$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/dc68370b-afda-3ce5-a4bd-88cf782945a5.roa File: dc68370b-afda-3ce5-a4bd-88cf782945a5.roa (raw, json) Hash identifier: M7mDnl4OjNF70guw9aZ5cVG9aUo7Cbj0/2CkNDhm+cI= Subject key identifier: C5:FE:4B:33:83:A9:45:84:25:79:84:86:F7:13:8D:68:AE:C0:37:78 Certificate issuer: /CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0 Certificate serial: 010D0C9F4328584F4C3D6DDB808701A781663C80 Authority key identifier: FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/dc68370b-afda-3ce5-a4bd-88cf782945a5.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 19366 IP address blocks: 209.189.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:6d:db:80:87:01:a7:81:66:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b2bfe38f-1c52-4b4c-8e63-cced0745688c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:64:45:48:fe:fc:41:b4:32:98:7f:a3:1c:94: 4a:cf:38:a1:d4:08:96:41:0f:d2:b9:84:81:08:77: e7:ca:92:d1:55:e0:75:0a:d2:0e:47:3e:e5:db:58: d3:76:0b:8f:5a:fc:de:07:2f:f4:c8:16:2f:5d:6c: b0:34:8a:58:99:55:19:79:68:e6:47:92:22:02:d2: 87:8f:b0:13:b3:bb:63:00:bf:d7:4a:37:39:56:0c: f8:e3:b1:86:22:ff:cb:bd:c8:00:52:63:68:5a:77: b7:95:34:4f:6d:0e:81:65:ad:bc:80:9a:a1:b5:ec: 98:55:1a:51:a8:a0:08:36:fc:2d:8b:7e:1a:cf:82: 37:f2:30:f2:f4:27:f9:e0:9c:3d:91:e7:c8:d7:ae: 02:46:01:fa:5d:ab:ac:de:59:f6:59:ad:77:02:fc: 05:2e:42:aa:65:69:68:6c:ba:66:58:6d:3d:40:d5: 15:00:fa:d9:4e:ad:b9:ad:a3:75:4a:75:66:04:9d: d9:9a:11:2a:bd:c8:cf:b6:57:9a:d1:14:f4:40:b6: 5f:0f:88:fa:97:a7:fb:1b:1a:7a:b5:12:37:8f:29: ac:6b:12:6e:4a:6b:df:05:88:58:af:4d:64:ce:07: b6:05:6c:d5:70:27:9a:2c:a7:99:0c:b8:39:50:9d: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FE:4B:33:83:A9:45:84:25:79:84:86:F7:13:8D:68:AE:C0:37:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/dc68370b-afda-3ce5-a4bd-88cf782945a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl X509v3 Authority Key Identifier: keyid:FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer sbgp-ipAddrBlock: critical IPv4: 209.189.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a3:45:79:d2:dd:b0:3d:16:2e:a0:ab:17:ef:16:ed:88:24: 16:95:05:ca:f2:ac:2e:5e:da:d8:e1:f4:8e:b8:f4:d1:5a:f1: 69:56:e5:72:69:49:b1:4f:51:7c:a6:0f:bc:cd:7f:64:2b:95: 83:de:92:5c:0a:5c:3d:d9:a0:ea:f6:07:3a:c8:1f:54:80:aa: 5d:ad:cc:42:30:aa:cb:7c:bd:13:09:6d:d5:e8:01:8f:8d:fb: e6:a0:b1:cc:df:7b:1d:ec:c0:3d:73:85:a4:cc:1d:91:bd:3e: 99:bd:51:6a:c8:2b:e3:e0:c4:d5:da:1a:6a:d2:d9:a9:c3:a3: 11:94:26:6a:db:f7:74:bf:55:9b:7e:7d:3f:ba:a4:d8:b7:7b: ea:97:d1:f3:2c:63:c5:ce:69:36:00:77:c2:f8:44:b0:b5:40: 0c:65:82:a7:00:c5:c8:a0:02:ff:50:6f:72:68:06:b8:59:4e: 2e:58:51:3a:a1:56:3f:e3:89:82:08:c2:6a:01:43:dd:7d:ea: d3:12:90:be:b2:37:92:95:8a:52:87:3a:76:33:02:82:39:d0: 9b:eb:04:fc:6b:de:b0:ab:55:36:35:eb:49:ae:84:7c:61:b1: 6e:df:64:57:27:28:b2:ab:43:ba:a7:44:5d:fe:99:2a:2f:5c: e6:90:3b:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPW3bgIcBp4FmPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM1ZjdlNzYtYjJjNS00ZjIwLWI1M2UtMjQzNGNkZWRj MmMwMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjJiZmUzOGYtMWM1Mi00YjRjLThlNjMtY2NlZDA3NDU2ODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGRFSP78QbQymH+jHJRKzzih1AiWQQ/SuYSB CHfnypLRVeB1CtIORz7l21jTdguPWvzeBy/0yBYvXWywNIpYmVUZeWjmR5IiAtKH j7ATs7tjAL/XSjc5Vgz447GGIv/LvcgAUmNoWne3lTRPbQ6BZa28gJqhteyYVRpR qKAINvwti34az4I38jDy9Cf54Jw9kefI164CRgH6Xaus3ln2Wa13AvwFLkKqZWlo bLpmWG09QNUVAPrZTq25raN1SnVmBJ3ZmhEqvcjPtlea0RT0QLZfD4j6l6f7Gxp6 tRI3jymsaxJuSmvfBYhYr01kzge2BWzVcCeaLKeZDLg5UJ3EWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX+SzODqUWEJXmEhvcTjWiuwDd4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YzVm N2U3Ni1iMmM1LTRmMjAtYjUzZS0yNDM0Y2RlZGMyYzAvZGM2ODM3MGItYWZkYS0z Y2U1LWE0YmQtODhjZjc4Mjk0NWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGM1ZjdlNzYtYjJjNS00ZjIwLWI1 M2UtMjQzNGNkZWRjMmMwLzhjNWY3ZTc2LWIyYzUtNGYyMC1iNTNlLTI0MzRjZGVk YzJjMC5jcmwwHwYDVR0jBBgwFoAU+yDD2WHD3BHpXpEcASQ0LwtHlcwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YzVmN2U3Ni1iMmM1LTRmMjAtYjUzZS0yNDM0 Y2RlZGMyYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0b3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2jRXnS3bA9Fi6gqxfvFu2IJBaVBcryrC5e2tjh9I649NFa8WlW5XJp SbFPUXymD7zNf2QrlYPeklwKXD3ZoOr2BzrIH1SAql2tzEIwqst8vRMJbdXoAY+N ++agsczfex3swD1zhaTMHZG9Ppm9UWrIK+PgxNXaGmrS2anDoxGUJmrb93S/VZt+ fT+6pNi3e+qX0fMsY8XOaTYAd8L4RLC1QAxlgqcAxcigAv9Qb3JoBrhZTi5YUTqh Vj/jiYIIwmoBQ9196tMSkL6yN5KVilKHOnYzAoI50JvrBPxr3rCrVTY160muhHxh sW7fZFcnKLKrQ7qnRF3+mSovXOaQO0c= -----END CERTIFICATE-----Generated at Fri Oct 16 14:48:45 2026 by rpki-client