$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ef1c43c-9f8e-317d-9fe7-c881454d4758.roa File: 9ef1c43c-9f8e-317d-9fe7-c881454d4758.roa (raw, json) Hash identifier: qlIoqZ0G7EsTgOLdrqZmOC/4eSXaf/QR26Ukcr8UCJE= Subject key identifier: 8F:90:63:5F:25:D1:74:44:15:19:EE:BD:FF:97:D5:B0:4E:BD:20:90 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584F3CE2B474FD484B790FB45E80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ef1c43c-9f8e-317d-9fe7-c881454d4758.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 22516 IP address blocks: 209.163.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:b4:74:fd:48:4b:79:0f:b4:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=af21859d-3ab8-4cba-b24e-06b5e24a360a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:73:e9:08:01:5b:5f:ba:bc:08:08:83:99:7c: 87:c8:0f:92:4d:c8:f5:ab:2c:6d:91:fb:8a:66:4c: a7:3f:07:4a:19:1a:52:d0:fd:88:b6:24:15:f9:8f: 03:68:46:3b:08:b4:51:dc:5b:00:22:73:ba:38:a5: 9c:e7:41:de:90:e6:28:00:e1:87:47:36:bb:43:b9: a1:55:af:14:30:94:8e:95:0c:9e:ae:a2:ab:6b:50: a2:63:8a:b5:c4:92:8e:92:7b:fd:22:98:0c:18:eb: 95:6d:59:a9:aa:43:9c:47:e3:12:17:a6:23:c0:41: ae:f5:12:94:0b:8e:76:b7:d8:13:41:e3:01:ef:f3: 4e:b2:ec:b0:9a:86:00:37:f9:ef:92:70:48:96:98: 71:ed:37:2e:75:57:3f:6c:5a:52:b4:8b:a7:e7:45: 95:6a:5a:e7:d7:5a:2f:ce:7f:e7:ff:08:bb:22:28: 93:c5:58:99:ab:c3:1f:5b:ba:4d:bf:0c:41:73:a2: 3e:99:8a:fd:c5:27:4d:1a:7b:15:de:a7:71:a3:0a: b9:bc:df:9c:56:63:25:34:5b:b6:30:79:d7:c3:0b: be:9c:98:25:ee:4e:5e:f6:4e:7f:c4:27:db:59:51: b0:c8:79:fc:63:f7:4b:eb:cf:fa:73:5d:e8:21:49: f6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:90:63:5F:25:D1:74:44:15:19:EE:BD:FF:97:D5:B0:4E:BD:20:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/9ef1c43c-9f8e-317d-9fe7-c881454d4758.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 209.163.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:42:cc:00:22:09:52:dc:21:75:df:41:31:2f:13:8d:5f:ce: 25:7c:66:a3:43:0e:07:27:fe:ed:4b:60:6e:a7:c0:2e:7c:9d: 8f:98:5c:7f:82:94:58:86:3f:dc:78:a8:27:d3:99:df:03:a4: f1:95:de:12:89:36:b4:49:43:94:81:a8:79:d1:24:c4:81:f0: 64:aa:8e:1c:27:af:95:ad:27:c9:b7:7e:62:71:cf:39:28:77: b8:01:45:87:b6:ee:02:ac:e7:1c:9e:8b:91:d6:1f:74:c5:4f: 61:8a:5c:09:51:9c:78:ae:ed:bf:5d:25:88:6b:d5:b9:fb:6a: ac:4a:01:ba:09:cc:65:d2:6b:5e:20:1b:5c:4a:ce:5f:e9:52: 5a:4c:a4:f7:cd:e3:47:f6:fc:62:0e:77:18:bd:88:7e:7c:e4: 99:60:71:5d:09:5f:62:b9:05:52:28:f7:49:19:45:8c:05:b5: 9b:bc:62:9d:ed:19:f7:eb:ff:c3:d2:73:2d:92:6c:76:dd:f7: a7:89:ab:a0:a4:17:07:1b:56:d2:c9:4d:07:e9:ff:be:a6:bf: 4f:c9:4a:48:e3:e1:28:67:87:93:81:f9:83:b3:bf:9f:85:bb: 48:34:55:1e:82:10:f9:86:86:f4:c0:23:46:c9:a7:53:bc:26: ed:35:81:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884rR0/UhLeQ+0XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk YWYyMTg1OWQtM2FiOC00Y2JhLWIyNGUtMDZiNWUyNGEzNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3PpCAFbX7q8CAiDmXyHyA+STcj1qyxtkfuK ZkynPwdKGRpS0P2ItiQV+Y8DaEY7CLRR3FsAInO6OKWc50HekOYoAOGHRza7Q7mh Va8UMJSOlQyerqKra1CiY4q1xJKOknv9IpgMGOuVbVmpqkOcR+MSF6YjwEGu9RKU C452t9gTQeMB7/NOsuywmoYAN/nvknBIlphx7TcudVc/bFpStIun50WValrn11ov zn/n/wi7IiiTxViZq8MfW7pNvwxBc6I+mYr9xSdNGnsV3qdxowq5vN+cVmMlNFu2 MHnXwwu+nJgl7k5e9k5/xCfbWVGwyHn8Y/dL68/6c13oIUn2AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+QY18l0XREFRnuvf+X1bBOvSCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOWVmMWM0M2MtOWY4ZS0z MTdkLTlmZTctYzg4MTQ1NGQ0NzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aN1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANtCzAAiCVLcIXXfQTEvE41fziV8ZqNDDgcn/u1LYG6nwC58nY+YXH+C lFiGP9x4qCfTmd8DpPGV3hKJNrRJQ5SBqHnRJMSB8GSqjhwnr5WtJ8m3fmJxzzko d7gBRYe27gKs5xyei5HWH3TFT2GKXAlRnHiu7b9dJYhr1bn7aqxKAboJzGXSa14g G1xKzl/pUlpMpPfN40f2/GIOdxi9iH585JlgcV0JX2K5BVIo90kZRYwFtZu8Yp3t Gffr/8PScy2SbHbd96eJq6CkFwcbVtLJTQfp/76mv0/JSkjj4Shnh5OB+YOzv5+F u0g0VR6CEPmGhvTAI0bJp1O8Ju01gUw= -----END CERTIFICATE-----Generated at Sun Sep 27 00:57:42 2026 by rpki-client