$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa File: 3a315f55-20c2-37ff-b50f-af30c5811ce0.roa (raw, json) Hash identifier: CWSIdU4bwtcyoCxN0eHEd8wpE6n57tLoU/+LqJV0Glc= Subject key identifier: E0:5B:48:78:E7:23:6E:97:9B:8E:7C:F9:DA:46:79:98:ED:3C:16:43 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584F4973D6BF1C3DEAC207F527E0 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7018 IP address blocks: 209.114.4.0/22 maxlen: 24 209.114.8.0/21 maxlen: 24 209.114.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d6:bf:1c:3d:ea:c2:07:f5:27:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e561bb50-604a-4a9d-bdaa-4c3796a43b65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:05:6b:e3:33:dd:e5:64:ed:f3:86:90:39: 97:6b:40:b1:9b:fd:8e:7a:a4:c3:1c:2a:26:06:92: b5:ae:7c:cc:8d:ee:b6:26:7b:6f:14:54:27:af:34: ae:2b:3f:60:cf:77:9a:8d:b1:f9:a6:8b:97:d9:7b: b4:6c:a9:a2:fa:0c:a9:65:c5:5e:f5:ad:28:5b:7b: 26:aa:18:79:63:1b:68:9e:22:da:d5:6b:2b:65:48: a5:e9:22:14:dc:b3:77:ac:7a:02:dd:52:08:1f:97: c5:1a:10:44:34:2f:9a:97:f6:49:ed:2f:b7:a5:20: 8b:a8:40:88:cf:89:c5:80:16:c7:4c:4d:12:40:f9: bf:a0:16:cd:27:51:83:62:a7:02:f4:99:f3:df:38: f1:48:a5:00:5a:ae:08:c9:cb:bf:47:c9:2b:cc:ff: 70:d0:21:43:41:71:3c:5e:b1:d5:d5:2f:6b:5f:9e: 0c:24:29:ed:7b:10:7f:45:dd:dc:24:32:5d:09:6a: 3b:77:7b:38:99:51:86:01:bb:b1:7b:f0:81:b0:5e: dd:43:33:de:22:f1:bb:0a:5c:fd:d6:c8:d0:6d:04: e7:be:58:69:57:2b:a4:34:ae:0b:bc:3c:2a:b2:c8: b4:48:e5:89:a7:6a:d0:fb:dd:43:1d:54:11:e1:d8: d7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5B:48:78:E7:23:6E:97:9B:8E:7C:F9:DA:46:79:98:ED:3C:16:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.4.0-209.114.31.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:41:f8:a2:30:ee:f0:63:a4:da:14:61:9f:89:be:86:dc:69: ad:6f:ff:d4:cd:08:6d:ef:7a:8c:a3:9a:09:c8:f5:a1:1d:ed: ef:9c:03:4d:e0:3e:f0:59:eb:4a:a1:02:63:9b:e2:4b:62:0f: 4a:d5:14:d2:3b:53:83:3e:7f:9c:97:d8:62:e5:e0:74:34:c7: f5:83:f3:bb:e7:8e:4b:79:bb:6b:34:b7:6b:e1:07:98:f1:20: 33:fa:17:b9:f7:3a:56:4a:05:a3:25:5c:60:89:a8:3a:d8:2a: 71:38:5f:6e:c4:68:e3:a1:21:1e:50:52:c5:a7:ea:93:a5:7d: ca:4a:3c:bf:61:50:52:fa:c5:88:d6:f2:93:16:49:03:76:84: e6:ef:a0:42:55:38:3b:f4:5c:91:45:e5:c1:80:a8:52:71:ba: b3:43:39:e9:bf:f9:af:cf:9c:d9:dc:93:97:65:92:70:0b:9f: ea:41:7f:d0:42:44:bc:e5:05:72:37:92:e6:e1:b6:18:d0:5c: c4:35:76:08:0c:26:59:4e:4c:81:c0:ca:0d:c8:ee:c2:66:f4: 32:c6:29:ae:18:a4:72:bd:92:b8:4d:9a:b7:ea:3a:85:9f:18: d2:7a:9c:55:f5:d3:2c:d5:a9:50:53:89:dc:34:8d:9d:06:54: 36:b3:ad:38 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9Jc9a/HD3qwgf1J+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTU2MWJiNTAtNjA0YS00YTlkLWJkYWEtNGMzNzk2YTQzYjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDcFa+Mz3eVk7fOGkDmXa0Cxm/2OeqTDHCom BpK1rnzMje62JntvFFQnrzSuKz9gz3eajbH5pouX2Xu0bKmi+gypZcVe9a0oW3sm qhh5YxtoniLa1WsrZUil6SIU3LN3rHoC3VIIH5fFGhBENC+al/ZJ7S+3pSCLqECI z4nFgBbHTE0SQPm/oBbNJ1GDYqcC9Jnz3zjxSKUAWq4Iycu/R8krzP9w0CFDQXE8 XrHV1S9rX54MJCntexB/Rd3cJDJdCWo7d3s4mVGGAbuxe/CBsF7dQzPeIvG7Clz9 1sjQbQTnvlhpVyukNK4LvDwqssi0SOWJp2rQ+91DHVQR4djXoQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOBbSHjnI26Xm458+dpGeZjtPBZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvM2EzMTVmNTUtMjBjMi0z N2ZmLWI1MGYtYWYzMGM1ODExY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALRcgQD BAXRcgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAlkH4ojDu8GOk2hRhn4m+htxprW//1M0Ibe96jKOaCcj1 oR3t75wDTeA+8FnrSqECY5viS2IPStUU0jtTgz5/nJfYYuXgdDTH9YPzu+eOS3m7 azS3a+EHmPEgM/oXufc6VkoFoyVcYImoOtgqcThfbsRo46EhHlBSxafqk6V9yko8 v2FQUvrFiNbykxZJA3aE5u+gQlU4O/RckUXlwYCoUnG6s0M56b/5r8+c2dyTl2WS cAuf6kF/0EJEvOUFcjeS5uG2GNBcxDV2CAwmWU5MgcDKDcjuwmb0MsYprhikcr2S uE2at+o6hZ8Y0nqcVfXTLNWpUFOJ3DSNnQZUNrOtOA== -----END CERTIFICATE-----Generated at Sat Oct 10 13:22:46 2026 by rpki-client