$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/909fccbd-c07c-3dc8-85fd-49ab6b52b637.roa File: 909fccbd-c07c-3dc8-85fd-49ab6b52b637.roa (raw, json) Hash identifier: S/EsBysyuw2TztSAK4YziF9rMCHep0VKLQygB+Qw/nQ= Subject key identifier: AB:EF:75:0E:F1:70:46:FB:CF:08:B7:7D:56:28:CD:6B:68:6A:86:4B Certificate issuer: /CN=6094ff48-2cdc-4ee0-879b-8cc25ddb855b Certificate serial: 010D0C9F4328584EA7971E9AAA37ABAD8625B100 Authority key identifier: B6:06:67:28:64:96:0A:3D:B3:F7:18:26:4B:BE:3B:9F:5F:79:2B:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/909fccbd-c07c-3dc8-85fd-49ab6b52b637.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399955 IP address blocks: 209.20.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:1e:9a:aa:37:ab:ad:86:25:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6094ff48-2cdc-4ee0-879b-8cc25ddb855b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2461ad74-e72a-4de2-83e7-d0682296a9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ba:6e:60:09:a8:79:31:04:85:f9:0f:8f:40: aa:aa:d5:fd:7a:f8:42:58:4e:11:32:e6:0c:6f:f6: 3f:f5:f5:01:2c:94:b2:87:c5:3a:f0:7f:bc:a7:38: ac:dd:bd:30:9e:f1:06:2b:50:36:d4:f9:14:42:57: 43:bb:44:a3:e2:8f:f3:85:12:f3:82:56:eb:00:a1: e7:e1:77:8e:3e:2d:59:39:79:e3:37:55:d5:4f:6b: 96:f5:94:8b:a7:0d:a6:9d:ba:75:53:c7:8b:94:55: 81:bc:27:7f:99:66:50:73:e3:05:ec:53:4d:2a:49: ca:e8:2b:51:26:bc:54:4d:c4:e4:87:0c:8e:0c:a3: 4b:d9:4e:5c:c5:8e:92:5c:cb:18:04:8a:5a:5a:ba: 88:ec:2c:88:ef:f0:a1:9f:30:78:76:25:ac:71:fd: 13:c4:d7:62:48:a6:ba:a9:38:08:5f:17:59:77:00: cc:e8:83:50:ee:08:84:95:3e:55:ad:2c:5a:e2:5d: eb:c4:14:53:27:92:e8:f8:4a:9d:dd:2a:ff:0b:f0: 01:eb:8a:88:87:73:c4:94:14:5d:92:ec:a7:84:c2: ed:5d:a9:b5:ca:4d:ae:8b:d6:7b:58:f9:0b:b0:fa: d2:cc:4f:e7:0a:84:b4:6d:56:7a:4b:6f:02:5d:27: 3c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:EF:75:0E:F1:70:46:FB:CF:08:B7:7D:56:28:CD:6B:68:6A:86:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/909fccbd-c07c-3dc8-85fd-49ab6b52b637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.crl X509v3 Authority Key Identifier: keyid:B6:06:67:28:64:96:0A:3D:B3:F7:18:26:4B:BE:3B:9F:5F:79:2B:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6094ff48-2cdc-4ee0-879b-8cc25ddb855b.cer sbgp-ipAddrBlock: critical IPv4: 209.20.