$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/d58eff2f-6e25-3be3-a83f-c98197b3fa54.roa File: d58eff2f-6e25-3be3-a83f-c98197b3fa54.roa (raw, json) Hash identifier: r+J/x9uwi26iXz+26+c2SASoWJ7Jn1JxmgVE78SfWCY= Subject key identifier: BE:D3:4A:C2:BB:3D:34:6F:F2:B0:24:13:E2:C4:1E:18:51:41:CD:DE Certificate issuer: /CN=83fa580e-7075-4d7f-b2fa-c07eafc22d85 Certificate serial: 010D0C9F4328584F6F22FA8916159E9C8C9B2B00 Authority key identifier: E5:04:48:0B:BA:E2:75:B0:6E:95:17:CD:79:2C:88:A6:41:75:FF:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/d58eff2f-6e25-3be3-a83f-c98197b3fa54.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 401734 IP address blocks: 209.92.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:fa:89:16:15:9e:9c:8c:9b:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83fa580e-7075-4d7f-b2fa-c07eafc22d85 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=442c69cb-cc59-42ab-b3a9-3d2ea1ceb1b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:af:9f:e8:1d:10:bf:bb:28:b8:fc:4f:27:eb: 1c:2e:5a:8c:bc:90:fe:4f:57:b1:cc:b8:a1:31:b6: 2f:42:34:4b:a0:b5:b7:8f:07:bc:80:e3:b4:c9:ea: 1a:df:78:cf:19:8c:5f:da:bb:13:62:01:e6:a3:50: b3:49:56:41:66:71:37:86:4e:44:db:ed:dd:38:7f: 0c:a9:f9:cc:9e:6e:0e:62:7b:bc:c6:a4:bb:e3:c2: 80:06:37:1e:b8:2e:65:8c:15:e5:f2:07:8e:2e:e8: 14:30:3d:44:1f:da:b8:a1:2a:7d:ab:42:52:f6:8a: ab:36:75:00:1d:df:52:02:90:a5:18:62:ed:a9:4e: 0a:f4:4d:f0:b0:99:3a:3d:d8:d4:e4:c6:a1:21:ed: ce:39:1b:12:c1:02:17:71:bd:2a:c8:34:86:b3:b3: 23:c2:b0:ed:be:7a:ed:12:ee:41:f8:3a:d7:da:b3: 24:57:89:35:e1:03:0a:5e:13:0d:54:a2:dd:2b:9b: b3:54:06:d6:42:9f:3c:2d:14:1d:fe:88:e2:58:1c: 47:0c:e5:0e:56:4e:61:f7:e0:09:69:60:48:68:5b: 06:14:fe:2d:4e:02:16:6e:74:26:17:3f:23:26:a2: 3d:16:ad:13:14:a5:da:97:6d:68:39:c0:a5:cf:4e: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D3:4A:C2:BB:3D:34:6F:F2:B0:24:13:E2:C4:1E:18:51:41:CD:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/d58eff2f-6e25-3be3-a83f-c98197b3fa54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85/83fa580e-7075-4d7f-b2fa-c07eafc22d85.crl X509v3 Authority Key Identifier: keyid:E5:04:48:0B:BA:E2:75:B0:6E:95:17:CD:79:2C:88:A6:41:75:FF:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/83fa580e-7075-4d7f-b2fa-c07eafc22d85.cer sbgp-ipAddrBlock: critical IPv4: 209.92.