$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42/561b18c9-eb1c-31e1-ae1a-0125e3e9b713.roa File: 561b18c9-eb1c-31e1-ae1a-0125e3e9b713.roa (raw, json) Hash identifier: 52xqfu1/oKnGmn8+LjmQ+ob85C8t6JFR4SqXRGGW9VY= Subject key identifier: E3:DB:9A:3E:EA:64:48:40:89:74:28:10:2F:78:36:3D:43:20:CD:14 Certificate issuer: /CN=809ec620-096a-4f34-b8a6-add53205ea42 Certificate serial: 010D0C9F4328584F6C5831349215A3A4ADB2BB00 Authority key identifier: 6F:70:BC:96:AF:CF:C9:E6:F8:EB:8E:93:27:AF:2D:86:67:7F:9E:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42/561b18c9-eb1c-31e1-ae1a-0125e3e9b713.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 33640 IP address blocks: 209.251.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42/809ec620-096a-4f34-b8a6-add53205ea42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42/809ec620-096a-4f34-b8a6-add53205ea42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:31:34:92:15:a3:a4:ad:b2:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=809ec620-096a-4f34-b8a6-add53205ea42 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=37614d3f-8245-4d56-bfe9-0800bfa3afba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:03:02:14:c7:49:25:ac:b7:00:02:52:b9:4e: a3:ef:08:1f:1a:2b:66:1d:39:de:32:49:e5:ef:87: f4:b7:c9:1a:cb:18:4d:d5:f9:94:82:0a:ab:01:c9: 55:c9:d6:92:b4:37:3c:e4:4f:7c:0a:c3:8c:df:2c: 02:85:54:92:20:4d:ab:ec:78:fc:4a:34:2b:4e:bb: c7:5e:1d:cb:94:95:3a:d5:c4:0a:1a:14:1b:fa:70: 82:7b:93:32:8b:0d:f5:4c:0e:2a:ee:16:c5:b7:a8: 06:93:fa:8c:76:06:bd:be:09:d7:80:4a:0d:c0:20: dd:9c:d7:78:ac:93:aa:9c:9b:f7:69:af:d3:6e:e4: 90:f9:19:4c:7b:6c:20:45:83:bc:73:9b:85:9b:97: e7:df:64:df:30:75:5c:91:03:e1:04:d1:25:35:3a: 28:f8:ed:a6:09:6f:3b:33:b3:79:96:0d:40:1c:e1: d6:87:f4:b5:f7:2f:ae:5e:80:4e:cf:72:a2:23:4e: 93:0b:17:f3:6f:db:cd:39:7f:09:3d:3f:bf:f2:b5: 1d:5e:f9:ad:a1:b7:c6:aa:6c:c4:28:a9:6a:c1:d6: f1:39:d1:0b:ea:68:e9:90:a8:c1:e6:2f:40:75:b4: 37:ac:44:50:5d:0f:b7:cc:24:25:5c:53:30:b6:99: 10:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DB:9A:3E:EA:64:48:40:89:74:28:10:2F:78:36:3D:43:20:CD:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42/561b18c9-eb1c-31e1-ae1a-0125e3e9b713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42/809ec620-096a-4f34-b8a6-add53205ea42.crl X509v3 Authority Key Identifier: keyid:6F:70:BC:96:AF:CF:C9:E6:F8:EB:8E:93:27:AF:2D:86:67:7F:9E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/809ec620-096a-4f34-b8a6-add53205ea42.cer sbgp-ipAddrBlock: critical IPv4: 209.251.