$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/245081f2-effd-35ab-aee8-d10c19f48000.roa File: 245081f2-effd-35ab-aee8-d10c19f48000.roa (raw, json) Hash identifier: 1DM0pdDhDvp+qD22gYxl6TBPgfwgCFhKN2aX1KXj+FA= Subject key identifier: CF:FA:C9:62:F9:2D:07:58:C7:CB:DF:D3:33:CA:D5:7B:10:AC:0E:30 Certificate issuer: /CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Certificate serial: 010D0C9F4328584F1B624F5F2F76FD2B9EF06D80 Authority key identifier: 0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/245081f2-effd-35ab-aee8-d10c19f48000.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 209.51.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4f:5f:2f:76:fd:2b:9e:f0:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=73a72cb8-150f-4983-8a86-814dd4b91259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:81:91:29:5e:57:0d:42:77:4d:ed:ba:6f:99: 7b:71:c8:56:ab:70:b9:3f:db:8d:7d:44:1c:db:12: ea:81:2d:89:eb:4a:e4:09:b5:ae:f1:cd:f2:44:e0: 04:3e:5f:c9:a8:6e:64:37:23:3c:00:ef:96:65:fa: 25:77:e5:8c:2d:25:20:71:93:d4:a7:c9:92:23:02: 23:3d:f8:95:d9:e1:17:a2:18:75:47:8a:56:4e:f3: c3:73:be:47:51:dc:8f:09:85:37:5b:bd:a8:f7:19: 9a:29:5b:45:32:b8:74:2d:7f:61:98:56:bb:99:09: c4:dc:81:93:ac:00:a7:ac:74:7f:8c:32:0c:60:01: 28:07:d7:96:bc:2a:e7:32:c9:bb:3e:10:19:ee:ec: 68:c1:05:14:71:4e:5c:46:a1:ba:c1:af:75:8a:9b: 19:4b:3d:40:9f:c0:53:64:7b:9a:36:21:d5:c1:98: 59:40:74:e3:36:02:82:5b:24:ac:6c:08:3a:28:39: 0b:e4:f4:34:c9:49:2a:e6:e0:ce:cf:8f:f7:4f:16: 8f:b7:e6:21:d2:9e:e3:18:f2:ed:b9:a0:bc:61:94: ee:85:a7:a8:e7:ff:b8:39:ee:6d:83:02:12:9f:b6: b3:6e:2d:ca:3f:df:db:db:92:be:e1:74:c3:24:5d: 37:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FA:C9:62:F9:2D:07:58:C7:CB:DF:D3:33:CA:D5:7B:10:AC:0E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/245081f2-effd-35ab-aee8-d10c19f48000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl X509v3 Authority Key Identifier: keyid:0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer sbgp-ipAddrBlock: critical IPv4: 209.51.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:32:9d:fe:24:6b:cf:b1:b5:e2:84:7f:de:fd:9d:b1:27:b9: ac:96:59:c8:67:9d:12:fb:69:22:b8:20:46:a1:90:88:f8:2f: df:ff:dd:5d:36:40:8b:27:cc:f4:77:b6:d6:c3:38:46:2c:94: 44:5e:bc:6c:cc:44:ba:33:a5:77:f7:80:ab:ab:95:87:07:24: 19:58:f8:1f:22:f4:48:af:c3:08:80:e8:de:e6:38:b1:e6:1a: 79:f2:ce:f4:e6:66:85:74:91:f9:d6:12:83:50:67:b5:2d:57: d7:60:c7:f4:c8:68:99:1e:2c:7c:81:b1:ba:d5:98:ce:23:27: a2:b2:8c:94:d6:ca:d5:83:a6:fd:50:a9:a5:dc:3c:52:02:a5: db:66:60:ed:86:2b:5b:71:dd:42:3a:42:d2:82:cd:ad:fd:10: 93:00:e4:b3:8e:8a:b6:95:69:30:ed:8a:14:52:13:bc:16:d0: f7:42:a6:b0:6a:81:ab:ff:01:49:e2:d3:a4:98:35:b8:66:5f: d2:32:63:ad:cf:bf:65:07:4d:cd:4f:54:ba:a2:9b:e9:dc:b1: 32:7e:98:4e:1a:a1:67:bc:0f:6e:1e:d0:73:b5:a4:60:a6:c4: 06:19:65:a9:33:0c:15:25:b0:e7:03:fc:cf:c6:b5:86:62:2a: f8:70:56:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYk9fL3b9K57wbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlMDczMGQtNjVkMC00YTdjLTk3MTctYWRmNDAxZDNl NWQ2MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk NzNhNzJjYjgtMTUwZi00OTgzLThhODYtODE0ZGQ0YjkxMjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIGRKV5XDUJ3Te26b5l7cchWq3C5P9uNfUQc 2xLqgS2J60rkCbWu8c3yROAEPl/JqG5kNyM8AO+WZfold+WMLSUgcZPUp8mSIwIj PfiV2eEXohh1R4pWTvPDc75HUdyPCYU3W72o9xmaKVtFMrh0LX9hmFa7mQnE3IGT rACnrHR/jDIMYAEoB9eWvCrnMsm7PhAZ7uxowQUUcU5cRqG6wa91ipsZSz1An8BT ZHuaNiHVwZhZQHTjNgKCWySsbAg6KDkL5PQ0yUkq5uDOz4/3TxaPt+Yh0p7jGPLt uaC8YZTuhaeo5/+4Oe5tgwISn7azbi3KP9/b25K+4XTDJF03NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/6yWL5LQdYx8vf0zPK1XsQrA4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUw NzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0MDFkM2U1ZDYvMjQ1MDgxZjItZWZmZC0z NWFiLWFlZTgtZDEwYzE5ZjQ4MDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFlMDczMGQtNjVkMC00YTdjLTk3 MTctYWRmNDAxZDNlNWQ2LzIxZTA3MzBkLTY1ZDAtNGE3Yy05NzE3LWFkZjQwMWQz ZTVkNi5jcmwwHwYDVR0jBBgwFoAUCjfATPa/Hk/8i61XWhb+l13AIPMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWUwNzMwZC02NWQwLTRhN2MtOTcxNy1hZGY0 MDFkM2U1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkynf4ka8+xteKEf979nbEnuayWWchnnRL7aSK4IEahkIj4L9//3V02 QIsnzPR3ttbDOEYslERevGzMRLozpXf3gKurlYcHJBlY+B8i9EivwwiA6N7mOLHm GnnyzvTmZoV0kfnWEoNQZ7UtV9dgx/TIaJkeLHyBsbrVmM4jJ6KyjJTWytWDpv1Q qaXcPFICpdtmYO2GK1tx3UI6QtKCza39EJMA5LOOiraVaTDtihRSE7wW0PdCprBq gav/AUni06SYNbhmX9IyY63Pv2UHTc1PVLqim+ncsTJ+mE4aoWe8D24e0HO1pGCm xAYZZakzDBUlsOcD/M/GtYZiKvhwVkw= -----END CERTIFICATE-----Generated at Mon Sep 28 14:32:53 2026 by rpki-client