$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/dc14a151-76bb-3e40-b3d6-76f9d7e5316c.roa File: dc14a151-76bb-3e40-b3d6-76f9d7e5316c.roa (raw, json) Hash identifier: KyzaF/cbZXW4Ty5nLvN0U6zGzCBt7GkQu1eRAWxkfDM= Subject key identifier: BE:20:C7:EB:5B:27:00:C4:53:0B:15:20:FB:27:CC:E5:F4:01:BF:50 Certificate issuer: /CN=de519df3-4594-450e-ac51-a7e085408381 Certificate serial: 010D0C9F4328584F778365DFCF644E346D57A900 Authority key identifier: 59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/dc14a151-76bb-3e40-b3d6-76f9d7e5316c.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 209.205.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:65:df:cf:64:4e:34:6d:57:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de519df3-4594-450e-ac51-a7e085408381 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=71ceff6c-47ee-4b21-9e24-b29b18cc68bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d2:75:4a:bd:01:c9:72:0a:38:95:cf:cc:81: 6c:92:91:bd:e7:2f:01:1d:49:88:9f:2f:c1:39:37: 40:57:83:51:84:d7:37:25:58:c8:1f:2d:3d:e1:17: 2f:ab:95:7f:50:bb:76:f2:fb:22:2d:5e:62:89:cd: 04:0a:d2:12:a6:48:4d:80:29:27:d1:32:74:0b:c0: de:f7:bf:50:bf:69:da:f7:00:43:c4:7d:a8:29:82: 1e:82:3e:85:04:e2:33:89:a7:71:d0:09:0c:f2:5a: 2d:3f:4f:3f:55:51:e0:8c:79:74:aa:ee:c6:33:d0: c4:1b:77:43:d5:17:1f:45:22:31:45:29:7c:2a:67: 53:29:c5:0e:75:a6:fa:7e:a3:86:94:f1:c8:c5:93: d5:b5:b2:26:4a:af:de:a1:65:64:e1:be:89:fe:c2: 6f:25:c1:0c:82:77:8a:6b:61:69:d3:d5:ab:69:c3: 3e:d4:e4:a9:20:48:6e:d4:af:2a:5c:5a:04:ae:33: a3:2a:df:5a:d7:30:4a:16:24:70:98:30:03:51:ca: 67:20:83:54:bc:40:9a:51:26:ba:85:8e:97:6e:00: 61:2c:86:15:ce:a1:39:2e:d9:de:79:fc:3c:72:f1: 2b:b7:70:e7:11:70:d2:a7:33:9a:4a:ed:d5:7f:52: 11:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:20:C7:EB:5B:27:00:C4:53:0B:15:20:FB:27:CC:E5:F4:01:BF:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/dc14a151-76bb-3e40-b3d6-76f9d7e5316c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl X509v3 Authority Key Identifier: keyid:59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer sbgp-ipAddrBlock: critical IPv4: 209.205.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:61:a5:b3:94:46:9c:43:f9:aa:a4:46:73:6f:67:b9:ff:81: 50:a6:e1:03:57:76:d4:31:ca:c5:1c:a6:6c:a2:cc:38:c8:bb: e4:b8:88:a6:5d:fa:59:87:a2:f6:78:1f:1f:ad:74:55:76:87: 9f:bc:4d:0a:1a:ce:ce:b6:6a:83:e5:9e:6b:64:54:f3:9e:09: 7f:ff:1b:4f:c5:ad:01:51:a7:10:d0:d6:c8:bd:9e:35:7a:e0: 2f:57:34:b8:b0:15:10:4f:7d:08:10:07:b3:ad:5e:e8:7b:2f: 2e:35:c9:13:ad:6b:2d:21:89:f6:22:a9:a9:47:8c:aa:a5:96: d0:e8:a8:71:a8:42:b7:46:a8:b2:63:fe:6c:90:72:2a:99:f0: eb:9f:83:3a:99:d7:37:26:cc:34:ad:45:0c:27:3c:31:e5:36: b9:3d:aa:7f:cf:9f:51:ca:42:e0:f5:b4:64:5b:f6:01:2c:b6: 09:2a:e1:1d:40:5b:75:c2:3c:02:3a:d7:f2:cb:03:0b:33:6d: 1e:9e:c5:16:2c:9e:d6:b5:dd:31:53:44:f3:dc:9f:ef:a2:92: 8b:c8:5b:66:c6:a1:29:87:c5:87:50:86:4d:fd:5d:8e:40:89: f4:a2:e3:2e:e3:51:34:80:e7:9c:51:9f:e1:ad:e1:18:49:e4: 3c:07:5b:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g2Xfz2RONG1XqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1MTlkZjMtNDU5NC00NTBlLWFjNTEtYTdlMDg1NDA4 MzgxMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NzFjZWZmNmMtNDdlZS00YjIxLTllMjQtYjI5YjE4Y2M2OGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9J1Sr0ByXIKOJXPzIFskpG95y8BHUmIny/B OTdAV4NRhNc3JVjIHy094Rcvq5V/ULt28vsiLV5iic0ECtISpkhNgCkn0TJ0C8De 979Qv2na9wBDxH2oKYIegj6FBOIziadx0AkM8lotP08/VVHgjHl0qu7GM9DEG3dD 1RcfRSIxRSl8KmdTKcUOdab6fqOGlPHIxZPVtbImSq/eoWVk4b6J/sJvJcEMgneK a2Fp09WracM+1OSpIEhu1K8qXFoErjOjKt9a1zBKFiRwmDADUcpnIINUvECaUSa6 hY6XbgBhLIYVzqE5Ltneefw8cvErt3DnEXDSpzOaSu3Vf1IR/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4gx+tbJwDEUwsVIPsnzOX0Ab9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUx OWRmMy00NTk0LTQ1MGUtYWM1MS1hN2UwODU0MDgzODEvZGMxNGExNTEtNzZiYi0z ZTQwLWIzZDYtNzZmOWQ3ZTUzMTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGU1MTlkZjMtNDU5NC00NTBlLWFj NTEtYTdlMDg1NDA4MzgxL2RlNTE5ZGYzLTQ1OTQtNDUwZS1hYzUxLWE3ZTA4NTQw ODM4MS5jcmwwHwYDVR0jBBgwFoAUWZ5KRx4ypygRBMpIFYzUGC2wuRwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUxOWRmMy00NTk0LTQ1MGUtYWM1MS1hN2Uw ODU0MDgzODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0c3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1hpbOURpxD+aqkRnNvZ7n/gVCm4QNXdtQxysUcpmyizDjIu+S4iKZd +lmHovZ4Hx+tdFV2h5+8TQoazs62aoPlnmtkVPOeCX//G0/FrQFRpxDQ1si9njV6 4C9XNLiwFRBPfQgQB7OtXuh7Ly41yROtay0hifYiqalHjKqlltDoqHGoQrdGqLJj /myQciqZ8OufgzqZ1zcmzDStRQwnPDHlNrk9qn/Pn1HKQuD1tGRb9gEstgkq4R1A W3XCPAI61/LLAwszbR6exRYsnta13TFTRPPcn++ikovIW2bGoSmHxYdQhk39XY5A ifSi4y7jUTSA55xRn+Gt4RhJ5DwHW94= -----END CERTIFICATE-----Generated at Mon Oct 12 12:44:15 2026 by rpki-client