$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2e602cbd-127c-339c-9923-21188e6f547b.roa File: 2e602cbd-127c-339c-9923-21188e6f547b.roa (raw, json) Hash identifier: lKbB+oYpfgSRLiI5dezVxBy/stzdazn1xMM8YxjiVV0= Subject key identifier: 75:5A:BC:01:8C:95:80:59:A8:26:D6:DB:A6:B7:F1:0F:C5:6B:11:79 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F4277F831E5151278E56BB980 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2e602cbd-127c-339c-9923-21188e6f547b.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 26421 IP address blocks: 209.234.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:f8:31:e5:15:12:78:e5:6b:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=c7b4f5f1-a28b-4b14-9ad7-1c646a32a763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1c:17:9e:3f:a8:50:00:9b:1a:42:73:1a:4b: 11:5d:a3:25:c5:2e:eb:dd:ec:97:d6:ef:09:40:27: 55:3b:07:90:a2:74:48:d5:8a:fa:3c:b6:11:97:25: 25:87:b7:33:18:09:6e:e9:de:9e:9d:b6:08:29:c6: 50:4e:14:1f:6b:5b:46:e9:32:3a:2a:fd:ca:04:d2: 2d:18:bb:a7:8d:1a:47:7d:d8:73:6a:09:79:5b:e7: 46:7e:b1:80:4d:3e:52:1a:92:0f:fa:34:3e:41:a3: 62:c3:5c:d5:ad:68:ca:a2:f9:2f:15:45:75:0e:40: e2:ec:2c:96:9d:2b:2e:91:3c:ea:88:c9:bf:e4:0f: 1a:18:fa:05:f3:89:98:76:07:16:6f:d8:c1:64:fd: f8:b9:32:29:35:e2:45:30:15:5e:04:56:f2:82:05: 20:88:33:af:f2:4e:77:5d:82:af:e5:e6:71:ce:64: 1f:22:ec:d1:d0:5b:b6:eb:63:52:96:3a:49:88:3f: 61:a3:e2:b4:ae:8c:14:a4:82:ac:8d:50:84:22:e0: 51:ab:c0:21:f5:a5:f6:32:87:a4:73:79:e6:00:fb: 89:dc:fa:4e:02:d1:00:ad:ed:7b:b3:d2:cd:92:9f: a7:72:5d:c4:9a:ec:47:82:d7:0e:7b:7a:92:4c:9b: b8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5A:BC:01:8C:95:80:59:A8:26:D6:DB:A6:B7:F1:0F:C5:6B:11:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2e602cbd-127c-339c-9923-21188e6f547b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 209.234.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c0:9e:de:df:80:ac:36:bb:cc:6d:10:65:9c:2b:9f:c6:d0: cf:81:b8:56:18:e8:06:41:f7:18:8d:9c:0f:e5:40:9f:5b:2e: 38:6d:86:a3:95:78:9e:56:f2:a3:52:dd:86:1b:60:da:c3:95: 2e:82:aa:12:08:ee:84:59:53:47:a2:82:20:9f:5f:a2:ea:fa: 10:60:97:f4:63:4a:84:1f:30:6f:89:1d:a6:2c:51:2a:e7:22: bf:54:35:49:3b:5c:dd:1b:61:12:5b:2b:20:06:b9:f6:a0:48: 00:b3:87:d8:a2:24:e9:de:a3:93:e4:fe:ef:58:15:a1:54:24: 3e:b6:9d:e4:71:ab:6d:bc:b6:51:e9:39:0b:a7:67:c1:f0:62: 97:12:35:d8:ac:1c:30:27:26:bb:be:ee:72:c0:de:70:ae:da: f4:93:d8:9a:d0:16:97:60:1d:5d:f9:37:d6:c8:d9:8b:52:b5: 09:90:46:b3:fb:81:21:02:91:4f:e8:7c:79:00:21:13:97:9b: b7:c2:15:91:27:32:56:bf:ea:48:5e:4e:34:88:25:92:4f:f8: 42:a7:6b:83:06:50:c6:8e:42:21:43:52:bb:8b:da:e4:c6:b4: 16:ce:ed:78:25:e5:e8:75:fb:44:f4:93:2e:fc:4f:04:19:c1: 1e:8c:ae:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd/gx5RUSeOVruYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk YzdiNGY1ZjEtYTI4Yi00YjE0LTlhZDctMWM2NDZhMzJhNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixwXnj+oUACbGkJzGksRXaMlxS7r3eyX1u8J QCdVOweQonRI1Yr6PLYRlyUlh7czGAlu6d6enbYIKcZQThQfa1tG6TI6Kv3KBNIt GLunjRpHfdhzagl5W+dGfrGATT5SGpIP+jQ+QaNiw1zVrWjKovkvFUV1DkDi7CyW nSsukTzqiMm/5A8aGPoF84mYdgcWb9jBZP34uTIpNeJFMBVeBFbyggUgiDOv8k53 XYKv5eZxzmQfIuzR0Fu262NSljpJiD9ho+K0rowUpIKsjVCEIuBRq8Ah9aX2Moek c3nmAPuJ3PpOAtEAre17s9LNkp+ncl3EmuxHgtcOe3qSTJu4hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVavAGMlYBZqCbW26a38Q/FaxF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMmU2MDJjYmQtMTI3Yy0z MzljLTk5MjMtMjExODhlNmY1NDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ereMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbAnt7fgKw2u8xtEGWcK5/G0M+BuFYY6AZB9xiNnA/lQJ9bLjhthqOV eJ5W8qNS3YYbYNrDlS6CqhII7oRZU0eigiCfX6Lq+hBgl/RjSoQfMG+JHaYsUSrn Ir9UNUk7XN0bYRJbKyAGufagSACzh9iiJOneo5Pk/u9YFaFUJD62neRxq228tlHp OQunZ8HwYpcSNdisHDAnJru+7nLA3nCu2vST2JrQFpdgHV35N9bI2YtStQmQRrP7 gSECkU/ofHkAIROXm7fCFZEnMla/6kheTjSIJZJP+EKna4MGUMaOQiFDUruL2uTG tBbO7Xgl5eh1+0T0ky78TwQZwR6Mrvs= -----END CERTIFICATE-----Generated at Tue Sep 29 05:57:41 2026 by rpki-client