$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c95baea1-2ec2-3720-90c2-ec51ec35c36a.roa File: c95baea1-2ec2-3720-90c2-ec51ec35c36a.roa (raw, json) Hash identifier: UGo61DlaXvMApJyRLUmPH+wDmBvv4suoYh774E4wMME= Subject key identifier: C0:97:5A:D3:21:63:36:B1:CF:8E:36:49:15:A1:C7:E0:3A:DD:B9:86 Certificate issuer: /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Certificate serial: 010D0C9F4328584F49886FE1590CF1D679EEA500 Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c95baea1-2ec2-3720-90c2-ec51ec35c36a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 209341 IP address blocks: 209.124.68.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:6f:e1:59:0c:f1:d6:79:ee:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5590c8c8-8b84-4371-a5ed-8fbbc45d28ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:72:2d:bc:14:18:20:73:dc:dc:b3:8e:61:5b: 23:42:8d:0a:a5:b3:51:e6:fc:3c:4b:31:f0:74:a7: 74:6b:4d:17:2b:7f:6b:ef:b9:77:46:3b:42:a7:4d: 1c:e1:b1:28:5e:c3:42:6a:9e:3b:4b:43:75:4b:a3: 84:fb:f7:d8:9f:35:70:04:85:93:59:cf:d1:63:a7: 23:5d:16:5f:bd:f6:d0:cc:c8:97:e7:59:4b:ed:a5: 59:6b:b7:0c:85:6e:49:59:27:f2:b8:8e:30:fd:0c: de:f5:75:7e:60:71:94:cf:89:ae:f1:46:c6:64:1b: a9:7a:c1:56:f0:94:8c:a4:e5:85:48:e2:09:5f:07: 5d:4d:b5:11:6b:b1:d8:07:12:40:48:c6:31:12:6c: aa:99:30:34:39:18:1f:e2:7e:86:7f:78:ab:3e:d6: 8f:f8:1d:3d:7b:dd:21:b3:d6:87:e6:c9:91:c8:eb: b2:03:7b:8f:e2:54:b3:0e:16:c5:35:f1:37:d0:f4: 95:90:05:f1:92:87:67:27:93:3f:22:45:04:b3:5b: af:cf:6e:81:63:3c:eb:e4:21:66:b0:c2:dc:1c:1f: c7:80:8b:6f:63:84:c0:81:5a:d2:22:84:54:ef:31: 0e:09:b5:19:4b:6a:08:32:0e:03:51:3f:28:49:f8: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:97:5A:D3:21:63:36:B1:CF:8E:36:49:15:A1:C7:E0:3A:DD:B9:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/c95baea1-2ec2-3720-90c2-ec51ec35c36a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl X509v3 Authority Key Identifier: keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer sbgp-ipAddrBlock: critical IPv4: 209.124.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e0:fd:fc:10:f4:2c:93:41:43:3c:17:a5:c7:b6:20:07:86: 5b:c3:4e:c5:10:97:34:cf:32:b5:be:6b:45:f1:a3:0c:81:9c: 7e:7f:c4:0e:fa:bf:ec:9c:17:f1:73:b4:20:9b:04:d6:93:18: eb:c5:e6:78:be:ce:92:9c:88:c6:84:35:8e:8e:0a:60:54:7c: 19:b9:47:26:35:6d:8d:df:56:a9:bc:1d:57:5b:00:1b:62:ab: 3f:9f:17:57:91:3a:f3:e3:5f:24:bc:a8:31:2f:c1:49:3d:4c: 2a:f2:fe:cb:6d:d6:dc:da:54:b7:98:ac:5e:1f:58:be:40:cc: 17:8c:3f:f5:ba:e6:bf:4e:28:bb:cc:aa:c1:93:04:cc:8c:28: 01:34:b8:f1:c6:5d:1c:0b:f5:62:f1:bf:bf:60:ba:9c:70:86: 55:30:0b:53:0b:21:55:5d:fb:86:46:86:bc:00:9d:b0:92:71: 50:61:21:89:b8:d0:49:01:7b:f9:69:31:17:e3:15:96:04:02: fa:81:f7:13:08:e8:e4:36:e2:d4:74:17:ba:99:05:53:1f:cc: f5:33:88:09:e5:f9:f9:18:52:cd:7f:ce:1e:4d:29:3d:88:14: ce:ca:a9:d6:a8:3d:24:cc:c3:f9:93:c3:4b:51:85:e2:9b:e7: 61:85:c5:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiG/hWQzx1nnupQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1 YjU4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTU5MGM4YzgtOGI4NC00MzcxLWE1ZWQtOGZiYmM0NWQyOGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnItvBQYIHPc3LOOYVsjQo0KpbNR5vw8SzHw dKd0a00XK39r77l3RjtCp00c4bEoXsNCap47S0N1S6OE+/fYnzVwBIWTWc/RY6cj XRZfvfbQzMiX51lL7aVZa7cMhW5JWSfyuI4w/Qze9XV+YHGUz4mu8UbGZBupesFW 8JSMpOWFSOIJXwddTbURa7HYBxJASMYxEmyqmTA0ORgf4n6Gf3irPtaP+B09e90h s9aH5smRyOuyA3uP4lSzDhbFNfE30PSVkAXxkodnJ5M/IkUEs1uvz26BYzzr5CFm sMLcHB/HgItvY4TAgVrSIoRU7zEOCbUZS2oIMg4DUT8oSfhVmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCXWtMhYzaxz442SRWhx+A63bmGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvYzk1YmFlYTEtMmVjMi0z NzIwLTkwYzItZWM1MWVjMzVjMzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5 ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0XxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbg/fwQ9CyTQUM8F6XHtiAHhlvDTsUQlzTPMrW+a0XxowyBnH5/xA76 v+ycF/FztCCbBNaTGOvF5ni+zpKciMaENY6OCmBUfBm5RyY1bY3fVqm8HVdbABti qz+fF1eROvPjXyS8qDEvwUk9TCry/stt1tzaVLeYrF4fWL5AzBeMP/W65r9OKLvM qsGTBMyMKAE0uPHGXRwL9WLxv79gupxwhlUwC1MLIVVd+4ZGhrwAnbCScVBhIYm4 0EkBe/lpMRfjFZYEAvqB9xMI6OQ24tR0F7qZBVMfzPUziAnl+fkYUs1/zh5NKT2I FM7KqdaoPSTMw/mTw0tRheKb52GFxRM= -----END CERTIFICATE-----Generated at Wed Oct 28 07:24:02 2026 by rpki-client