$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91aea890-0b43-3899-bfc5-bab3755a801e.roa File: 91aea890-0b43-3899-bfc5-bab3755a801e.roa (raw, json) Hash identifier: cnSIwMPtmBpmmwJnLqfuDaw1c2XyQyzMnbytsPvwKDY= Subject key identifier: 3D:94:A0:C7:AF:7D:F3:34:07:B0:6D:99:6A:92:77:14:C9:33:E9:40 Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Certificate serial: 010D0C9F4328584F119CED29506E6A8E6C92F098 Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91aea890-0b43-3899-bfc5-bab3755a801e.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 12129 IP address blocks: 209.124.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:ed:29:50:6e:6a:8e:6c:92:f0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=74013166-74d3-4147-af7c-8e2e136e1462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:99:83:e2:6a:4c:a1:a7:72:7d:7d:b8:4f: ba:c2:bd:98:88:67:fb:4c:56:d3:50:4b:51:3e:76: 1e:5e:69:cf:8b:6a:e1:69:bb:c3:51:a4:6d:a6:e2: 77:03:07:c8:8d:d3:44:99:36:24:7f:9e:79:35:42: b6:cb:a4:42:dd:b7:6b:74:cf:2c:8e:e4:f1:c2:3f: dc:ef:f6:68:8d:d2:d7:c3:72:a4:0e:c7:34:2e:05: af:73:bb:4d:c5:42:61:be:b7:6e:05:08:65:ed:f4: 9c:06:2c:28:2b:78:87:a4:2e:e3:30:36:c0:da:16: 47:9b:6f:95:8f:d9:d6:80:34:b6:fb:b7:8d:6b:9d: 28:39:1f:17:5a:2d:21:3f:ab:b0:84:d8:9e:ee:3c: 77:41:26:a7:96:a3:2c:6a:ed:dc:df:19:35:cb:67: db:f3:dc:bf:ec:5f:fa:6f:61:63:a1:84:c6:a5:c4: 86:00:f2:e9:94:a9:b7:a7:4a:f6:e9:c6:6e:7f:ee: 4a:0d:74:62:06:9b:c3:09:f1:3c:93:61:49:f5:b1: 2a:a0:9f:da:10:5c:b4:68:c2:56:3d:3c:17:13:c6: 35:4f:ae:f7:cb:b6:af:1f:e8:9f:0e:e6:39:62:bb: 73:2d:72:18:cf:a2:48:5f:e9:63:27:45:ac:b8:4c: d1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:94:A0:C7:AF:7D:F3:34:07:B0:6D:99:6A:92:77:14:C9:33:E9:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/91aea890-0b43-3899-bfc5-bab3755a801e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl X509v3 Authority Key Identifier: keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer sbgp-ipAddrBlock: critical IPv4: 209.124.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:73:a5:44:09:a9:5e:0a:66:f7:0b:a3:24:46:ed:ae:06:00: 6c:81:c5:15:81:b7:ab:72:40:53:4e:3c:2a:d7:50:84:fc:65: 90:bc:aa:04:c7:ff:20:59:ae:ea:c8:86:d9:69:64:79:e8:86: 4d:26:c0:03:12:7a:4b:79:5b:df:6a:d4:c3:c9:cf:a4:f6:51: f8:e1:6b:5d:97:96:c0:e5:d5:7e:0e:d0:8c:fb:e0:b7:85:5a: fc:9a:a2:26:64:be:50:54:02:ec:ab:3e:bf:72:02:4f:18:6b: 6d:32:49:2d:ee:9c:fe:46:c3:a4:bc:e9:73:a3:75:be:58:ba: e8:24:2c:56:1e:a3:18:16:cb:6d:42:52:d2:0f:24:d2:c6:2b: ef:1a:f7:cf:92:98:8c:bd:48:f7:61:1e:78:5d:9d:5a:67:9c: d4:c9:23:d7:ee:99:b3:d2:ea:ae:2d:35:ce:ec:ec:21:db:bb: 0e:f5:a7:1e:a2:e3:bd:ea:5f:d8:74:2d:31:39:91:15:15:63: ae:6d:3f:21:5f:df:91:24:cb:0a:27:72:0d:db:ca:89:7a:16: 7d:22:f8:57:bc:44:4c:d5:a0:45:d1:e0:de:74:7b:04:cf:e2: c1:89:49:54:16:26:0d:c9:d9:2d:d9:d5:be:57:dc:1a:6b:be: 91:6c:8d:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnO0pUG5qjmyS8JgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3 MWRlMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NzQwMTMxNjYtNzRkMy00MTQ3LWFmN2MtOGUyZTEzNmUxNDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdmZg+JqTKGncn19uE+6wr2YiGf7TFbTUEtR PnYeXmnPi2rhabvDUaRtpuJ3AwfIjdNEmTYkf555NUK2y6RC3bdrdM8sjuTxwj/c 7/ZojdLXw3KkDsc0LgWvc7tNxUJhvrduBQhl7fScBiwoK3iHpC7jMDbA2hZHm2+V j9nWgDS2+7eNa50oOR8XWi0hP6uwhNie7jx3QSanlqMsau3c3xk1y2fb89y/7F/6 b2FjoYTGpcSGAPLplKm3p0r26cZuf+5KDXRiBpvDCfE8k2FJ9bEqoJ/aEFy0aMJW PTwXE8Y1T673y7avH+ifDuY5YrtzLXIYz6JIX+ljJ0WsuEzRVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2UoMevffM0B7BtmWqSdxTJM+lAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2 OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvOTFhZWE4OTAtMGI0My0z ODk5LWJmYzUtYmFiMzc1NWE4MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2 NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Xw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZzpUQJqV4KZvcLoyRG7a4GAGyBxRWBt6tyQFNOPCrXUIT8ZZC8qgTH /yBZrurIhtlpZHnohk0mwAMSekt5W99q1MPJz6T2Ufjha12XlsDl1X4O0Iz74LeF WvyaoiZkvlBUAuyrPr9yAk8Ya20ySS3unP5Gw6S86XOjdb5YuugkLFYeoxgWy21C UtIPJNLGK+8a98+SmIy9SPdhHnhdnVpnnNTJI9fumbPS6q4tNc7s7CHbuw71px6i 473qX9h0LTE5kRUVY65tPyFf35Ekywoncg3byol6Fn0i+Fe8REzVoEXR4N50ewTP 4sGJSVQWJg3J2S3Z1b5X3BprvpFsjfM= -----END CERTIFICATE-----Generated at Fri Sep 11 13:56:58 2026 by rpki-client