$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f2b6aee1-b9c5-3aca-b0d0-8356d09f7c2c.roa File: f2b6aee1-b9c5-3aca-b0d0-8356d09f7c2c.roa (raw, json) Hash identifier: dPnqFF4d8d+DVzBeFLocbGN3q3bjm3GbPSvZMvPPOqQ= Subject key identifier: EA:07:51:BF:48:F8:32:93:CF:13:41:40:4D:07:5E:8F:5B:EE:98:02 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584F5E62C016C46A8BB8B9FCC6C0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f2b6aee1-b9c5-3aca-b0d0-8356d09f7c2c.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 397422 IP address blocks: 69.1.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c0:16:c4:6a:8b:b8:b9:fc:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=ef3b22c0-d197-41a4-999c-b9e8532966fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f3:35:b1:bf:d6:b1:16:16:10:28:9e:e0:15: e0:a6:06:49:6c:38:95:04:d5:9f:63:20:c1:3d:ab: e0:fb:e8:82:8f:3e:77:8b:35:c2:74:03:be:a2:7c: 84:9b:6d:28:14:97:14:8d:70:5e:71:c3:0b:15:01: a8:1b:3f:75:32:b7:52:da:b1:be:bb:fd:53:f2:2b: 58:3b:a4:64:a1:66:fe:08:ec:99:6e:5c:15:9e:70: ca:6e:68:32:d3:6e:df:39:75:c2:30:ec:39:d0:3e: 8e:ea:29:20:92:28:11:53:45:8f:e0:a6:a8:46:4a: 8d:0e:bd:f5:32:15:27:6a:f9:52:31:11:12:00:41: d8:e7:68:a4:58:5a:59:95:78:cc:05:37:b1:ea:41: 7c:fe:99:b4:ae:77:30:d2:31:38:cd:42:cc:13:4c: 8d:92:3f:51:cb:e4:47:cc:cf:0b:bc:dc:7a:95:9c: 4b:9e:c9:6b:45:88:6b:53:e9:0e:1d:76:57:3d:f2: 5f:05:74:5c:ef:b8:53:11:2d:ad:09:24:1f:c3:66: a0:c0:c2:35:74:5e:ce:ad:f1:74:d7:9b:cc:7d:29: 20:23:23:6f:ff:5d:b1:bc:47:2f:57:f3:73:09:fc: ef:13:01:cf:d0:56:e9:dd:1e:3e:e5:fc:cd:5e:0e: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:07:51:BF:48:F8:32:93:CF:13:41:40:4D:07:5E:8F:5B:EE:98:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f2b6aee1-b9c5-3aca-b0d0-8356d09f7c2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 69.1.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:dd:ae:e6:9d:3c:97:f6:08:32:c8:ea:94:c1:8f:71:41:b3: 44:cd:67:20:38:a4:aa:38:e9:16:e8:00:fd:fd:67:aa:f5:a4: 0e:85:7f:c0:b7:c5:b4:52:8e:ee:a5:33:99:af:bb:1b:f1:44: cb:3a:7b:59:a9:01:50:c8:4c:e4:1f:f0:1f:df:1a:83:7d:5a: cb:89:c6:3e:d2:04:fc:d4:55:f9:d6:94:ac:92:cd:1a:5d:4e: ed:53:ea:96:de:1d:5e:89:33:f2:8b:7f:d8:a6:b2:9c:f8:af: 91:42:a6:a3:91:8b:90:cc:6f:7d:9e:ad:e5:db:8d:6e:23:cd: 82:ad:71:5f:58:4f:5c:e1:35:f1:ac:72:b8:9d:d5:e1:ca:b1: cc:41:58:ce:ad:04:62:3d:d9:8a:b4:0b:6b:5f:c8:b7:96:d4: 27:1b:ed:6d:d9:71:76:24:0e:14:67:26:63:21:3e:ac:5f:94: 96:b7:a6:56:a4:f1:6d:ae:83:33:1c:45:ba:d1:bd:d4:5c:91: 4e:93:4b:35:f7:6a:9e:3b:39:8c:6b:ec:b5:65:a6:fa:1e:75: ef:97:0b:28:10:a3:91:af:2a:82:b4:72:af:8f:ca:17:63:ef: 37:17:9c:bc:5c:76:17:ff:a5:87:ed:d9:dd:0e:7b:7b:96:56: d4:0c:8e:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsAWxGqLuLn8xsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZWYzYjIyYzAtZDE5Ny00MWE0LTk5OWMtYjllODUzMjk2NmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPM1sb/WsRYWECie4BXgpgZJbDiVBNWfYyDB Pavg++iCjz53izXCdAO+onyEm20oFJcUjXBeccMLFQGoGz91MrdS2rG+u/1T8itY O6RkoWb+COyZblwVnnDKbmgy027fOXXCMOw50D6O6ikgkigRU0WP4KaoRkqNDr31 MhUnavlSMRESAEHY52ikWFpZlXjMBTex6kF8/pm0rncw0jE4zULME0yNkj9Ry+RH zM8LvNx6lZxLnslrRYhrU+kOHXZXPfJfBXRc77hTES2tCSQfw2agwMI1dF7OrfF0 15vMfSkgIyNv/12xvEcvV/NzCfzvEwHP0Fbp3R4+5fzNXg4ybwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoHUb9I+DKTzxNBQE0HXo9b7pgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZjJiNmFlZTEtYjljNS0z YWNhLWIwZDAtODM1NmQwOWY3YzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARQF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbdruadPJf2CDLI6pTBj3FBs0TNZyA4pKo46RboAP39Z6r1pA6Ff8C3 xbRSju6lM5mvuxvxRMs6e1mpAVDITOQf8B/fGoN9WsuJxj7SBPzUVfnWlKySzRpd Tu1T6pbeHV6JM/KLf9imspz4r5FCpqORi5DMb32ereXbjW4jzYKtcV9YT1zhNfGs crid1eHKscxBWM6tBGI92Yq0C2tfyLeW1Ccb7W3ZcXYkDhRnJmMhPqxflJa3plak 8W2ugzMcRbrRvdRckU6TSzX3ap47OYxr7LVlpvoede+XCygQo5GvKoK0cq+Pyhdj 7zcXnLxcdhf/pYft2d0Oe3uWVtQMjuI= -----END CERTIFICATE-----Generated at Wed Oct 21 22:49:23 2026 by rpki-client