$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/962b8d68-eadb-4a14-97b3-6b819503f035/9df8140b-bb4e-375d-b5e3-9285909cb5e2.roa File: 9df8140b-bb4e-375d-b5e3-9285909cb5e2.roa (raw, json) Hash identifier: bHEg9pRp6nJ/e/QTwqYm57Pd2fUbQwAzoDtroFHfsz8= Subject key identifier: BF:BF:59:E6:B1:37:0C:E4:0D:61:90:20:FB:68:EB:91:4B:27:9E:DF Certificate issuer: /CN=962b8d68-eadb-4a14-97b3-6b819503f035 Certificate serial: 010D0C9F4328584F71ED72466C58746B47742D20 Authority key identifier: B8:AE:26:52:BE:C4:D6:FE:8F:09:6C:68:D8:8B:12:9A:84:ED:76:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/962b8d68-eadb-4a14-97b3-6b819503f035.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/962b8d68-eadb-4a14-97b3-6b819503f035/9df8140b-bb4e-375d-b5e3-9285909cb5e2.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 402443 IP address blocks: 209.131.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/962b8d68-eadb-4a14-97b3-6b819503f035/962b8d68-eadb-4a14-97b3-6b819503f035.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/962b8d68-eadb-4a14-97b3-6b819503f035/962b8d68-eadb-4a14-97b3-6b819503f035.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/962b8d68-eadb-4a14-97b3-6b819503f035.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:72:46:6c:58:74:6b:47:74:2d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=962b8d68-eadb-4a14-97b3-6b819503f035 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=7dc0b925-aa52-41bb-afa0-a2162e95f5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:c1:d6:0b:51:f9:0c:3b:b4:96:80:56:50: 8c:a2:46:89:ae:76:c2:37:4d:2d:e8:3c:d7:81:e5: eb:ed:7c:43:44:a4:5d:84:fe:1b:ea:d7:95:cc:0a: 4c:df:7c:b1:f3:f7:48:4f:df:e0:d5:94:af:bb:a9: c9:17:05:58:60:f3:b3:a9:ae:6c:29:94:97:08:e3: 4c:6f:1f:5f:75:e6:6e:cd:01:e1:4e:0b:0e:cc:ef: 1c:ef:74:11:ba:66:a7:89:66:9a:b3:e2:f6:c7:a6: 4b:9b:bb:df:29:36:a9:82:67:f3:f1:2d:25:7c:d5: 8f:15:7c:5f:2d:3c:16:87:6b:f9:36:42:b5:92:6f: e6:3b:b5:3b:83:2c:80:9f:0d:23:d7:38:1e:1c:32: 90:53:6b:41:a8:25:d6:5c:3d:c6:c5:e9:db:b6:bf: d6:17:43:d1:7b:c7:e4:ff:34:ae:a7:2a:f7:48:28: e4:60:e8:5a:74:93:80:45:08:3c:e4:d4:c2:25:90: 65:30:5e:b4:78:d2:4a:59:79:1a:8f:ae:dc:75:35: ec:1b:e9:76:fd:02:75:f4:da:e5:74:7f:da:c4:8d: e1:3b:86:a4:29:4d:2f:91:d9:b0:69:e7:3e:03:a9: 4e:6f:3e:84:9c:98:d5:22:b3:92:aa:aa:44:9d:c3: 20:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BF:59:E6:B1:37:0C:E4:0D:61:90:20:FB:68:EB:91:4B:27:9E:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/962b8d68-eadb-4a14-97b3-6b819503f035/9df8140b-bb4e-375d-b5e3-9285909cb5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/962b8d68-eadb-4a14-97b3-6b819503f035/962b8d68-eadb-4a14-97b3-6b819503f035.crl X509v3 Authority Key Identifier: keyid:B8:AE:26:52:BE:C4:D6:FE:8F:09:6C:68:D8:8B:12:9A:84:ED:76:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/962b8d68-eadb-4a14-97b3-6b819503f035.cer sbgp-ipAddrBlock: critical IPv4: 209.131.