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5a:b0:08:f3:2d:b6:7f:20:aa:3c:64:02:56:84:f5:72:93: fe:ca:c0:f3:b5:9f:2b:e5:4e:b0:57:14:c3:cc:f5:7a:29:1f: b2:67:23:7d:52:d9:c6:31:cd:88:69:78:b3:34:78:be:c3:a7: 29:a2:e6:7a:99:f9:e3:0f:88:7c:c6:e2:c0:51:7f:7a:d7:80: b5:ae:51:02:68:99:c6:60:f0:a5:e3:a6:f9:c1:7f:9e:f9:5d: a3:aa:de:53:7e:f8:d5:e8:a2:a8:91:69:52:99:48:88:a1:7b: 58:ba:2f:ac:8a:16:ea:3f:37:cc:9c:5a:95:b6:d2:97:9c:f3: 47:60:4f:b2:d7:da:cd:c4:d9:d0:d0:62:cf:cd:a4:80:12:49: 15:5a:95:28:2d:90:ab:07:23:56:f7:cb:aa:6b:c6:a0:f9:49: 6e:e8:6c:45:59:26:d0:c6:df:f6:77:9d:2a:b6:6b:6a:ba:d2: 47:5e:52:f4:ab:58:42:46:f4:70:65:86:96:14:1c:0e:67:50: f5:f3:83:5a:0f:03:83:ba:d1:c3:8f:06:12:66:8e:e2:ca:b4: b6:b3:82:06:44:66:f3:2e:2a:56:1e:a9:6a:95:ab:30:bb:07: a9:61:de:42:4e:c5:c0:94:b8:f5:6d:8d:2e:79:cb:72:4b:ac: f7:c5:9e:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIvqJFhWenIybKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODNmYTU4MGUtNzA3NS00ZDdmLWIyZmEtYzA3ZWFmYzIy ZDg1MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDQyYzY5Y2ItY2M1OS00MmFiLWIzYTktM2QyZWExY2ViMWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq+f6B0Qv7souPxPJ+scLlqMvJD+T1exzLih MbYvQjRLoLW3jwe8gOO0yeoa33jPGYxf2rsTYgHmo1CzSVZBZnE3hk5E2+3dOH8M qfnMnm4OYnu8xqS748KABjceuC5ljBXl8geOLugUMD1EH9q4oSp9q0JS9oqrNnUA Hd9SApClGGLtqU4K9E3wsJk6PdjU5MahIe3OORsSwQIXcb0qyDSGs7MjwrDtvnrt Eu5B+DrX2rMkV4k14QMKXhMNVKLdK5uzVAbWQp88LRQd/ojiWBxHDOUOVk5h9+AJ aWBIaFsGFP4tTgIWbnQmFz8jJqI9Fq0TFKXal21oOcClz06toQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7TSsK7PTRv8rAkE+LEHhhRQc3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84M2Zh NTgwZS03MDc1LTRkN2YtYjJmYS1jMDdlYWZjMjJkODUvZDU4ZWZmMmYtNmUyNS0z YmUzLWE4M2YtYzk4MTk3YjNmYTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODNmYTU4MGUtNzA3NS00ZDdmLWIy ZmEtYzA3ZWFmYzIyZDg1LzgzZmE1ODBlLTcwNzUtNGQ3Zi1iMmZhLWMwN2VhZmMy MmQ4NS5jcmwwHwYDVR0jBBgwFoAU5QRIC7ridbBulRfNeSyIpkF1/18wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84M2ZhNTgwZS03MDc1LTRkN2YtYjJmYS1jMDdl YWZjMjJkODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0VzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdasAjzLbZ/IKo8ZAJWhPVyk/7KwPO1nyvlTrBXFMPM9XopH7JnI31S 2cYxzYhpeLM0eL7Dpymi5nqZ+eMPiHzG4sBRf3rXgLWuUQJomcZg8KXjpvnBf575 XaOq3lN++NXooqiRaVKZSIihe1i6L6yKFuo/N8ycWpW20pec80dgT7LX2s3E2dDQ Ys/NpIASSRValSgtkKsHI1b3y6prxqD5SW7obEVZJtDG3/Z3nSq2a2q60kdeUvSr WEJG9HBlhpYUHA5nUPXzg1oPA4O60cOPBhJmjuLKtLazggZEZvMuKlYeqWqVqzC7 B6lh3kJOxcCUuPVtjS55y3JLrPfFns0= -----END CERTIFICATE-----Generated at Sun Oct 25 09:13:43 2026 by rpki-client