$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd31c20d-e6d1-35ea-aecd-3f8ff0b01661.roa File: bd31c20d-e6d1-35ea-aecd-3f8ff0b01661.roa (raw, json) Hash identifier: B2h7o9mgAhX5D3SflvJn5FQoJkJAQDM9b994BDbkATg= Subject key identifier: 43:FD:9A:7C:DD:EA:27:1C:70:95:41:D6:0B:B1:40:70:D9:19:A3:30 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584F30528B38F78B8A28B8006180 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd31c20d-e6d1-35ea-aecd-3f8ff0b01661.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 271 IP address blocks: 209.87.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:8b:38:f7:8b:8a:28:b8:00:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=490eef6a-d31d-4b68-956e-7084cd8ea589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f2:e3:58:73:e9:82:25:3b:8d:f6:c5:77:51: ed:be:b5:d5:f3:3f:02:1e:a8:ab:4e:b2:83:ac:79: 63:56:f7:44:0d:b0:57:63:f7:4c:2b:a7:33:6a:3f: c4:3b:61:cb:68:be:d7:9e:31:dc:f8:1c:41:ed:7a: 1a:86:6a:e3:c4:4d:c9:83:08:0b:12:b1:e5:f7:0f: 51:62:0d:93:01:cc:01:47:8b:96:9b:dd:b3:da:15: 1c:f4:31:07:7b:90:f0:57:14:fd:0d:a9:42:64:9c: a8:1d:91:77:3f:53:3d:df:36:80:13:4c:29:bd:28: dd:ce:19:a7:54:3d:17:33:51:19:f0:98:34:e8:79: 7a:d0:57:cc:70:cc:aa:e2:f0:f4:1e:14:af:29:17: d6:be:cf:5e:95:c8:86:d4:20:5e:00:e7:82:23:96: b4:b0:08:08:3b:3d:bb:44:6d:c1:27:6c:b6:d2:fa: 9c:b2:c1:ee:6e:ba:48:25:3a:eb:63:b8:4b:6d:21: ee:5e:c0:2e:7d:1e:c4:af:5c:97:27:3e:2e:89:af: e2:2c:1c:80:c4:37:98:e3:5f:fb:f7:7e:2d:3a:94: 18:ab:2a:8c:71:4f:c0:74:5f:14:39:bc:b7:c3:29: b2:9e:ec:26:fa:75:c4:dd:ab:70:1a:63:85:9c:87: a4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FD:9A:7C:DD:EA:27:1C:70:95:41:D6:0B:B1:40:70:D9:19:A3:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/bd31c20d-e6d1-35ea-aecd-3f8ff0b01661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:04:5a:08:0a:0b:e7:8a:20:4a:31:46:6f:c1:c0:d5:6e:54: 19:6e:88:5f:c0:f3:8f:89:8e:94:71:e6:92:6c:44:45:90:09: 7d:c5:18:03:64:70:5d:e0:6a:82:58:9a:a6:2f:bb:56:82:f1: 7d:a1:8c:d1:9d:44:47:37:9d:27:f3:95:1f:d9:87:e3:df:58: 08:60:31:64:e0:9f:97:66:27:64:fa:2f:bf:c7:93:bc:c9:70: 22:81:fe:5b:26:95:d8:af:88:41:6d:f0:62:0f:ab:78:b2:ca: 03:8c:ed:01:fa:08:21:81:d4:ce:71:0e:4c:56:c6:93:4d:92: 99:55:e1:19:b4:a5:e2:35:e2:41:4d:25:b9:41:bd:4d:ce:ed: 3b:d7:67:24:bf:fb:25:eb:38:92:0f:8a:1d:4f:87:15:23:b9: 66:6b:6c:f2:8b:ad:e7:5d:88:4c:79:4e:d4:f2:e1:43:7c:00: 0f:10:f0:04:e0:31:b8:a4:70:3e:99:0c:ab:d2:f6:2a:00:13: 6d:9c:25:46:49:7f:45:f3:02:4c:5c:3d:99:a0:23:8b:a1:23: f7:fa:a0:6d:1f:66:12:2e:bc:23:34:cd:08:bd:71:5b:f4:6a: db:8a:88:ab:49:de:b6:d6:25:da:c9:46:1f:8b:4e:f3:2f:e0: 69:88:c3:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUos494uKKLgAYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk NDkwZWVmNmEtZDMxZC00YjY4LTk1NmUtNzA4NGNkOGVhNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/LjWHPpgiU7jfbFd1HtvrXV8z8CHqirTrKD rHljVvdEDbBXY/dMK6czaj/EO2HLaL7XnjHc+BxB7XoahmrjxE3JgwgLErHl9w9R Yg2TAcwBR4uWm92z2hUc9DEHe5DwVxT9DalCZJyoHZF3P1M93zaAE0wpvSjdzhmn VD0XM1EZ8Jg06Hl60FfMcMyq4vD0HhSvKRfWvs9elciG1CBeAOeCI5a0sAgIOz27 RG3BJ2y20vqcssHubrpIJTrrY7hLbSHuXsAufR7Er1yXJz4uia/iLByAxDeY41/7 934tOpQYqyqMcU/AdF8UOby3wymynuwm+nXE3atwGmOFnIekeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEP9mnzd6icccJVB1guxQHDZGaMwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYmQzMWMyMGQtZTZkMS0z NWVhLWFlY2QtM2Y4ZmYwYjAxNjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIEWggKC+eKIEoxRm/BwNVuVBluiF/A84+JjpRx5pJsREWQCX3FGANk cF3gaoJYmqYvu1aC8X2hjNGdREc3nSfzlR/Zh+PfWAhgMWTgn5dmJ2T6L7/Hk7zJ cCKB/lsmldiviEFt8GIPq3iyygOM7QH6CCGB1M5xDkxWxpNNkplV4Rm0peI14kFN JblBvU3O7TvXZyS/+yXrOJIPih1PhxUjuWZrbPKLreddiEx5TtTy4UN8AA8Q8ATg MbikcD6ZDKvS9ioAE22cJUZJf0XzAkxcPZmgI4uhI/f6oG0fZhIuvCM0zQi9cVv0 atuKiKtJ3rbWJdrJRh+LTvMv4GmIw48= -----END CERTIFICATE-----Generated at Tue Sep 22 14:09:45 2026 by rpki-client