$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0cf3b4cf-1492-3b91-8ed0-819c0c6b28e3.roa File: 0cf3b4cf-1492-3b91-8ed0-819c0c6b28e3.roa (raw, json) Hash identifier: SASreU1iZn1djrro+ffQGBP0/SiAs28cKpoovfI+NSA= Subject key identifier: CF:E0:4B:94:28:59:EB:A2:C7:F4:AB:EE:C7:E2:99:89:47:8C:5F:19 Certificate issuer: /CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3 Certificate serial: 010D0C9F4328584F4F08094CAC218C8E1F6EA340 Authority key identifier: B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0cf3b4cf-1492-3b91-8ed0-819c0c6b28e3.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 30277 IP address blocks: 209.236.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:09:4c:ac:21:8c:8e:1f:6e:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfa84f3-b491-4024-94c6-ed6ff5a260f3 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=68114fff-98ab-4317-bdd3-92d5142811ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fa:49:95:d0:68:4d:fc:94:90:cc:b7:ae:9c: f3:cc:85:ef:06:0b:a2:9b:3a:d3:57:80:4e:06:fc: 25:9c:bf:35:28:04:35:0c:0d:f1:a9:a2:de:5e:b9: 87:48:c1:42:d3:75:d1:f3:40:83:87:fe:9d:76:f8: f2:87:c4:0d:ef:43:50:98:0d:63:2a:3b:17:35:c9: 0d:0e:1d:c6:b0:57:75:e6:93:89:de:ae:0b:da:9f: d1:af:8b:8b:41:26:d1:62:c7:69:84:c1:e2:bc:14: 55:0f:ef:49:7c:25:9d:b3:53:ed:bb:08:b9:83:c5: 0a:8e:d2:01:14:e5:7c:50:07:1d:32:8b:0b:b2:53: 0b:03:b5:7c:3c:0a:cc:21:78:46:c5:33:d2:09:02: e0:6b:9f:f1:da:2f:8b:f5:06:7b:ec:8b:bf:3e:e5: a2:91:8e:6a:35:fc:8c:04:8c:10:83:0a:ff:6d:eb: 01:6f:58:cb:6e:6f:7c:da:71:c3:d0:ff:2f:2d:e2: 86:ea:f7:3b:06:72:21:fb:98:5c:73:3e:35:c7:60: 0a:3c:63:6c:e8:5b:0b:d5:02:28:8f:d7:a3:38:ef: e2:b8:96:c6:c2:9d:66:1b:bb:fe:d7:25:79:0b:39: 1c:e2:4b:9d:27:d9:cb:b9:5d:93:5d:fc:df:12:14: 75:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E0:4B:94:28:59:EB:A2:C7:F4:AB:EE:C7:E2:99:89:47:8C:5F:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/0cf3b4cf-1492-3b91-8ed0-819c0c6b28e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.crl X509v3 Authority Key Identifier: keyid:B7:8E:8C:13:1F:F5:BE:9C:5C:53:7B:9C:7C:53:9B:73:88:DF:C7:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1cfa84f3-b491-4024-94c6-ed6ff5a260f3.cer sbgp-ipAddrBlock: critical IPv4: 209.236.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:ad:03:f3:99:17:79:3c:70:7b:21:0c:9d:89:16:7e:48:b1: 26:13:5e:6d:db:2f:ba:53:61:e5:19:ce:c5:9a:ab:7f:4f:04: cd:19:96:fc:a6:eb:17:aa:9e:3e:37:42:fe:87:2f:76:64:00: f7:fd:32:b1:c5:cd:04:9f:3d:3e:72:ae:1e:58:41:48:be:7d: 32:e5:ba:fb:61:48:83:a6:11:f5:38:f5:2f:ec:91:9f:09:0f: ab:ae:8f:5f:47:ac:61:c5:12:b9:e3:f3:16:00:56:4e:56:32: 53:96:41:f1:8f:6f:ec:eb:17:ec:8d:c2:4a:23:30:d1:02:73: 59:4d:e6:cd:7a:3f:34:42:29:c7:c1:bd:6a:50:16:85:2c:d3: eb:6b:46:c4:d7:0e:bf:26:f8:69:b9:de:3d:f1:a1:70:88:c3: b3:23:b4:a5:5e:76:2c:d9:a0:68:b9:33:ad:c9:79:d6:e9:9b: 38:2d:cb:7d:4a:33:62:54:3d:b3:50:98:27:08:d8:b3:b9:e2: ca:3c:47:26:0b:0c:a8:21:1e:7c:d7:72:94:68:88:65:e1:a3: 25:21:78:32:77:71:3e:92:98:45:c0:2d:e9:29:f9:74:4a:cf: ca:ba:fc:68:49:0e:be:71:95:20:3b:82:bb:e4:dd:dc:b1:03: 43:18:67:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCAlMrCGMjh9uo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYTg0ZjMtYjQ5MS00MDI0LTk0YzYtZWQ2ZmY1YTI2 MGYzMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk NjgxMTRmZmYtOThhYi00MzE3LWJkZDMtOTJkNTE0MjgxMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfpJldBoTfyUkMy3rpzzzIXvBguimzrTV4BO BvwlnL81KAQ1DA3xqaLeXrmHSMFC03XR80CDh/6ddvjyh8QN70NQmA1jKjsXNckN Dh3GsFd15pOJ3q4L2p/Rr4uLQSbRYsdphMHivBRVD+9JfCWds1Ptuwi5g8UKjtIB FOV8UAcdMosLslMLA7V8PArMIXhGxTPSCQLga5/x2i+L9QZ77Iu/PuWikY5qNfyM BIwQgwr/besBb1jLbm982nHD0P8vLeKG6vc7BnIh+5hccz41x2AKPGNs6FsL1QIo j9ejOO/iuJbGwp1mG7v+1yV5Czkc4kudJ9nLuV2TXfzfEhR1WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/gS5QoWeuix/Sr7sfimYlHjF8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2Zh ODRmMy1iNDkxLTQwMjQtOTRjNi1lZDZmZjVhMjYwZjMvMGNmM2I0Y2YtMTQ5Mi0z YjkxLThlZDAtODE5YzBjNmIyOGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWNmYTg0ZjMtYjQ5MS00MDI0LTk0 YzYtZWQ2ZmY1YTI2MGYzLzFjZmE4NGYzLWI0OTEtNDAyNC05NGM2LWVkNmZmNWEy NjBmMy5jcmwwHwYDVR0jBBgwFoAUt46MEx/1vpxcU3ucfFObc4jfx+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2ZhODRmMy1iNDkxLTQwMjQtOTRjNi1lZDZm ZjVhMjYwZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0exwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMatA/OZF3k8cHshDJ2JFn5IsSYTXm3bL7pTYeUZzsWaq39PBM0Zlvym 6xeqnj43Qv6HL3ZkAPf9MrHFzQSfPT5yrh5YQUi+fTLluvthSIOmEfU49S/skZ8J D6uuj19HrGHFErnj8xYAVk5WMlOWQfGPb+zrF+yNwkojMNECc1lN5s16PzRCKcfB vWpQFoUs0+trRsTXDr8m+Gm53j3xoXCIw7MjtKVedizZoGi5M63Jedbpmzgty31K M2JUPbNQmCcI2LO54so8RyYLDKghHnzXcpRoiGXhoyUheDJ3cT6SmEXALekp+XRK z8q6/GhJDr5xlSA7grvk3dyxA0MYZ+c= -----END CERTIFICATE-----Generated at Mon Oct 12 14:16:42 2026 by rpki-client