$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/866e5acf-ad02-3689-8207-fee6bcc3ab49.roa File: 866e5acf-ad02-3689-8207-fee6bcc3ab49.roa (raw, json) Hash identifier: gS/h1GVjN2bG9v0acPj+7i8bz8kTbPyRv0XihWnRdbw= Subject key identifier: DC:96:21:C7:4E:D3:3D:04:63:11:16:12:5A:67:57:9E:28:D4:4C:C6 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584F497710C89CD5CEAE02C2ED20 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/866e5acf-ad02-3689-8207-fee6bcc3ab49.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11233 IP address blocks: 209.237.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:10:c8:9c:d5:ce:ae:02:c2:ed:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1e898ab8-e96b-4dbf-abf9-7c06c0ef6ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:0e:fb:ae:0f:1d:ec:70:1b:c7:10:e8:26: 77:0c:0a:94:7d:6f:fe:0e:86:3a:12:fe:85:2a:97: ea:67:35:51:8b:87:ae:80:3e:1a:13:92:01:9e:0e: b4:36:e7:8a:8e:9d:fe:84:77:16:b2:4c:6e:71:ee: 71:49:24:1d:a0:b6:58:8e:8a:81:60:2a:f2:4b:ed: 27:95:a0:84:0d:03:74:97:35:6b:cc:2d:d5:61:a3: cc:3f:63:c8:34:38:15:5c:1f:dc:b8:13:56:81:76: fd:44:d9:38:01:47:5a:ff:c0:9b:25:4a:c1:ca:c2: 82:e6:63:c5:55:36:11:9d:d7:61:44:3c:21:c7:a3: 2e:75:ad:99:7a:96:73:a3:80:7a:eb:ee:c4:77:2b: 3e:56:6f:4b:c2:b9:68:1d:3d:cd:1f:2b:91:81:5f: b9:02:00:83:84:91:49:f1:86:ea:e0:8d:2e:e1:dd: 66:aa:f6:46:4f:d7:d2:8d:62:97:2d:a2:5f:4f:cf: cd:ff:ef:e6:d3:b6:dc:df:a4:ba:15:1b:31:08:5c: 0b:86:76:6d:83:0f:3f:08:c1:3b:9a:1f:ab:c1:6d: ff:53:7a:da:be:51:89:2e:e9:29:fb:a2:ed:41:2b: 02:38:b3:17:f6:cd:e8:f0:e3:5e:c0:eb:a4:32:4d: 4c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:96:21:C7:4E:D3:3D:04:63:11:16:12:5A:67:57:9E:28:D4:4C:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/866e5acf-ad02-3689-8207-fee6bcc3ab49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fe:2f:1f:ae:94:fd:3b:79:b4:c0:2e:7d:6c:76:6d:d3:d4: af:80:d4:21:3d:9d:49:b1:0d:85:7b:bc:97:19:18:49:db:4c: 94:f1:8e:50:5d:42:41:aa:6d:8e:68:f3:19:3e:91:09:a8:fc: 3e:9a:8e:a7:e0:00:ef:ce:2d:06:4a:a1:fc:39:71:b9:e8:e5: 7d:80:83:be:2a:9a:87:76:42:ac:55:bc:c2:28:5e:01:16:79: 77:f3:35:21:9c:56:45:e6:1a:24:60:cf:97:08:15:67:8d:f5: 59:a7:c6:c0:39:0d:bf:33:e4:05:6a:06:1a:bf:ae:31:16:b2: a7:23:fe:89:34:54:2c:59:18:b3:52:66:d0:7d:e5:0f:0c:c2: 5a:98:7c:a7:7d:bf:84:43:cd:93:eb:fb:d4:81:b4:d3:31:cd: 10:f4:cb:63:84:45:41:48:b8:01:eb:55:28:f9:14:df:7c:9a: e3:6a:5f:7e:6a:aa:db:be:c1:52:54:0e:32:a8:ae:df:80:bf: 47:29:d7:a0:1b:12:ff:45:29:6e:02:3f:40:7f:4b:9e:2f:88: a8:e1:97:49:f6:da:20:37:e2:df:e7:c3:7d:80:ef:fe:7c:5a: 6c:98:73:14:b8:2d:07:1f:17:be:da:b8:25:f7:9a:9d:34:f3: 65:4a:1d:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdxDInNXOrgLC7SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWU4OThhYjgtZTk2Yi00ZGJmLWFiZjktN2MwNmMwZWY2YWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleYO+64PHexwG8cQ6CZ3DAqUfW/+DoY6Ev6F KpfqZzVRi4eugD4aE5IBng60NueKjp3+hHcWskxuce5xSSQdoLZYjoqBYCryS+0n laCEDQN0lzVrzC3VYaPMP2PINDgVXB/cuBNWgXb9RNk4AUda/8CbJUrBysKC5mPF VTYRnddhRDwhx6Muda2ZepZzo4B66+7Edys+Vm9LwrloHT3NHyuRgV+5AgCDhJFJ 8Ybq4I0u4d1mqvZGT9fSjWKXLaJfT8/N/+/m07bc36S6FRsxCFwLhnZtgw8/CME7 mh+rwW3/U3ravlGJLukp+6LtQSsCOLMX9s3o8ONewOukMk1M/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyWIcdO0z0EYxEWElpnV54o1EzGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvODY2ZTVhY2YtYWQwMi0z Njg5LTgyMDctZmVlNmJjYzNhYjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX+Lx+ulP07ebTALn1sdm3T1K+A1CE9nUmxDYV7vJcZGEnbTJTxjlBd QkGqbY5o8xk+kQmo/D6ajqfgAO/OLQZKofw5cbno5X2Ag74qmod2QqxVvMIoXgEW eXfzNSGcVkXmGiRgz5cIFWeN9VmnxsA5Db8z5AVqBhq/rjEWsqcj/ok0VCxZGLNS ZtB95Q8MwlqYfKd9v4RDzZPr+9SBtNMxzRD0y2OERUFIuAHrVSj5FN98muNqX35q qtu+wVJUDjKort+Av0cp16AbEv9FKW4CP0B/S54viKjhl0n22iA34t/nw32A7/58 WmyYcxS4LQcfF77auCX3mp0082VKHY4= -----END CERTIFICATE-----Generated at Sun Oct 18 06:30:40 2026 by rpki-client