$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/221c5f01-9412-38d6-b4e7-72db492d7460.roa File: 221c5f01-9412-38d6-b4e7-72db492d7460.roa (raw, json) Hash identifier: bvMOv36Hy767yfJ4aP7qOBokbxsqZt4LZN1pS+n38WE= Subject key identifier: 5E:81:10:E7:2C:ED:AA:F7:52:05:69:3F:F2:A8:54:D9:C4:5C:0C:4F Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584E9D4A752F4C87773687A99FFD Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/221c5f01-9412-38d6-b4e7-72db492d7460.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 393249 IP address blocks: 209.87.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:75:2f:4c:87:77:36:87:a9:9f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=a147448d-c4c4-427f-a645-5fbc9ca10c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ac:a2:f5:ac:75:78:7c:82:3b:6a:19:74:2e: 07:f2:ee:fd:fc:e0:26:1d:a9:c0:70:dc:6e:06:9c: 40:b6:ba:dd:cd:d7:4e:f1:66:51:4f:44:7b:f2:a7: 78:c0:ff:2d:7b:87:3f:73:34:cf:32:e9:3f:99:95: c5:4d:c8:a4:d5:62:82:aa:f7:85:2f:1c:9f:ed:5a: 88:29:51:23:6c:18:3f:12:7f:43:fa:ed:1e:c0:e2: 24:ca:87:3e:3e:31:c0:5d:aa:21:99:70:37:66:5e: c8:e7:f5:df:2b:c2:2c:8e:14:81:08:63:1d:85:54: 12:e4:c1:f3:0f:ba:26:99:bd:dd:a0:67:4b:c8:c7: 77:6c:fe:ec:ea:3a:32:c3:29:0d:d5:ce:f1:f1:0e: b7:3e:52:c8:00:40:88:3e:01:ec:4d:ab:35:09:f6: 57:1b:66:36:f6:cd:ed:5b:d6:b2:c7:3c:2f:c9:fe: a9:da:67:2a:07:a4:fd:70:cf:25:b0:fb:0b:37:34: be:de:3b:7d:ba:43:15:7f:e5:b6:63:5f:28:a1:e5: 5b:63:c0:b6:90:93:49:0c:0d:18:93:f8:5a:d2:08: 82:3b:1d:68:15:e4:51:7f:4d:4b:24:b0:13:45:9a: 22:de:4a:ff:98:d0:12:f1:33:c1:74:d7:0c:72:fb: b8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:81:10:E7:2C:ED:AA:F7:52:05:69:3F:F2:A8:54:D9:C4:5C:0C:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/221c5f01-9412-38d6-b4e7-72db492d7460.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:46:ec:7c:a8:19:e0:93:07:49:e4:c0:12:6e:ae:14:30:c1: 11:8f:fa:a8:22:27:d8:de:1f:83:9d:d8:a4:b5:ca:3a:6c:1f: 02:24:08:b4:2d:ef:62:0c:68:06:d1:2a:79:e2:fc:ed:b5:6f: 2d:83:e2:0d:a6:f8:7e:0f:af:eb:80:93:3c:0f:97:9a:a1:36: 71:5f:d6:f4:3f:7a:f3:b6:9f:05:80:0a:dd:72:f1:01:4e:77: 6b:f1:f4:ab:fa:96:f8:a0:6f:3c:76:c3:58:2e:9f:ec:fd:53: d6:35:f1:53:a0:75:94:d7:ab:f7:5d:81:69:95:e4:ac:be:d9: a1:53:a4:bb:fe:16:7e:a6:5f:c0:56:0b:9d:ed:60:1f:bb:85: 31:bb:02:16:90:9c:65:9f:52:8d:e5:3e:e0:db:44:f5:6f:eb: 40:8b:6c:1b:61:d9:f0:a9:f9:4f:d3:3b:92:6b:fb:a3:1c:b3: a6:e9:15:78:c3:23:9b:65:f4:6d:e6:10:7d:82:21:7f:8d:ae: f0:ad:1d:2f:ad:55:c3:1b:ec:f6:38:3b:ee:25:f3:37:a1:e9: 44:ca:26:25:ce:67:f9:64:b8:49:23:4e:93:df:ef:b8:ae:28: ad:99:f0:44:68:ed:60:f0:5a:e1:23:14:57:4c:77:68:fd:92: 1d:03:9a:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSnUvTId3Noepn/0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk YTE0NzQ0OGQtYzRjNC00MjdmLWE2NDUtNWZiYzljYTEwYzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6yi9ax1eHyCO2oZdC4H8u79/OAmHanAcNxu BpxAtrrdzddO8WZRT0R78qd4wP8te4c/czTPMuk/mZXFTcik1WKCqveFLxyf7VqI KVEjbBg/En9D+u0ewOIkyoc+PjHAXaohmXA3Zl7I5/XfK8IsjhSBCGMdhVQS5MHz D7ommb3doGdLyMd3bP7s6joywykN1c7x8Q63PlLIAECIPgHsTas1CfZXG2Y29s3t W9ayxzwvyf6p2mcqB6T9cM8lsPsLNzS+3jt9ukMVf+W2Y18ooeVbY8C2kJNJDA0Y k/ha0giCOx1oFeRRf01LJLATRZoi3kr/mNAS8TPBdNcMcvu4LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6BEOcs7ar3UgVpP/KoVNnEXAxPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvMjIxYzVmMDEtOTQxMi0z OGQ2LWI0ZTctNzJkYjQ5MmQ3NDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFG7HyoGeCTB0nkwBJurhQwwRGP+qgiJ9jeH4Od2KS1yjpsHwIkCLQt 72IMaAbRKnni/O21by2D4g2m+H4Pr+uAkzwPl5qhNnFf1vQ/evO2nwWACt1y8QFO d2vx9Kv6lvigbzx2w1gun+z9U9Y18VOgdZTXq/ddgWmV5Ky+2aFTpLv+Fn6mX8BW C53tYB+7hTG7AhaQnGWfUo3lPuDbRPVv60CLbBth2fCp+U/TO5Jr+6Mcs6bpFXjD I5tl9G3mEH2CIX+NrvCtHS+tVcMb7PY4O+4l8zeh6UTKJiXOZ/lkuEkjTpPf77iu KK2Z8ERo7WDwWuEjFFdMd2j9kh0DmkQ= -----END CERTIFICATE-----Generated at Wed Jul 29 11:03:01 2026 by rpki-client