$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9b5227c-61bf-3314-8341-9d1d63d1f037.roa File: b9b5227c-61bf-3314-8341-9d1d63d1f037.roa (raw, json) Hash identifier: 9Y7ys75qr6O2z4091uHxtzAe8aLEC0KG57B1UFxrcvg= Subject key identifier: 96:BA:91:3D:19:42:BF:55:12:16:1E:49:98:B9:57:0C:79:9B:1A:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F6C582E7824322255C7CCF0C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9b5227c-61bf-3314-8341-9d1d63d1f037.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 32787 IP address blocks: 209.200.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:2e:78:24:32:22:55:c7:cc:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=c79694ad-05a0-4e31-aa2e-7106e2de2e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:79:72:d3:9a:0d:36:6b:24:bc:a0:65:98:b0: 54:fb:a5:37:af:88:1b:86:df:ee:8a:1f:ce:cb:d1: bb:65:fe:88:1a:ea:34:68:fd:2e:6f:7a:48:7b:a3: 4f:12:4b:9d:05:8f:af:ec:b2:49:9e:7f:73:1d:b2: 35:a2:ad:16:8d:c0:a4:1a:65:e7:71:30:e6:aa:b4: ea:9b:36:7d:09:6d:48:85:7e:f1:69:7a:f7:7d:99: 0c:38:27:34:cf:e8:84:08:8f:46:df:3d:7c:8a:d2: 5e:cc:b5:9c:80:f9:60:ba:5a:33:11:f0:66:52:e7: dc:5d:2f:65:3c:81:a0:b8:91:90:2c:3c:63:0d:e8: 57:23:d2:ca:24:4c:c3:c5:a5:eb:5d:f0:90:bc:2f: a1:8a:4e:08:89:e0:8a:d3:72:16:54:39:a9:3f:0f: 6e:de:da:da:7f:59:61:46:22:63:bf:33:c2:a7:da: 15:37:d0:b1:d4:bf:b8:7e:ed:43:1f:f5:86:dd:1a: c5:a7:d9:5b:a1:45:44:dc:e2:8f:5c:fb:8c:00:3c: a5:0d:a2:8d:56:37:87:5b:2f:c6:6d:6f:37:99:be: dd:1f:da:7a:b8:cd:b9:4e:49:24:81:79:5c:3d:7d: 5c:d2:8d:05:d1:d8:df:5b:ea:04:79:32:a2:de:41: 6a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BA:91:3D:19:42:BF:55:12:16:1E:49:98:B9:57:0C:79:9B:1A:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b9b5227c-61bf-3314-8341-9d1d63d1f037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2e:21:2d:f6:a6:ba:89:53:d2:ef:72:52:55:ee:70:39:5e: dc:aa:0b:77:3d:4b:65:13:7d:9e:50:90:d4:76:61:7d:c8:e5: a9:c7:87:64:9b:38:8b:86:f3:40:0e:8d:78:bf:03:41:19:ae: 48:2c:dc:a8:85:5e:dd:69:f4:72:be:91:18:44:9c:e0:be:4a: 57:82:83:59:a2:26:ea:66:52:8d:d8:dd:c6:b6:fe:ca:34:14: bc:b9:6b:13:2c:6f:b7:2b:3d:c0:a2:bb:b4:27:6f:d9:c8:af: 0a:b2:3f:b2:60:cb:22:72:bc:15:cf:9e:22:23:b0:e8:1a:9b: b1:0d:f6:47:c3:0d:52:ef:8f:e9:9a:e7:35:ee:5b:85:6e:5f: 0e:90:1f:8a:c8:dd:f8:4a:77:74:2a:66:0c:58:87:db:88:3b: b0:55:75:12:62:16:63:55:bb:3d:09:87:c9:7a:b1:52:c1:42: 59:eb:52:14:e2:34:1b:23:48:c4:1a:71:76:b2:5e:a6:f6:92: 32:f3:44:4e:cf:05:d7:c7:60:a3:96:2a:73:4a:ee:18:14:53: a8:8d:1a:83:5a:a4:f1:e6:83:89:11:4a:50:eb:db:46:8e:af: 81:56:4d:1a:02:43:1c:4c:f5:dc:d4:95:de:94:f4:e9:26:ae: 2a:99:68:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWC54JDIiVcfM8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk Yzc5Njk0YWQtMDVhMC00ZTMxLWFhMmUtNzEwNmUyZGUyZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinly05oNNmskvKBlmLBU+6U3r4gbht/uih/O y9G7Zf6IGuo0aP0ub3pIe6NPEkudBY+v7LJJnn9zHbI1oq0WjcCkGmXncTDmqrTq mzZ9CW1IhX7xaXr3fZkMOCc0z+iECI9G3z18itJezLWcgPlgulozEfBmUufcXS9l PIGguJGQLDxjDehXI9LKJEzDxaXrXfCQvC+hik4IieCK03IWVDmpPw9u3traf1lh RiJjvzPCp9oVN9Cx1L+4fu1DH/WG3RrFp9lboUVE3OKPXPuMADylDaKNVjeHWy/G bW83mb7dH9p6uM25TkkkgXlcPX1c0o0F0djfW+oEeTKi3kFqIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJa6kT0ZQr9VEhYeSZi5Vwx5mxo3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjliNTIyN2MtNjFiZi0z MzE0LTgzNDEtOWQxZDYzZDFmMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYuIS32prqJU9LvclJV7nA5XtyqC3c9S2UTfZ5QkNR2YX3I5anHh2Sb OIuG80AOjXi/A0EZrkgs3KiFXt1p9HK+kRhEnOC+SleCg1miJupmUo3Y3ca2/so0 FLy5axMsb7crPcCiu7Qnb9nIrwqyP7JgyyJyvBXPniIjsOgam7EN9kfDDVLvj+ma 5zXuW4VuXw6QH4rI3fhKd3QqZgxYh9uIO7BVdRJiFmNVuz0Jh8l6sVLBQlnrUhTi NBsjSMQacXayXqb2kjLzRE7PBdfHYKOWKnNK7hgUU6iNGoNapPHmg4kRSlDr20aO r4FWTRoCQxxM9dzUld6U9OkmriqZaE8= -----END CERTIFICATE-----Generated at Mon Oct 26 11:28:04 2026 by rpki-client