$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c473def1-5d68-3d6b-a666-7cef7c202666.roa File: c473def1-5d68-3d6b-a666-7cef7c202666.roa (raw, json) Hash identifier: 4gOzK9p5K3R4UPWPcc6QFDuszEaiiyKE0/pbjaxy2PE= Subject key identifier: AD:E3:A0:16:5F:9C:D5:AB:72:CA:82:F6:D5:41:9E:47:FB:8F:74:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F8B0DA8081F2B7056D69D3F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c473def1-5d68-3d6b-a666-7cef7c202666.roa Signing time: Sun 18 Oct 2026 13:00:12 +0000 ROA not before: Sun 18 Oct 2026 13:00:12 +0000 ROA not after: Sat 16 Jan 2027 14:00:12 +0000 asID: 213120 IP address blocks: 209.200.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8b:0d:a8:08:1f:2b:70:56:d6:9d:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 13:00:12 2026 GMT Not After : Jan 16 14:00:12 2027 GMT Subject: CN=5cac3f0a-5915-42a7-bbc5-03cc255ddfb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e7:46:93:91:5a:8f:7b:44:94:a9:30:ff:79: 6d:2f:d7:b8:fa:9e:0c:06:69:26:8e:25:6e:a3:9b: eb:ea:a9:79:4b:55:d7:f2:b2:08:45:00:cf:0f:56: 56:07:32:b7:9a:54:a6:e5:45:3c:3e:06:eb:05:81: dc:d7:af:d2:bc:2a:71:00:81:7a:e0:cb:1b:f3:f9: 09:e1:11:03:a2:15:23:d9:dd:ea:6f:14:88:c6:b8: ab:a8:97:72:33:5f:8e:df:06:4e:c6:32:fd:89:99: ef:7b:a4:2b:c4:8b:89:19:92:f1:8b:ae:79:9b:ba: 91:59:ac:78:c3:21:61:7d:ef:76:db:d3:40:1b:e2: 47:b1:a9:35:61:49:e5:9f:2f:cb:bc:bd:51:ac:69: 64:c3:55:2b:b4:7a:74:a4:9f:00:2f:76:2f:dc:f9: 42:d2:b7:00:4c:c4:31:2a:6d:f2:88:16:c4:19:01: c2:ae:9d:ca:b7:0d:27:ef:fc:8e:d7:b8:5f:bd:d0: c8:39:9c:35:53:78:d7:61:f0:b2:98:37:c6:62:a6: e5:be:a4:e5:2a:45:15:7b:6c:bf:02:a4:e5:bd:cc: 4f:79:18:3a:63:56:e5:ab:d0:b1:18:6e:25:b0:1f: 0a:49:0b:59:3b:ac:8b:fb:26:e6:ee:54:93:bb:89: d1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E3:A0:16:5F:9C:D5:AB:72:CA:82:F6:D5:41:9E:47:FB:8F:74:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c473def1-5d68-3d6b-a666-7cef7c202666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:85:e0:87:42:8a:c0:75:6e:91:02:d6:98:6e:6b:4e:26:03: 4a:dd:56:05:b6:05:e4:81:a5:2d:35:07:7b:43:48:c9:c7:ab: d5:5b:dd:a7:5e:ae:de:6e:14:f4:45:a2:1e:61:d0:2e:af:6f: 72:09:51:b5:bb:da:38:da:5c:a4:90:82:81:27:06:ed:a4:a2: 57:79:00:b0:c0:6c:8e:33:e7:2e:f2:0d:46:96:0f:9d:b9:70: 3b:7a:54:d5:2b:52:8c:9c:f2:e6:e7:34:6e:f6:73:1e:b7:19: 6f:5c:38:c0:ef:6b:1c:ed:96:e1:af:e4:04:9e:fc:97:86:21: 87:fd:16:46:40:15:d8:17:f4:99:b6:77:fc:c2:0f:62:a6:04: d2:68:da:2a:77:00:4d:2b:60:cd:59:df:95:cc:ea:07:49:b0: 8f:ec:2f:9e:91:35:2a:62:85:9b:8d:f4:b6:b0:68:76:c5:ee: ea:2e:4c:1e:d2:d0:dc:b3:10:69:96:5f:f5:c2:12:2d:bd:04: 0b:99:03:3c:b6:95:bf:3f:bb:2f:ca:83:99:94:97:e9:ab:af: 46:69:80:b1:0b:97:c2:4e:2d:f3:55:54:2e:e2:06:b3:a2:48: 41:97:96:1f:f3:91:ec:ac:31:76:e1:c1:07:17:dd:77:bb:85: d0:aa:b4:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+LDagIHytwVtadP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxODEzMDAxMloXDTI3MDExNjE0MDAxMlowLzEtMCsGA1UEAxMk NWNhYzNmMGEtNTkxNS00MmE3LWJiYzUtMDNjYzI1NWRkZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgedGk5Faj3tElKkw/3ltL9e4+p4MBmkmjiVu o5vr6ql5S1XX8rIIRQDPD1ZWBzK3mlSm5UU8PgbrBYHc16/SvCpxAIF64Msb8/kJ 4REDohUj2d3qbxSIxrirqJdyM1+O3wZOxjL9iZnve6QrxIuJGZLxi655m7qRWax4 wyFhfe9229NAG+JHsak1YUnlny/LvL1RrGlkw1UrtHp0pJ8AL3Yv3PlC0rcATMQx Km3yiBbEGQHCrp3Ktw0n7/yO17hfvdDIOZw1U3jXYfCymDfGYqblvqTlKkUVe2y/ AqTlvcxPeRg6Y1blq9CxGG4lsB8KSQtZO6yL+ybm7lSTu4nRFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3joBZfnNWrcsqC9tVBnkf7j3SAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzQ3M2RlZjEtNWQ2OC0z ZDZiLWE2NjYtN2NlZjdjMjAyNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOF4IdCisB1bpEC1phua04mA0rdVgW2BeSBpS01B3tDSMnHq9Vb3ade rt5uFPRFoh5h0C6vb3IJUbW72jjaXKSQgoEnBu2kold5ALDAbI4z5y7yDUaWD525 cDt6VNUrUoyc8ubnNG72cx63GW9cOMDvaxztluGv5ASe/JeGIYf9FkZAFdgX9Jm2 d/zCD2KmBNJo2ip3AE0rYM1Z35XM6gdJsI/sL56RNSpihZuN9LawaHbF7uouTB7S 0NyzEGmWX/XCEi29BAuZAzy2lb8/uy/Kg5mUl+mrr0ZpgLELl8JOLfNVVC7iBrOi SEGXlh/zkeysMXbhwQcX3Xe7hdCqtPg= -----END CERTIFICATE-----Generated at Fri Oct 23 22:35:52 2026 by rpki-client