$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86a2fa96-af1c-3520-b8e2-324df289efd3.roa File: 86a2fa96-af1c-3520-b8e2-324df289efd3.roa (raw, json) Hash identifier: IenD+yA25fiz6VPbLw5GsU5ujiibpfgjOCw0nv/Liwc= Subject key identifier: 9E:73:7C:C7:A1:D1:04:E8:2A:CE:F8:98:3D:73:8D:7D:C4:D2:46:D7 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584F3FAD41573DD2000DEFB53780 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86a2fa96-af1c-3520-b8e2-324df289efd3.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 393249 IP address blocks: 206.12.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:41:57:3d:d2:00:0d:ef:b5:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=d9bef5c0-7db3-4c1a-8717-bbf528919355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:06:da:62:2a:e6:18:20:15:f1:9a:41:59:b7: f2:d8:b6:3a:2e:1a:f6:b5:5d:7a:6e:84:67:1e:e5: 60:78:a4:a2:fa:de:37:1b:76:16:05:d0:56:74:f7: 5c:a2:43:da:15:16:0c:00:14:e5:a5:4f:8a:d5:d8: d7:e5:4b:e4:da:c1:c5:a7:ff:59:31:d2:6e:fe:56: f6:a8:1a:5c:db:5e:eb:dd:ab:ff:58:51:04:10:c6: 6d:5c:4a:d0:c4:16:23:f3:a6:a9:7e:ea:9c:9a:83: 1d:0d:b4:2b:39:93:fa:3e:cd:f7:4b:c7:e4:84:76: 00:21:31:25:85:a5:bb:36:87:a5:78:50:dc:9d:e1: b3:6d:1c:16:da:b0:50:85:c3:ed:2c:6c:e2:de:3a: 2e:69:50:8c:e2:9f:c6:21:59:02:32:c8:b1:7b:19: 8f:02:f8:ae:24:b2:ab:2c:04:c5:6c:d3:28:e2:63: b4:b0:d8:40:e5:08:3b:03:f1:16:fe:5b:36:e8:30: 8c:4d:ec:00:91:d3:96:06:1c:87:07:de:7e:71:90: a2:fb:0e:30:aa:37:27:13:df:fe:82:04:a1:4d:88: 95:df:a4:2c:cc:26:f1:20:5f:91:e9:ef:10:c9:69: cd:15:db:67:46:9f:f4:30:21:0b:e2:39:16:1b:75: 4e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:73:7C:C7:A1:D1:04:E8:2A:CE:F8:98:3D:73:8D:7D:C4:D2:46:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/86a2fa96-af1c-3520-b8e2-324df289efd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.12.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:96:74:60:80:6e:50:38:d4:5a:bc:b2:a2:05:5e:c9:5d:c6: 99:97:e0:ca:87:3b:53:0b:4c:98:72:85:40:46:1f:7b:4e:8c: 12:8c:b7:74:94:70:9c:1d:02:fe:4f:1d:bc:0d:06:ba:70:7e: 80:1b:17:0e:33:ab:ef:50:60:8e:7f:4e:80:f3:90:98:73:c9: 71:2d:cb:19:0f:29:07:fd:4a:e5:97:cc:84:c9:32:c0:d4:7e: a3:85:94:fd:4d:03:53:0f:10:88:bd:5a:5f:a4:a8:8f:0b:37: 85:65:43:b9:a5:6a:21:fd:7e:98:e8:ca:97:55:f5:bb:07:c0: 6f:f7:4d:3a:1c:2e:eb:28:44:a1:6c:e5:d4:00:aa:7b:72:e8: f2:e5:e0:7f:24:e0:6b:3d:ee:60:76:33:ff:4c:59:3a:0c:e3: d8:08:81:72:cc:56:42:33:0e:a4:e1:e6:29:47:71:b2:34:e0: 9c:64:73:d8:1a:86:46:a6:66:91:6f:11:18:a0:03:6e:04:48: 7c:03:2b:cb:62:74:f0:dc:28:bf:67:d2:63:09:fc:a6:46:89: 7f:6a:3e:5b:71:53:51:3e:ae:ec:68:52:a5:ab:20:a2:29:f5: 69:b0:80:e9:17:cf:07:71:89:1c:33:0a:a3:46:a6:56:24:89: 2b:c8:6b:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUFXPdIADe+1N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDliZWY1YzAtN2RiMy00YzFhLTg3MTctYmJmNTI4OTE5MzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQbaYirmGCAV8ZpBWbfy2LY6Lhr2tV16boRn HuVgeKSi+t43G3YWBdBWdPdcokPaFRYMABTlpU+K1djX5Uvk2sHFp/9ZMdJu/lb2 qBpc217r3av/WFEEEMZtXErQxBYj86apfuqcmoMdDbQrOZP6Ps33S8fkhHYAITEl haW7NoeleFDcneGzbRwW2rBQhcPtLGzi3jouaVCM4p/GIVkCMsixexmPAviuJLKr LATFbNMo4mO0sNhA5Qg7A/EW/ls26DCMTewAkdOWBhyHB95+cZCi+w4wqjcnE9/+ ggShTYiV36QszCbxIF+R6e8QyWnNFdtnRp/0MCEL4jkWG3VOwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5zfMeh0QToKs74mD1zjX3E0kbXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvODZhMmZhOTYtYWYxYy0z NTIwLWI4ZTItMzI0ZGYyODllZmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzgzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuWdGCAblA41Fq8sqIFXsldxpmX4MqHO1MLTJhyhUBGH3tOjBKMt3SU cJwdAv5PHbwNBrpwfoAbFw4zq+9QYI5/ToDzkJhzyXEtyxkPKQf9SuWXzITJMsDU fqOFlP1NA1MPEIi9Wl+kqI8LN4VlQ7mlaiH9fpjoypdV9bsHwG/3TTocLusoRKFs 5dQAqnty6PLl4H8k4Gs97mB2M/9MWToM49gIgXLMVkIzDqTh5ilHcbI04Jxkc9ga hkamZpFvERigA24ESHwDK8tidPDcKL9n0mMJ/KZGiX9qPltxU1E+ruxoUqWrIKIp 9WmwgOkXzwdxiRwzCqNGplYkiSvIaw8= -----END CERTIFICATE-----Generated at Sat Sep 26 15:35:19 2026 by rpki-client