$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/9c0ee765-2145-3be0-a8c0-644c9a577df7.roa File: 9c0ee765-2145-3be0-a8c0-644c9a577df7.roa (raw, json) Hash identifier: vBeGTgvsKbaXpUc5+UVJVjg4gwZaLKAD9ZJQAjnlxCM= Subject key identifier: D2:7A:5A:C9:37:76:60:65:EA:18:5A:C2:06:C3:7B:F5:3B:5D:C9:F8 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584F497338E2077A38692C530440 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/9c0ee765-2145-3be0-a8c0-644c9a577df7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 53959 IP address blocks: 207.171.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:38:e2:07:7a:38:69:2c:53:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=58c23484-74be-43ee-8ed6-e01798aa6671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:6c:95:cd:4b:44:fb:c7:f1:d2:ee:52:cf: 47:be:b2:41:ba:59:9b:85:dc:9b:17:55:be:5f:f5: a8:74:59:37:fb:56:00:65:6c:f7:91:f9:8e:ce:16: 33:64:28:15:90:66:1c:f8:fd:bc:5e:6d:56:09:aa: 26:c0:9b:61:e5:37:f1:4e:bf:2d:7e:94:47:a1:01: cf:c8:d5:7e:99:ca:c2:a4:9a:cf:99:33:2e:96:32: 82:d5:63:f1:11:dd:fc:36:cb:f6:79:5c:51:73:b6: 88:4e:81:a6:3a:bb:70:89:f0:e3:32:f8:c7:45:4d: 58:1d:b8:ca:8a:e3:5f:29:95:42:52:9c:11:fa:70: 25:08:91:a1:ae:e5:6c:32:ce:88:ef:26:cd:22:07: df:84:43:e1:99:e3:cf:e7:22:5e:45:61:1b:6f:82: 91:a7:b6:d8:8f:bb:5e:39:b7:a7:05:f2:a9:73:eb: 65:f5:33:43:56:c2:86:5d:02:de:53:9c:78:a8:d8: 21:69:46:46:35:3e:64:5c:d3:8a:a1:88:a9:76:94: ca:62:b1:0b:c9:1b:bf:1d:39:85:41:1e:67:da:e1: 68:f0:e2:8e:4a:e7:af:06:34:b3:48:0a:69:f8:d5: b1:04:86:d1:4d:d2:19:23:fc:5b:d1:f5:ee:27:fb: 79:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7A:5A:C9:37:76:60:65:EA:18:5A:C2:06:C3:7B:F5:3B:5D:C9:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/9c0ee765-2145-3be0-a8c0-644c9a577df7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 207.171.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f1:08:e4:23:20:c2:a3:17:a5:0b:a7:59:52:8c:09:7a:6d: 88:c0:0c:16:7d:6c:b4:b6:b6:1d:c8:af:8d:f6:80:cd:fd:fd: 1b:b5:8d:89:fd:fa:40:a1:f0:d1:77:c9:9e:37:16:7f:8d:2a: b3:24:b9:80:be:78:a9:2d:ba:35:98:34:6c:aa:34:e2:50:e0: d5:0e:71:c9:72:46:e4:b8:36:61:02:77:15:4c:85:4e:a5:90: 38:01:79:7e:ed:08:2e:ec:a1:49:17:a3:8c:b7:3e:8c:7a:a8: 05:ee:49:98:c7:ea:a4:99:5c:4f:ca:10:e0:85:4a:7e:54:b8: 87:6a:9a:45:9f:48:0f:36:9f:14:70:d5:67:87:2e:ae:c9:37: da:a9:02:48:f4:54:50:01:f6:c0:e6:33:7a:26:87:de:8d:be: 16:41:5b:5e:f4:46:20:ac:f3:90:7c:87:a2:d6:7e:c5:8d:47: aa:ac:bd:a0:17:28:08:06:ae:de:99:f2:b0:a6:5a:9e:a9:1e: 26:a1:67:fe:b2:42:b5:fc:1c:c7:ce:e5:a6:19:79:e1:fe:7b: e5:1e:84:81:d2:f8:a9:fc:51:97:15:53:d4:d8:a4:ac:5d:3f: a0:7d:b6:d2:42:d0:0e:0c:c6:26:28:a5:9f:d8:44:c3:b0:9c: b6:b0:4e:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczjiB3o4aSxTBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NThjMjM0ODQtNzRiZS00M2VlLThlZDYtZTAxNzk4YWE2NjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1hslc1LRPvH8dLuUs9HvrJBulmbhdybF1W+ X/WodFk3+1YAZWz3kfmOzhYzZCgVkGYc+P28Xm1WCaomwJth5TfxTr8tfpRHoQHP yNV+mcrCpJrPmTMuljKC1WPxEd38Nsv2eVxRc7aIToGmOrtwifDjMvjHRU1YHbjK iuNfKZVCUpwR+nAlCJGhruVsMs6I7ybNIgffhEPhmePP5yJeRWEbb4KRp7bYj7te ObenBfKpc+tl9TNDVsKGXQLeU5x4qNghaUZGNT5kXNOKoYipdpTKYrELyRu/HTmF QR5n2uFo8OKOSuevBjSzSApp+NWxBIbRTdIZI/xb0fXuJ/t55QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJ6Wsk3dmBl6hhawgbDe/U7Xcn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvOWMwZWU3NjUtMjE0NS0z YmUwLWE4YzAtNjQ0YzlhNTc3ZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6v0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInxCOQjIMKjF6ULp1lSjAl6bYjADBZ9bLS2th3Ir432gM39/Ru1jYn9 +kCh8NF3yZ43Fn+NKrMkuYC+eKktujWYNGyqNOJQ4NUOcclyRuS4NmECdxVMhU6l kDgBeX7tCC7soUkXo4y3Pox6qAXuSZjH6qSZXE/KEOCFSn5UuIdqmkWfSA82nxRw 1WeHLq7JN9qpAkj0VFAB9sDmM3omh96NvhZBW170RiCs85B8h6LWfsWNR6qsvaAX KAgGrt6Z8rCmWp6pHiahZ/6yQrX8HMfO5aYZeeH+e+UehIHS+Kn8UZcVU9TYpKxd P6B9ttJC0A4MxiYopZ/YRMOwnLawTl0= -----END CERTIFICATE-----Generated at Sat Sep 26 02:35:44 2026 by rpki-client