$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/209cde42-9d7e-40bd-ae52-f3e300accfde/2e7bfbf1-6cd0-3b68-9bb7-faa9ffed0cf9.roa File: 2e7bfbf1-6cd0-3b68-9bb7-faa9ffed0cf9.roa (raw, json) Hash identifier: FFyC30xm+Li2wuTs8d6NhoCz0UAO+IJtE+zsb1xGDJ8= Subject key identifier: 2D:9C:42:C1:8E:67:3A:B1:31:9D:6B:C3:DF:75:19:EE:2F:BF:72:75 Certificate issuer: /CN=209cde42-9d7e-40bd-ae52-f3e300accfde Certificate serial: 010D0C9F4328584F2A39A163E3D9D31982087E60 Authority key identifier: 64:7F:64:2A:E1:EB:05:FF:03:57:96:02:94:44:2E:01:0F:5A:EB:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/209cde42-9d7e-40bd-ae52-f3e300accfde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/209cde42-9d7e-40bd-ae52-f3e300accfde/2e7bfbf1-6cd0-3b68-9bb7-faa9ffed0cf9.roa Signing time: Sun 13 Sep 2026 20:35:31 +0000 ROA not before: Sun 13 Sep 2026 20:35:31 +0000 ROA not after: Sat 12 Dec 2026 21:35:31 +0000 asID: 4213 IP address blocks: 209.131.72.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/209cde42-9d7e-40bd-ae52-f3e300accfde/209cde42-9d7e-40bd-ae52-f3e300accfde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/209cde42-9d7e-40bd-ae52-f3e300accfde/209cde42-9d7e-40bd-ae52-f3e300accfde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/209cde42-9d7e-40bd-ae52-f3e300accfde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:39:a1:63:e3:d9:d3:19:82:08:7e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209cde42-9d7e-40bd-ae52-f3e300accfde Validity Not Before: Sep 13 20:35:31 2026 GMT Not After : Dec 12 21:35:31 2026 GMT Subject: CN=7e9b577c-1f13-46c4-8151-c6702334e1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e9:cd:58:9a:c5:14:92:d8:38:fd:fb:8b:34: 3f:e7:19:c8:a1:9a:c8:b9:9d:e6:eb:e2:e4:8e:5f: 33:9b:8c:92:5c:c7:98:2d:5e:56:0d:10:91:2f:34: c5:7b:47:22:c8:55:00:b5:42:78:b8:08:45:41:91: fc:21:92:d5:80:d9:bc:41:23:bb:af:be:c8:70:5b: 1e:e8:71:cb:7b:23:35:af:8d:91:85:1d:80:83:06: 30:30:62:6e:02:dc:57:69:a0:1d:20:79:77:3d:e4: bb:48:a0:1a:13:ab:b6:ab:c7:3e:b7:3e:d3:19:9e: de:f6:66:98:11:a1:57:61:95:47:dc:fe:96:93:fd: 7a:04:91:c8:c1:5e:b6:7f:e4:29:d8:9f:d0:e1:88: 40:89:e0:03:9b:77:24:9c:9e:cc:81:14:93:61:64: a9:c9:aa:f2:c5:04:d3:9b:53:f0:e8:09:b1:57:76: 18:e6:61:34:0a:42:82:f4:73:40:10:33:53:88:40: 20:28:f0:49:33:d7:e5:96:33:c2:dd:a7:53:12:d3: 43:9c:30:50:c6:16:ca:1d:57:ce:a0:25:22:fe:ef: 32:ab:a7:47:c2:b9:80:c7:a6:44:a6:5f:d1:f5:1f: 65:bb:a6:2b:a3:4d:e4:8b:9a:57:e9:0b:6c:8c:c8: 9b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9C:42:C1:8E:67:3A:B1:31:9D:6B:C3:DF:75:19:EE:2F:BF:72:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/209cde42-9d7e-40bd-ae52-f3e300accfde/2e7bfbf1-6cd0-3b68-9bb7-faa9ffed0cf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/209cde42-9d7e-40bd-ae52-f3e300accfde/209cde42-9d7e-40bd-ae52-f3e300accfde.crl X509v3 Authority Key Identifier: keyid:64:7F:64:2A:E1:EB:05:FF:03:57:96:02:94:44:2E:01:0F:5A:EB:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/209cde42-9d7e-40bd-ae52-f3e300accfde.cer sbgp-ipAddrBlock: critical IPv4: 209.131.