$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa File: 84d571f2-66e1-3f12-9230-063e7c81b63a.roa (raw, json) Hash identifier: p6bCYaIcS63ByRJM/bdgH/hyejAdYXIfZp/lKfTO8ow= Subject key identifier: 12:B1:0B:45:9F:8E:B8:BF:9E:5D:B9:6A:A3:1C:BF:DF:FA:5B:6E:82 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584F7BB2F8F08F0938EC03070C00 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 12129 IP address blocks: 209.124.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:f8:f0:8f:09:38:ec:03:07:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=a9d12819-a264-402b-8baa-24f2c847abd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c5:dd:2f:ed:e4:52:e4:8c:66:56:97:57:18: 5b:d6:78:d3:a2:ee:fe:ff:1e:13:82:29:9f:63:02: a9:b7:de:68:b2:f1:b3:7e:47:36:1c:13:f7:0e:3c: b7:24:7c:dc:4e:6e:37:7e:5e:cc:3c:3c:26:9a:2f: cf:30:75:da:3b:05:c1:fb:13:a0:8c:2c:62:ae:6c: 4f:fa:05:74:63:17:83:e4:26:ce:a5:21:b4:26:ce: 44:00:b9:94:4a:cc:71:a3:ab:e3:a6:e7:93:1d:31: 60:4a:70:45:df:44:8f:07:7b:a6:3c:7c:e8:45:7d: 45:85:fe:a6:64:81:99:eb:00:2f:fe:cb:df:d7:0a: 95:f2:d9:60:cf:e9:bd:ab:f7:f0:45:64:fe:0e:a8: 9e:14:65:4c:0d:3a:f3:f7:63:08:7d:86:08:ec:8a: c5:24:4b:22:70:4e:5a:a9:18:90:6f:68:d9:56:f2: 5c:fa:e8:e2:ef:cc:26:74:a9:43:2a:42:58:e2:8f: 90:29:f6:42:12:de:dd:55:cf:48:cc:6d:29:11:0a: bf:34:db:9f:4b:43:db:f0:c8:35:45:13:2c:ff:c1: ba:9d:36:6b:d9:ff:49:2d:ff:3f:1b:55:de:fe:7d: c1:df:d5:44:40:e4:ae:d3:29:7e:42:be:2a:55:ea: 27:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B1:0B:45:9F:8E:B8:BF:9E:5D:B9:6A:A3:1C:BF:DF:FA:5B:6E:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/84d571f2-66e1-3f12-9230-063e7c81b63a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:4a:c2:b1:af:df:54:4d:e4:1a:73:72:ac:7e:55:d4:f3:48: 36:12:0f:18:b2:8d:9f:6d:f9:dc:9d:f2:f7:77:12:c5:03:75: 2f:b1:5f:fc:96:2f:30:13:10:66:af:7e:00:a7:55:fa:e1:b6: 7e:04:d2:6a:d5:82:58:de:ea:f7:5c:f0:4b:36:df:30:83:f7: 33:97:4c:99:09:49:5f:a9:a5:01:d7:26:25:f8:45:3f:34:64: 55:3f:27:e2:22:c1:59:cf:cb:ca:cc:c4:ce:c6:1d:c6:98:75: b9:50:f3:98:b7:8c:a1:0c:88:70:52:5e:4d:7c:f3:67:6d:e8: 30:24:16:68:12:30:70:07:b5:4b:9f:5c:3d:27:b8:5e:0c:18: a9:4f:bd:be:db:7f:0b:7b:da:74:bc:4b:91:67:a3:c4:a5:9c: e9:7f:24:7c:6d:bb:d1:59:62:22:99:0c:31:5b:1a:a1:49:bd: 6d:25:6e:28:2b:4b:10:13:fd:57:36:d3:3a:01:74:fa:92:ee: 44:f2:1e:67:7e:c1:6e:ae:24:1e:9b:a0:c2:d8:3e:d0:d5:76: cf:43:fa:84:21:a9:c6:59:09:ad:8b:59:cd:74:e7:c0:d4:5f: 85:02:67:12:d1:c9:13:52:b1:43:a5:ea:e6:34:3a:51:e3:81: 6d:ed:fa:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97svjwjwk47AMHDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk YTlkMTI4MTktYTI2NC00MDJiLThiYWEtMjRmMmM4NDdhYmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMXdL+3kUuSMZlaXVxhb1njTou7+/x4Tgimf YwKpt95osvGzfkc2HBP3Djy3JHzcTm43fl7MPDwmmi/PMHXaOwXB+xOgjCxirmxP +gV0YxeD5CbOpSG0Js5EALmUSsxxo6vjpueTHTFgSnBF30SPB3umPHzoRX1Fhf6m ZIGZ6wAv/svf1wqV8tlgz+m9q/fwRWT+DqieFGVMDTrz92MIfYYI7IrFJEsicE5a qRiQb2jZVvJc+uji78wmdKlDKkJY4o+QKfZCEt7dVc9IzG0pEQq/NNufS0Pb8Mg1 RRMs/8G6nTZr2f9JLf8/G1Xe/n3B39VEQOSu0yl+Qr4qVeonLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKxC0Wfjri/nl25aqMcv9/6W26CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvODRkNTcxZjItNjZlMS0z ZjEyLTkyMzAtMDYzZTdjODFiNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0XwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhKwrGv31RN5Bpzcqx+VdTzSDYSDxiyjZ9t+dyd8vd3EsUDdS+xX/yW LzATEGavfgCnVfrhtn4E0mrVglje6vdc8Es23zCD9zOXTJkJSV+ppQHXJiX4RT80 ZFU/J+IiwVnPy8rMxM7GHcaYdblQ85i3jKEMiHBSXk1882dt6DAkFmgSMHAHtUuf XD0nuF4MGKlPvb7bfwt72nS8S5Fno8SlnOl/JHxtu9FZYiKZDDFbGqFJvW0lbigr SxAT/Vc20zoBdPqS7kTyHmd+wW6uJB6boMLYPtDVds9D+oQhqcZZCa2LWc1058DU X4UCZxLRyRNSsUOl6uY0OlHjgW3t+tk= -----END CERTIFICATE-----Generated at Tue Oct 27 20:51:32 2026 by rpki-client