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:eb:73:47:64:f9:2e:a6:6e:8f:a9:5d:9e:04:8d:05:bb:4f: 0e:82:2c:74:c0:81:fe:58:48:a9:e4:e0:60:88:0a:06:8f:b4: 08:f0:13:65:07:4f:71:2a:ea:92:8b:30:7b:48:c7:84:18:f3: 82:a6:6a:0f:98:33:0b:fc:88:7f:dd:14:41:66:56:a7:2d:f1: 9e:8f:ee:87:65:af:43:41:65:34:bf:57:a0:76:56:29:56:d5: dc:aa:f5:b6:c0:80:60:ef:64:da:1a:df:b6:9a:89:7a:d4:44: 46:0b:7d:49:54:f3:64:12:f6:92:85:9f:08:a9:a4:ff:fc:9d: 64:9e:75:6b:66:26:7c:58:60:8f:dd:99:b6:cc:f9:4d:8d:7d: a1:ad:b5:cc:32:13:f5:75:06:67:09:c5:95:48:05:dc:5c:c8: 91:bb:1a:a8:bf:a3:77:f4:ac:11:dd:90:8d:82:fd:cc:e5:21: d7:89:78:e2:23:98:c0:77:ef:f3:85:04:62:c4:77:a1:a9:2f: c5:2b:f4:7e:05:60:38:2c:b1:1a:7b:cb:8e:c1:da:a1:c2:65: 9c:66:8a:d6:1f:cf:16:8d:48:a7:95:07:6f:6d:a4:5e:05:ba: f7:9d:ac:14:29:ff:61:33:92:d0:47:7f:db:e4:bf:b3:ca:cc: fc:14:65:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlx6aqjerrYYlsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA5NGZmNDgtMmNkYy00ZWUwLTg3OWItOGNjMjVkZGI4 NTViMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjQ2MWFkNzQtZTcyYS00ZGUyLTgzZTctZDA2ODIyOTZhOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirpuYAmoeTEEhfkPj0CqqtX9evhCWE4RMuYM b/Y/9fUBLJSyh8U68H+8pzis3b0wnvEGK1A21PkUQldDu0Sj4o/zhRLzglbrAKHn 4XeOPi1ZOXnjN1XVT2uW9ZSLpw2mnbp1U8eLlFWBvCd/mWZQc+MF7FNNKknK6CtR JrxUTcTkhwyODKNL2U5cxY6SXMsYBIpaWrqI7CyI7/ChnzB4diWscf0TxNdiSKa6 qTgIXxdZdwDM6INQ7giElT5VrSxa4l3rxBRTJ5Lo+Eqd3Sr/C/AB64qIh3PElBRd kuynhMLtXam1yk2ui9Z7WPkLsPrSzE/nCoS0bVZ6S28CXSc8aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvvdQ7xcEb7zwi3fVYozWtoaoZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82MDk0 ZmY0OC0yY2RjLTRlZTAtODc5Yi04Y2MyNWRkYjg1NWIvOTA5ZmNjYmQtYzA3Yy0z ZGM4LTg1ZmQtNDlhYjZiNTJiNjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjA5NGZmNDgtMmNkYy00ZWUwLTg3 OWItOGNjMjVkZGI4NTViLzYwOTRmZjQ4LTJjZGMtNGVlMC04NzliLThjYzI1ZGRi ODU1Yi5jcmwwHwYDVR0jBBgwFoAUtgZnKGSWCj2z9xgmS747n195KzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82MDk0ZmY0OC0yY2RjLTRlZTAtODc5Yi04Y2My NWRkYjg1NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0RSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPrc0dk+S6mbo+pXZ4EjQW7Tw6CLHTAgf5YSKnk4GCICgaPtAjwE2UH T3Eq6pKLMHtIx4QY84Kmag+YMwv8iH/dFEFmVqct8Z6P7odlr0NBZTS/V6B2VilW 1dyq9bbAgGDvZNoa37aaiXrUREYLfUlU82QS9pKFnwippP/8nWSedWtmJnxYYI/d mbbM+U2NfaGttcwyE/V1BmcJxZVIBdxcyJG7Gqi/o3f0rBHdkI2C/czlIdeJeOIj mMB37/OFBGLEd6GpL8Ur9H4FYDgssRp7y47B2qHCZZxmitYfzxaNSKeVB29tpF4F uvedrBQp/2EzktBHf9vkv7PKzPwUZeI= -----END CERTIFICATE-----Generated at Mon Sep 21 19:49:07 2026 by rpki-client