$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/4ae0d894-e9b5-3a99-9366-a3240b0440e8.roa File: 4ae0d894-e9b5-3a99-9366-a3240b0440e8.roa (raw, json) Hash identifier: d5ZNEqSUURnvVQGlHhU1zX644k2hNSYOax20pxNAZW0= Subject key identifier: 3F:F3:8D:C0:53:ED:CA:43:90:A3:1F:E6:DD:FA:81:C5:FA:55:1F:CB Certificate issuer: /CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0 Certificate serial: 010D0C9F4328584F4C3DE7BD3476845520B5F200 Authority key identifier: FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/4ae0d894-e9b5-3a99-9366-a3240b0440e8.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 19366 IP address blocks: 209.189.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:e7:bd:34:76:84:55:20:b5:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e4522505-3335-4495-a4d2-f6428b2ea2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:24:65:06:22:11:ce:29:b3:84:d9:e3:f2: 5f:88:31:21:f6:eb:0f:a3:c3:ef:64:85:75:94:cf: ae:5c:72:42:39:a5:9a:c4:d9:d9:98:b9:d6:67:ff: ce:92:0e:be:fd:07:25:0f:be:c5:13:7d:96:19:7d: f9:8a:ed:7e:4e:a7:83:6d:63:cf:a9:40:10:ec:95: d4:55:fb:30:41:2d:30:07:d6:63:fa:af:99:06:b1: 75:a1:c6:dc:d7:27:bd:62:14:de:f7:48:96:18:4d: 8c:d5:24:e8:1e:3f:10:86:9e:8f:96:2e:9f:8a:8f: a8:d9:43:84:56:76:5d:4f:2f:8d:ea:14:01:50:04: f7:b2:5c:61:88:11:22:18:33:43:f4:28:07:0e:b4: d5:4a:3f:56:c4:a0:28:91:12:d6:8a:62:f9:91:a1: 25:28:3a:18:e5:0d:2c:09:b8:21:5b:75:ef:74:a2: ce:78:4e:3e:2b:d6:96:8b:b8:b5:5b:be:e1:16:5e: 6e:a2:28:d3:eb:f0:38:ea:a4:85:d9:78:38:cb:99: d0:23:05:01:28:77:05:d5:5d:84:a8:98:28:04:a8: 26:2f:c8:5b:0f:9f:19:83:a2:49:91:38:00:81:98: 60:1f:6b:15:d7:1c:d5:4b:3a:1f:6a:01:cb:83:f8: 3c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F3:8D:C0:53:ED:CA:43:90:A3:1F:E6:DD:FA:81:C5:FA:55:1F:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/4ae0d894-e9b5-3a99-9366-a3240b0440e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl X509v3 Authority Key Identifier: keyid:FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer sbgp-ipAddrBlock: critical IPv4: 209.189.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b2:17:36:ec:34:04:81:bf:00:63:23:7c:4e:86:16:86:01: 45:c5:bd:b3:fa:45:e5:05:3b:81:d3:3d:10:aa:9d:d7:8a:14: 37:d0:a1:aa:28:a6:fd:51:ed:fc:1a:c9:53:31:01:3c:89:12: c2:83:fe:8f:b4:ab:41:ff:b5:cb:fb:e7:84:58:13:91:fd:0c: 6e:93:ea:a3:b1:64:ac:cd:a6:cc:e2:f5:b7:a8:24:b4:b3:96: 34:17:d6:7f:04:1e:79:96:5b:ca:0f:c8:15:88:36:a1:ec:f1: 1b:3e:ea:13:aa:bc:12:a3:ea:db:5d:cf:ce:36:0c:88:59:23: 74:9c:3a:96:dd:49:c2:64:4d:67:3f:a2:bf:23:40:f8:6f:3a: 55:46:aa:50:b3:25:46:57:16:d9:fa:37:12:98:03:f4:ce:17: d9:e5:bc:dd:c6:e5:fd:46:f2:c8:11:e9:28:26:62:f0:69:76: e8:55:6f:1d:a4:f1:3c:0f:82:03:fb:a3:40:46:f9:61:2e:94: ea:9b:7d:a8:23:7a:c7:fc:0b:e2:02:58:36:e5:01:33:db:92: 12:fc:54:c8:a5:8e:03:d0:4a:f3:fc:0d:59:08:52:c5:56:9e: f4:f5:66:6a:d9:5e:12:f8:2c:61:33:ff:17:df:71:34:e2:f5: 95:4b:e2:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPee9NHaEVSC18gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM1ZjdlNzYtYjJjNS00ZjIwLWI1M2UtMjQzNGNkZWRj MmMwMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTQ1MjI1MDUtMzMzNS00NDk1LWE0ZDItZjY0MjhiMmVhMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryQkZQYiEc4ps4TZ4/JfiDEh9usPo8PvZIV1 lM+uXHJCOaWaxNnZmLnWZ//Okg6+/QclD77FE32WGX35iu1+TqeDbWPPqUAQ7JXU VfswQS0wB9Zj+q+ZBrF1ocbc1ye9YhTe90iWGE2M1SToHj8Qhp6Pli6fio+o2UOE VnZdTy+N6hQBUAT3slxhiBEiGDND9CgHDrTVSj9WxKAokRLWimL5kaElKDoY5Q0s CbghW3XvdKLOeE4+K9aWi7i1W77hFl5uoijT6/A46qSF2Xg4y5nQIwUBKHcF1V2E qJgoBKgmL8hbD58Zg6JJkTgAgZhgH2sV1xzVSzofagHLg/g8VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/zjcBT7cpDkKMf5t36gcX6VR/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YzVm N2U3Ni1iMmM1LTRmMjAtYjUzZS0yNDM0Y2RlZGMyYzAvNGFlMGQ4OTQtZTliNS0z YTk5LTkzNjYtYTMyNDBiMDQ0MGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGM1ZjdlNzYtYjJjNS00ZjIwLWI1 M2UtMjQzNGNkZWRjMmMwLzhjNWY3ZTc2LWIyYzUtNGYyMC1iNTNlLTI0MzRjZGVk YzJjMC5jcmwwHwYDVR0jBBgwFoAU+yDD2WHD3BHpXpEcASQ0LwtHlcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YzVmN2U3Ni1iMmM1LTRmMjAtYjUzZS0yNDM0 Y2RlZGMyYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0b3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCyFzbsNASBvwBjI3xOhhaGAUXFvbP6ReUFO4HTPRCqndeKFDfQoaoo pv1R7fwayVMxATyJEsKD/o+0q0H/tcv754RYE5H9DG6T6qOxZKzNpszi9beoJLSz ljQX1n8EHnmWW8oPyBWINqHs8Rs+6hOqvBKj6ttdz842DIhZI3ScOpbdScJkTWc/ or8jQPhvOlVGqlCzJUZXFtn6NxKYA/TOF9nlvN3G5f1G8sgR6SgmYvBpduhVbx2k 8TwPggP7o0BG+WEulOqbfagjesf8C+ICWDblATPbkhL8VMiljgPQSvP8DVkIUsVW nvT1ZmrZXhL4LGEz/xffcTTi9ZVL4gU= -----END CERTIFICATE-----Generated at Sat Oct 17 19:28:19 2026 by rpki-client