$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/6b53b887-5fce-39b8-9ffe-63836866e505.roa File: 6b53b887-5fce-39b8-9ffe-63836866e505.roa (raw, json) Hash identifier: /QqLKn3T8buLtvsdf3qRA02bKA856Mp51qaxc5CXgk0= Subject key identifier: A5:FE:57:2D:70:8A:63:F9:4B:35:8C:27:C6:0D:66:D3:DD:D8:05:C0 Certificate issuer: /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Certificate serial: 010D0C9F4328584EA79896B281418D4FF4CF6600 Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/6b53b887-5fce-39b8-9ffe-63836866e505.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21669 IP address blocks: 209.212.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:96:b2:81:41:8d:4f:f4:cf:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bb4b87bc-1424-4efc-97a5-997c6bcba0a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:43:11:4b:7a:c0:e1:70:cd:37:1b:a8:5c: 8c:0b:ea:79:80:19:81:9d:0c:e1:03:0a:3d:48:6c: a8:14:89:95:6f:ed:a0:ac:3f:0e:82:9f:27:48:b4: fe:cc:e1:8c:ba:04:e8:ce:72:ca:9f:3f:d3:e8:98: 28:34:47:4f:6f:e9:46:bf:60:16:bb:d6:4d:db:8b: 72:8a:4d:d6:94:60:49:d9:a2:fd:03:eb:d0:06:46: 8d:3f:cd:55:b6:d9:e0:1c:71:81:27:59:7e:f0:41: 07:88:bc:fb:18:c0:ea:cc:80:c4:3d:57:9f:3b:dc: ec:97:fc:77:4a:34:c2:91:20:59:c9:47:7a:f8:9d: 6e:94:73:5a:51:5d:4f:c9:8e:91:f9:00:fd:d1:e8: 43:42:20:b6:a0:54:74:a8:86:07:39:49:8e:c9:ac: 7f:a3:21:80:90:79:b4:3f:93:9d:68:a1:28:08:8c: ad:f2:07:e0:74:b1:ed:78:3b:75:a3:8b:d0:49:f1: c2:c3:e5:2c:64:de:a9:59:71:e0:94:e0:23:88:86: 9c:ff:17:ef:2e:7f:eb:81:bc:8f:be:5b:ec:41:69: ac:c3:58:a6:33:25:6f:66:1d:b6:29:01:60:3b:9b: 71:35:c9:be:83:0d:e2:b4:53:36:1a:c3:84:f0:b9: a9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FE:57:2D:70:8A:63:F9:4B:35:8C:27:C6:0D:66:D3:DD:D8:05:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/6b53b887-5fce-39b8-9ffe-63836866e505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl X509v3 Authority Key Identifier: keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer sbgp-ipAddrBlock: critical IPv4: 209.212.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ed:82:a0:5b:e0:db:37:de:ab:7a:81:c9:21:91:f4:f7:98: 7d:fa:e2:b3:83:cf:99:f3:38:c9:7c:68:a3:f4:d4:f4:26:27: bf:08:23:b2:f8:9c:51:c6:ad:74:fc:ce:77:21:e6:19:8a:57: ca:76:0c:f2:01:2c:8c:d7:eb:8d:40:21:f7:59:d8:36:52:d3: aa:ed:09:13:d2:52:2e:1f:0b:1d:20:f1:fb:53:52:43:3a:29: 82:f9:64:d4:03:fd:77:44:df:d8:4d:c2:22:fb:b3:c5:d2:b0: a7:34:8b:6b:25:92:77:31:c9:44:32:c4:9b:ed:6e:59:51:55: 01:7a:eb:cb:ff:7a:19:3e:d5:a7:9f:c5:70:d5:82:42:27:5e: f0:2f:fa:5b:04:ff:c5:f3:6c:8b:ad:8b:e0:33:b8:4a:6e:5e: e1:7d:59:9f:5a:92:c7:0e:94:68:07:ee:26:6a:00:36:27:57: f1:4d:d1:a2:02:9e:ab:50:d1:0b:59:34:5f:a1:5e:c2:fb:c4: 10:72:31:fc:5f:3d:bb:52:9a:2a:4f:a1:dd:78:39:40:b8:a5: 3c:5e:8b:a4:3e:69:45:fe:58:a4:51:88:a0:aa:c2:6c:39:c5: 3a:c3:4e:21:6d:85:1b:2c:4b:02:11:13:74:38:9a:41:53:46: d1:2d:08:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmJaygUGNT/TPZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5Njk3ODMtM2UzNS00NzlkLWIwZTctZTNkYWMwY2Fm OWY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmI0Yjg3YmMtMTQyNC00ZWZjLTk3YTUtOTk3YzZiY2JhMGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ytDEUt6wOFwzTcbqFyMC+p5gBmBnQzhAwo9 SGyoFImVb+2grD8Ogp8nSLT+zOGMugToznLKnz/T6JgoNEdPb+lGv2AWu9ZN24ty ik3WlGBJ2aL9A+vQBkaNP81VttngHHGBJ1l+8EEHiLz7GMDqzIDEPVefO9zsl/x3 SjTCkSBZyUd6+J1ulHNaUV1PyY6R+QD90ehDQiC2oFR0qIYHOUmOyax/oyGAkHm0 P5OdaKEoCIyt8gfgdLHteDt1o4vQSfHCw+UsZN6pWXHglOAjiIac/xfvLn/rgbyP vlvsQWmsw1imMyVvZh22KQFgO5txNcm+gw3itFM2GsOE8LmpdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX+Vy1wimP5SzWMJ8YNZtPd2AXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2 OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2RhYzBjYWY5ZjkvNmI1M2I4ODctNWZjZS0z OWI4LTlmZmUtNjM4MzY4NjZlNTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGY5Njk3ODMtM2UzNS00NzlkLWIw ZTctZTNkYWMwY2FmOWY5LzRmOTY5NzgzLTNlMzUtNDc5ZC1iMGU3LWUzZGFjMGNh ZjlmOS5jcmwwHwYDVR0jBBgwFoAUb5LJGnW0bOelHqUkIxZjVQ0DQIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2Rh YzBjYWY5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dQZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHtgqBb4Ns33qt6gckhkfT3mH364rODz5nzOMl8aKP01PQmJ78II7L4 nFHGrXT8znch5hmKV8p2DPIBLIzX641AIfdZ2DZS06rtCRPSUi4fCx0g8ftTUkM6 KYL5ZNQD/XdE39hNwiL7s8XSsKc0i2slkncxyUQyxJvtbllRVQF668v/ehk+1aef xXDVgkInXvAv+lsE/8XzbIuti+AzuEpuXuF9WZ9akscOlGgH7iZqADYnV/FN0aIC nqtQ0QtZNF+hXsL7xBByMfxfPbtSmipPod14OUC4pTxei6Q+aUX+WKRRiKCqwmw5 xTrDTiFthRssSwIRE3Q4mkFTRtEtCBc= -----END CERTIFICATE-----Generated at Mon Aug 31 10:24:53 2026 by rpki-client