$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ddea0208-9f25-3934-9c14-a7d7eda22304.roa File: ddea0208-9f25-3934-9c14-a7d7eda22304.roa (raw, json) Hash identifier: HlN9NiNomN3ks+qq3Ap3T/ekWS9qnW8ky4acdZ1cVvc= Subject key identifier: A4:86:4C:CA:F5:D7:E4:13:D0:FC:EC:87:07:BA:F3:A0:9E:FD:FD:C7 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584EA786E9139A194374A3432C80 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ddea0208-9f25-3934-9c14-a7d7eda22304.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 271 IP address blocks: 209.87.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:e9:13:9a:19:43:74:a3:43:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4af6b6bb-98dd-45e9-87d1-95d97cc6be05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:0c:08:14:7c:40:5a:fe:f2:91:02:80:40: d7:96:85:d3:5a:46:e1:6d:c6:1c:17:b6:99:d6:fb: 5c:38:66:cf:71:3b:e6:c1:54:9a:cd:5b:2d:c9:1b: 8e:27:3b:01:76:75:97:7b:da:23:d1:f7:9c:ae:e3: df:bb:44:26:92:1a:85:17:51:2e:4b:d4:17:83:02: a7:b5:f6:05:e8:fb:2f:1f:5e:00:ec:9e:f2:a8:9a: d8:fc:c6:24:35:11:e9:a7:ee:86:64:02:83:7b:3e: 7a:98:80:f2:1a:e3:04:f5:e5:d4:85:9c:75:83:83: 06:f2:8e:0f:d3:ff:79:97:1a:8c:7a:d5:39:4e:51: 2e:d2:f1:e8:34:38:0a:0c:06:4d:d7:31:8b:b7:60: 33:8c:50:6f:58:44:76:94:f3:96:ad:77:e9:37:4a: 7f:33:1b:bb:2e:3d:d6:45:c5:ac:21:6c:a4:25:4b: fb:f5:84:ed:9b:f8:92:1f:4a:76:8c:9a:93:bb:40: 25:fc:d3:7a:b5:f5:68:76:20:99:19:be:95:d9:e1: 55:8f:e8:97:5a:03:ba:4b:d9:4e:f9:f4:52:20:3e: 32:bf:63:6c:13:53:61:df:19:a7:d9:0e:6e:9c:3e: 71:2b:91:ec:75:ac:69:ca:a1:5e:35:71:b1:e3:c8: 90:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:86:4C:CA:F5:D7:E4:13:D0:FC:EC:87:07:BA:F3:A0:9E:FD:FD:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ddea0208-9f25-3934-9c14-a7d7eda22304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d0:5b:e2:a8:fe:cb:c8:01:67:ea:43:c6:f2:92:5f:57:c3: c9:b9:46:05:97:20:3e:1a:fb:a7:e3:2a:50:e8:c5:5a:86:59: c0:de:b2:bc:66:e8:9a:cf:a8:c2:96:41:c6:cc:a1:23:94:03: cd:86:44:9b:e1:e3:92:de:0b:c7:54:c6:76:33:4a:cc:f8:45: 63:39:38:5e:ec:99:c7:81:99:8b:c4:62:8c:5c:bb:1e:24:06: cf:84:17:6a:dd:af:4c:d3:d3:22:71:96:fe:70:e0:e5:8b:29: 68:ab:78:4a:7f:d7:f4:37:c2:bf:64:f2:97:a3:79:4e:8b:de: 6d:d5:b3:69:4e:89:49:18:16:c1:05:86:09:35:f7:e0:33:88: b2:b5:c6:54:51:9b:9a:ad:70:e9:85:55:4d:49:b6:2f:fd:ba: b4:25:6f:b5:73:77:2d:69:6d:3d:2d:9b:d1:b7:d0:d1:32:0c: f8:61:41:1e:50:21:62:9e:06:30:66:a3:c5:58:01:a8:4e:77: 00:42:8b:1a:cb:db:4e:bf:52:61:ce:14:94:55:f8:a3:78:73: 65:ba:c6:c0:81:54:79:b0:c5:08:b9:84:43:63:33:78:52:e2: d2:84:44:1b:03:f6:c1:2a:7e:e6:ea:4e:5c:8a:9a:d4:5a:d2: 0f:9e:13:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhukTmhlDdKNDLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGFmNmI2YmItOThkZC00NWU5LTg3ZDEtOTVkOTdjYzZiZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI4MCBR8QFr+8pECgEDXloXTWkbhbcYcF7aZ 1vtcOGbPcTvmwVSazVstyRuOJzsBdnWXe9oj0fecruPfu0QmkhqFF1EuS9QXgwKn tfYF6PsvH14A7J7yqJrY/MYkNRHpp+6GZAKDez56mIDyGuME9eXUhZx1g4MG8o4P 0/95lxqMetU5TlEu0vHoNDgKDAZN1zGLt2AzjFBvWER2lPOWrXfpN0p/Mxu7Lj3W RcWsIWykJUv79YTtm/iSH0p2jJqTu0Al/NN6tfVodiCZGb6V2eFVj+iXWgO6S9lO +fRSID4yv2NsE1Nh3xmn2Q5unD5xK5HsdaxpyqFeNXGx48iQjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSGTMr11+QT0Pzshwe686Ce/f3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZGRlYTAyMDgtOWYyNS0z OTM0LTljMTQtYTdkN2VkYTIyMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Vc9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvQW+Ko/svIAWfqQ8bykl9Xw8m5RgWXID4a+6fjKlDoxVqGWcDesrxm 6JrPqMKWQcbMoSOUA82GRJvh45LeC8dUxnYzSsz4RWM5OF7smceBmYvEYoxcux4k Bs+EF2rdr0zT0yJxlv5w4OWLKWireEp/1/Q3wr9k8pejeU6L3m3Vs2lOiUkYFsEF hgk19+AziLK1xlRRm5qtcOmFVU1Jti/9urQlb7Vzdy1pbT0tm9G30NEyDPhhQR5Q IWKeBjBmo8VYAahOdwBCixrL206/UmHOFJRV+KN4c2W6xsCBVHmwxQi5hENjM3hS 4tKERBsD9sEqfubqTlyKmtRa0g+eE0I= -----END CERTIFICATE-----Generated at Thu Jul 30 04:46:46 2026 by rpki-client