$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/ddc07b5a-6f59-303e-a2ad-37c2b104ca0f.roa File: ddc07b5a-6f59-303e-a2ad-37c2b104ca0f.roa (raw, json) Hash identifier: K+x4Arqw7n7PseAImOGD7VF3k4MbmHD+/r5kgqUkLcc= Subject key identifier: BE:03:9B:26:A1:5F:83:01:70:F4:25:30:58:0B:43:EF:9D:37:DE:B6 Certificate issuer: /CN=3a9bc447-67f9-40d1-8f3d-b84cca94c493 Certificate serial: 010D0C9F4328584EFA1283BEECC6FC991F0E5658 Authority key identifier: E0:19:17:69:7C:85:36:41:5C:F4:63:73:4E:D9:EF:AC:7D:5D:82:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/ddc07b5a-6f59-303e-a2ad-37c2b104ca0f.roa Signing time: Thu 27 Aug 2026 14:37:54 +0000 ROA not before: Thu 27 Aug 2026 14:37:54 +0000 ROA not after: Wed 25 Nov 2026 15:37:54 +0000 asID: 14374 IP address blocks: 209.178.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fa:12:83:be:ec:c6:fc:99:1f:0e:56:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a9bc447-67f9-40d1-8f3d-b84cca94c493 Validity Not Before: Aug 27 14:37:54 2026 GMT Not After : Nov 25 15:37:54 2026 GMT Subject: CN=5f539ddd-c1a1-402d-a97c-9dfcde5bba18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:62:6e:be:a8:47:d9:87:db:62:35:0c:52:df: cc:51:92:b1:f9:e7:51:b8:e0:43:cb:76:d8:af:f2: d3:fe:5d:94:65:34:78:1d:7b:4a:66:9e:64:06:b9: a1:c8:60:17:c8:9d:3f:7a:ea:bb:8b:e2:b1:fa:35: 4d:b7:09:4d:ae:c6:6f:8f:7a:5f:4c:bb:2f:44:4b: c3:83:af:53:bd:94:33:9c:94:77:ba:3b:74:d8:ab: d1:8b:b1:8b:54:31:3d:41:b8:d1:82:71:e9:ee:86: 4a:46:30:4c:f5:ff:d3:2b:bb:3c:4e:9d:dc:f6:92: 0a:50:52:e5:70:fb:b7:63:28:22:db:d7:ee:bb:54: 33:f1:19:2a:84:7c:b3:df:06:5e:0e:e2:13:75:fe: 1f:82:7e:c3:8a:30:ce:9e:da:04:51:69:15:d7:ee: f6:5f:de:67:45:3e:16:bd:bc:e6:dc:57:e5:0c:07: a6:2d:4e:99:bf:8e:0e:62:ab:cf:42:1d:30:41:04: 50:8f:9a:f2:ae:25:3f:20:17:44:7e:ef:85:8d:d3: 22:9d:1f:61:08:fb:0d:2f:b5:43:a5:9c:38:9b:3d: 39:b3:e5:62:6b:11:d8:44:18:65:dc:da:e2:e4:65: 73:ac:e3:ba:3d:33:03:7f:ae:70:16:3c:a9:f7:9e: d4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:03:9B:26:A1:5F:83:01:70:F4:25:30:58:0B:43:EF:9D:37:DE:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/ddc07b5a-6f59-303e-a2ad-37c2b104ca0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493/3a9bc447-67f9-40d1-8f3d-b84cca94c493.crl X509v3 Authority Key Identifier: keyid:E0:19:17:69:7C:85:36:41:5C:F4:63:73:4E:D9:EF:AC:7D:5D:82:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3a9bc447-67f9-40d1-8f3d-b84cca94c493.cer sbgp-ipAddrBlock: critical IPv4: 209.178.