$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa File: 639c1735-1cd0-355a-a116-4129dc8f68b1.roa (raw, json) Hash identifier: PC8/7q3mlxrK+DW9xfHQpaIqVXIkX2Zk5dJU5LYbYNE= Subject key identifier: 35:28:CB:38:58:D7:05:5A:03:19:57:82:D1:D3:59:93:84:E6:FD:7D Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584EFCACC1DCA5CCF30FC3A9B600 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 20471 IP address blocks: 209.124.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:c1:dc:a5:cc:f3:0f:c3:a9:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=f542edf8-e07b-4e13-8398-a5b20f1cd3f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c4:c0:44:07:fa:69:77:ae:7e:ac:9e:ee:1f: f9:21:22:36:86:6c:74:31:8e:b3:1a:5c:30:fc:36: 33:a7:3a:74:64:50:e4:3f:86:22:21:3f:aa:e0:8f: 81:6e:f4:2e:c8:0d:38:27:68:8b:21:38:45:86:5b: ce:e7:1a:b3:47:58:74:0d:2e:db:47:fd:ba:d8:04: 40:f7:00:cb:8e:07:2a:fd:38:6f:d3:ce:a3:39:3d: cd:83:c5:f2:19:23:ca:5d:9c:fb:7d:21:a2:aa:ce: a1:24:96:bd:c0:b9:cd:bc:0f:66:55:4b:96:ae:cf: 16:8f:f9:09:02:c1:27:2c:12:5e:c1:78:09:61:42: 21:e7:e4:06:34:ff:19:bd:ed:d2:f3:5a:af:b4:79: 09:a1:84:80:06:83:ce:e3:76:0c:27:9c:40:ef:7e: c6:7f:dd:7e:00:f8:7d:41:81:1e:e6:e2:78:7e:22: f9:b8:14:d4:8d:ef:e7:68:ad:a4:75:2d:7f:1a:ff: b3:76:5f:8d:11:a0:4b:73:77:83:d8:b5:ee:82:0a: d8:e5:f2:ca:53:c6:0d:c7:eb:ee:f7:ba:47:90:64: 44:5a:99:31:06:bb:41:58:5f:b4:41:21:23:e1:6b: 19:93:7c:d0:4b:08:fa:ba:9f:0a:b9:0d:b9:06:a7: 9e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:28:CB:38:58:D7:05:5A:03:19:57:82:D1:D3:59:93:84:E6:FD:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:15:25:d7:4c:c2:7b:e5:ac:5b:ef:83:48:a7:16:3c:a3:2c: ba:fb:2f:0c:f9:8d:06:eb:fd:c4:e7:3e:62:ee:1c:27:c4:c0: 6c:01:e0:88:d8:a6:0a:d3:18:61:5f:31:16:9c:9a:af:af:4f: 88:3d:43:c7:71:55:b8:62:d1:ed:8c:5b:99:97:0f:5f:14:df: 26:54:37:22:78:84:17:08:db:60:f5:2a:cf:75:c0:e0:e4:a3: a1:7b:dd:9b:98:f4:0d:66:d8:56:b7:fe:4b:c4:95:80:b0:d8: cd:fd:f0:85:03:b5:38:a1:51:59:be:43:5d:75:a7:81:35:0a: 98:09:e0:0e:63:7e:93:88:26:f1:fe:c2:9b:7d:46:2a:d2:24: e3:4d:14:c0:1f:df:8c:c7:2a:87:b6:bc:e9:33:97:ef:a1:09: 65:f7:7e:55:9f:4d:c4:3a:a1:3b:9f:2d:f8:2d:6b:0b:c0:26: 49:f3:55:2a:83:35:b5:4b:b3:70:59:e1:37:4c:62:db:e8:91: 24:42:c1:d3:ad:0a:f2:6e:37:38:a2:a0:aa:3c:5d:99:cc:19: a9:b6:78:ed:a7:d6:5c:8b:6c:3a:b5:9e:82:fb:1c:5e:bc:ad: 04:32:e7:d4:d9:84:c7:76:74:72:46:8d:fb:48:6c:96:30:7b: cb:7c:1c:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rMHcpczzD8OptgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjU0MmVkZjgtZTA3Yi00ZTEzLTgzOTgtYTViMjBmMWNkM2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsTARAf6aXeufqye7h/5ISI2hmx0MY6zGlww /DYzpzp0ZFDkP4YiIT+q4I+BbvQuyA04J2iLIThFhlvO5xqzR1h0DS7bR/262ARA 9wDLjgcq/Thv086jOT3Ng8XyGSPKXZz7fSGiqs6hJJa9wLnNvA9mVUuWrs8Wj/kJ AsEnLBJewXgJYUIh5+QGNP8Zve3S81qvtHkJoYSABoPO43YMJ5xA737Gf91+APh9 QYEe5uJ4fiL5uBTUje/naK2kdS1/Gv+zdl+NEaBLc3eD2LXuggrY5fLKU8YNx+vu 97pHkGREWpkxBrtBWF+0QSEj4WsZk3zQSwj6up8KuQ25BqeeCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUoyzhY1wVaAxlXgtHTWZOE5v19MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNjM5YzE3MzUtMWNkMC0z NTVhLWExMTYtNDEyOWRjOGY2OGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4VJddMwnvlrFvvg0inFjyjLLr7Lwz5jQbr/cTnPmLuHCfEwGwB4IjY pgrTGGFfMRacmq+vT4g9Q8dxVbhi0e2MW5mXD18U3yZUNyJ4hBcI22D1Ks91wODk o6F73ZuY9A1m2Fa3/kvElYCw2M398IUDtTihUVm+Q111p4E1CpgJ4A5jfpOIJvH+ wpt9RirSJONNFMAf34zHKoe2vOkzl++hCWX3flWfTcQ6oTufLfgtawvAJknzVSqD NbVLs3BZ4TdMYtvokSRCwdOtCvJuNziioKo8XZnMGam2eO2n1lyLbDq1noL7HF68 rQQy59TZhMd2dHJGjftIbJYwe8t8HCk= -----END CERTIFICATE-----Generated at Sat Sep 19 13:29:57 2026 by rpki-client