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:53:15:a3:50:d0:0c:4b:df:94:4a:a6:d4:fa:3e:d7:45:06: de:0b:07:b1:3f:5f:30:6d:0f:6b:02:9f:04:8b:5f:cd:d5:99: d3:2d:6b:ee:00:2f:11:50:fc:75:66:2b:ad:c9:93:33:9b:15: a6:6a:1f:ae:2e:e1:cd:2a:5f:be:83:81:e0:15:27:89:a2:af: 00:b2:e6:62:64:78:78:97:c3:71:05:ab:43:dc:cf:cf:3e:6d: db:fb:14:e8:60:65:d8:00:23:80:73:7b:d7:2a:c5:16:14:c0: fe:96:66:3a:07:72:a4:5f:31:32:d2:2d:49:9f:ad:9f:4d:48: e4:77:9b:f0:d7:67:84:0d:e9:d4:48:48:af:05:0d:96:25:e0: 57:c3:ff:0c:76:51:1c:d8:c4:34:20:19:ee:ca:66:90:a9:ac: 93:a7:bf:36:cf:b1:c2:e4:7e:79:5b:59:a3:a9:07:bd:60:6d: 26:db:7d:e8:d6:76:4b:a7:b6:3c:08:5d:e6:23:39:3c:44:a7: a8:d3:27:e4:01:7e:92:65:6f:aa:f7:84:ef:74:6a:67:44:84: 38:92:6d:2d:0e:4c:47:ce:e6:77:18:1e:97:cb:d9:30:45:5b: fb:e1:f1:67:f0:70:cb:80:0f:ea:84:d5:e6:38:ad:0a:51:be: 16:64:c9:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qOaFj49nTGYIIfmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5Y2RlNDItOWQ3ZS00MGJkLWFlNTItZjNlMzAwYWNj ZmRlMB4XDTI2MDkxMzIwMzUzMVoXDTI2MTIxMjIxMzUzMVowLzEtMCsGA1UEAxMk N2U5YjU3N2MtMWYxMy00NmM0LTgxNTEtYzY3MDIzMzRlMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4enNWJrFFJLYOP37izQ/5xnIoZrIuZ3m6+Lk jl8zm4ySXMeYLV5WDRCRLzTFe0ciyFUAtUJ4uAhFQZH8IZLVgNm8QSO7r77IcFse 6HHLeyM1r42RhR2AgwYwMGJuAtxXaaAdIHl3PeS7SKAaE6u2q8c+tz7TGZ7e9maY EaFXYZVH3P6Wk/16BJHIwV62f+Qp2J/Q4YhAieADm3cknJ7MgRSTYWSpyaryxQTT m1Pw6AmxV3YY5mE0CkKC9HNAEDNTiEAgKPBJM9flljPC3adTEtNDnDBQxhbKHVfO oCUi/u8yq6dHwrmAx6ZEpl/R9R9lu6Yro03ki5pX6QtsjMibGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2cQsGOZzqxMZ1rw991Ge4vv3J1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8yMDlj ZGU0Mi05ZDdlLTQwYmQtYWU1Mi1mM2UzMDBhY2NmZGUvMmU3YmZiZjEtNmNkMC0z YjY4LTliYjctZmFhOWZmZWQwY2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMjA5Y2RlNDItOWQ3ZS00MGJkLWFl NTItZjNlMzAwYWNjZmRlLzIwOWNkZTQyLTlkN2UtNDBiZC1hZTUyLWYzZTMwMGFj Y2ZkZS5jcmwwHwYDVR0jBBgwFoAUZH9kKuHrBf8DV5YClEQuAQ9a62UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8yMDljZGU0Mi05ZDdlLTQwYmQtYWU1Mi1mM2Uz MDBhY2NmZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0YNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFTFaNQ0AxL35RKptT6PtdFBt4LB7E/XzBtD2sCnwSLX83VmdMta+4A LxFQ/HVmK63JkzObFaZqH64u4c0qX76DgeAVJ4mirwCy5mJkeHiXw3EFq0Pcz88+ bdv7FOhgZdgAI4Bze9cqxRYUwP6WZjoHcqRfMTLSLUmfrZ9NSOR3m/DXZ4QN6dRI SK8FDZYl4FfD/wx2URzYxDQgGe7KZpCprJOnvzbPscLkfnlbWaOpB71gbSbbfejW dkuntjwIXeYjOTxEp6jTJ+QBfpJlb6r3hO90amdEhDiSbS0OTEfO5ncYHpfL2TBF W/vh8WfwcMuAD+qE1eY4rQpRvhZkycA= -----END CERTIFICATE-----Generated at Tue Sep 22 12:25:43 2026 by rpki-client