$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3e9c89cc-8a41-3ea2-9760-edc7e172b7bf.roa File: 3e9c89cc-8a41-3ea2-9760-edc7e172b7bf.roa (raw, json) Hash identifier: SLS8SscnMbn8GBxUxgYwJzxLJmPTPB3Jn4B99Vr7MX4= Subject key identifier: 40:47:90:E1:35:42:D3:A6:5A:22:26:A9:D4:4D:E5:6C:D0:A0:72:28 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584D7B6A91136C0F72972BCE74A0 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3e9c89cc-8a41-3ea2-9760-edc7e172b7bf.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 11105 IP address blocks: 207.23.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:91:13:6c:0f:72:97:2b:ce:74:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=e2b95e5f-5a4e-405d-ac61-0644b6c73c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9b:1c:5b:65:28:97:ea:19:17:97:f2:45:ed: c7:76:8b:7a:31:71:59:a7:3f:5b:69:1a:1a:cd:3b: f8:d0:e2:4a:ff:23:f3:6a:9a:c5:f2:86:20:32:63: 0b:24:80:10:34:8e:23:8f:ce:3f:13:a4:0e:f8:7f: f6:f2:30:6b:fa:06:c3:ab:34:7c:f8:92:19:80:14: 03:3f:1e:e1:ea:12:8e:20:10:e9:8a:6d:1a:87:bb: e3:42:99:74:5e:67:18:71:46:77:49:30:98:09:ef: fd:72:74:bd:29:8d:52:e8:e8:7d:e3:84:0a:01:14: a6:f8:cf:77:43:20:2b:8b:3b:4d:19:e1:21:d6:80: 6d:ee:a9:d8:84:9f:61:c3:c5:96:86:96:0d:15:d2: bf:e7:ad:cb:53:a1:57:79:67:77:dd:09:49:98:9c: a4:4f:10:48:27:49:e3:62:c3:7b:82:58:4a:db:d4: e8:da:21:b1:bf:4f:2c:3d:cb:23:8b:eb:88:99:3e: 00:03:ed:c8:4c:02:f9:f8:17:23:37:b8:80:73:b7: da:ac:ab:37:d1:1c:90:4a:5f:48:ac:d3:75:14:71: ec:c0:71:1a:77:bc:c9:6c:26:45:b7:89:e4:69:94: 6e:ee:c3:2e:ca:ea:5e:93:71:a4:53:f6:38:68:0d: 8b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:47:90:E1:35:42:D3:A6:5A:22:26:A9:D4:4D:E5:6C:D0:A0:72:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/3e9c89cc-8a41-3ea2-9760-edc7e172b7bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 207.23.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f6:dc:2d:63:e6:9e:ef:42:3c:88:f0:dd:b7:fe:1b:7f:11: bf:92:5f:43:a6:36:24:ba:18:c0:dc:c5:1d:8a:3a:31:e9:d5: 79:32:dc:e0:e6:3b:a7:de:46:60:9f:0c:9b:c3:e6:dd:b0:19: ee:45:73:eb:ba:45:06:95:a6:21:54:31:b4:c4:ea:e7:3a:f1: c6:dd:39:2c:a1:1e:8b:42:8b:73:58:28:5f:ac:ef:e6:bd:01: c2:ed:39:9a:0e:70:db:b3:97:a4:59:1a:e8:12:3c:39:5c:21: 36:48:18:21:89:bc:31:8b:ff:2f:4d:91:c6:61:79:78:77:82: 6f:12:cb:af:4e:d5:9d:f7:ea:bd:e1:b9:a5:47:5d:23:d3:83: 6d:a4:19:82:df:2e:42:d7:8b:42:7c:4b:65:92:a8:fc:18:a6: 5a:79:18:cf:1d:34:31:60:00:af:6f:ef:7c:38:3f:43:a4:76: 3f:68:3e:73:78:e0:01:af:53:e2:37:ab:0e:fb:3b:d9:9b:98: df:c0:0f:93:d2:68:93:03:59:cd:f1:17:ab:58:ca:73:24:fd: 88:97:89:0c:d4:7d:89:20:ff:a8:b9:04:00:3b:48:24:67:8b: 66:30:ba:da:df:e9:a6:1a:78:ac:19:c5:03:e5:58:47:1c:76: b9:31:7f:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17apETbA9ylyvOdKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk ZTJiOTVlNWYtNWE0ZS00MDVkLWFjNjEtMDY0NGI2YzczYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspscW2Uol+oZF5fyRe3Hdot6MXFZpz9baRoa zTv40OJK/yPzaprF8oYgMmMLJIAQNI4jj84/E6QO+H/28jBr+gbDqzR8+JIZgBQD Px7h6hKOIBDpim0ah7vjQpl0XmcYcUZ3STCYCe/9cnS9KY1S6Oh944QKARSm+M93 QyAriztNGeEh1oBt7qnYhJ9hw8WWhpYNFdK/563LU6FXeWd33QlJmJykTxBIJ0nj YsN7glhK29To2iGxv08sPcsji+uImT4AA+3ITAL5+BcjN7iAc7farKs30RyQSl9I rNN1FHHswHEad7zJbCZFt4nkaZRu7sMuyupek3GkU/Y4aA2LZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBHkOE1QtOmWiImqdRN5WzQoHIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvM2U5Yzg5Y2MtOGE0MS0z ZWEyLTk3NjAtZWRjN2UxNzJiN2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzxdWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADX23C1j5p7vQjyI8N23/ht/Eb+SX0OmNiS6GMDcxR2KOjHp1Xky3ODm O6feRmCfDJvD5t2wGe5Fc+u6RQaVpiFUMbTE6uc68cbdOSyhHotCi3NYKF+s7+a9 AcLtOZoOcNuzl6RZGugSPDlcITZIGCGJvDGL/y9NkcZheXh3gm8Sy69O1Z336r3h uaVHXSPTg22kGYLfLkLXi0J8S2WSqPwYplp5GM8dNDFgAK9v73w4P0Okdj9oPnN4 4AGvU+I3qw77O9mbmN/AD5PSaJMDWc3xF6tYynMk/YiXiQzUfYkg/6i5BAA7SCRn i2Ywutrf6aYaeKwZxQPlWEccdrkxf5s= -----END CERTIFICATE-----Generated at Sat Apr 18 01:41:22 2026 by rpki-client