40:b2:c0:b4:37:e4:64:8a:ba:2a:2c:7e:25:8d:cb: 8c:a1:ae:f7:36:37:0e:01:46:c4:80:15:f1:bd:03:37:b9:fd: e7:fa:51:a5:8a:2e:b1:e8:e0:6e:41:1f:e1:d1:e2:3a:02:66: a8:16:90:5d:b8:dd:f9:28:4e:15:3f:7a:8e:67:d7:95:f9:86: fc:df:8f:ba:0a:62:d0:a7:60:91:ea:f0:d0:fe:ab:c6:d7:09: c4:d5:69:71:c7:a1:ba:36:8e:82:86:34:11:46:c7:f7:0d:08: ee:ba:4f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdSmFibNrbf8qM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGY5ZDc3ODktZWE0MC00MTJiLWJiYmItOWMzM2YyNTY3Y2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJN2jlD+cCWTi2yin4Rxrp9ch5AS/Z/utdf4 4iTRTK6DQsZKqxsUDNMvAzsPZDb15erJwQX8X8jKj2Sqq7mPs+CGeYzRFaFiMu9+ ChUKPjDtUVaHkcXVWi0yzkAdi7yDqFtXm09b0XqYUTo4YofKklhvU5Wy2Fc/DMzw xWHV0Bo602QC/Ar76xxiKPY6x4tJSVw2eiPjIeTeCTy/GpDiywJ46Jb1/vJYSB3N o+1zAwk8PeuZJ6jj0atoITDRv7257YFIeG9DzyvfOEkniJ9w9QNw46d3Z+Q8JlQ8 +2J44H7II/zykW4a0PjzArRp2/avclWTFUjz6tXBgFwP5jQe8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZOHxT7z0jUSBtzQ07sYFVDxAuaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNGMxMjNkOTYtNGIwMS0z NWFhLTgyY2ItYTEwNjEyYmUzMThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDo4GED7dzXCCMDtA9IFB0StoJPtKiDxchDWAIrUAsnwhps4d4phdFc gdh0afrT4YHyHes5IWqIphtmqNGUEVzIISFrlQX2x2YXF/xu5NGcdW9OqV2aPCi5 9OwB/jNMXjszVmwVdcOk5xZ/zfUzkCoNDoW2vliG/CuRfmlqYyL/JVbDr5xuxcfQ NUWF78wsE6qct0CywLQ35GSKuiosfiWNy4yhrvc2Nw4BRsSAFfG9Aze5/ef6UaWK LrHo4G5BH+HR4joCZqgWkF243fkoThU/eo5n15X5hvzfj7oKYtCnYJHq8ND+q8bX CcTVaXHHobo2joKGNBFGx/cNCO66Two= -----END CERTIFICATE-----Generated at Wed Oct 21 19:43:39 2026 by rpki-client