$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/63941285-1412-37d0-ad11-d639a1ac8aa0.roa File: 63941285-1412-37d0-ad11-d639a1ac8aa0.roa (raw, json) Hash identifier: Bi5xUOkeyDTRZiLr8zV/wPIyHUXtaZI2+9h4bjbBSkg= Subject key identifier: 76:73:B7:74:B9:BA:D7:54:10:35:7B:19:AD:B6:B6:4A:81:23:62:B9 Certificate issuer: /CN=70ecbbd8-f88e-4306-9c9f-72852fe7f658 Certificate serial: 010D0C9F4328584F3B7D191DED5DCE2F1CC29780 Authority key identifier: 18:8A:2E:D4:DE:05:C5:C4:47:14:BF:5C:AC:9E:D3:43:E5:15:21:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/63941285-1412-37d0-ad11-d639a1ac8aa0.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 402573 IP address blocks: 209.151.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/70ecbbd8-f88e-4306-9c9f-72852fe7f658.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/70ecbbd8-f88e-4306-9c9f-72852fe7f658.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:19:1d:ed:5d:ce:2f:1c:c2:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ecbbd8-f88e-4306-9c9f-72852fe7f658 Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=a9adc173-f19b-4573-9108-b7230f889d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ab:1f:1a:6a:ce:af:ed:1b:a9:be:2a:b4:2e: 86:52:75:ac:df:c3:a9:cc:b2:df:80:86:4a:89:28: 09:3f:66:de:c7:b7:2a:7c:20:d4:1b:0a:2f:df:5f: c9:50:f9:5a:08:21:57:5a:9c:f6:5f:d2:47:c1:c0: 38:06:71:97:68:a1:c9:c3:40:d1:5e:9f:92:16:d2: 99:04:7c:f9:e6:81:57:5b:67:c1:84:c0:55:33:13: 43:de:a9:50:8e:0f:8d:9d:b7:6b:45:18:1e:0e:8c: df:e1:e9:67:62:30:44:0f:21:7e:ff:66:da:70:7a: f5:e8:8f:2f:5f:11:88:4d:5d:7c:5e:c5:db:d3:33: 1f:b5:99:cc:aa:33:1a:fc:3f:eb:e5:c9:5b:b5:4a: c9:f4:65:50:31:59:5e:58:ca:4d:60:00:b0:8b:d0: d1:1b:c7:e9:5a:7f:de:3a:3f:3b:c8:48:ec:27:40: 2e:4a:e4:02:02:b7:b7:e8:2b:be:21:e8:af:29:25: c7:c5:83:41:2a:9c:e9:a4:46:f2:4f:a9:a9:ac:eb: 9e:95:4b:72:a2:15:66:79:3d:df:77:bb:52:80:d0: 2b:f4:37:47:ce:d9:5b:24:f8:7a:26:b6:52:47:b8: d9:65:8b:eb:a8:e0:a7:3f:81:ad:09:e0:9a:b3:19: 79:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:73:B7:74:B9:BA:D7:54:10:35:7B:19:AD:B6:B6:4A:81:23:62:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/63941285-1412-37d0-ad11-d639a1ac8aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/70ecbbd8-f88e-4306-9c9f-72852fe7f658.crl X509v3 Authority Key Identifier: keyid:18:8A:2E:D4:DE:05:C5:C4:47:14:BF:5C:AC:9E:D3:43:E5:15:21:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658.cer sbgp-ipAddrBlock: critical IPv4: 209.151.