$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa File: db8f199a-62c8-36d3-a41d-64390cd86118.roa (raw, json) Hash identifier: to/kdkRXvLdF3SlEoKsZ+asm3hHa4ztwp8njuTAmw/M= Subject key identifier: 8E:54:E1:1B:A3:DF:67:93:F0:A2:46:9B:73:2F:A6:8C:75:91:C4:FF Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584F497710B03B6B1DBD0C422D40 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11233 IP address blocks: 209.237.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:10:b0:3b:6b:1d:bd:0c:42:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=62de7aaa-fb6a-49a9-aa4f-2a70c04a3282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:76:c1:a4:73:a7:ab:13:2b:5f:85:2f:17:e0: e1:80:87:be:e4:00:47:49:1c:11:60:cb:c4:67:ad: 33:c8:b0:c0:a6:af:20:74:39:58:7d:9f:71:45:c4: 7f:95:92:7a:37:37:07:56:9d:86:a6:51:44:82:d3: d9:1d:83:4f:88:af:f6:05:73:1e:9d:c1:e5:ed:ee: 28:43:15:73:1a:3a:c1:91:ea:3d:e9:41:87:09:63: 52:4e:97:11:a0:03:e0:89:8d:32:3d:06:b5:70:6c: cc:33:7e:c8:7f:9d:52:e6:a8:af:e1:64:68:11:b9: 45:bc:b9:a7:33:80:5a:8c:a2:57:72:d2:0b:e0:40: 46:5c:9d:19:d5:b7:51:42:8a:92:df:56:7a:48:67: 8f:3c:42:6e:d2:fc:6f:fd:b4:51:2d:b9:81:5a:c5: 16:8d:ba:7e:7e:0c:8c:6e:ac:3b:ba:f0:b1:c4:5c: 91:a0:f0:fd:ec:e9:91:95:f9:12:1e:fd:b3:c2:c5: cc:7f:5d:eb:e0:fa:55:5e:cf:74:4c:48:b2:04:73: 67:02:32:14:8d:fb:67:d2:be:b4:9d:90:68:21:bd: 02:5b:e0:11:64:8f:42:93:b3:7e:80:9d:67:82:76: 2a:4b:fe:3c:c1:d3:a9:c1:8a:b9:b1:00:2f:8f:b1: e9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:54:E1:1B:A3:DF:67:93:F0:A2:46:9B:73:2F:A6:8C:75:91:C4:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/db8f199a-62c8-36d3-a41d-64390cd86118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:de:6e:f1:5a:3a:b6:ea:66:75:af:a2:bd:7e:b6:94:8e:05: 29:da:36:5f:1e:22:2b:fc:be:3d:16:73:b6:05:24:b4:b0:4d: a2:9a:51:5f:df:e4:1d:9d:dc:55:19:99:f6:ba:c9:cc:c0:d0: d1:4f:18:00:e5:ba:8b:32:25:9a:bf:05:c5:bc:9f:7f:76:e7: 2c:10:d9:08:5d:b9:7c:f5:53:82:b8:ec:9c:6b:42:df:8c:c2: bb:ff:c2:03:fd:e1:25:c6:d4:f4:15:51:04:b2:f5:89:37:15: d7:1e:4e:c9:b4:c5:f6:2a:7b:86:ab:ee:85:c1:51:9c:a0:64: 0a:c2:0e:93:4a:3d:76:a5:b7:3e:4c:6c:f2:b0:13:ae:2b:94: 04:e5:f8:51:58:00:bd:15:ab:95:06:2a:59:02:41:99:50:c6: 32:89:f7:dd:42:53:05:0d:21:7c:91:06:e0:91:9e:23:2f:b8: f7:57:a4:67:bc:b7:21:eb:19:32:e8:1e:a0:a4:aa:94:29:4e: ad:ee:3b:51:db:51:e8:08:e2:1e:3c:ba:95:f7:d7:c8:a0:f0: a2:33:ab:7a:7a:c2:e9:a9:10:87:1c:27:24:e0:48:42:9a:58: 91:8d:d6:6c:9b:fa:6f:55:4c:72:e7:89:05:33:10:4c:65:a0: 21:f6:ef:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdxCwO2sdvQxCLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjJkZTdhYWEtZmI2YS00OWE5LWFhNGYtMmE3MGMwNGEzMjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHbBpHOnqxMrX4UvF+DhgIe+5ABHSRwRYMvE Z60zyLDApq8gdDlYfZ9xRcR/lZJ6NzcHVp2GplFEgtPZHYNPiK/2BXMencHl7e4o QxVzGjrBkeo96UGHCWNSTpcRoAPgiY0yPQa1cGzMM37If51S5qiv4WRoEblFvLmn M4BajKJXctIL4EBGXJ0Z1bdRQoqS31Z6SGePPEJu0vxv/bRRLbmBWsUWjbp+fgyM bqw7uvCxxFyRoPD97OmRlfkSHv2zwsXMf13r4PpVXs90TEiyBHNnAjIUjftn0r60 nZBoIb0CW+ARZI9Ck7N+gJ1ngnYqS/48wdOpwYq5sQAvj7HpDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5U4Ruj32eT8KJGm3Mvpox1kcT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGI4ZjE5OWEtNjJjOC0z NmQzLWE0MWQtNjQzOTBjZDg2MTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e1KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfebvFaOrbqZnWvor1+tpSOBSnaNl8eIiv8vj0Wc7YFJLSwTaKaUV/f 5B2d3FUZmfa6yczA0NFPGADluosyJZq/BcW8n3925ywQ2QhduXz1U4K47JxrQt+M wrv/wgP94SXG1PQVUQSy9Yk3FdceTsm0xfYqe4ar7oXBUZygZArCDpNKPXaltz5M bPKwE64rlATl+FFYAL0Vq5UGKlkCQZlQxjKJ991CUwUNIXyRBuCRniMvuPdXpGe8 tyHrGTLoHqCkqpQpTq3uO1HbUegI4h48upX318ig8KIzq3p6wumpEIccJyTgSEKa WJGN1myb+m9VTHLniQUzEExloCH27/Q= -----END CERTIFICATE-----Generated at Wed Oct 21 05:08:42 2026 by rpki-client