$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa File: caef0813-709f-3639-aad7-06f54ab67b07.roa (raw, json) Hash identifier: dNackCU2mSciNYOAZLgh+oJ6X2fzdwOkqMKKxMvVkfM= Subject key identifier: 9E:88:94:FD:BD:91:3D:AE:12:44:AA:EA:7E:8A:97:B6:B8:B3:04:0D Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584F58CD5824715D1980A20B5820 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 55246 IP address blocks: 209.237.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:58:24:71:5d:19:80:a2:0b:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=a8f5a6b0-8cdc-4c96-aa9c-071e2d4c9bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:20:3d:54:07:a1:9f:8d:9d:dd:37:74:6d:1f: e5:1d:68:a2:e0:8c:02:c3:ad:28:07:96:75:46:e5: e3:84:5b:58:20:6c:ef:ab:38:19:bc:66:91:c6:7f: 59:62:7e:ac:4c:17:ec:a0:ad:23:1d:ed:d9:f4:10: da:9a:e7:41:6d:c0:32:a0:a4:6e:fc:6a:c8:77:70: 53:43:2a:9a:96:f6:6a:13:17:5a:f1:a7:95:6b:d9: e5:c3:3f:2b:60:0c:9c:f7:dd:85:f5:98:78:9b:5d: 03:a3:f2:b0:46:6a:93:54:da:bb:12:ed:ac:a7:e8: 2f:4e:e1:06:e4:9a:fc:ab:f9:be:a6:51:f3:97:d8: 14:df:54:25:82:88:e2:b9:83:bc:b5:1e:4d:81:1e: 06:96:0b:6a:a6:16:c4:4e:22:d3:e3:7e:41:df:ce: a1:91:6f:e5:2a:95:0d:2d:4d:5f:8c:de:f0:da:8c: e3:ff:9b:21:db:68:0f:6e:c3:1f:c7:5d:e5:02:92: 91:4c:43:cd:cb:f5:bf:7d:50:16:45:ef:be:a4:b2: ae:7b:6b:6a:96:dd:ab:b5:eb:23:53:b0:0d:73:57: ec:ee:96:5d:60:07:d8:b2:aa:ba:da:94:51:e2:0e: 8b:78:e3:73:93:77:e5:db:8b:0d:cb:6b:39:69:92: 4c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:88:94:FD:BD:91:3D:AE:12:44:AA:EA:7E:8A:97:B6:B8:B3:04:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/caef0813-709f-3639-aad7-06f54ab67b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:7a:07:17:2a:0a:c4:d1:e3:96:3c:d1:a8:78:16:0e:94:40: 8e:dd:8c:9b:b4:42:74:b4:e1:a8:88:f0:8d:e9:dd:71:0e:d3: ef:be:1c:47:0f:38:b4:f0:22:3e:4f:c5:4a:6f:ab:d2:6b:f7: 4d:a8:e3:73:26:34:4b:ac:a2:6e:a2:52:72:a7:72:07:7f:58: e6:8c:9a:6d:8f:3b:4d:7c:1b:ae:be:1c:45:9a:50:be:37:2a: c9:5d:89:b3:85:ae:f6:29:58:e9:56:6b:0a:8f:87:9c:c3:ec: f0:50:af:93:ba:5b:c1:81:ae:54:39:42:4e:d7:65:64:6f:f9: d6:69:37:50:14:54:20:50:68:1d:33:1e:c4:a2:88:02:51:eb: ff:2e:4d:32:ef:2e:91:70:98:17:ae:2b:73:fa:1c:b9:3b:0e: 14:87:43:db:f5:5d:fb:55:07:6f:90:ea:18:87:fe:6a:83:21: 1d:07:bd:a3:fb:0e:a3:e9:82:77:dc:05:37:2a:66:83:72:02: 74:aa:c6:69:d7:4c:93:33:0c:17:cf:e4:9b:7c:ec:52:69:49: 48:8f:89:84:0b:46:7b:85:53:01:61:65:e0:4c:5e:33:50:c5: aa:b4:4c:40:f3:74:eb:eb:de:62:e6:19:d7:cd:c3:9a:65:05: a1:61:6a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzVgkcV0ZgKILWCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk YThmNWE2YjAtOGNkYy00Yzk2LWFhOWMtMDcxZTJkNGM5YmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SA9VAehn42d3Td0bR/lHWii4IwCw60oB5Z1 RuXjhFtYIGzvqzgZvGaRxn9ZYn6sTBfsoK0jHe3Z9BDamudBbcAyoKRu/GrId3BT QyqalvZqExda8aeVa9nlwz8rYAyc992F9Zh4m10Do/KwRmqTVNq7Eu2sp+gvTuEG 5Jr8q/m+plHzl9gU31QlgojiuYO8tR5NgR4GlgtqphbETiLT435B386hkW/lKpUN LU1fjN7w2ozj/5sh22gPbsMfx13lApKRTEPNy/W/fVAWRe++pLKue2tqlt2rtesj U7ANc1fs7pZdYAfYsqq62pRR4g6LeONzk3fl24sNy2s5aZJMGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6IlP29kT2uEkSq6n6Kl7a4swQNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvY2FlZjA4MTMtNzA5Zi0z NjM5LWFhZDctMDZmNTRhYjY3YjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt6BxcqCsTR45Y80ah4Fg6UQI7djJu0QnS04aiI8I3p3XEO0+++HEcP OLTwIj5PxUpvq9Jr902o43MmNEusom6iUnKncgd/WOaMmm2PO018G66+HEWaUL43 KsldibOFrvYpWOlWawqPh5zD7PBQr5O6W8GBrlQ5Qk7XZWRv+dZpN1AUVCBQaB0z HsSiiAJR6/8uTTLvLpFwmBeuK3P6HLk7DhSHQ9v1XftVB2+Q6hiH/mqDIR0HvaP7 DqPpgnfcBTcqZoNyAnSqxmnXTJMzDBfP5Jt87FJpSUiPiYQLRnuFUwFhZeBMXjNQ xaq0TEDzdOvr3mLmGdfNw5plBaFhaiA= -----END CERTIFICATE-----Generated at Mon Oct 19 04:09:33 2026 by rpki-client