$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa File: 2d941046-d327-388c-9f7a-ab2771f7f1a4.roa (raw, json) Hash identifier: MAqJb8Y+XbWMHqNMtJhHef4I9w0w4RBVn3dSzhR8+4E= Subject key identifier: A4:71:80:04:47:1F:EF:B3:7B:8E:27:18:65:9B:0E:96:13:EB:CA:27 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584F7BB2F8FC7D26079248C82300 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 12129 IP address blocks: 209.124.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:f8:fc:7d:26:07:92:48:c8:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=ac652fce-15c1-4f84-8816-ef551b631d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:06:40:b8:f1:93:19:b7:bf:c7:ff:0b:b6:7b: c5:65:04:41:70:d0:2b:3d:43:da:c5:d4:98:e5:c5: 66:af:04:d1:d2:e5:ab:56:80:b8:7e:a1:30:e3:85: 4c:f4:7f:4e:b5:dd:3c:6c:3b:0d:ab:04:12:b3:7e: f5:f1:f9:0e:c7:f2:62:bb:0b:d4:e7:ff:e5:fc:ca: 57:e6:78:f8:e9:3f:91:1b:a0:4d:aa:19:ea:aa:07: cc:b0:cd:67:4d:3e:3c:03:3a:60:bd:7c:9a:c3:44: fa:9d:ae:30:21:43:b4:52:f8:6a:3c:72:ed:d7:71: 3f:b9:c5:2e:73:e9:c1:0e:50:34:8f:80:b5:07:7b: 7c:0d:ba:37:10:55:99:0b:86:7f:c4:3e:40:0e:c1: 1d:04:b3:f1:20:a5:46:3e:87:c4:b1:af:bc:5e:83: 05:78:77:80:9e:7c:5c:a1:e1:3e:7a:99:01:ef:5c: 25:2a:12:4b:5e:70:9e:51:e1:2a:07:71:5b:52:1d: 2d:6f:91:05:17:d0:1e:db:9f:db:8c:63:67:a4:26: e0:14:61:51:6b:ae:dd:e2:2d:5a:92:9d:e9:89:8a: c5:17:11:2e:3d:bd:86:0b:c3:d6:60:fe:ab:b0:13: 76:68:63:51:89:d0:d6:a9:e8:ba:89:7b:e3:41:03: 0e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:71:80:04:47:1F:EF:B3:7B:8E:27:18:65:9B:0E:96:13:EB:CA:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/2d941046-d327-388c-9f7a-ab2771f7f1a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:60:34:33:ca:cc:ad:09:54:2a:4c:d0:2a:f9:89:e6:ed:e7: 03:bb:64:60:87:51:0b:31:bc:c0:5b:60:4c:c8:ca:64:71:1d: b7:31:9d:87:0f:53:94:83:75:29:cc:d4:40:ca:53:3f:15:e8: d4:7b:63:c0:20:3b:8d:ea:5a:e2:b0:e4:2d:4d:17:cf:8c:db: e0:a4:5d:f5:68:2f:cd:2b:2e:e3:26:7b:8b:5d:6e:2d:ed:d9: 0e:ce:35:56:7b:2c:42:f9:96:9c:ba:20:11:ae:84:18:7b:02: f9:88:ad:6a:d0:cc:80:e4:e4:32:99:b2:c8:d4:03:ef:da:30: bb:4f:48:77:52:4d:6b:c5:50:7b:c9:17:7d:e5:ca:26:6e:54: 70:64:f1:f1:6d:45:06:58:ad:31:be:e3:3a:b9:0d:e2:73:52: f7:74:b5:eb:de:d4:dd:4d:19:4c:8a:64:e9:93:38:18:bf:97: 6c:ad:65:fb:ef:c8:90:8e:21:ac:de:65:7c:53:0b:ef:19:c3: 94:ed:3a:49:0f:21:21:28:f5:5b:f0:ae:be:0b:65:c2:b3:19: 9d:1c:f0:0f:64:5a:a3:ec:f3:b7:21:e0:a8:d2:0e:d7:5f:a7: f5:39:6c:78:c2:ca:70:04:9e:0f:cc:b6:14:50:58:b9:52:b6: 1f:52:99:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97svj8fSYHkkjIIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk YWM2NTJmY2UtMTVjMS00Zjg0LTg4MTYtZWY1NTFiNjMxZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQZAuPGTGbe/x/8LtnvFZQRBcNArPUPaxdSY 5cVmrwTR0uWrVoC4fqEw44VM9H9Otd08bDsNqwQSs3718fkOx/JiuwvU5//l/MpX 5nj46T+RG6BNqhnqqgfMsM1nTT48AzpgvXyaw0T6na4wIUO0UvhqPHLt13E/ucUu c+nBDlA0j4C1B3t8Dbo3EFWZC4Z/xD5ADsEdBLPxIKVGPofEsa+8XoMFeHeAnnxc oeE+epkB71wlKhJLXnCeUeEqB3FbUh0tb5EFF9Ae25/bjGNnpCbgFGFRa67d4i1a kp3piYrFFxEuPb2GC8PWYP6rsBN2aGNRidDWqei6iXvjQQMOmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRxgARHH++ze44nGGWbDpYT68onMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvMmQ5NDEwNDYtZDMyNy0z ODhjLTlmN2EtYWIyNzcxZjdmMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Xw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhgNDPKzK0JVCpM0Cr5iebt5wO7ZGCHUQsxvMBbYEzIymRxHbcxnYcP U5SDdSnM1EDKUz8V6NR7Y8AgO43qWuKw5C1NF8+M2+CkXfVoL80rLuMme4tdbi3t 2Q7ONVZ7LEL5lpy6IBGuhBh7AvmIrWrQzIDk5DKZssjUA+/aMLtPSHdSTWvFUHvJ F33lyiZuVHBk8fFtRQZYrTG+4zq5DeJzUvd0teve1N1NGUyKZOmTOBi/l2ytZfvv yJCOIazeZXxTC+8Zw5TtOkkPISEo9Vvwrr4LZcKzGZ0c8A9kWqPs87ch4KjSDtdf p/U5bHjCynAEng/MthRQWLlSth9SmfA= -----END CERTIFICATE-----Generated at Tue Oct 27 16:41:47 2026 by rpki-client