$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa File: af04d1ea-2b61-30e8-9a48-0300a4f75436.roa (raw, json) Hash identifier: Rd+AdBzRieRCZcfBWiuVuDV3Kfi4ffbP44e04PB9qlU= Subject key identifier: 8A:B6:04:F1:B6:3D:F0:2C:9F:C2:83:65:18:BE:6A:41:5A:E4:5C:98 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584F49844489CDD9C598C83C4580 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10753 IP address blocks: 209.211.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:44:89:cd:d9:c5:98:c8:3c:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=24ef27b6-3518-4287-9224-589fc2fe3f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8f:3c:81:48:99:3b:86:03:09:66:07:3c:1c: 05:31:d7:40:41:e0:af:7b:25:3c:13:2f:bd:35:4f: a3:b1:81:5b:08:0f:e1:7e:19:4f:4f:ee:b0:2b:2c: 5a:88:5f:5f:8d:93:a7:b8:4b:c8:07:7d:20:51:3b: fd:91:88:5e:4c:7c:a3:4e:3f:04:60:e6:1a:8b:84: d1:c4:ea:a3:e6:9b:08:81:02:fb:b2:b8:8a:b8:dc: be:7b:66:5f:c8:2f:82:05:bf:35:74:41:57:3a:d3: 21:1a:bd:dc:92:54:ad:92:d1:0b:bd:13:db:e2:52: d0:4e:64:3b:88:b2:14:42:ef:de:1d:01:97:ed:a7: 5d:1c:1c:ee:d2:a9:c0:04:74:bf:c7:22:03:de:0a: 77:fb:97:b6:e7:51:7a:bc:99:36:c5:1a:70:3f:77: 2f:5f:c6:90:a6:3e:e8:82:c2:23:df:5c:55:8c:97: d7:a6:4a:2b:9a:04:18:e8:f5:6b:0c:c7:db:1c:a3: c0:25:03:4e:02:83:47:78:79:62:b9:11:7f:1d:22: e8:d6:a9:09:90:a9:95:5b:4f:33:89:0f:7b:19:50: cb:a7:d9:79:6f:df:33:b9:6f:34:71:0e:d3:9e:77: 53:fe:5f:1f:c1:01:e1:de:92:43:39:24:a9:60:6d: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B6:04:F1:B6:3D:F0:2C:9F:C2:83:65:18:BE:6A:41:5A:E4:5C:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/af04d1ea-2b61-30e8-9a48-0300a4f75436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 209.211.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:fe:c9:1c:57:29:2c:dc:33:2e:d6:11:34:ec:a7:bd:5a:e5: aa:e9:d4:19:86:4b:66:20:3b:b4:12:57:f1:92:d8:1c:8a:b5: 06:44:49:c2:03:07:47:a5:ec:d4:a8:60:72:f8:79:74:8e:f3: eb:5d:3b:5c:c8:88:5b:45:ce:2a:d0:e9:26:74:af:e8:46:7e: 15:33:ca:0a:ec:c7:09:ab:7a:46:af:9f:17:22:fc:e6:64:51: 7c:d3:66:46:27:85:45:5e:73:f6:07:db:1f:42:f8:fd:a6:de: f6:ec:e3:bf:99:83:be:29:f3:6d:c1:ea:ec:8d:ac:79:a9:38: 8e:2c:d7:60:2d:fe:c4:a6:be:53:61:51:7c:d5:09:35:88:e3: e7:af:f7:c3:c9:c1:82:67:db:e3:34:f7:14:95:74:97:fb:71: d0:09:9c:05:92:82:3a:86:b3:cd:ae:41:87:a1:92:6f:ba:4f: 53:8a:e1:a9:1b:67:c1:eb:68:b6:c6:36:66:27:18:18:91:d5: ac:7f:b9:3a:3d:1c:ea:88:f2:22:ab:18:32:54:ed:4f:fa:78: 4c:50:91:3a:39:08:ec:4e:62:ec:56:17:5c:b7:61:7b:8a:08: 7d:19:a0:ac:0c:7e:a9:e6:43:50:f8:4a:93:17:6c:16:98:91: d1:f9:31:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhESJzdnFmMg8RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjRlZjI3YjYtMzUxOC00Mjg3LTkyMjQtNTg5ZmMyZmUzZjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl488gUiZO4YDCWYHPBwFMddAQeCveyU8Ey+9 NU+jsYFbCA/hfhlPT+6wKyxaiF9fjZOnuEvIB30gUTv9kYheTHyjTj8EYOYai4TR xOqj5psIgQL7sriKuNy+e2ZfyC+CBb81dEFXOtMhGr3cklStktELvRPb4lLQTmQ7 iLIUQu/eHQGX7addHBzu0qnABHS/xyID3gp3+5e251F6vJk2xRpwP3cvX8aQpj7o gsIj31xVjJfXpkormgQY6PVrDMfbHKPAJQNOAoNHeHliuRF/HSLo1qkJkKmVW08z iQ97GVDLp9l5b98zuW80cQ7TnndT/l8fwQHh3pJDOSSpYG0t7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIq2BPG2PfAsn8KDZRi+akFa5FyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYWYwNGQxZWEtMmI2MS0z MGU4LTlhNDgtMDMwMGE0Zjc1NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dPNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf+yRxXKSzcMy7WETTsp71a5arp1BmGS2YgO7QSV/GS2ByKtQZEScID B0el7NSoYHL4eXSO8+tdO1zIiFtFzirQ6SZ0r+hGfhUzygrsxwmrekavnxci/OZk UXzTZkYnhUVec/YH2x9C+P2m3vbs47+Zg74p823B6uyNrHmpOI4s12At/sSmvlNh UXzVCTWI4+ev98PJwYJn2+M09xSVdJf7cdAJnAWSgjqGs82uQYehkm+6T1OK4akb Z8HraLbGNmYnGBiR1ax/uTo9HOqI8iKrGDJU7U/6eExQkTo5COxOYuxWF1y3YXuK CH0ZoKwMfqnmQ1D4SpMXbBaYkdH5MTY= -----END CERTIFICATE-----Generated at Sun Sep 27 12:36:29 2026 by rpki-client