$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa File: dca748a7-33a1-3825-aba7-e83549aaa4f0.roa (raw, json) Hash identifier: pfewAxHKHyBpjPDGJg8DgwQy4lYIY+9+o0pf/f3JjiE= Subject key identifier: 46:8E:D7:70:A7:8A:C7:9E:18:2D:81:C9:7F:3A:79:11:87:94:C0:F0 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584EA792570AA4C4697054A19380 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 271 IP address blocks: 209.87.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:57:0a:a4:c4:69:70:54:a1:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3fc88f70-6bfc-49b6-92a1-332d78c6d8ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:b4:22:87:ee:ff:18:5e:c9:0c:dd:ec:90: a4:68:7a:21:61:c4:3a:52:d1:41:eb:50:e0:ff:d0: 2e:1d:9d:69:52:92:84:d1:9a:f2:d1:31:56:4e:5b: db:38:42:ed:83:41:3e:fe:0f:6c:b9:56:aa:47:71: d5:91:5a:45:4b:19:67:ac:7b:92:52:38:ff:70:a6: a6:da:c4:b8:56:3f:e6:a2:e6:9f:21:06:df:b6:a3: 98:17:f7:79:c6:4f:90:9e:9e:28:62:dd:9b:4c:56: 24:ed:c2:62:60:f4:f7:67:d9:60:2e:f3:5c:b1:b3: d6:28:d1:56:9d:53:55:41:aa:cb:b5:3a:19:58:75: 37:f5:53:a7:83:80:15:32:3c:29:04:8a:b9:1c:12: b6:6e:c5:f0:a2:b0:a7:56:6e:df:80:b2:c6:86:83: 08:1d:31:47:6e:30:5e:ec:82:78:99:53:2e:f4:fd: 35:99:3c:9a:73:46:9f:da:70:3a:b5:d5:29:d0:5d: 0a:5b:7d:b0:40:b8:89:3c:54:e0:a9:59:c8:2e:68: b9:48:b6:1d:e2:56:5a:4d:2c:2f:a6:c3:af:71:5d: af:92:14:7f:02:44:47:97:52:6e:2a:0e:ff:d0:4a: df:d1:8f:10:e3:2f:21:5c:71:a4:f8:94:36:03:48: 5b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8E:D7:70:A7:8A:C7:9E:18:2D:81:C9:7F:3A:79:11:87:94:C0:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:dd:68:4f:38:20:b9:8e:d6:88:97:7c:80:58:cb:8c:f5:ff: 75:73:f8:a8:44:57:87:80:8a:04:73:9d:a2:3e:a9:73:9b:ed: 05:58:a8:a7:91:e0:98:81:6c:b9:98:20:26:d1:cc:d7:fb:8b: 99:69:db:35:e8:f8:88:ff:ef:c7:e3:84:5d:c3:89:ce:c0:c6: 8b:ee:85:3c:90:f2:18:7f:2f:27:17:00:1f:65:2d:d5:04:49: 8a:ac:cf:24:9f:62:df:ca:0f:2f:ba:da:8d:98:c1:fc:0f:d8: 8a:07:c2:29:9d:08:a5:7a:4d:92:94:1b:75:14:db:08:69:fb: 5b:2a:e0:0f:ba:37:4a:ff:ba:de:dd:39:b4:8e:d8:3e:94:79: 73:57:99:22:3d:75:90:a2:d0:f6:cc:a8:27:f6:be:ec:bf:9e: 65:4c:60:d9:83:0e:86:9e:60:0c:6b:ba:e8:c5:c4:60:41:73: f3:b7:8a:36:31:a7:74:be:c0:36:b1:17:be:ad:91:d3:d5:e7: af:60:86:75:0c:38:48:01:9d:b4:84:d3:b5:e6:4f:6e:70:24: c1:bb:b8:f0:76:16:92:d7:9b:f0:60:20:71:1f:08:9f:66:2e: b2:98:c7:08:a4:d0:2a:7d:7f:ab:49:65:65:d8:eb:49:6d:60: 2e:bf:ca:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nklcKpMRpcFShk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2ZjODhmNzAtNmJmYy00OWI2LTkyYTEtMzMyZDc4YzZkOGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9S0Iofu/xheyQzd7JCkaHohYcQ6UtFB61Dg /9AuHZ1pUpKE0Zry0TFWTlvbOELtg0E+/g9suVaqR3HVkVpFSxlnrHuSUjj/cKam 2sS4Vj/mouafIQbftqOYF/d5xk+Qnp4oYt2bTFYk7cJiYPT3Z9lgLvNcsbPWKNFW nVNVQarLtToZWHU39VOng4AVMjwpBIq5HBK2bsXworCnVm7fgLLGhoMIHTFHbjBe 7IJ4mVMu9P01mTyac0af2nA6tdUp0F0KW32wQLiJPFTgqVnILmi5SLYd4lZaTSwv psOvcV2vkhR/AkRHl1JuKg7/0Erf0Y8Q4y8hXHGk+JQ2A0hb7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaO13CniseeGC2ByX86eRGHlMDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZGNhNzQ4YTctMzNhMS0z ODI1LWFiYTctZTgzNTQ5YWFhNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VcSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPdaE84ILmO1oiXfIBYy4z1/3Vz+KhEV4eAigRznaI+qXOb7QVYqKeR 4JiBbLmYICbRzNf7i5lp2zXo+Ij/78fjhF3Dic7AxovuhTyQ8hh/LycXAB9lLdUE SYqszySfYt/KDy+62o2YwfwP2IoHwimdCKV6TZKUG3UU2whp+1sq4A+6N0r/ut7d ObSO2D6UeXNXmSI9dZCi0PbMqCf2vuy/nmVMYNmDDoaeYAxruujFxGBBc/O3ijYx p3S+wDaxF76tkdPV569ghnUMOEgBnbSE07XmT25wJMG7uPB2FpLXm/BgIHEfCJ9m LrKYxwik0Cp9f6tJZWXY60ltYC6/ypk= -----END CERTIFICATE-----Generated at Wed Jul 29 04:12:37 2026 by rpki-client