$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/86056cc0-c327-3d61-9b25-28ab0e71e8b9.roa File: 86056cc0-c327-3d61-9b25-28ab0e71e8b9.roa (raw, json) Hash identifier: CPX/DGW2T0YiM79wm5eacGp2JDl6lyb39C7knY8da0s= Subject key identifier: 4E:80:59:FB:F5:4D:5B:0D:72:2B:74:68:27:3D:10:6E:B3:5F:17:97 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584F348267BFC1C3E6AE062FE400 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/86056cc0-c327-3d61-9b25-28ab0e71e8b9.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 19909 IP address blocks: 209.151.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:67:bf:c1:c3:e6:ae:06:2f:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=d527f60c-1f01-4c5b-b468-84dcc1a9861b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:95:7e:bf:79:aa:e9:66:2f:b5:e1:c9:6b:44: c8:61:39:ca:4d:c1:c9:74:61:76:12:d2:91:0e:5b: 59:c3:fc:62:b4:72:58:e7:46:bc:58:aa:60:a4:9b: 80:bd:59:14:a0:28:32:17:85:f3:1a:d9:f5:fb:74: 28:af:77:82:12:c3:b2:b9:3c:10:48:9d:4f:6c:db: 1c:23:f6:2b:25:e2:51:8d:57:dc:07:9b:2e:7c:11: 1d:b2:e7:a0:05:66:00:a5:50:7e:d0:e1:08:f3:1c: a1:df:63:96:8a:0b:e8:dc:78:04:a5:2f:bd:cc:10: 1d:61:8c:0f:6c:90:85:52:b3:df:c1:f0:af:da:c9: 4a:44:43:6d:55:75:4c:44:cd:3f:cd:85:92:e5:4f: c6:85:e3:f1:1d:45:0d:92:12:60:4a:fa:91:96:ef: 2d:64:0e:cb:fb:41:e1:ea:bb:75:98:99:a7:07:ae: 5e:09:5e:56:79:25:95:07:45:20:21:2b:02:6c:a3: 6a:7a:c7:01:de:f3:45:46:55:bb:08:8a:17:12:ef: 60:17:48:ce:b3:8e:54:fa:d9:49:c2:81:20:ff:b6: 3c:fd:aa:f6:8c:56:01:90:0d:01:0e:0d:63:5d:e9: 11:08:f5:0e:0b:56:bc:8e:57:7a:34:01:8c:41:3b: 67:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:80:59:FB:F5:4D:5B:0D:72:2B:74:68:27:3D:10:6E:B3:5F:17:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/86056cc0-c327-3d61-9b25-28ab0e71e8b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 209.151.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9e:0a:1f:fd:0e:7a:25:e8:eb:8b:49:cf:47:8e:cf:47:5c: b7:9c:95:27:4a:80:d0:b4:33:29:f4:19:d6:5d:41:ac:5c:fd: 28:1b:55:e1:0d:fd:03:d0:22:ed:70:b3:29:a9:ff:04:ef:a3: d6:54:21:2c:92:3f:da:dc:f4:49:0e:dc:89:1d:a2:8e:fd:f4: 05:b2:bd:b5:46:ac:2a:e9:ca:aa:d6:34:b8:91:4b:10:e2:dc: 29:5c:18:64:29:ed:32:e5:e5:1a:0f:21:a7:00:f0:98:64:17: cf:fa:b9:d7:a2:ae:13:f2:59:ea:d5:8e:2f:c6:35:bf:b1:ba: 34:1a:69:11:6f:dd:a4:22:6c:f7:94:b1:07:57:47:02:dd:bf: 81:d4:25:eb:8d:aa:82:49:c2:12:1d:9e:2a:07:32:2e:a3:12: 94:d4:82:84:cd:76:c7:29:41:2a:57:10:dc:45:1e:75:96:ae: f9:e6:fe:92:62:9c:f7:89:f1:fa:9c:f4:82:f4:8f:2c:d2:67: 61:0b:1d:ae:5e:29:52:f1:64:00:74:79:23:68:ad:23:cd:3c: 49:96:4e:e0:80:c1:7e:3c:b8:fa:35:14:5f:04:56:e8:2b:7e: c6:83:f3:66:e8:d8:b3:79:6f:1d:a8:de:3e:4f:bd:60:40:ed: e1:3a:9e:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gme/wcPmrgYv5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDUyN2Y2MGMtMWYwMS00YzViLWI0NjgtODRkY2MxYTk4NjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZV+v3mq6WYvteHJa0TIYTnKTcHJdGF2EtKR DltZw/xitHJY50a8WKpgpJuAvVkUoCgyF4XzGtn1+3Qor3eCEsOyuTwQSJ1PbNsc I/YrJeJRjVfcB5sufBEdsuegBWYApVB+0OEI8xyh32OWigvo3HgEpS+9zBAdYYwP bJCFUrPfwfCv2slKRENtVXVMRM0/zYWS5U/GhePxHUUNkhJgSvqRlu8tZA7L+0Hh 6rt1mJmnB65eCV5WeSWVB0UgISsCbKNqescB3vNFRlW7CIoXEu9gF0jOs45U+tlJ woEg/7Y8/ar2jFYBkA0BDg1jXekRCPUOC1a8jld6NAGMQTtnHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6AWfv1TVsNcit0aCc9EG6zXxeXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvODYwNTZjYzAtYzMyNy0z ZDYxLTliMjUtMjhhYjBlNzFlOGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKeCh/9Dnol6OuLSc9Hjs9HXLeclSdKgNC0Myn0GdZdQaxc/SgbVeEN /QPQIu1wsymp/wTvo9ZUISySP9rc9EkO3Ikdoo799AWyvbVGrCrpyqrWNLiRSxDi 3ClcGGQp7TLl5RoPIacA8JhkF8/6udeirhPyWerVji/GNb+xujQaaRFv3aQibPeU sQdXRwLdv4HUJeuNqoJJwhIdnioHMi6jEpTUgoTNdscpQSpXENxFHnWWrvnm/pJi nPeJ8fqc9IL0jyzSZ2ELHa5eKVLxZAB0eSNorSPNPEmWTuCAwX48uPo1FF8EVugr fsaD82bo2LN5bx2o3j5PvWBA7eE6nqU= -----END CERTIFICATE-----Generated at Mon Sep 21 14:12:18 2026 by rpki-client