$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d84f62-51d4-3c50-ac70-43d409c29abd.roa File: a8d84f62-51d4-3c50-ac70-43d409c29abd.roa (raw, json) Hash identifier: wrWo9zZDvfonkstBxJHj4A4YgMuUxOLHbSyO6XLqS/0= Subject key identifier: ED:A7:0C:40:C0:9A:B3:97:85:85:2A:9E:3B:53:81:F4:6E:91:38:E7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F5A33049693E58E8635A6A2D0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d84f62-51d4-3c50-ac70-43d409c29abd.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 7342 IP address blocks: 209.131.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:04:96:93:e5:8e:86:35:a6:a2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=43aee2f9-344b-4e0b-9d18-732b9b9f742d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:a5:69:cb:8f:52:40:89:b6:82:38:10:43: 72:11:b8:42:08:17:32:0d:98:07:a8:e9:68:26:98: 06:8d:a8:53:84:12:bf:d4:b3:c1:27:a5:a1:6d:e4: a2:97:a8:a0:5d:27:d1:c4:2f:48:7a:d0:cf:4b:ab: a5:26:88:fa:b3:15:10:5a:49:d8:9e:c4:61:0a:47: 0a:10:05:14:48:7d:af:42:54:14:73:08:83:91:86: f8:42:96:28:d4:4e:23:02:dc:2c:ff:b7:96:c9:d7: 98:a5:1a:7d:90:37:c1:77:88:3c:16:10:67:27:00: 58:56:e4:74:cd:4b:77:2c:31:88:aa:f0:a4:3c:f6: 9a:36:76:f7:ae:01:fd:41:69:06:07:7c:9a:e2:45: 0e:07:64:c4:3b:cd:49:8f:6d:05:fc:d2:99:ec:ed: 85:4a:fe:e1:88:b1:cd:a9:26:93:83:9c:74:5e:93: 46:7f:fa:59:2b:e4:04:bc:95:49:b1:11:cc:a6:3f: b0:c7:dd:4b:73:1c:eb:4f:03:54:4a:82:cf:dd:91: 67:9c:44:ff:e3:f3:e9:be:83:12:06:32:f7:b4:cf: 4d:16:c2:d2:5e:13:37:35:12:6e:d8:22:15:4e:7b: d0:4c:36:15:ee:b9:49:dd:04:02:c6:f8:35:f4:47: a2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A7:0C:40:C0:9A:B3:97:85:85:2A:9E:3B:53:81:F4:6E:91:38:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8d84f62-51d4-3c50-ac70-43d409c29abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e9:dc:28:37:01:65:19:57:81:71:82:33:72:a6:8e:6c:72: 69:de:14:e3:0a:02:e1:93:72:58:e5:e8:3b:15:60:3f:90:13: d5:20:d4:d7:cd:64:8a:46:ba:30:c4:57:ab:1f:00:e1:e8:ae: d2:3c:73:01:ce:d6:bc:f8:6c:39:e1:18:24:be:e2:fd:b1:b7: 3e:41:2d:63:50:58:c3:99:e1:bc:cf:78:60:d1:b8:e2:99:99: a1:cc:f4:4f:c4:78:dd:ae:8d:a3:6e:fd:6e:54:d0:8a:91:94: 38:73:de:7b:35:e3:69:b8:c3:f1:65:0c:9f:00:d9:3e:8d:56: 39:3b:5b:27:b6:5a:91:11:4b:9c:99:62:0b:d8:4d:da:c1:05: f4:09:7f:f9:20:af:df:16:7d:1a:14:ad:c1:4b:26:be:f5:a6: bb:16:34:0e:2a:1a:c7:20:89:cc:1a:44:d3:76:e3:7b:3c:ed: 52:0b:c9:39:7f:b0:74:ec:09:62:79:55:0b:e6:01:a6:42:7f: cb:c4:c9:03:13:81:78:bd:7d:14:9b:c4:1e:81:cc:14:bb:38: 26:4c:84:9b:6d:05:2d:f9:f8:75:cc:ef:2b:31:6b:5a:95:8e: ea:75:2c:6d:6b:11:95:e7:99:33:18:62:91:75:8c:f1:d2:94: 4b:1e:4b:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMwSWk+WOhjWmotAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk NDNhZWUyZjktMzQ0Yi00ZTBiLTlkMTgtNzMyYjliOWY3NDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFalacuPUkCJtoI4EENyEbhCCBcyDZgHqOlo JpgGjahThBK/1LPBJ6WhbeSil6igXSfRxC9IetDPS6ulJoj6sxUQWknYnsRhCkcK EAUUSH2vQlQUcwiDkYb4QpYo1E4jAtws/7eWydeYpRp9kDfBd4g8FhBnJwBYVuR0 zUt3LDGIqvCkPPaaNnb3rgH9QWkGB3ya4kUOB2TEO81Jj20F/NKZ7O2FSv7hiLHN qSaTg5x0XpNGf/pZK+QEvJVJsRHMpj+wx91LcxzrTwNUSoLP3ZFnnET/4/PpvoMS BjL3tM9NFsLSXhM3NRJu2CIVTnvQTDYV7rlJ3QQCxvg19EeimwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2nDEDAmrOXhYUqnjtTgfRukTjnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYThkODRmNjItNTFkNC0z YzUwLWFjNzAtNDNkNDA5YzI5YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXp3Cg3AWUZV4FxgjNypo5scmneFOMKAuGTcljl6DsVYD+QE9Ug1NfN ZIpGujDEV6sfAOHortI8cwHO1rz4bDnhGCS+4v2xtz5BLWNQWMOZ4bzPeGDRuOKZ maHM9E/EeN2ujaNu/W5U0IqRlDhz3ns142m4w/FlDJ8A2T6NVjk7Wye2WpERS5yZ YgvYTdrBBfQJf/kgr98WfRoUrcFLJr71prsWNA4qGscgicwaRNN243s87VILyTl/ sHTsCWJ5VQvmAaZCf8vEyQMTgXi9fRSbxB6BzBS7OCZMhJttBS35+HXM7ysxa1qV jup1LG1rEZXnmTMYYpF1jPHSlEseS6c= -----END CERTIFICATE-----Generated at Tue Oct 6 20:22:31 2026 by rpki-client