$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3bc01eaf-d5f4-3604-82d7-e46ebd78e67d.roa File: 3bc01eaf-d5f4-3604-82d7-e46ebd78e67d.roa (raw, json) Hash identifier: QFKL7hqDJNJAnKkSBRjorVE7ox9jVnony9jON4y5gFs= Subject key identifier: F6:D6:D4:59:7C:77:0A:40:F0:3A:56:3E:AE:49:72:C7:05:86:15:93 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584F5A3BAD1312EDE8D9D12F1F80 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3bc01eaf-d5f4-3604-82d7-e46ebd78e67d.roa Signing time: Thu 01 Oct 2026 01:18:26 +0000 ROA not before: Thu 01 Oct 2026 01:18:26 +0000 ROA not after: Wed 30 Dec 2026 02:18:26 +0000 asID: 834 IP address blocks: 209.236.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:3b:ad:13:12:ed:e8:d9:d1:2f:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Oct 1 01:18:26 2026 GMT Not After : Dec 30 02:18:26 2026 GMT Subject: CN=d6b6ba45-a2a0-49c9-8683-f95f51e19a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:59:1e:da:4f:73:65:61:86:d7:09:70:90: d3:92:53:cf:fc:48:f2:26:bc:33:97:3d:0c:8e:c8: 1b:a1:16:f4:df:86:e4:57:5b:ca:9b:09:09:ef:68: 7e:de:48:ef:b2:55:aa:b3:c6:fd:a5:e8:d0:02:29: 37:dd:38:0e:fa:2d:1f:7b:77:b7:69:40:22:01:62: 21:1f:fa:e7:cd:79:96:04:b0:8e:ef:36:7f:25:d1: e9:af:b5:17:7e:4c:be:90:71:e9:e0:c0:4d:a6:22: 39:64:69:d2:d8:7c:81:5d:6c:fd:6d:fc:07:ef:89: 7a:1f:0c:7d:01:19:f5:35:d5:a8:a2:08:44:a7:37: fb:62:af:a2:93:6d:3d:22:bf:7c:08:12:2f:92:6f: c0:4c:b5:b9:79:93:2d:2f:2e:0f:28:ee:7d:24:41: 4c:4a:9b:69:8b:e5:91:1b:b4:da:c3:4e:09:22:8c: f4:4f:e5:68:c8:d8:39:91:21:53:bb:02:c8:3c:28: b2:63:8b:fc:27:a0:19:3d:c6:01:97:10:68:38:8f: e0:90:f3:96:35:9a:f6:fc:6d:b6:2a:89:8f:22:22: 79:18:49:82:84:4d:84:dd:0d:ac:da:a0:32:4f:9b: e8:58:0d:92:c5:6a:13:88:43:ad:ec:d4:96:1d:10: 80:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D6:D4:59:7C:77:0A:40:F0:3A:56:3E:AE:49:72:C7:05:86:15:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3bc01eaf-d5f4-3604-82d7-e46ebd78e67d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 209.236.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:42:74:38:9b:2e:9a:5a:16:f0:f5:0e:ac:5e:4f:3a:c2:05: 78:a1:ed:b4:e5:14:89:f8:35:88:4f:f4:5a:2e:f9:77:0d:3b: 30:8c:71:fa:be:f5:8c:90:d3:b6:d3:b8:a3:06:83:ff:44:cb: 6c:62:b9:bd:dd:de:a4:26:9b:4f:ae:6b:0f:32:ba:6f:3f:93: bd:96:51:bb:b8:ba:67:bf:b1:d7:f2:98:cc:f1:ed:41:7a:9d: 10:74:36:5c:ae:ed:4d:d1:7f:92:78:9b:35:54:9f:b1:52:9c: 0b:dd:ca:3b:23:57:00:85:fc:87:9e:ec:66:c7:8a:4a:b6:69: be:74:e6:77:99:01:94:08:bd:0c:27:81:3f:90:40:36:a1:2f: 34:5a:8c:10:b4:8f:af:14:c6:3d:96:3e:bd:28:41:81:df:50: 5a:4c:8f:27:94:59:44:01:b6:03:af:69:5a:8c:8a:5b:13:9d: 98:6f:ed:df:4a:49:67:42:a6:3e:78:48:c4:82:5e:91:0f:f6: ce:c5:8b:f7:64:eb:00:af:95:44:b2:92:68:80:e0:fb:d9:77: 50:97:06:87:3c:c3:34:fa:e3:cb:32:a7:46:40:24:0a:f1:fb: 27:a8:a5:de:c4:92:db:5c:f9:76:f2:f9:ca:c0:a4:a5:ea:3d: e5:04:12:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aO60TEu3o2dEvH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MTAwMTAxMTgyNloXDTI2MTIzMDAyMTgyNlowLzEtMCsGA1UEAxMk ZDZiNmJhNDUtYTJhMC00OWM5LTg2ODMtZjk1ZjUxZTE5YTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyRZHtpPc2VhhtcJcJDTklPP/EjyJrwzlz0M jsgboRb034bkV1vKmwkJ72h+3kjvslWqs8b9pejQAik33TgO+i0fe3e3aUAiAWIh H/rnzXmWBLCO7zZ/JdHpr7UXfky+kHHp4MBNpiI5ZGnS2HyBXWz9bfwH74l6Hwx9 ARn1NdWooghEpzf7Yq+ik209Ir98CBIvkm/ATLW5eZMtLy4PKO59JEFMSptpi+WR G7Taw04JIoz0T+VoyNg5kSFTuwLIPCiyY4v8J6AZPcYBlxBoOI/gkPOWNZr2/G22 KomPIiJ5GEmChE2E3Q2s2qAyT5voWA2SxWoTiEOt7NSWHRCA6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbW1Fl8dwpA8DpWPq5JcscFhhWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvM2JjMDFlYWYtZDVmNC0z NjA0LTgyZDctZTQ2ZWJkNzhlNjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlCdDibLppaFvD1DqxeTzrCBXih7bTlFIn4NYhP9Fou+XcNOzCMcfq+ 9YyQ07bTuKMGg/9Ey2xiub3d3qQmm0+uaw8yum8/k72WUbu4ume/sdfymMzx7UF6 nRB0Nlyu7U3Rf5J4mzVUn7FSnAvdyjsjVwCF/Iee7GbHikq2ab505neZAZQIvQwn gT+QQDahLzRajBC0j68Uxj2WPr0oQYHfUFpMjyeUWUQBtgOvaVqMilsTnZhv7d9K SWdCpj54SMSCXpEP9s7Fi/dk6wCvlUSykmiA4PvZd1CXBoc8wzT648syp0ZAJArx +yeopd7Ekttc+Xby+crApKXqPeUEEtA= -----END CERTIFICATE-----Generated at Sun Oct 4 13:36:28 2026 by rpki-client