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:83:c3:25:b1:a0:69:6b:a4:82:61:2d:21:b4:94:92:cf:8c: ba:65:ff:d2:1c:61:52:5a:d7:18:eb:8b:4a:6e:c5:df:df:5c: 37:77:51:1b:28:43:eb:b6:e0:5a:8c:d2:78:f3:3c:53:3b:3a: cc:d8:e6:b2:76:20:e8:73:47:9d:59:b1:34:4c:43:06:27:33: 02:9a:1c:ed:94:c5:59:c9:62:0a:c2:7f:c4:9e:df:a0:ca:ec: a5:a9:da:dd:f7:e4:34:f8:3d:9d:7b:ae:cc:bf:81:d6:c7:42: 46:84:47:4d:ee:05:c0:1c:a2:fc:be:19:32:4a:65:d7:6b:1b: aa:5d:7b:fd:f1:89:32:70:0f:63:26:2a:9a:ff:61:2b:8b:f0: 6c:67:9e:8c:ee:8f:02:a3:51:9c:fd:76:97:98:bb:72:9f:57: 50:81:30:fe:a0:0c:e0:78:1d:42:ae:6d:98:fc:cd:cd:22:4a: d7:01:46:1e:b5:ee:07:00:81:e9:98:ab:5a:51:8f:a6:64:30: 89:10:10:c7:a0:69:92:5a:cd:e7:28:59:fa:27:ed:45:f0:91: f8:48:34:cd:52:d4:c6:f6:f4:b6:b0:ee:49:7e:ae:c6:e1:8a: 7b:58:98:d3:ac:0b:b9:73:dc:2d:19:65:61:a8:7d:c6:fb:57: 19:85:84:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fRkd7V3OLxzCl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBlY2JiZDgtZjg4ZS00MzA2LTljOWYtNzI4NTJmZTdm NjU4MB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk YTlhZGMxNzMtZjE5Yi00NTczLTkxMDgtYjcyMzBmODg5ZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqsfGmrOr+0bqb4qtC6GUnWs38OpzLLfgIZK iSgJP2bex7cqfCDUGwov31/JUPlaCCFXWpz2X9JHwcA4BnGXaKHJw0DRXp+SFtKZ BHz55oFXW2fBhMBVMxND3qlQjg+NnbdrRRgeDozf4elnYjBEDyF+/2bacHr16I8v XxGITV18XsXb0zMftZnMqjMa/D/r5clbtUrJ9GVQMVleWMpNYACwi9DRG8fpWn/e Oj87yEjsJ0AuSuQCAre36Cu+IeivKSXHxYNBKpzppEbyT6mprOuelUtyohVmeT3f d7tSgNAr9DdHztlbJPh6JrZSR7jZZYvrqOCnP4GtCeCasxl5NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZzt3S5utdUEDV7Ga22tkqBI2K5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi83MGVj YmJkOC1mODhlLTQzMDYtOWM5Zi03Mjg1MmZlN2Y2NTgvNjM5NDEyODUtMTQxMi0z N2QwLWFkMTEtZDYzOWExYWM4YWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNzBlY2JiZDgtZjg4ZS00MzA2LTlj OWYtNzI4NTJmZTdmNjU4LzcwZWNiYmQ4LWY4OGUtNDMwNi05YzlmLTcyODUyZmU3 ZjY1OC5jcmwwHwYDVR0jBBgwFoAUGIou1N4FxcRHFL9crJ7TQ+UVIYYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi83MGVjYmJkOC1mODhlLTQzMDYtOWM5Zi03Mjg1 MmZlN2Y2NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Zd6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyDwyWxoGlrpIJhLSG0lJLPjLpl/9IcYVJa1xjri0puxd/fXDd3URso Q+u24FqM0njzPFM7OszY5rJ2IOhzR51ZsTRMQwYnMwKaHO2UxVnJYgrCf8Se36DK 7KWp2t335DT4PZ17rsy/gdbHQkaER03uBcAcovy+GTJKZddrG6pde/3xiTJwD2Mm Kpr/YSuL8GxnnozujwKjUZz9dpeYu3KfV1CBMP6gDOB4HUKubZj8zc0iStcBRh61 7gcAgemYq1pRj6ZkMIkQEMegaZJazecoWfon7UXwkfhINM1S1Mb29Law7kl+rsbh intYmNOsC7lz3C0ZZWGofcb7VxmFhL8= -----END CERTIFICATE-----Generated at Tue Oct 13 20:04:33 2026 by rpki-client