$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/56ab35a7-bfa1-36a9-9555-21b97b2bf86e.roa File: 56ab35a7-bfa1-36a9-9555-21b97b2bf86e.roa (raw, json) Hash identifier: /ZbR0LKVt3DSi7a4kS0pJsCMlUgz0eVSzia607QhPHo= Subject key identifier: 32:A0:7F:DB:82:50:17:24:4F:B3:A4:EF:1D:C3:26:4F:86:FB:0E:01 Certificate issuer: /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Certificate serial: 010D0C9F4328584EA79896942550139CFE3DC140 Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/56ab35a7-bfa1-36a9-9555-21b97b2bf86e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21669 IP address blocks: 209.212.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:96:94:25:50:13:9c:fe:3d:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=94123f13-a853-48f3-96d3-95639a6e0977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:32:96:69:3e:f7:ed:73:ca:1d:11:5e:6e:73: a0:2d:0f:b0:35:54:1e:71:db:58:46:4d:ff:de:c7: 77:c1:bf:6f:ba:d1:3e:07:0d:be:48:e9:2d:79:c4: a7:3c:f6:52:10:47:ad:9c:14:ef:f6:3f:16:d5:e7: c5:38:e8:4d:7b:36:25:a8:b3:da:4c:a0:06:d2:70: c9:9f:6b:8d:69:8d:dd:85:ed:8a:55:cb:41:6b:82: 4b:73:7b:96:41:59:c9:2c:18:f6:63:2a:36:36:6c: ee:8c:b3:65:97:10:60:db:14:2c:28:b1:52:d5:d4: c8:8f:f9:02:3f:25:bd:90:90:21:98:bd:31:c1:3b: ba:0b:68:d4:f3:92:f8:a2:48:34:b3:18:c1:fd:ce: 61:d8:4e:20:6c:78:c6:1a:64:5c:39:6e:2c:cf:d4: d9:66:16:41:3b:b4:d5:2c:6c:be:70:2d:d1:bd:54: d7:02:6a:34:2d:e6:59:39:16:2e:c3:aa:63:d8:39: 54:30:77:24:1f:e1:3e:59:f5:99:1c:64:35:17:a2: 00:96:98:ed:9c:20:79:80:39:8c:ee:5c:58:78:99: ad:d4:de:ba:85:da:c4:5a:32:e5:7d:93:c1:81:49: d0:83:27:22:1f:80:fa:42:ca:f6:0d:5a:74:4b:ee: 67:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A0:7F:DB:82:50:17:24:4F:B3:A4:EF:1D:C3:26:4F:86:FB:0E:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/56ab35a7-bfa1-36a9-9555-21b97b2bf86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl X509v3 Authority Key Identifier: keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer sbgp-ipAddrBlock: critical IPv4: 209.212.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:79:d0:1f:64:14:f7:25:2a:c1:84:35:1e:29:a0:f6:07:1d: b7:b9:7f:23:8c:39:db:c8:6b:f9:fa:f7:7f:e3:5f:d3:f0:7d: 92:66:29:00:44:ad:9d:64:6c:1e:3e:0a:e8:bf:04:5b:89:14: a7:fb:9d:2e:11:1d:7f:0d:4c:63:2c:48:23:b3:2c:b0:00:55: 60:55:ab:89:08:9c:00:14:fa:66:35:b9:0e:e7:80:0d:88:a2: ce:b8:6e:90:07:10:20:96:dc:8c:e7:8d:57:f1:46:d5:27:bd: 0f:33:78:7f:78:bc:a1:97:8a:91:fc:fe:ea:4c:d3:98:d7:4e: 46:67:25:87:99:c7:ab:b8:73:9d:f1:c8:2d:8b:fb:77:de:a5: e3:99:d2:80:23:20:3e:a1:ab:a3:2e:f2:30:77:7e:b8:69:17: 00:8d:c4:5f:d2:9c:11:f9:1f:0d:dd:c7:96:3b:2e:8a:d6:46: 1e:4c:8c:9e:37:06:0a:25:21:60:f1:39:d8:97:20:43:ad:88: 71:dd:51:90:9e:92:7c:09:97:63:3c:2b:e0:cc:b0:46:c0:7b: ba:7d:b4:eb:57:1f:00:ae:78:12:8b:4e:ed:73:4a:b5:27:3a: 8e:65:27:fd:68:6d:d2:67:9a:48:3d:6c:17:a0:b7:c0:bd:5f: d4:cc:80:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmJaUJVATnP49wUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5Njk3ODMtM2UzNS00NzlkLWIwZTctZTNkYWMwY2Fm OWY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTQxMjNmMTMtYTg1My00OGYzLTk2ZDMtOTU2MzlhNmUwOTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzKWaT737XPKHRFebnOgLQ+wNVQecdtYRk3/ 3sd3wb9vutE+Bw2+SOktecSnPPZSEEetnBTv9j8W1efFOOhNezYlqLPaTKAG0nDJ n2uNaY3dhe2KVctBa4JLc3uWQVnJLBj2Yyo2NmzujLNllxBg2xQsKLFS1dTIj/kC PyW9kJAhmL0xwTu6C2jU85L4okg0sxjB/c5h2E4gbHjGGmRcOW4sz9TZZhZBO7TV LGy+cC3RvVTXAmo0LeZZORYuw6pj2DlUMHckH+E+WfWZHGQ1F6IAlpjtnCB5gDmM 7lxYeJmt1N66hdrEWjLlfZPBgUnQgyciH4D6Qsr2DVp0S+5njwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKgf9uCUBckT7Ok7x3DJk+G+w4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2 OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2RhYzBjYWY5ZjkvNTZhYjM1YTctYmZhMS0z NmE5LTk1NTUtMjFiOTdiMmJmODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGY5Njk3ODMtM2UzNS00NzlkLWIw ZTctZTNkYWMwY2FmOWY5LzRmOTY5NzgzLTNlMzUtNDc5ZC1iMGU3LWUzZGFjMGNh ZjlmOS5jcmwwHwYDVR0jBBgwFoAUb5LJGnW0bOelHqUkIxZjVQ0DQIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2Rh YzBjYWY5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dQXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALl50B9kFPclKsGENR4poPYHHbe5fyOMOdvIa/n693/jX9PwfZJmKQBE rZ1kbB4+Cui/BFuJFKf7nS4RHX8NTGMsSCOzLLAAVWBVq4kInAAU+mY1uQ7ngA2I os64bpAHECCW3IznjVfxRtUnvQ8zeH94vKGXipH8/upM05jXTkZnJYeZx6u4c53x yC2L+3fepeOZ0oAjID6hq6Mu8jB3frhpFwCNxF/SnBH5Hw3dx5Y7LorWRh5MjJ43 BgolIWDxOdiXIEOtiHHdUZCeknwJl2M8K+DMsEbAe7p9tOtXHwCueBKLTu1zSrUn Oo5lJ/1obdJnmkg9bBegt8C9X9TMgHU= -----END CERTIFICATE-----Generated at Mon Aug 31 10:37:22 2026 by rpki-client