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:1e:ab:27:3c:ba:da:fb:3c:d8:f7:9b:0d:16:19:53:e5:b8: ec:39:ae:ca:19:bf:6a:2b:6e:cc:b6:78:99:23:52:e3:94:0e: 86:8b:8b:45:61:b6:c4:43:31:5d:7e:32:7f:39:b9:62:1f:9e: a0:50:19:b6:c5:88:77:c3:1c:9e:89:ab:3a:b3:55:86:71:8c: ae:08:b6:26:0b:a3:af:6b:0a:10:fe:c2:10:1c:33:43:bc:f8: e0:36:0b:ab:b6:91:33:37:70:20:ec:7b:28:1b:12:01:f7:f2: dd:0d:9a:16:13:77:71:69:95:5d:73:95:b8:7c:44:2e:f2:cc: bf:fd:98:1b:ab:97:59:f7:1b:4c:67:d3:2d:b2:b8:3d:69:fb: 8d:cb:1c:0f:19:da:76:16:b5:1e:f3:b9:8e:b3:88:96:99:3d: f6:2a:c0:dc:e3:18:81:ba:0a:6b:fa:08:a0:ee:3c:24:ee:f1: 55:6c:65:41:a5:25:91:d4:93:c6:d3:5e:18:f4:0c:75:b1:0c: 9e:0e:05:b6:f3:45:0c:40:41:e6:2c:36:f8:73:da:b0:03:7e: b8:3a:a7:a8:ff:31:42:9f:de:cf:96:b9:27:1f:38:d0:7f:55: 3b:dc:ba:ae:6a:b0:22:31:da:ee:5f:4f:cd:b3:5a:e0:17:f6: 7f:4c:57:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7XJGbFh0a0d0LSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYyYjhkNjgtZWFkYi00YTE0LTk3YjMtNmI4MTk1MDNm MDM1MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk N2RjMGI5MjUtYWE1Mi00MWJiLWFmYTAtYTIxNjJlOTVmNWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgXB1gtR+Qw7tJaAVlCMokaJrnbCN00t6DzX geXr7XxDRKRdhP4b6teVzApM33yx8/dIT9/g1ZSvu6nJFwVYYPOzqa5sKZSXCONM bx9fdeZuzQHhTgsOzO8c73QRumaniWaas+L2x6ZLm7vfKTapgmfz8S0lfNWPFXxf LTwWh2v5NkK1km/mO7U7gyyAnw0j1zgeHDKQU2tBqCXWXD3Gxenbtr/WF0PRe8fk /zSupyr3SCjkYOhadJOARQg85NTCJZBlMF60eNJKWXkaj67cdTXsG+l2/QJ19Nrl dH/axI3hO4akKU0vkdmwaec+A6lObz6EnJjVIrOSqqpEncMgQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+/WeaxNwzkDWGQIPto65FLJ57fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85NjJi OGQ2OC1lYWRiLTRhMTQtOTdiMy02YjgxOTUwM2YwMzUvOWRmODE0MGItYmI0ZS0z NzVkLWI1ZTMtOTI4NTkwOWNiNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOTYyYjhkNjgtZWFkYi00YTE0LTk3 YjMtNmI4MTk1MDNmMDM1Lzk2MmI4ZDY4LWVhZGItNGExNC05N2IzLTZiODE5NTAz ZjAzNS5jcmwwHwYDVR0jBBgwFoAUuK4mUr7E1v6PCWxo2IsSmoTtdoswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi85NjJiOGQ2OC1lYWRiLTRhMTQtOTdiMy02Yjgx OTUwM2YwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0YN0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGseqyc8utr7PNj3mw0WGVPluOw5rsoZv2orbsy2eJkjUuOUDoaLi0Vh tsRDMV1+Mn85uWIfnqBQGbbFiHfDHJ6JqzqzVYZxjK4ItiYLo69rChD+whAcM0O8 +OA2C6u2kTM3cCDseygbEgH38t0NmhYTd3FplV1zlbh8RC7yzL/9mBurl1n3G0xn 0y2yuD1p+43LHA8Z2nYWtR7zuY6ziJaZPfYqwNzjGIG6Cmv6CKDuPCTu8VVsZUGl JZHUk8bTXhj0DHWxDJ4OBbbzRQxAQeYsNvhz2rADfrg6p6j/MUKf3s+WuScfONB/ VTvcuq5qsCIx2u5fT82zWuAX9n9MV8g= -----END CERTIFICATE-----Generated at Tue Oct 13 22:49:49 2026 by rpki-client