$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/d8e20a75-f8f3-3af1-9786-f5ac800a4f94.roa File: d8e20a75-f8f3-3af1-9786-f5ac800a4f94.roa (raw, json) Hash identifier: lPTG5CNrTNoL/s6DBKCwVz5qowkG+n/dWFpYJ0HRaZo= Subject key identifier: F5:5B:5E:C7:3C:F5:E1:F1:6F:9B:85:0B:66:F4:B7:72:71:A0:F6:6B Certificate issuer: /CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261 Certificate serial: 010D0C9F4328584F86DDA83B86899260557E1FD0 Authority key identifier: 09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/d8e20a75-f8f3-3af1-9786-f5ac800a4f94.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 14618 IP address blocks: 69.52.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:a8:3b:86:89:92:60:55:7e:1f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e997b1fb-c1cc-45dd-a7ec-3275a526b261 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=2d5d4aae-fe44-4d48-8dce-d06ce1dfe124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:45:70:ef:02:a0:28:40:a4:98:63:33:78:9d: d7:f5:96:0a:de:82:ea:85:da:e1:bd:ba:48:ac:13: 02:e8:61:dc:81:86:ae:97:14:a6:03:89:2a:7f:1f: 60:33:a2:49:7e:7b:d3:ac:7a:ac:26:85:9f:d1:85: 1e:7d:13:67:ec:ad:da:48:0d:4d:7f:97:1f:75:40: 0b:db:07:c5:8c:ba:4a:a7:03:6d:d9:9b:2e:e6:94: 80:2d:ec:8d:62:68:b2:d4:c9:c4:10:a3:d8:67:fe: b8:b3:c9:44:56:72:63:21:cb:4b:c5:7b:9c:90:00: 62:9c:96:fc:72:0e:da:35:a2:44:b5:9b:cb:9b:a7: 61:4c:f7:b1:0a:74:07:13:cb:be:91:5a:52:8f:d3: ce:5b:c6:5c:8f:35:9b:86:3f:6c:43:f4:d0:71:7b: 94:b9:ce:0a:94:09:2a:a3:66:8e:d0:3b:7c:5a:3f: d8:bb:e6:46:ae:c8:33:c4:21:e3:b6:4e:15:48:32: 31:ab:dd:cb:88:9c:3b:fc:86:d8:2f:c1:88:4e:81: e6:71:60:42:fa:fa:1b:f9:e7:48:fb:5d:94:f9:bc: 3b:e4:44:7c:8e:ae:35:f2:b3:56:dd:06:67:b4:f2: c4:49:b4:44:bc:c8:f1:2a:6d:45:08:e4:d6:e2:29: 94:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5B:5E:C7:3C:F5:E1:F1:6F:9B:85:0B:66:F4:B7:72:71:A0:F6:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/d8e20a75-f8f3-3af1-9786-f5ac800a4f94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261/e997b1fb-c1cc-45dd-a7ec-3275a526b261.crl X509v3 Authority Key Identifier: keyid:09:19:9F:15:20:AD:27:37:B7:81:2A:A5:5B:A1:F2:EF:FB:35:5B:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e997b1fb-c1cc-45dd-a7ec-3275a526b261.cer sbgp-ipAddrBlock: critical IPv4: 69.52.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:d0:e9:cb:28:e4:97:d5:68:2e:12:c9:14:4c:e3:a3:36:cb: fd:38:29:ac:4e:30:ec:e9:4b:fc:d9:db:80:7e:8e:e3:fd:c7: f1:49:74:67:3e:57:55:fa:ac:3e:e2:a6:3c:49:24:74:e0:fb: 96:b9:4a:ee:cb:4c:75:28:1a:22:ac:10:43:fe:d7:d6:e9:d6: 24:dc:30:e0:83:02:79:b3:fa:70:9e:e4:04:70:91:e3:11:3d: 8e:ac:5e:d1:5a:00:85:94:61:78:c6:ca:63:0e:15:07:4a:31: de:f6:69:88:b5:81:d5:8b:a5:43:4a:2e:7b:0b:55:99:df:4c: d7:40:87:9d:6f:76:49:85:c8:99:11:69:80:7a:51:c8:c1:a7: ec:b5:26:1b:cc:f1:50:49:23:ac:8e:c0:80:e2:50:50:1b:0b: 54:43:f9:47:06:94:be:19:1c:74:a4:e3:b7:19:ae:58:ba:b8: bb:21:7a:97:f9:6d:0d:23:b5:a0:46:2d:d3:8a:54:3c:be:2d: 54:4f:33:94:f4:9c:3a:1d:d4:83:32:0e:1b:43:89:7d:66:3a: 51:d7:3c:0c:d1:20:f6:bf:ca:dd:98:86:4b:bc:86:31:2a:26: a7:96:3b:0b:fc:74:d5:86:b8:0c:4a:6c:4a:96:bb:38:d2:1e: 07:e9:40:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+G3ag7homSYFV+H9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk5N2IxZmItYzFjYy00NWRkLWE3ZWMtMzI3NWE1MjZi MjYxMB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk MmQ1ZDRhYWUtZmU0NC00ZDQ4LThkY2UtZDA2Y2UxZGZlMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUVw7wKgKECkmGMzeJ3X9ZYK3oLqhdrhvbpI rBMC6GHcgYaulxSmA4kqfx9gM6JJfnvTrHqsJoWf0YUefRNn7K3aSA1Nf5cfdUAL 2wfFjLpKpwNt2Zsu5pSALeyNYmiy1MnEEKPYZ/64s8lEVnJjIctLxXuckABinJb8 cg7aNaJEtZvLm6dhTPexCnQHE8u+kVpSj9POW8ZcjzWbhj9sQ/TQcXuUuc4KlAkq o2aO0Dt8Wj/Yu+ZGrsgzxCHjtk4VSDIxq93LiJw7/IbYL8GIToHmcWBC+vob+edI +12U+bw75ER8jq418rNW3QZntPLESbREvMjxKm1FCOTW4imUhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVbXsc89eHxb5uFC2b0t3JxoPZrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3 YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1YTUyNmIyNjEvZDhlMjBhNzUtZjhmMy0z YWYxLTk3ODYtZjVhYzgwMGE0Zjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTk5N2IxZmItYzFjYy00NWRkLWE3 ZWMtMzI3NWE1MjZiMjYxL2U5OTdiMWZiLWMxY2MtNDVkZC1hN2VjLTMyNzVhNTI2 YjI2MS5jcmwwHwYDVR0jBBgwFoAUCRmfFSCtJze3gSqlW6Hy7/s1W10wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOTk3YjFmYi1jMWNjLTQ1ZGQtYTdlYy0zMjc1 YTUyNmIyNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTTWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKTQ6cso5JfVaC4SyRRM46M2y/04KaxOMOzpS/zZ24B+juP9x/FJdGc+ V1X6rD7ipjxJJHTg+5a5Su7LTHUoGiKsEEP+19bp1iTcMOCDAnmz+nCe5ARwkeMR PY6sXtFaAIWUYXjGymMOFQdKMd72aYi1gdWLpUNKLnsLVZnfTNdAh51vdkmFyJkR aYB6UcjBp+y1JhvM8VBJI6yOwIDiUFAbC1RD+UcGlL4ZHHSk47cZrli6uLshepf5 bQ0jtaBGLdOKVDy+LVRPM5T0nDod1IMyDhtDiX1mOlHXPAzRIPa/yt2Yhku8hjEq JqeWOwv8dNWGuAxKbEqWuzjSHgfpQLk= -----END CERTIFICATE-----Generated at Sat Oct 24 10:30:09 2026 by rpki-client