$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa File: f8375e10-8d1d-3484-aaeb-e58fd215889e.roa (raw, json) Hash identifier: 5DxS4kxXN8I/SLSo/DGkCb7tiNRaTsdhPnlt57QcD/Y= Subject key identifier: 82:42:D6:85:F7:B2:A1:BB:34:E0:95:DC:72:D5:04:FF:83:16:CB:02 Certificate issuer: /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Certificate serial: 010D0C9F4328584EE38C958FF73775C7C918FE40 Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 30698 IP address blocks: 209.221.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:95:8f:f7:37:75:c7:c9:18:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=56de8e5d-3cb2-40d1-a72d-d6b04b76fdb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:35:4c:e0:14:c5:88:d1:4b:24:60:d8:bb:72: 1a:9d:7a:09:21:cc:68:40:d0:a2:13:3f:46:b7:02: 9f:bd:79:12:b6:fb:35:19:28:68:5f:73:50:36:cc: 5f:75:34:15:c0:dc:ae:85:64:87:83:4c:23:f8:9e: 7b:7c:e6:1b:d5:d6:4f:a1:45:0e:10:c0:43:7c:13: 0e:a0:35:d9:07:c4:d3:fd:31:61:cf:e0:6c:bc:d1: e6:3e:05:30:10:1e:83:5e:87:cb:d6:10:64:36:ac: dd:b6:7a:65:91:b4:2f:de:1f:8c:e5:1d:82:62:86: e6:93:8b:13:60:5b:27:72:35:d0:15:58:14:22:46: aa:41:88:91:4d:73:d0:24:0e:8f:83:aa:c4:b1:bb: e5:e7:40:1e:23:5a:62:3b:23:53:f2:92:ee:1c:45: 43:d4:7c:a3:50:1b:91:53:fe:02:67:c2:ae:95:d6: b8:68:1a:ea:8d:de:f1:d7:2c:45:89:f2:77:cf:15: 15:04:fd:e2:7a:55:2e:62:a2:31:8f:c8:e6:73:4a: 9b:75:c6:78:61:0a:c0:fc:eb:86:8b:03:20:d1:b5: 8c:91:fc:6e:00:99:23:6a:2c:d7:93:37:05:cc:bc: 85:21:47:32:af:ec:d6:a7:06:0f:35:78:89:40:a4: b1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:42:D6:85:F7:B2:A1:BB:34:E0:95:DC:72:D5:04:FF:83:16:CB:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/f8375e10-8d1d-3484-aaeb-e58fd215889e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl X509v3 Authority Key Identifier: keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer sbgp-ipAddrBlock: critical IPv4: 209.221.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ac:2e:d3:e2:66:52:1b:56:2e:f9:fc:92:92:94:e9:9e:ed: 3e:73:47:07:be:11:d8:42:51:06:bb:81:37:43:22:9a:7b:2c: 65:6a:7b:7d:03:13:17:9d:ed:ba:16:87:c3:28:67:ab:ff:92: 77:d1:39:b5:07:2b:73:2e:83:d4:9c:ec:3c:a9:c6:d6:dd:89: f1:6e:7c:da:8a:ef:c6:70:39:21:1e:fd:72:29:8d:6c:d5:c1: 66:c1:15:16:ce:fe:7a:cf:d2:b8:de:34:3c:bc:be:e1:46:1d: 51:7a:2a:4b:2f:aa:86:44:47:05:29:d6:2b:ad:7b:09:9e:09: 5d:1f:14:5e:9b:e4:f9:df:f1:25:83:7f:76:0e:cc:35:d9:01: d8:ca:55:2e:1c:2f:db:75:3a:7d:08:ff:1e:b0:6a:ac:10:74: 7f:3b:b6:3a:d7:7a:a5:8f:e5:a4:ff:3a:b7:f4:1c:c1:71:13: 67:69:3b:8a:06:f9:f3:f4:3b:03:07:90:3d:d5:99:f9:ee:fb: 5a:75:c1:f0:9d:0e:7c:31:c8:e2:e8:4c:b9:29:0d:87:e7:d4: d0:a2:6f:ca:58:88:9c:dd:4d:ff:50:0c:0c:93:ae:35:67:6c: 92:d2:52:cb:e4:fb:1e:f0:db:1a:b4:ef:d0:bc:0f:59:12:2c: 22:49:fd:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjJWP9zd1x8kY/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl YjQ5MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk NTZkZThlNWQtM2NiMi00MGQxLWE3MmQtZDZiMDRiNzZmZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzVM4BTFiNFLJGDYu3IanXoJIcxoQNCiEz9G twKfvXkStvs1GShoX3NQNsxfdTQVwNyuhWSHg0wj+J57fOYb1dZPoUUOEMBDfBMO oDXZB8TT/TFhz+BsvNHmPgUwEB6DXofL1hBkNqzdtnplkbQv3h+M5R2CYobmk4sT YFsncjXQFVgUIkaqQYiRTXPQJA6Pg6rEsbvl50AeI1piOyNT8pLuHEVD1HyjUBuR U/4CZ8Kulda4aBrqjd7x1yxFifJ3zxUVBP3ielUuYqIxj8jmc0qbdcZ4YQrA/OuG iwMg0bWMkfxuAJkjaizXkzcFzLyFIUcyr+zWpwYPNXiJQKSx0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJC1oX3sqG7NOCV3HLVBP+DFssCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0 OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvZjgzNzVlMTAtOGQxZC0z NDg0LWFhZWItZTU4ZmQyMTU4ODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw M2E2ZWViNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0d3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+sLtPiZlIbVi75/JKSlOme7T5zRwe+EdhCUQa7gTdDIpp7LGVqe30D Exed7boWh8MoZ6v/knfRObUHK3Mug9Sc7DypxtbdifFufNqK78ZwOSEe/XIpjWzV wWbBFRbO/nrP0rjeNDy8vuFGHVF6KksvqoZERwUp1iutewmeCV0fFF6b5Pnf8SWD f3YOzDXZAdjKVS4cL9t1On0I/x6waqwQdH87tjrXeqWP5aT/Orf0HMFxE2dpO4oG +fP0OwMHkD3Vmfnu+1p1wfCdDnwxyOLoTLkpDYfn1NCib8pYiJzdTf9QDAyTrjVn bJLSUsvk+x7w2xq079C8D1kSLCJJ/TE= -----END CERTIFICATE-----Generated at Sat Aug 22 18:01:59 2026 by rpki-client