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ab:be:f7:c1:df:42:40:05:93:57:4b:0a:74:1b:ce:2c:f7: 81:23:aa:0d:9c:6f:8d:e6:f2:3a:1f:7e:55:0c:39:08:3d:82: b8:ca:f8:4b:98:d9:17:45:8b:85:74:5d:94:53:33:81:5d:a9: 29:84:8d:73:37:2d:9c:3c:6f:1e:4c:8c:a8:2b:8d:ff:62:ea: 2e:99:ea:0b:16:bd:ec:47:9f:0d:7b:33:b9:ee:00:9c:dd:45: 77:92:65:8a:aa:5c:1f:e0:d1:4e:a5:74:92:4e:5f:b6:d1:04: d5:e5:33:3b:01:62:27:a2:f7:2b:c2:89:46:01:c6:81:f8:fb: 3f:35:fd:2f:5e:4e:91:95:52:f2:23:9f:bf:e8:88:bc:a6:37: 9d:f2:63:39:84:d8:0d:34:92:9d:38:ab:2b:c6:27:2d:c2:ac: 9a:cf:b4:b4:a8:20:bb:ca:9f:7d:08:72:69:a9:b3:bd:ff:be: 41:8d:31:c2:8b:69:00:5a:9c:24:84:33:90:80:2c:4b:f8:f4: 89:ed:04:23:e2:a9:c6:39:11:6e:b2:3e:ff:4a:86:fd:ab:21: fd:14:c0:49:13:3a:80:aa:c8:85:d5:89:d1:4e:66:47:00:95: 14:31:68:dc:17:d3:dc:c2:40:46:df:cd:92:63:d3:86:9e:c6: 94:da:90:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE76EoO+7Mb8mR8OVlgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5YmM0NDctNjdmOS00MGQxLThmM2QtYjg0Y2NhOTRj NDkzMB4XDTI2MDgyNzE0Mzc1NFoXDTI2MTEyNTE1Mzc1NFowLzEtMCsGA1UEAxMk NWY1MzlkZGQtYzFhMS00MDJkLWE5N2MtOWRmY2RlNWJiYTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGJuvqhH2YfbYjUMUt/MUZKx+edRuOBDy3bY r/LT/l2UZTR4HXtKZp5kBrmhyGAXyJ0/euq7i+Kx+jVNtwlNrsZvj3pfTLsvREvD g69TvZQznJR3ujt02KvRi7GLVDE9QbjRgnHp7oZKRjBM9f/TK7s8Tp3c9pIKUFLl cPu3Yygi29fuu1Qz8RkqhHyz3wZeDuITdf4fgn7DijDOntoEUWkV1+72X95nRT4W vbzm3FflDAemLU6Zv44OYqvPQh0wQQRQj5ryriU/IBdEfu+FjdMinR9hCPsNL7VD pZw4mz05s+ViaxHYRBhl3Nri5GVzrOO6PTMDf65wFjyp957UEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4DmyahX4MBcPQlMFgLQ++dN962MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zYTli YzQ0Ny02N2Y5LTQwZDEtOGYzZC1iODRjY2E5NGM0OTMvZGRjMDdiNWEtNmY1OS0z MDNlLWEyYWQtMzdjMmIxMDRjYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvM2E5YmM0NDctNjdmOS00MGQxLThm M2QtYjg0Y2NhOTRjNDkzLzNhOWJjNDQ3LTY3ZjktNDBkMS04ZjNkLWI4NGNjYTk0 YzQ5My5jcmwwHwYDVR0jBBgwFoAU4BkXaXyFNkFc9GNzTtnvrH1dgt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8zYTliYzQ0Ny02N2Y5LTQwZDEtOGYzZC1iODRj Y2E5NGM0OTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0bLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGrvvfB30JABZNXSwp0G84s94Ejqg2cb43m8jofflUMOQg9grjK+EuY 2RdFi4V0XZRTM4FdqSmEjXM3LZw8bx5MjKgrjf9i6i6Z6gsWvexHnw17M7nuAJzd RXeSZYqqXB/g0U6ldJJOX7bRBNXlMzsBYiei9yvCiUYBxoH4+z81/S9eTpGVUvIj n7/oiLymN53yYzmE2A00kp04qyvGJy3CrJrPtLSoILvKn30Icmmps73/vkGNMcKL aQBanCSEM5CALEv49IntBCPiqcY5EW6yPv9Khv2rIf0UwEkTOoCqyIXVidFOZkcA lRQxaNwX09zCQEbfzZJj04aexpTakEs= -----END CERTIFICATE-----Generated at Mon Sep 21 20:29:09 2026 by rpki-client