$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/102a1b54-7a91-37ec-9559-3213bbe645e4.roa File: 102a1b54-7a91-37ec-9559-3213bbe645e4.roa (raw, json) Hash identifier: LfhVENXRr7ZR/+f+U5jFzwGY85yEj5eQxjQAe+J5480= Subject key identifier: 22:D6:BD:9E:57:8E:E3:2A:54:00:C0:85:5A:EE:B1:7A:D4:AA:3C:2E Certificate issuer: /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Certificate serial: 010D0C9F4328584F119CF96489767BA6097E9580 Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/102a1b54-7a91-37ec-9559-3213bbe645e4.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 10439 IP address blocks: 209.126.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f9:64:89:76:7b:a6:09:7e:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=9c2866c0-ab52-43a2-85b0-2d6c997d7c15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bd:fa:19:e1:5b:c7:18:39:87:08:e0:81:c8: 29:36:37:be:1d:d1:10:17:dc:bd:e3:23:1b:ff:67: ac:7f:f0:44:79:3e:a8:83:7f:4a:59:3d:03:eb:97: 8c:0a:8f:f5:0b:a6:55:e8:0b:8a:18:67:b5:9f:12: 93:59:cd:44:05:1b:45:16:ec:76:0c:95:6c:8d:73: 48:92:ef:e3:db:60:b7:40:9e:30:6c:f5:99:f0:59: bf:e0:1b:69:a2:c6:d6:a7:83:fa:25:62:ae:f0:b4: a2:7b:5b:c7:96:2c:09:ba:56:64:1d:38:9a:0c:5b: e5:c2:4e:19:ba:62:0b:6b:1c:96:d0:e6:ee:41:af: e9:34:0e:8f:76:6d:ee:3b:a4:6e:bc:fd:11:bb:1b: 7a:11:83:99:4f:28:a8:13:cc:bb:aa:0d:d4:16:bd: 16:ef:95:ce:47:e9:98:e1:e1:6e:17:f0:46:62:4b: 1e:ff:ad:6b:d2:e1:86:f6:9a:e8:90:1a:75:3a:12: 74:9e:5b:1f:00:a6:e4:2c:f5:c6:14:8c:38:18:8f: 90:8c:67:10:94:d1:b0:21:0e:3a:3f:73:7f:85:c8: d0:45:67:b8:1f:e1:f2:3c:a6:b3:4b:21:44:87:c4: b1:1a:0f:b1:6c:20:74:1c:44:91:b8:b0:42:fe:f5: e5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D6:BD:9E:57:8E:E3:2A:54:00:C0:85:5A:EE:B1:7A:D4:AA:3C:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/102a1b54-7a91-37ec-9559-3213bbe645e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl X509v3 Authority Key Identifier: keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer sbgp-ipAddrBlock: critical IPv4: 209.126.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3d:20:80:ae:95:82:43:b2:fd:09:44:de:9f:e5:f4:c4:80: de:23:25:f2:d6:9a:91:d3:b4:0c:36:1e:c1:e9:4a:5d:17:35: dc:94:0f:e7:9f:7b:7a:10:31:64:06:2f:41:47:d1:78:fa:0b: cd:a4:41:c0:df:e8:36:a6:e4:03:c7:d5:00:af:16:a4:88:b4: 52:25:94:ab:7e:b9:0a:7e:3a:fe:6e:b7:ae:41:9f:23:13:c4: 44:8f:8e:34:52:2d:f7:d8:ee:1b:c3:a3:c3:00:b3:e2:02:e5: 8b:6e:72:d4:f6:e1:61:6d:c3:6e:d0:cb:4d:56:42:63:ca:7d: ed:fb:d4:fc:06:fb:c8:44:03:a9:f8:63:63:ee:53:32:d0:b4: 31:79:24:1a:35:9c:d9:4e:68:2b:56:d7:a6:d4:41:23:b3:8a: f3:6c:ba:5c:5d:80:ad:15:10:81:de:2c:44:ca:9f:89:86:62: 4d:00:b4:7b:76:57:fb:3b:5a:74:09:73:94:90:65:b0:1d:7c: 9c:fa:ec:6a:c9:c9:38:fb:3a:1d:4e:50:5e:00:fb:e3:d2:19: 0d:01:bc:6a:c1:47:56:01:24:d3:88:66:10:d6:08:61:7c:de: 8d:7b:46:8d:58:93:59:72:fd:67:07:ff:50:a3:d8:52:7e:c5: 71:c4:7d:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPlkiXZ7pgl+lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmYyZWQ4N2UtMjdmOS00MTRjLWE3YWYtMmI1YjVmZmEz ZjY1MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OWMyODY2YzAtYWI1Mi00M2EyLTg1YjAtMmQ2Yzk5N2Q3YzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr36GeFbxxg5hwjggcgpNje+HdEQF9y94yMb /2esf/BEeT6og39KWT0D65eMCo/1C6ZV6AuKGGe1nxKTWc1EBRtFFux2DJVsjXNI ku/j22C3QJ4wbPWZ8Fm/4BtposbWp4P6JWKu8LSie1vHliwJulZkHTiaDFvlwk4Z umILaxyW0ObuQa/pNA6Pdm3uO6RuvP0Ruxt6EYOZTyioE8y7qg3UFr0W75XOR+mY 4eFuF/BGYkse/61r0uGG9prokBp1OhJ0nlsfAKbkLPXGFIw4GI+QjGcQlNGwIQ46 P3N/hcjQRWe4H+HyPKazSyFEh8SxGg+xbCB0HESRuLBC/vXlDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLWvZ5XjuMqVADAhVrusXrUqjwuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJl ZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjViNWZmYTNmNjUvMTAyYTFiNTQtN2E5MS0z N2VjLTk1NTktMzIxM2JiZTY0NWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmYyZWQ4N2UtMjdmOS00MTRjLWE3 YWYtMmI1YjVmZmEzZjY1LzJmMmVkODdlLTI3ZjktNDE0Yy1hN2FmLTJiNWI1ZmZh M2Y2NS5jcmwwHwYDVR0jBBgwFoAU/vz7pQfj5FlRiYJFDoOE89rVKHswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZjJlZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjVi NWZmYTNmNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0X6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEc9IICulYJDsv0JRN6f5fTEgN4jJfLWmpHTtAw2HsHpSl0XNdyUD+ef e3oQMWQGL0FH0Xj6C82kQcDf6Dam5APH1QCvFqSItFIllKt+uQp+Ov5ut65BnyMT xESPjjRSLffY7hvDo8MAs+IC5YtuctT24WFtw27Qy01WQmPKfe371PwG+8hEA6n4 Y2PuUzLQtDF5JBo1nNlOaCtW16bUQSOzivNsulxdgK0VEIHeLETKn4mGYk0AtHt2 V/s7WnQJc5SQZbAdfJz67GrJyTj7Oh1OUF4A++PSGQ0BvGrBR1YBJNOIZhDWCGF8 3o17Ro1Yk1ly/WcH/1Cj2FJ+xXHEfc0= -----END CERTIFICATE-----Generated at Tue Sep 22 07:16:04 2026 by rpki-client