$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa File: 1426a637-13aa-36d7-87c8-2a889dcd7975.roa (raw, json) Hash identifier: PkV1NR27dWyxGYADZm7W0NYKoXLZ4dWYFrn/NRjjz8Y= Subject key identifier: 76:AF:3F:FF:11:72:4C:98:A1:C2:BC:A6:9D:00:A4:22:8F:50:16:90 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F4328584F4973B5E5886F73B337EA4380 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 207645 IP address blocks: 209.240.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:b5:e5:88:6f:73:b3:37:ea:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=20f2c556-8b73-4dde-895a-f9f43e289a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5b:e4:cb:1b:21:67:95:26:89:22:1a:1a:b6: 05:e9:17:a6:5f:b4:b3:04:d8:dd:bc:73:d7:05:8e: a1:22:29:5b:1f:a8:ac:b1:b9:11:32:b6:f2:95:3b: d4:12:11:81:32:69:b7:b6:48:c8:ab:29:41:64:03: 9c:15:ed:9c:c7:e5:83:7d:fe:4e:42:6a:13:c0:68: e4:4e:8c:c8:56:10:2f:85:99:c8:f0:4d:63:ac:92: 78:e7:f8:56:ee:65:44:89:54:5f:f0:a5:75:0e:a1: 00:07:03:67:06:ed:4e:8b:b1:f1:4c:5b:22:0a:ca: 31:40:d1:cb:39:c8:f3:65:1d:97:8a:e7:24:b0:80: 50:4e:0f:ff:88:ac:9b:5a:3f:30:14:c3:8d:a5:41: e2:ed:7a:66:64:b5:40:49:24:90:c9:1d:55:b0:b0: 00:c9:7b:d9:53:e5:03:4f:66:e3:4d:9b:03:89:0c: 76:74:ff:e1:7c:69:65:4c:0f:84:ae:b2:b4:24:7d: 0e:76:29:9c:e0:b6:b8:d2:c5:ad:55:05:cf:53:6f: bd:46:9b:0d:8a:0c:0c:03:c3:f0:21:f0:09:be:50: af:15:13:d5:3d:d0:2f:80:3f:12:22:ba:ad:f7:12: 97:8d:02:ce:9d:33:df:5e:51:73:38:aa:98:02:23: c3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AF:3F:FF:11:72:4C:98:A1:C2:BC:A6:9D:00:A4:22:8F:50:16:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/1426a637-13aa-36d7-87c8-2a889dcd7975.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:26:16:bb:46:fa:f8:40:44:ca:46:1f:44:7b:23:65:c9:d8: fd:f0:bb:eb:5a:bb:99:32:2a:8e:fb:cb:a2:c5:9a:fd:85:2c: d5:f9:c8:0f:99:85:96:f3:fd:5d:e2:8e:40:03:70:dc:c1:6e: 23:50:09:af:4f:24:28:b3:1b:a6:4c:ee:b2:e4:2c:8a:e4:26: 29:4d:35:d1:c1:0f:b8:9f:15:2e:35:2a:fe:b2:86:f1:7b:35: 17:21:68:97:2d:4b:9a:01:59:43:33:54:00:52:be:d0:4f:cf: 55:0a:20:72:41:85:12:18:f6:a3:75:b5:e5:62:6d:d8:d7:a6: 3e:1b:f0:af:7e:6e:ba:f0:3a:eb:e0:e5:6c:d9:0b:18:f0:99: 68:fa:a8:1c:38:a7:98:6c:09:14:9a:a3:f3:cd:1f:41:a1:9b: 6b:6e:75:8b:b8:c0:69:df:92:41:bd:ba:b5:08:e4:70:0e:db: e0:ad:5e:f8:3c:c7:7b:8d:c4:c3:a8:8c:e1:21:c5:c3:5d:fe: 1b:09:41:8e:95:a2:57:68:e3:86:7e:3c:7c:11:8f:00:71:c7: c1:d0:5d:1f:c9:db:72:df:62:2e:c9:dc:1c:49:61:9f:35:18: 31:ce:22:e9:2c:06:68:ef:79:5a:e6:87:a8:30:3d:22:b6:ba: a0:6c:fa:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc7XliG9zszfqQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjBmMmM1NTYtOGI3My00ZGRlLTg5NWEtZjlmNDNlMjg5YTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FvkyxshZ5UmiSIaGrYF6RemX7SzBNjdvHPX BY6hIilbH6issbkRMrbylTvUEhGBMmm3tkjIqylBZAOcFe2cx+WDff5OQmoTwGjk TozIVhAvhZnI8E1jrJJ45/hW7mVEiVRf8KV1DqEABwNnBu1Oi7HxTFsiCsoxQNHL OcjzZR2XiucksIBQTg//iKybWj8wFMONpUHi7XpmZLVASSSQyR1VsLAAyXvZU+UD T2bjTZsDiQx2dP/hfGllTA+ErrK0JH0Odimc4La40sWtVQXPU2+9RpsNigwMA8Pw IfAJvlCvFRPVPdAvgD8SIrqt9xKXjQLOnTPfXlFzOKqYAiPDBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHavP/8RckyYocK8pp0ApCKPUBaQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvMTQyNmE2MzctMTNhYS0z NmQ3LTg3YzgtMmE4ODlkY2Q3OTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHomFrtG+vhARMpGH0R7I2XJ2P3wu+tau5kyKo77y6LFmv2FLNX5yA+Z hZbz/V3ijkADcNzBbiNQCa9PJCizG6ZM7rLkLIrkJilNNdHBD7ifFS41Kv6yhvF7 NRchaJctS5oBWUMzVABSvtBPz1UKIHJBhRIY9qN1teVibdjXpj4b8K9+brrwOuvg 5WzZCxjwmWj6qBw4p5hsCRSao/PNH0Ghm2tudYu4wGnfkkG9urUI5HAO2+CtXvg8 x3uNxMOojOEhxcNd/hsJQY6Voldo44Z+PHwRjwBxx8HQXR/J23LfYi7J3BxJYZ81 GDHOIuksBmjveVrmh6gwPSK2uqBs+jw= -----END CERTIFICATE-----Generated at Mon Sep 28 05:49:00 2026 by rpki-client