$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9c22c93f-e1f4-3d75-a769-2eb4b6883a20.roa File: 9c22c93f-e1f4-3d75-a769-2eb4b6883a20.roa (raw, json) Hash identifier: 8WyAlNi4UGBvz6Jh9pAJ6jcSP91gLLO57edYZeghEwE= Subject key identifier: 20:1D:1C:CC:59:E0:C4:33:DA:88:50:06:68:9D:C6:58:48:16:56:96 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584EE0C208EA740E844C61A13580 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9c22c93f-e1f4-3d75-a769-2eb4b6883a20.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 271 IP address blocks: 209.87.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:08:ea:74:0e:84:4c:61:a1:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=52a4df96-2135-4520-aee1-452ad02f50b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:07:3a:7f:ae:31:8b:33:46:f5:42:93:a9:7e: ed:c2:8a:b4:f0:fa:cd:00:93:f8:06:dc:3a:36:dd: 3d:dd:2f:d4:69:b1:00:b8:83:27:e9:b7:d2:a8:a2: 3b:99:12:12:ab:06:48:81:d1:c8:3e:ce:49:b3:d3: 23:f1:6e:a3:76:21:87:84:f5:dd:82:db:5c:d3:44: 61:80:c8:fd:f2:d4:af:c2:23:99:d3:39:8a:47:2b: 5f:7a:37:c0:a7:ce:67:26:c8:c4:30:48:32:f6:0e: 89:2e:41:e5:9b:ec:5f:50:31:ca:35:66:aa:94:a4: 22:89:ee:15:14:06:ac:75:21:3c:c7:2e:70:fc:ea: 5b:e0:55:c6:76:13:b5:f9:4e:9e:46:98:00:d4:19: df:2d:a9:3d:71:74:5d:d9:c2:4e:65:7b:98:69:16: 84:44:55:12:a2:fd:ad:c1:39:18:3b:bc:e6:69:4a: f8:f8:39:4a:98:8c:d2:ff:eb:8b:96:7b:13:ce:72: 9e:fa:2a:06:da:05:f7:15:cf:d1:72:0c:5c:4b:f9: 53:e0:53:ad:9e:19:29:7d:f3:53:e1:44:da:c6:e6: a1:6b:af:f9:38:fc:1b:77:2f:64:68:59:bf:ca:5d: b3:dc:30:91:2f:26:31:c7:b4:4f:0f:b4:46:e5:ec: 51:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1D:1C:CC:59:E0:C4:33:DA:88:50:06:68:9D:C6:58:48:16:56:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/9c22c93f-e1f4-3d75-a769-2eb4b6883a20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:06:db:d8:1d:1c:76:73:97:ee:dd:8c:a3:8c:18:65:67:f1: a0:0d:7e:0f:91:23:81:21:07:8e:58:5a:0f:3f:7e:ee:30:47: 97:be:5a:92:27:33:8c:05:f7:72:1f:31:6d:02:a8:06:82:65: 5a:39:a1:52:14:f5:b2:3b:77:84:7b:8c:c0:bb:7e:d4:a1:a4: 52:62:ba:f5:e9:34:09:f4:d9:67:04:24:40:43:aa:b8:02:0f: 3e:cb:60:05:0e:6d:26:dd:df:73:77:6c:d3:3e:91:c2:ff:8b: f7:6b:59:a9:3a:11:a6:2a:28:31:25:4b:27:9f:e8:3f:79:b9: 9e:4e:ee:10:f2:15:27:6d:94:4b:a5:06:f9:4b:a7:df:72:8d: 9f:9c:f4:95:61:18:03:e1:3b:81:c3:7a:84:05:1a:11:fe:2d: 9d:a0:8d:07:76:84:c5:a1:88:c0:21:82:11:db:2c:1f:77:41: 55:ca:2a:de:50:38:fa:38:6d:01:94:6b:ec:6c:52:21:cd:f7: 52:4a:17:4e:31:59:7d:cd:19:b8:0a:cc:7c:f7:81:23:b1:f2: 26:a5:55:d1:88:93:9d:9e:37:73:83:46:f8:5d:8f:6a:aa:85: 63:8c:d4:3d:df:e4:93:fa:37:3d:22:80:42:d9:61:a6:a9:47: 7f:92:ad:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgjqdA6ETGGhNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk NTJhNGRmOTYtMjEzNS00NTIwLWFlZTEtNDUyYWQwMmY1MGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQc6f64xizNG9UKTqX7twoq08PrNAJP4Btw6 Nt093S/UabEAuIMn6bfSqKI7mRISqwZIgdHIPs5Js9Mj8W6jdiGHhPXdgttc00Rh gMj98tSvwiOZ0zmKRytfejfAp85nJsjEMEgy9g6JLkHlm+xfUDHKNWaqlKQiie4V FAasdSE8xy5w/Opb4FXGdhO1+U6eRpgA1BnfLak9cXRd2cJOZXuYaRaERFUSov2t wTkYO7zmaUr4+DlKmIzS/+uLlnsTznKe+ioG2gX3Fc/RcgxcS/lT4FOtnhkpffNT 4UTaxuaha6/5OPwbdy9kaFm/yl2z3DCRLyYxx7RPD7RG5exRWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAdHMxZ4MQz2ohQBmidxlhIFlaWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvOWMyMmM5M2YtZTFmNC0z ZDc1LWE3NjktMmViNGI2ODgzYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQG29gdHHZzl+7djKOMGGVn8aANfg+RI4EhB45YWg8/fu4wR5e+WpIn M4wF93IfMW0CqAaCZVo5oVIU9bI7d4R7jMC7ftShpFJiuvXpNAn02WcEJEBDqrgC Dz7LYAUObSbd33N3bNM+kcL/i/drWak6EaYqKDElSyef6D95uZ5O7hDyFSdtlEul BvlLp99yjZ+c9JVhGAPhO4HDeoQFGhH+LZ2gjQd2hMWhiMAhghHbLB93QVXKKt5Q OPo4bQGUa+xsUiHN91JKF04xWX3NGbgKzHz3gSOx8ialVdGIk52eN3ODRvhdj2qq hWOM1D3f5JP6Nz0igELZYaapR3+SrRc= -----END CERTIFICATE-----Generated at Tue Sep 22 11:07:41 2026 by rpki-client