$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/f9367e5b-6a85-30a2-97dc-4e581c16e62d.roa File: f9367e5b-6a85-30a2-97dc-4e581c16e62d.roa (raw, json) Hash identifier: WkYWhZW1ujdSk/H/NtDklNIycc7ZII1mFtOsH7MieaM= Subject key identifier: EC:86:02:C5:C1:15:1E:44:C3:FC:A0:5A:6F:9D:1B:D3:0F:E5:F9:D5 Certificate issuer: /CN=aed01dad-662c-4720-aaa5-ea3d024bad07 Certificate serial: 010D0C9F4328584F49746875150CE7D18E378CC0 Authority key identifier: AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/f9367e5b-6a85-30a2-97dc-4e581c16e62d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40676 IP address blocks: 207.174.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:68:75:15:0c:e7:d1:8e:37:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aed01dad-662c-4720-aaa5-ea3d024bad07 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ddb30f75-5db2-46f0-8a4b-1006021c6924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b8:29:46:f3:a5:f9:a0:49:26:18:af:a5:b4: 62:ac:9b:84:36:32:59:f1:43:2f:67:ab:39:ea:0d: 55:2f:bd:45:db:2d:72:a7:2e:bd:b2:db:6d:b0:40: ca:01:ef:07:db:4b:5f:2d:bf:cd:88:47:09:cd:40: 32:d3:56:3b:eb:c5:57:b7:91:fa:7b:c9:5f:bc:93: ae:c5:ba:df:2f:ca:5c:b8:67:cd:62:60:6a:71:5a: 32:ea:00:df:45:8f:15:40:e1:f6:ed:60:1c:e8:d8: 0e:53:81:a0:eb:ca:13:dc:e6:dd:5a:5b:63:45:8a: e4:95:fa:72:93:d2:77:bd:e6:c3:b6:cf:26:37:0e: c3:dd:1c:1c:d9:cb:16:87:9e:42:ea:d2:27:83:c5: 4b:1a:93:77:63:74:05:9d:b1:25:f8:e5:b7:aa:7d: f9:1e:60:60:97:e3:e0:78:86:97:dc:3b:90:f5:31: ab:9e:fd:8d:3f:21:60:51:88:22:88:19:3c:25:2a: 79:f5:46:8c:26:36:11:e0:b9:1b:05:22:53:50:d2: d0:cd:91:c5:a4:75:c4:2b:ae:50:0e:54:2b:05:25: a6:db:63:ca:cc:9e:dc:0f:cc:8b:16:95:ce:11:cf: d2:ea:02:c3:74:04:8b:ed:4b:57:e9:f6:4b:83:b4: c4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:86:02:C5:C1:15:1E:44:C3:FC:A0:5A:6F:9D:1B:D3:0F:E5:F9:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/f9367e5b-6a85-30a2-97dc-4e581c16e62d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.crl X509v3 Authority Key Identifier: keyid:AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer sbgp-ipAddrBlock: critical IPv4: 207.174.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:14:cc:9a:47:07:35:fd:bb:44:a4:3b:3a:78:d7:79:91:29: 2f:47:75:50:6e:0c:e0:1d:6d:e0:49:25:b4:7d:db:c9:dd:6b: 20:5c:0f:49:23:8d:25:4b:32:23:ed:ca:92:66:23:22:7e:58: 28:be:c4:a1:a4:5d:77:53:18:2f:de:09:7a:e9:53:4c:f7:6d: 42:37:5c:d3:da:32:d4:ec:f6:5f:11:4c:8e:b6:b9:89:ef:9f: fd:54:c7:6e:02:a6:d1:30:f0:d2:15:63:b6:95:96:36:43:d5: 49:a1:57:2e:c6:30:8d:7a:a4:2b:e4:db:a6:77:bc:db:47:06: 6d:e1:13:c9:51:cb:ae:10:45:db:b3:93:da:0f:61:5f:a4:e6: dd:6d:0e:82:3d:66:c9:16:cb:18:0f:06:37:ba:5c:a8:4f:28: 27:22:35:b4:d6:d1:94:b6:3b:78:4a:d1:38:b1:f9:ed:0f:2a: 00:e5:4c:52:14:c1:6f:1b:3c:d3:a6:a5:1e:bf:d6:36:c0:f6: 01:c2:17:0a:e9:59:84:e4:f5:6e:8b:18:3f:04:ce:84:5c:1a: 32:16:04:9b:24:b6:36:75:6f:0a:21:f3:29:48:d5:80:8d:2a: 29:19:dd:0d:89:d8:fe:be:0d:75:92:96:b2:0d:15:0a:c1:a4: 96:de:39:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGh1FQzn0Y43jMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWVkMDFkYWQtNjYyYy00NzIwLWFhYTUtZWEzZDAyNGJh ZDA3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGRiMzBmNzUtNWRiMi00NmYwLThhNGItMTAwNjAyMWM2OTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrgpRvOl+aBJJhivpbRirJuENjJZ8UMvZ6s5 6g1VL71F2y1ypy69stttsEDKAe8H20tfLb/NiEcJzUAy01Y768VXt5H6e8lfvJOu xbrfL8pcuGfNYmBqcVoy6gDfRY8VQOH27WAc6NgOU4Gg68oT3ObdWltjRYrklfpy k9J3vebDts8mNw7D3Rwc2csWh55C6tIng8VLGpN3Y3QFnbEl+OW3qn35HmBgl+Pg eIaX3DuQ9TGrnv2NPyFgUYgiiBk8JSp59UaMJjYR4LkbBSJTUNLQzZHFpHXEK65Q DlQrBSWm22PKzJ7cD8yLFpXOEc/S6gLDdASL7UtX6fZLg7TEqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyGAsXBFR5Ew/ygWm+dG9MP5fnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZWQw MWRhZC02NjJjLTQ3MjAtYWFhNS1lYTNkMDI0YmFkMDcvZjkzNjdlNWItNmE4NS0z MGEyLTk3ZGMtNGU1ODFjMTZlNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWVkMDFkYWQtNjYyYy00NzIwLWFh YTUtZWEzZDAyNGJhZDA3L2FlZDAxZGFkLTY2MmMtNDcyMC1hYWE1LWVhM2QwMjRi YWQwNy5jcmwwHwYDVR0jBBgwFoAUryjl9YLM4ZXjBjlUXHntx3ilxU4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZWQwMWRhZC02NjJjLTQ3MjAtYWFhNS1lYTNk MDI0YmFkMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz658MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoUzJpHBzX9u0SkOzp413mRKS9HdVBuDOAdbeBJJbR928ndayBcD0kj jSVLMiPtypJmIyJ+WCi+xKGkXXdTGC/eCXrpU0z3bUI3XNPaMtTs9l8RTI62uYnv n/1Ux24CptEw8NIVY7aVljZD1UmhVy7GMI16pCvk26Z3vNtHBm3hE8lRy64QRduz k9oPYV+k5t1tDoI9ZskWyxgPBje6XKhPKCciNbTW0ZS2O3hK0Tix+e0PKgDlTFIU wW8bPNOmpR6/1jbA9gHCFwrpWYTk9W6LGD8EzoRcGjIWBJsktjZ1bwoh8ylI1YCN KikZ3Q2J2P6+DXWSlrINFQrBpJbeOaQ= -----END CERTIFICATE-----Generated at Wed Oct 21 08:30:47 2026 by rpki-client