$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa File: 5fab7624-7ba0-38cc-939d-47dd362b1a68.roa (raw, json) Hash identifier: lyCHaEq1l8JpbuA7UiDdqy63bHf9pWOcE+0DqAFUtnM= Subject key identifier: C1:4E:60:6B:2E:82:E1:A0:6B:1B:69:BE:A5:3D:FF:58:D8:83:17:D5 Certificate issuer: /CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f Certificate serial: 010D0C9F4328584F549D71A1234F2876F5716180 Authority key identifier: 1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 376 IP address blocks: 132.209.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:71:a1:23:4f:28:76:f5:71:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=6f4b31fd-3f98-4586-9bb8-d553f78b1f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c2:e8:1d:40:45:bf:97:dd:42:b8:97:11:5d: 76:65:e5:de:06:d3:34:10:8a:97:d3:a6:32:b3:79: d3:91:a3:93:60:e0:f2:b8:ba:7b:be:33:55:bf:00: 93:ba:8c:0f:4b:90:83:2a:88:ce:6a:76:4f:23:d6: 10:55:31:dc:f9:e7:0b:9d:ff:3b:85:47:b0:76:24: 6d:3b:69:1d:8e:75:7b:81:20:5b:55:e5:34:32:d1: 06:8f:e3:ff:90:94:f8:07:a4:01:a9:18:37:78:12: 1b:62:4d:6c:5f:08:f5:34:6a:b6:d5:f1:c8:13:2e: db:ca:7d:38:f7:81:d7:b9:d3:de:04:2e:74:22:d4: e8:e1:c4:17:2a:97:fb:35:44:df:59:88:34:d6:cb: 04:6e:87:0b:ca:39:e7:14:44:92:42:6c:6f:76:70: 0e:7a:42:d0:34:13:ae:84:7a:44:0c:ca:84:60:af: f3:49:76:7d:d3:f3:35:70:0d:29:ed:43:2c:f6:bd: cf:36:3b:22:26:f5:78:b7:58:6c:f4:c5:33:c2:5c: 41:22:e4:71:0c:ff:cd:c8:cf:eb:88:59:e0:73:a5: 74:99:7c:00:f2:75:bb:71:2e:20:1d:c3:6c:0e:16: a7:4c:23:83:19:f4:89:a3:a7:e8:29:67:95:be:0d: 59:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4E:60:6B:2E:82:E1:A0:6B:1B:69:BE:A5:3D:FF:58:D8:83:17:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/5fab7624-7ba0-38cc-939d-47dd362b1a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl X509v3 Authority Key Identifier: keyid:1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer sbgp-ipAddrBlock: critical IPv4: 132.209.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:2e:9c:61:b5:4a:01:31:1d:a7:42:3c:ff:00:69:c5:2a:76: b5:36:f2:47:7e:35:70:a6:6b:f3:9b:34:b1:6e:0e:07:68:09: 19:0a:8d:90:13:a6:bf:03:6d:66:a2:da:69:9a:54:26:40:0b: 8d:b0:ac:2f:21:40:40:c5:3a:6d:a1:bd:bc:34:c3:39:a3:e9: 97:38:b6:ba:1c:23:50:2c:4e:17:85:78:fa:a7:07:da:5b:ad: ac:17:c1:b3:a2:8a:ca:b3:f8:96:17:bd:47:ab:6c:65:ef:e9: d3:5e:c9:f1:a3:ff:25:d2:8c:6e:ea:11:b9:87:d7:de:d4:31: 29:e5:26:e1:aa:51:fe:00:e9:18:c1:3f:e5:86:a0:31:2d:d5: 69:52:7f:48:d1:8c:7f:08:c7:de:97:8c:12:f1:bc:02:26:72: 58:ec:6a:5f:3d:f5:3c:60:56:bb:95:53:9d:31:b8:97:ae:9f: 9d:a8:5c:8f:d7:e8:78:c7:91:24:a6:d9:54:be:8b:1a:38:38: e4:df:2d:d5:d5:b7:2c:82:e7:d9:bd:bc:12:b3:b1:57:96:d8: d8:19:eb:92:17:58:b7:a3:2f:bf:69:a3:e4:72:b8:66:f8:27: 65:70:57:d5:5b:e5:d6:57:75:67:f5:6c:af:43:9d:32:5d:c0: 2c:6d:77:6d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9UnXGhI08odvVxYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZmZTdmNGUtZTFiZC00MjdhLTgxOTQtNGVhNDM5NmU1 NDhmMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NmY0YjMxZmQtM2Y5OC00NTg2LTliYjgtZDU1M2Y3OGIxZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcLoHUBFv5fdQriXEV12ZeXeBtM0EIqX06Yy s3nTkaOTYODyuLp7vjNVvwCTuowPS5CDKojOanZPI9YQVTHc+ecLnf87hUewdiRt O2kdjnV7gSBbVeU0MtEGj+P/kJT4B6QBqRg3eBIbYk1sXwj1NGq21fHIEy7byn04 94HXudPeBC50ItTo4cQXKpf7NUTfWYg01ssEbocLyjnnFESSQmxvdnAOekLQNBOu hHpEDMqEYK/zSXZ90/M1cA0p7UMs9r3PNjsiJvV4t1hs9MUzwlxBIuRxDP/NyM/r iFngc6V0mXwA8nW7cS4gHcNsDhanTCODGfSJo6foKWeVvg1ZDQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMFOYGsuguGgaxtpvqU9/1jYgxfVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmZl N2Y0ZS1lMWJkLTQyN2EtODE5NC00ZWE0Mzk2ZTU0OGYvNWZhYjc2MjQtN2JhMC0z OGNjLTkzOWQtNDdkZDM2MmIxYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZmZTdmNGUtZTFiZC00MjdhLTgx OTQtNGVhNDM5NmU1NDhmLzhmZmU3ZjRlLWUxYmQtNDI3YS04MTk0LTRlYTQzOTZl NTQ4Zi5jcmwwHwYDVR0jBBgwFoAUGuaMACjfi7qQxWRbYBA/ICySr5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmZlN2Y0ZS1lMWJkLTQyN2EtODE5NC00ZWE0 Mzk2ZTU0OGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhNEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAJS6cYbVKATEdp0I8/wBpxSp2tTbyR341cKZr85s0sW4OB2gJGQqNkBOm vwNtZqLaaZpUJkALjbCsLyFAQMU6baG9vDTDOaPplzi2uhwjUCxOF4V4+qcH2lut rBfBs6KKyrP4lhe9R6tsZe/p017J8aP/JdKMbuoRuYfX3tQxKeUm4apR/gDpGME/ 5YagMS3VaVJ/SNGMfwjH3peMEvG8AiZyWOxqXz31PGBWu5VTnTG4l66fnahcj9fo eMeRJKbZVL6LGjg45N8t1dW3LILn2b28ErOxV5bY2BnrkhdYt6Mvv2mj5HK4Zvgn ZXBX1Vvl1ld1Z/Vsr0OdMl3ALG13bQ== -----END CERTIFICATE-----Generated at Sat Oct 3 16:27:29 2026 by rpki-client