$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa File: ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa (raw, json) Hash identifier: 4nbFB0Gmpk9zxdKmV0W2CxUiVXMF233rWhPLN2uMbVU= Subject key identifier: 79:BC:EB:0B:18:14:45:4E:50:4E:D9:F2:00:03:CF:73:53:84:F5:DA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF2E7722FCD3747BE43125E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 7342 IP address blocks: 209.131.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:72:2f:cd:37:47:be:43:12:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=5100f3cb-10df-4276-aff4-48fe51e83857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:2f:56:ba:ca:7b:fa:94:7e:d4:23:7a:bb: 80:3d:46:f7:bf:57:16:f6:ea:e8:02:85:59:9a:06: 6d:57:8f:8a:38:29:0e:d3:24:2f:3e:f4:cd:3e:8c: af:21:2b:4b:ef:1a:f3:be:cf:34:11:a0:20:79:82: c4:20:27:49:b5:56:c8:81:15:b3:3a:dd:91:24:c7: 36:6f:6f:69:8f:f7:d8:4f:99:37:1c:a8:40:2e:ea: 55:82:f9:65:ff:aa:ae:bc:b2:35:8a:cd:73:91:40: 5e:58:8c:89:c4:2f:31:e0:10:e8:c6:75:75:65:df: a4:b9:ee:66:ed:45:91:25:03:72:8d:a0:2f:e5:c2: 08:22:af:7f:38:33:98:32:4e:83:56:b2:38:8e:bd: 90:37:6a:3c:72:20:98:66:08:82:f2:31:f6:dd:5c: 4a:b9:af:1d:4c:1a:e2:3d:8f:96:ba:31:b1:87:d9: 60:8d:e0:2a:0f:3d:b7:12:c2:b6:92:b5:1c:c0:e9: 59:da:79:ab:db:3e:d5:4b:68:46:59:2e:aa:af:71: 54:d7:c1:13:41:cc:f1:08:d1:d1:ad:35:63:11:c4: b2:83:76:b4:3f:fe:9c:79:2a:f4:71:f3:af:2b:6b: e2:02:b7:c7:19:e5:35:d5:65:55:4d:44:e6:7c:d3: fc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BC:EB:0B:18:14:45:4E:50:4E:D9:F2:00:03:CF:73:53:84:F5:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffa2eeaf-fe35-3d4e-a503-d12d8a15e643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:aa:b2:f1:79:87:89:f4:68:b9:fc:4c:b9:8f:1e:ce:19:fe: 81:fc:99:e7:e2:36:93:00:3e:20:9c:89:a4:df:08:2a:29:2e: 37:80:44:8f:e7:de:17:a3:db:90:2c:90:45:b0:d6:1c:89:1d: 2e:02:55:2b:83:55:9b:b2:9e:e0:64:48:d5:41:fd:01:6c:54: 22:37:19:80:96:dd:00:c9:18:0f:48:ea:47:04:70:2c:17:69: e8:ca:70:ad:a4:a0:28:e2:03:e4:3c:ec:70:52:4c:06:2d:c4: a6:67:ab:6e:a1:d0:24:6b:5b:2d:8a:45:23:21:9a:33:58:71: ef:10:59:5c:0f:c3:68:0a:32:a0:d1:63:96:ae:32:5d:1b:b0: 2c:fb:bc:90:3d:77:32:71:19:6f:c0:c7:fa:ca:e5:ad:06:36: 30:5c:72:a9:6f:ad:da:08:4f:6c:bc:8d:7c:0a:33:d7:c6:6d: 4a:90:21:e0:0d:ac:ea:90:5c:6b:8f:1d:e9:04:1c:cd:ff:d7: da:ef:0a:3d:12:0e:3f:fb:66:2c:d0:e7:4a:7f:6a:c2:c6:ab: 87:b9:69:c4:ae:98:2d:e6:21:ed:78:1e:4a:96:fc:20:3a:20: 4a:d6:93:33:5e:4e:37:a9:9e:a6:18:19:bf:8b:02:6f:a7:a4: 8b:dd:52:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53IvzTdHvkMSXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk NTEwMGYzY2ItMTBkZi00Mjc2LWFmZjQtNDhmZTUxZTgzODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueYvVrrKe/qUftQjeruAPUb3v1cW9uroAoVZ mgZtV4+KOCkO0yQvPvTNPoyvIStL7xrzvs80EaAgeYLEICdJtVbIgRWzOt2RJMc2 b29pj/fYT5k3HKhALupVgvll/6quvLI1is1zkUBeWIyJxC8x4BDoxnV1Zd+kue5m 7UWRJQNyjaAv5cIIIq9/ODOYMk6DVrI4jr2QN2o8ciCYZgiC8jH23VxKua8dTBri PY+WujGxh9lgjeAqDz23EsK2krUcwOlZ2nmr2z7VS2hGWS6qr3FU18ETQczxCNHR rTVjEcSyg3a0P/6ceSr0cfOvK2viArfHGeU11WVVTUTmfNP8sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHm86wsYFEVOUE7Z8gADz3NThPXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmZhMmVlYWYtZmUzNS0z ZDRlLWE1MDMtZDEyZDhhMTVlNjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeqsvF5h4n0aLn8TLmPHs4Z/oH8mefiNpMAPiCciaTfCCopLjeARI/n 3hej25AskEWw1hyJHS4CVSuDVZuynuBkSNVB/QFsVCI3GYCW3QDJGA9I6kcEcCwX aejKcK2koCjiA+Q87HBSTAYtxKZnq26h0CRrWy2KRSMhmjNYce8QWVwPw2gKMqDR Y5auMl0bsCz7vJA9dzJxGW/Ax/rK5a0GNjBccqlvrdoIT2y8jXwKM9fGbUqQIeAN rOqQXGuPHekEHM3/19rvCj0SDj/7ZizQ50p/asLGq4e5acSumC3mIe14HkqW/CA6 IErWkzNeTjepnqYYGb+LAm+npIvdUpo= -----END CERTIFICATE-----Generated at Tue Sep 22 16:04:12 2026 by rpki-client