$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/119f9abf-f6bf-35b5-a011-715aa0c97ed9.roa File: 119f9abf-f6bf-35b5-a011-715aa0c97ed9.roa (raw, json) Hash identifier: +DDxCptloWIeGJlhVfcFJLr+uXmPgPS59kpsYv1ltwQ= Subject key identifier: F2:12:CA:32:70:36:59:BC:6B:3D:E3:0F:6F:E0:16:7C:5E:17:5A:D7 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C0C4ACC206F512695E80 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/119f9abf-f6bf-35b5-a011-715aa0c97ed9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40934 IP address blocks: 209.52.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c0:c4:ac:c2:06:f5:12:69:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=95928cab-817a-4816-aa57-ac631b015a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2f:e2:22:e0:d5:80:ac:4d:7a:53:f9:5e:dd: 7f:ca:9c:b1:aa:a6:25:f1:07:02:26:bd:ba:3d:c3: e4:24:8c:cd:18:11:44:2f:b5:7e:ba:f2:31:e0:33: 37:d3:b4:c0:ee:50:77:b3:6a:5b:72:38:06:54:8e: 09:fc:b8:d8:18:de:a8:eb:2c:0c:a7:90:aa:bb:98: 45:c7:38:ff:a1:41:ad:2f:ad:71:9a:ab:2b:33:44: e5:c2:83:f7:49:d9:a9:a2:f6:fb:0c:59:75:64:6a: ca:06:6c:0d:8c:1d:a3:b2:c4:44:41:11:07:2c:13: ee:65:20:4f:68:af:fe:42:f5:05:89:ff:9a:44:c5: e6:40:f5:0e:f0:a4:54:7f:6f:c0:93:63:a0:63:82: b5:6e:47:bf:aa:76:9b:eb:1e:c4:fc:6e:3e:2d:a4: a0:37:76:0c:04:d9:d1:d5:5d:26:11:b8:68:46:de: 62:e0:51:fb:a2:42:42:a3:64:d5:86:cc:9a:cd:70: 68:45:aa:17:c4:c4:e4:c8:fa:36:73:c5:f5:ca:4b: 59:49:96:be:80:68:9b:35:d4:a9:e5:8e:ae:b6:f4: 2c:97:c5:d0:f8:db:70:06:4d:63:7b:c3:63:db:24: 72:a4:7e:d3:f1:12:3a:c5:3e:38:e5:b7:c7:30:b2: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:12:CA:32:70:36:59:BC:6B:3D:E3:0F:6F:E0:16:7C:5E:17:5A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/119f9abf-f6bf-35b5-a011-715aa0c97ed9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 209.52.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:55:bf:89:ea:2f:f6:63:e1:95:21:69:ed:d7:24:33:16:e4: 81:07:97:68:b4:f4:1e:5f:2c:96:93:8b:ab:ca:21:90:e9:bc: d3:66:2f:0b:f0:73:71:f5:9d:fb:fd:b7:98:df:0f:32:50:77: 6e:52:67:de:8b:f5:86:e4:91:3b:98:7d:76:6d:85:b5:60:e5: 9f:4b:45:1d:07:a1:d8:b5:52:72:a9:c3:c8:a2:56:73:a6:b9: 9b:b7:8b:88:16:ee:9f:c5:40:1c:2d:f6:14:22:0a:5d:bf:c1: 64:28:fe:43:cd:62:8a:a3:30:41:b6:02:ed:37:28:09:33:9c: f4:03:7f:f1:84:e4:37:49:3c:fc:72:79:54:80:ff:ad:fc:36: 40:9a:fa:a9:99:95:ea:6f:a6:d6:f8:3c:e1:a8:3c:d5:bb:07: fa:a5:7c:9e:c5:c0:e2:a3:dd:4a:25:ea:40:9e:39:14:91:d0: 68:d2:05:fe:5d:93:0f:db:23:6a:3e:bc:b5:6f:d8:cc:8c:86: 1d:88:79:c4:1e:95:3f:b1:af:59:5c:a5:57:61:e8:9b:cc:ac: 78:33:d7:b1:87:a7:65:fb:74:4a:ce:99:5f:2d:e4:a5:bd:32: d2:79:c1:2f:eb:07:82:3a:a6:4d:bc:b3:1f:f5:b9:ab:77:d3: 8a:d3:37:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8DErMIG9RJpXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTU5MjhjYWItODE3YS00ODE2LWFhNTctYWM2MzFiMDE1YTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui/iIuDVgKxNelP5Xt1/ypyxqqYl8QcCJr26 PcPkJIzNGBFEL7V+uvIx4DM307TA7lB3s2pbcjgGVI4J/LjYGN6o6ywMp5Cqu5hF xzj/oUGtL61xmqsrM0TlwoP3Sdmpovb7DFl1ZGrKBmwNjB2jssREQREHLBPuZSBP aK/+QvUFif+aRMXmQPUO8KRUf2/Ak2OgY4K1bke/qnab6x7E/G4+LaSgN3YMBNnR 1V0mEbhoRt5i4FH7okJCo2TVhsyazXBoRaoXxMTkyPo2c8X1yktZSZa+gGibNdSp 5Y6utvQsl8XQ+NtwBk1je8Nj2yRypH7T8RI6xT445bfHMLJP9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPISyjJwNlm8az3jD2/gFnxeF1rXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMTE5ZjlhYmYtZjZiZi0z NWI1LWEwMTEtNzE1YWEwYzk3ZWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TQmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARVv4nqL/Zj4ZUhae3XJDMW5IEHl2i09B5fLJaTi6vKIZDpvNNmLwvw c3H1nfv9t5jfDzJQd25SZ96L9YbkkTuYfXZthbVg5Z9LRR0Hodi1UnKpw8iiVnOm uZu3i4gW7p/FQBwt9hQiCl2/wWQo/kPNYoqjMEG2Au03KAkznPQDf/GE5DdJPPxy eVSA/638NkCa+qmZlepvptb4POGoPNW7B/qlfJ7FwOKj3Uol6kCeORSR0GjSBf5d kw/bI2o+vLVv2MyMhh2IecQelT+xr1lcpVdh6JvMrHgz17GHp2X7dErOmV8t5KW9 MtJ5wS/rB4I6pk28sx/1uat304rTN1Q= -----END CERTIFICATE-----Generated at Thu Oct 8 20:44:54 2026 by rpki-client