$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa File: 639c1735-1cd0-355a-a116-4129dc8f68b1.roa (raw, json) Hash identifier: g7kKnPQLVSpBHNcaKs1mQdfcVC5FNrJHE4l3JbsOKXM= Subject key identifier: EB:5C:46:7E:6B:6B:49:2B:C2:C6:B4:A0:50:3E:A5:E3:76:99:BD:90 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584F9E9873D1C70DD09AC86EC180 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 20471 IP address blocks: 209.124.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:73:d1:c7:0d:d0:9a:c8:6e:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=b6821b73-fb1e-4fbc-b0a0-1242fce235cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5d:bd:e3:94:1d:3c:29:3e:e0:e3:0b:32:78: d0:b8:78:06:39:6d:e6:48:07:17:20:bb:0d:76:b6: bf:ef:71:47:87:e1:d3:27:cd:9e:56:91:68:29:a8: 25:54:f5:ff:fe:f9:49:98:98:ba:26:ad:17:f3:51: 6f:42:64:12:31:e2:98:25:6b:45:71:8a:de:06:56: 3c:54:29:ea:ad:27:e1:23:db:a8:77:1e:ea:30:5b: b5:15:c8:a0:a9:98:5c:78:b8:87:ad:4f:6b:eb:c9: 36:c6:d2:f0:b7:10:3c:83:37:1f:62:42:06:39:e6: 1d:79:c8:c1:b6:61:55:00:ca:a7:4a:f2:b9:15:36: b3:b0:8f:82:ed:5c:b8:2b:7b:d9:0f:a9:f3:31:0b: ba:01:f7:e9:a2:83:4f:dc:e4:7e:b6:bc:ed:45:7f: c2:0d:2f:a7:d6:91:ca:2f:a3:de:e0:61:e5:1b:c7: b8:49:18:04:09:5e:a4:ab:03:ab:70:f7:28:a7:7b: 56:4f:d3:58:9e:a9:cd:bd:81:f1:c6:ed:2c:ca:43: b9:3a:1f:29:13:6e:70:3c:69:31:66:bc:58:27:dc: 6d:38:6c:0b:31:78:12:98:25:73:b9:6b:cb:8a:76: f2:00:b9:64:99:ee:ae:f6:d8:31:24:f8:56:6b:cd: 67:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5C:46:7E:6B:6B:49:2B:C2:C6:B4:A0:50:3E:A5:E3:76:99:BD:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:cd:66:10:63:d5:12:aa:52:00:f7:9e:a8:8f:d2:8c:f2:39: 07:c6:91:6e:0f:3f:8f:ab:9c:dd:67:fd:8a:bd:20:a3:4b:70: 56:4b:4c:2b:12:7f:57:80:b9:3c:02:5d:c1:60:fb:28:91:01: e2:56:3a:d5:ab:70:0f:cf:db:d8:5a:ba:c2:60:a9:9f:fc:3a: 8a:c0:bf:87:b8:81:1c:31:a2:0a:85:0d:01:1f:63:49:4e:1a: 9a:b4:40:89:f5:06:28:c2:89:59:80:36:a2:86:84:5b:7f:77: 46:ff:ad:d3:09:d1:a4:a2:8f:1e:e3:86:c6:4e:65:27:7b:c8: f3:d2:e0:75:bb:af:88:50:2a:8e:02:32:fb:98:af:64:92:6f: c8:c6:cf:65:bc:be:72:8e:5d:ce:8d:6f:ad:d6:90:a1:8e:d0: 5f:6c:b5:6b:d9:60:b5:9a:37:b0:cc:02:58:dd:9f:8b:3a:dd: 90:37:f3:fc:a0:29:e8:93:56:41:bc:7a:a8:15:25:7d:39:d5: f7:fb:52:7c:44:ba:38:0c:af:4d:77:4c:25:0a:13:60:4f:b5: ff:cd:e8:a5:cc:4f:7d:56:8b:2d:7e:ad:1a:13:18:63:1e:63: 45:3c:76:78:2e:fb:c3:c0:ce:f4:e3:8b:74:33:15:c5:7e:2b: de:74:fc:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emHPRxw3QmshuwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk YjY4MjFiNzMtZmIxZS00ZmJjLWIwYTAtMTI0MmZjZTIzNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnF2945QdPCk+4OMLMnjQuHgGOW3mSAcXILsN dra/73FHh+HTJ82eVpFoKaglVPX//vlJmJi6Jq0X81FvQmQSMeKYJWtFcYreBlY8 VCnqrSfhI9uodx7qMFu1FcigqZhceLiHrU9r68k2xtLwtxA8gzcfYkIGOeYdecjB tmFVAMqnSvK5FTazsI+C7Vy4K3vZD6nzMQu6AffpooNP3OR+trztRX/CDS+n1pHK L6Pe4GHlG8e4SRgECV6kqwOrcPcop3tWT9NYnqnNvYHxxu0sykO5Oh8pE25wPGkx ZrxYJ9xtOGwLMXgSmCVzuWvLinbyALlkme6u9tgxJPhWa81nwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtcRn5ra0krwsa0oFA+peN2mb2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNjM5YzE3MzUtMWNkMC0z NTVhLWExMTYtNDEyOWRjOGY2OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/NZhBj1RKqUgD3nqiP0ozyOQfGkW4PP4+rnN1n/Yq9IKNLcFZLTCsS f1eAuTwCXcFg+yiRAeJWOtWrcA/P29hausJgqZ/8OorAv4e4gRwxogqFDQEfY0lO Gpq0QIn1BijCiVmANqKGhFt/d0b/rdMJ0aSijx7jhsZOZSd7yPPS4HW7r4hQKo4C MvuYr2SSb8jGz2W8vnKOXc6Nb63WkKGO0F9stWvZYLWaN7DMAljdn4s63ZA38/yg KeiTVkG8eqgVJX051ff7UnxEujgMr013TCUKE2BPtf/N6KXMT31Wiy1+rRoTGGMe Y0U8dngu+8PAzvTji3QzFcV+K950/BM= -----END CERTIFICATE-----Generated at Mon Oct 26 20:31:36 2026 by rpki-client