$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa File: 6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa (raw, json) Hash identifier: vLbW7C6O5neeM7+P+9SGe0M/rmiKZofw/QOgdwa9sJs= Subject key identifier: 9B:93:37:07:B4:5A:FA:BD:BC:74:14:E8:3B:D3:7E:61:F9:55:5A:9B Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584F7BB2F88A1E80BF4F49A79F00 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 12129 IP address blocks: 209.131.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:f8:8a:1e:80:bf:4f:49:a7:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=95656982-a958-4f97-8d47-c141b06c2e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:80:14:01:93:ab:62:38:3c:94:d3:18:dc:33: 94:14:1a:e5:62:fc:93:1a:95:ca:2a:e9:6c:01:a6: e0:0f:68:3c:fb:eb:35:16:49:b1:be:b9:da:87:d4: 8f:b0:04:8e:a6:41:27:e8:48:86:4e:64:37:b1:2f: 2d:26:7c:7e:38:d8:2a:84:e4:e6:e2:53:95:76:28: 5e:27:75:3c:23:bc:7a:90:87:ef:ab:82:ec:fe:bc: d4:76:a3:79:4c:cb:8f:6b:10:a5:58:e8:ca:64:14: fc:cb:9d:38:bc:0e:01:17:9a:44:8a:1c:d2:38:9f: 58:1f:31:69:0a:67:9a:90:b2:76:a2:31:c4:f5:57: a5:9a:22:2f:55:ab:41:ba:72:25:67:2b:56:e3:bf: 1e:56:a2:20:4f:d5:26:6e:00:65:8b:1e:a9:ba:e5: 1d:6e:65:80:9d:0a:67:4c:5c:37:d5:c8:0d:35:9a: 33:a4:95:19:54:a7:14:dd:0c:39:d3:0f:e3:30:e2: 84:b6:05:94:4f:86:98:0c:00:c4:3c:45:55:e4:b6: 4a:4a:ff:91:fd:26:c3:0e:19:94:31:0b:45:cd:24: a9:b1:3b:c1:3b:12:53:d6:b7:15:24:fe:9a:08:0c: b2:84:1c:ab:82:0a:9b:3b:a1:8d:e9:72:b3:e1:66: 6d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:93:37:07:B4:5A:FA:BD:BC:74:14:E8:3B:D3:7E:61:F9:55:5A:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.131.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0c:a0:3b:4e:b1:fe:7e:72:e6:d2:da:46:f3:2b:62:da:27: 89:06:87:73:6f:4b:47:5f:96:1b:a1:a5:ba:a5:7f:fa:7d:c7: 58:e8:2f:58:a4:6b:a4:ec:ea:00:7e:4b:fe:ef:7c:22:61:41: 74:24:7a:f7:2d:72:eb:9c:29:34:ff:c1:e7:1e:c3:01:d0:ac: e1:5c:68:4e:cd:b3:fb:d1:8e:cf:4d:39:7d:26:a9:4f:2b:50: cb:7d:aa:8e:64:a2:ca:31:e6:d6:a9:fa:5b:d8:ff:34:3b:43: 9f:5d:1a:cd:de:b9:e6:39:ef:bf:b0:e3:dc:a1:86:21:08:df: b5:b9:ec:0a:48:fb:5b:78:22:be:ba:bf:ae:34:58:cd:fe:66: 16:6c:9e:e3:1a:ee:9c:9f:41:aa:c5:e8:14:9b:2e:97:db:cf: 9d:ef:fe:c5:41:e9:d8:6d:b9:ec:17:0d:fc:2e:3d:c2:fe:ee: 2c:74:bc:d0:b1:95:08:66:ed:d4:f7:18:d5:f9:76:3a:83:6d: d7:69:93:89:6a:65:bc:f3:c9:39:a7:52:80:77:4e:75:5b:2d: 18:cc:89:5a:09:f7:d4:d7:f4:f5:46:c0:79:bd:43:be:a5:b3: b1:78:b6:3f:74:a7:75:75:f9:73:df:d5:16:4f:61:63:6a:e7: 03:77:be:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sviKHoC/T0mnnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk OTU2NTY5ODItYTk1OC00Zjk3LThkNDctYzE0MWIwNmMyZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIAUAZOrYjg8lNMY3DOUFBrlYvyTGpXKKuls AabgD2g8++s1Fkmxvrnah9SPsASOpkEn6EiGTmQ3sS8tJnx+ONgqhOTm4lOVdihe J3U8I7x6kIfvq4Ls/rzUdqN5TMuPaxClWOjKZBT8y504vA4BF5pEihzSOJ9YHzFp CmeakLJ2ojHE9VelmiIvVatBunIlZytW478eVqIgT9UmbgBlix6puuUdbmWAnQpn TFw31cgNNZozpJUZVKcU3Qw50w/jMOKEtgWUT4aYDADEPEVV5LZKSv+R/SbDDhmU MQtFzSSpsTvBOxJT1rcVJP6aCAyyhByrggqbO6GN6XKz4WZtAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuTNwe0Wvq9vHQU6DvTfmH5VVqbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvNmE2ZjNjZmYtNmFjMC0z MTFmLTkxZWUtNGJlZTNiMDEzN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0YMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkMoDtOsf5+cubS2kbzK2LaJ4kGh3NvS0dflhuhpbqlf/p9x1joL1ik a6Ts6gB+S/7vfCJhQXQkevctcuucKTT/wecewwHQrOFcaE7Ns/vRjs9NOX0mqU8r UMt9qo5kosox5tap+lvY/zQ7Q59dGs3eueY577+w49yhhiEI37W57ApI+1t4Ir66 v640WM3+ZhZsnuMa7pyfQarF6BSbLpfbz53v/sVB6dhtuewXDfwuPcL+7ix0vNCx lQhm7dT3GNX5djqDbddpk4lqZbzzyTmnUoB3TnVbLRjMiVoJ99TX9PVGwHm9Q76l s7F4tj90p3V1+XPf1RZPYWNq5wN3vo4= -----END CERTIFICATE-----Generated at Tue Oct 27 17:05:03 2026 by rpki-client