$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/47e6af54-5f2a-376c-a385-f76fdc6f5b07.roa File: 47e6af54-5f2a-376c-a385-f76fdc6f5b07.roa (raw, json) Hash identifier: g6hyO1CSIgLWzCwf6bkprnpMkPTYI/qnmpNPXTc8bFA= Subject key identifier: 38:A4:12:C2:35:E0:76:58:9A:79:AB:60:F4:0C:82:7A:99:2B:3F:D7 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584F3052784C2FCC1908C1F9C900 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/47e6af54-5f2a-376c-a385-f76fdc6f5b07.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 271 IP address blocks: 209.87.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:78:4c:2f:cc:19:08:c1:f9:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=c4e68196-56bf-4d22-8588-269a000cea1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:79:01:85:e5:8a:fa:ec:81:ff:75:7c:47: 08:78:6a:51:fa:a6:18:bb:31:c8:19:a7:d6:60:68: e2:6c:d4:70:52:63:c1:af:41:ab:3c:6b:5b:6d:8d: 6f:3a:6a:0e:2b:36:61:5a:4e:e0:3e:9e:17:a5:73: 6c:69:61:32:a2:d9:51:da:2a:ec:44:36:14:54:97: b0:19:cd:5d:0c:a2:f8:d0:67:9c:c8:07:16:b9:80: cc:d1:a5:f5:6f:9b:a6:f1:eb:c3:fb:a4:c1:d4:25: 33:19:13:b1:2b:62:dc:d5:5b:15:0c:76:40:95:45: db:73:27:e9:da:aa:1f:12:5e:16:8d:33:62:da:3c: 09:f3:6e:ec:83:0f:5f:9f:3f:c5:2c:2d:31:95:6b: ae:5e:9b:23:e7:7f:c6:af:49:ed:79:23:7a:a3:47: 53:f7:cf:a4:26:58:88:25:17:ae:75:c7:c0:03:71: 3c:66:46:77:24:83:3e:0d:87:f4:3b:cd:ee:1a:b2: 5d:ca:62:4e:10:22:c6:1a:46:96:70:fe:c2:98:47: e0:a8:db:86:3c:e1:0c:99:91:d0:f0:95:c3:c5:60: 90:e9:06:e1:a8:bd:cd:12:f8:05:4e:55:2d:60:a7: 52:d3:aa:33:fa:7c:33:18:6c:c4:d0:a1:39:26:1e: 6d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A4:12:C2:35:E0:76:58:9A:79:AB:60:F4:0C:82:7A:99:2B:3F:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/47e6af54-5f2a-376c-a385-f76fdc6f5b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:81:68:ea:6d:c1:45:4f:6c:6a:4c:a8:82:bf:6f:91:a6:41: f1:ec:d4:5b:c5:56:d0:5d:37:1c:06:f7:58:84:0f:36:fb:10: 99:e1:82:b3:ab:7c:13:28:04:35:b8:14:a3:d7:15:a5:3e:6e: f5:c8:fd:84:ff:2c:49:1b:ca:bd:cb:62:8b:b7:2a:ed:9b:0b: fb:02:84:dc:20:a1:31:86:70:93:60:8b:77:86:cf:b6:b2:e4: 1a:f3:ca:d9:c7:2a:36:10:29:5f:45:d7:80:bd:dc:b2:c6:31: 6d:9d:23:12:e7:52:47:ed:b4:02:28:76:b7:10:87:38:f2:a5: 1c:3e:95:93:db:5a:d4:b8:09:b1:96:6a:ad:c0:74:f7:4f:5f: 05:3d:97:43:8f:a5:e2:10:d6:1e:2e:c1:33:7b:ab:70:de:3c: 09:19:06:58:35:04:b8:47:ef:22:26:25:21:39:5e:25:e2:c4: 4b:15:5c:dc:f9:9b:f6:bc:fd:89:5b:80:3a:ff:8f:8c:1d:73: 2e:1f:22:b2:15:b0:4f:be:7f:b0:be:a7:45:b7:46:85:df:99: e7:7a:83:22:7f:ad:cb:60:a8:b0:6f:67:37:f5:e9:41:7a:93: 5f:0e:f0:5d:7d:ce:f4:5d:45:90:ad:fa:97:53:da:58:f1:08: db:f7:33:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUnhML8wZCMH5yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk YzRlNjgxOTYtNTZiZi00ZDIyLTg1ODgtMjY5YTAwMGNlYTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQl5AYXlivrsgf91fEcIeGpR+qYYuzHIGafW YGjibNRwUmPBr0GrPGtbbY1vOmoOKzZhWk7gPp4XpXNsaWEyotlR2irsRDYUVJew Gc1dDKL40GecyAcWuYDM0aX1b5um8evD+6TB1CUzGROxK2Lc1VsVDHZAlUXbcyfp 2qofEl4WjTNi2jwJ827sgw9fnz/FLC0xlWuuXpsj53/Gr0nteSN6o0dT98+kJliI JReudcfAA3E8ZkZ3JIM+DYf0O83uGrJdymJOECLGGkaWcP7CmEfgqNuGPOEMmZHQ 8JXDxWCQ6QbhqL3NEvgFTlUtYKdS06oz+nwzGGzE0KE5Jh5t3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDikEsI14HZYmnmrYPQMgnqZKz/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNDdlNmFmNTQtNWYyYS0z NzZjLWEzODUtZjc2ZmRjNmY1YjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaBaOptwUVPbGpMqIK/b5GmQfHs1FvFVtBdNxwG91iEDzb7EJnhgrOr fBMoBDW4FKPXFaU+bvXI/YT/LEkbyr3LYou3Ku2bC/sChNwgoTGGcJNgi3eGz7ay 5BrzytnHKjYQKV9F14C93LLGMW2dIxLnUkfttAIodrcQhzjypRw+lZPbWtS4CbGW aq3AdPdPXwU9l0OPpeIQ1h4uwTN7q3DePAkZBlg1BLhH7yImJSE5XiXixEsVXNz5 m/a8/YlbgDr/j4wdcy4fIrIVsE++f7C+p0W3RoXfmed6gyJ/rctgqLBvZzf16UF6 k18O8F19zvRdRZCt+pdT2ljxCNv3M1o= -----END CERTIFICATE-----Generated at Tue Sep 29 05:57:56 2026 by rpki-client