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3c:33:a0:e9:f7:9e:b2:73:7b:e7:84:06:df:85:dd:54:39: c8:cb:d9:b0:7f:56:8e:ba:ac:66:33:61:1f:da:d2:99:5a:07: c4:75:bd:b9:e7:33:4c:fa:c5:92:4f:b8:cf:55:66:9b:28:14: 00:22:f1:7c:ef:d8:9e:b8:40:20:4a:98:f6:14:eb:44:1a:47: 51:3d:f5:46:6e:fc:b0:36:fe:51:22:32:8e:21:f9:50:73:57: 3a:73:a0:a8:5e:19:d4:c4:32:e4:33:02:18:1e:65:17:4f:e5: c1:cd:82:47:e2:ef:6d:29:e8:88:c8:72:bb:0d:e0:02:2f:99: 1f:09:70:16:60:8b:0a:9c:75:5e:5c:f0:dc:18:53:13:f3:53: d4:db:9f:b0:09:00:c1:d0:5b:12:a1:c9:46:8c:83:bc:3d:b3: 4c:3d:cd:f2:af:45:11:3f:fd:e8:db:8b:70:c0:a4:90:f5:cb: f0:ab:f3:87:83:9b:2d:d1:50:60:21:17:04:38:86:16:0e:fa: 45:6e:63:1c:aa:67:3f:af:25:c9:2c:95:17:f4:6e:aa:84:62: 88:a1:d1:ac:66:54:7f:77:05:02:b4:36:2f:54:59:78:97:86: c2:d3:87:c7:49:d7:67:44:3e:1e:1a:da:ed:c4:9c:2e:fb:90: 33:f2:02:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDE0khWjpK2yuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA5ZWM2MjAtMDk2YS00ZjM0LWI4YTYtYWRkNTMyMDVl YTQyMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk Mzc2MTRkM2YtODI0NS00ZDU2LWJmZTktMDgwMGJmYTNhZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQMCFMdJJay3AAJSuU6j7wgfGitmHTneMknl 74f0t8kayxhN1fmUggqrAclVydaStDc85E98CsOM3ywChVSSIE2r7Hj8SjQrTrvH Xh3LlJU61cQKGhQb+nCCe5Myiw31TA4q7hbFt6gGk/qMdga9vgnXgEoNwCDdnNd4 rJOqnJv3aa/TbuSQ+RlMe2wgRYO8c5uFm5fn32TfMHVckQPhBNElNToo+O2mCW87 M7N5lg1AHOHWh/S19y+uXoBOz3KiI06TCxfzb9vNOX8JPT+/8rUdXvmtobfGqmzE KKlqwdbxOdEL6mjpkKjB5i9AdbQ3rERQXQ+3zCQlXFMwtpkQ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPbmj7qZEhAiXQoEC94Nj1DIM0UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi84MDll YzYyMC0wOTZhLTRmMzQtYjhhNi1hZGQ1MzIwNWVhNDIvNTYxYjE4YzktZWIxYy0z MWUxLWFlMWEtMDEyNWUzZTliNzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvODA5ZWM2MjAtMDk2YS00ZjM0LWI4 YTYtYWRkNTMyMDVlYTQyLzgwOWVjNjIwLTA5NmEtNGYzNC1iOGE2LWFkZDUzMjA1 ZWE0Mi5jcmwwHwYDVR0jBBgwFoAUb3C8lq/Pyeb4646TJ68thmd/no4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi84MDllYzYyMC0wOTZhLTRmMzQtYjhhNi1hZGQ1 MzIwNWVhNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fuOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs8M6Dp956yc3vnhAbfhd1UOcjL2bB/Vo66rGYzYR/a0plaB8R1vbnn M0z6xZJPuM9VZpsoFAAi8Xzv2J64QCBKmPYU60QaR1E99UZu/LA2/lEiMo4h+VBz VzpzoKheGdTEMuQzAhgeZRdP5cHNgkfi720p6IjIcrsN4AIvmR8JcBZgiwqcdV5c 8NwYUxPzU9Tbn7AJAMHQWxKhyUaMg7w9s0w9zfKvRRE//ejbi3DApJD1y/Cr84eD my3RUGAhFwQ4hhYO+kVuYxyqZz+vJckslRf0bqqEYoih0axmVH93BQK0Ni9UWXiX hsLTh8dJ12dEPh4a2u3EnC77kDPyAqo= -----END CERTIFICATE-----Generated at Wed Oct 14 13:23:35 2026 by rpki-client