$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02dec7de-0643-354b-826b-4a5f767ce64f.roa File: 02dec7de-0643-354b-826b-4a5f767ce64f.roa (raw, json) Hash identifier: dWMHZgmBUdZj0aOt7LUgrh4xnaXzsaag5F8jdlFpROk= Subject key identifier: A8:D9:DB:E7:51:60:63:C5:4F:BE:94:EB:71:A5:54:4B:BB:6D:BD:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49807B7BE3F25666469B4B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02dec7de-0643-354b-826b-4a5f767ce64f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7725 IP address blocks: 209.23.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:7b:7b:e3:f2:56:66:46:9b:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a7c92f61-c202-4a49-9100-f8355c372924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:49:63:29:1f:6d:f0:08:11:ad:7c:bd:5a:2a: 22:9e:d9:5c:12:df:e9:7e:5d:25:f8:a6:35:33:5f: c3:a1:ad:09:ac:39:dd:5c:50:9c:22:cf:b4:f1:47: 32:42:19:43:42:51:4c:ce:98:c4:6e:ec:22:ba:0b: 2c:6c:09:49:5d:5c:73:64:9e:cc:45:16:85:81:f2: 2c:96:5e:d0:49:c9:41:28:f0:58:9e:66:ce:c6:c0: a0:c0:2b:99:6c:f6:ce:a5:8f:2d:6d:91:61:99:5f: b9:04:ae:a2:b3:ce:f0:60:0b:74:92:a5:ac:01:8b: 00:39:3b:8a:27:5c:84:af:7d:01:ab:e1:b0:94:81: 3a:1f:f9:c1:8a:34:fb:90:f2:8e:c8:33:42:a9:81: ca:49:f8:af:8b:70:78:43:27:74:ee:53:ca:40:17: b9:4a:35:05:77:5f:a2:6b:be:bb:f7:61:2e:d0:9f: 6b:cf:3d:08:cc:6e:8a:31:bb:c6:bf:94:60:2a:66: c2:d1:15:04:d2:66:63:a7:09:97:17:1b:7f:46:33: 90:9e:f7:65:27:77:7a:e6:61:77:12:44:b0:b7:ff: be:9a:8c:4d:f9:00:7f:eb:53:9c:88:e9:9d:d3:1a: 91:59:e0:cb:fb:9e:00:19:09:72:4e:6b:c4:9d:ee: 82:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D9:DB:E7:51:60:63:C5:4F:BE:94:EB:71:A5:54:4B:BB:6D:BD:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/02dec7de-0643-354b-826b-4a5f767ce64f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 209.23.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:b3:78:0c:d6:2d:be:04:8e:e3:15:70:df:83:32:54:48:7f: b5:23:34:03:aa:40:cd:0c:e3:1c:3c:dc:95:86:d3:73:a9:64: 8d:46:29:35:16:c9:b6:b2:0d:84:70:28:94:5c:a8:4f:dd:cf: 6a:ee:4e:1f:04:48:50:62:d0:61:96:f5:ff:74:da:4d:c7:93: d8:47:12:32:67:da:47:58:c8:ec:92:33:b7:05:3c:1a:aa:82: 12:4a:c2:1d:c7:c1:81:1e:fb:aa:2c:e6:0d:8e:88:e7:c5:f3: 84:07:57:cb:a7:f5:89:17:2f:ee:40:b4:52:0a:50:c6:22:14: 1f:22:b9:ea:2a:09:b9:6a:0e:2d:90:7b:bc:b8:ba:f2:96:e4: fd:66:0f:d1:21:6c:c1:2f:5d:7d:5b:bd:42:ed:8d:68:b6:05: 5e:ee:e4:bc:29:03:52:fd:63:d5:36:68:7a:7d:67:c9:3b:c7: 0a:9d:8a:f1:e9:a9:17:40:86:de:17:0a:fb:ef:a9:e3:60:97: 0a:17:30:4b:a2:d0:42:55:34:37:07:bd:d1:a1:5f:7c:d6:74: 11:7e:22:4a:25:e5:d3:b8:2d:ad:8b:4d:af:2a:25:1c:a8:2d: 64:e0:4c:a5:e9:2d:0d:4a:f8:49:23:13:e4:33:9a:e9:67:ee: 17:46:2e:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgHt74/JWZkabS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTdjOTJmNjEtYzIwMi00YTQ5LTkxMDAtZjgzNTVjMzcyOTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30ljKR9t8AgRrXy9WiointlcEt/pfl0l+KY1 M1/Doa0JrDndXFCcIs+08UcyQhlDQlFMzpjEbuwiugssbAlJXVxzZJ7MRRaFgfIs ll7QSclBKPBYnmbOxsCgwCuZbPbOpY8tbZFhmV+5BK6is87wYAt0kqWsAYsAOTuK J1yEr30Bq+GwlIE6H/nBijT7kPKOyDNCqYHKSfivi3B4Qyd07lPKQBe5SjUFd1+i a76792Eu0J9rzz0IzG6KMbvGv5RgKmbC0RUE0mZjpwmXFxt/RjOQnvdlJ3d65mF3 EkSwt/++moxN+QB/61OciOmd0xqRWeDL+54AGQlyTmvEne6CwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjZ2+dRYGPFT76U63GlVEu7bb39MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDJkZWM3ZGUtMDY0My0z NTRiLTgyNmItNGE1Zjc2N2NlNjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Rf2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM6zeAzWLb4EjuMVcN+DMlRIf7UjNAOqQM0M4xw83JWG03OpZI1GKTUW ybayDYRwKJRcqE/dz2ruTh8ESFBi0GGW9f902k3Hk9hHEjJn2kdYyOySM7cFPBqq ghJKwh3HwYEe+6os5g2OiOfF84QHV8un9YkXL+5AtFIKUMYiFB8iueoqCblqDi2Q e7y4uvKW5P1mD9EhbMEvXX1bvULtjWi2BV7u5LwpA1L9Y9U2aHp9Z8k7xwqdivHp qRdAht4XCvvvqeNglwoXMEui0EJVNDcHvdGhX3zWdBF+Ikol5dO4La2LTa8qJRyo LWTgTKXpLQ1K+EkjE+Qzmuln7hdGLgM= -----END CERTIFICATE-----Generated at Mon Sep 28 03:26:24 2026 by rpki-client