$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4d131206-d946-311d-a858-428c81a2c3a5.roa File: 4d131206-d946-311d-a858-428c81a2c3a5.roa (raw, json) Hash identifier: MDNTXg8eIo9k/rABGZtJoMKsLooxwQlVJMwlyq59rEM= Subject key identifier: 41:AB:A1:F4:ED:87:C9:58:77:4E:E5:20:FB:4C:AF:9A:73:4E:65:2F Certificate issuer: /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Certificate serial: 010D0C9F4328584F4974725A59AE044BC84F4280 Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4d131206-d946-311d-a858-428c81a2c3a5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21669 IP address blocks: 209.212.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:72:5a:59:ae:04:4b:c8:4f:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a2bfadec-818e-4880-b14e-bd827bfc8539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:01:3e:94:7b:e2:42:8b:ef:9a:a4:85:3a:5c: 35:bb:82:61:db:95:74:ba:bd:4b:38:24:49:b8:34: 5b:22:70:ee:30:ca:2c:6e:68:8d:e7:1c:1c:0b:17: 45:d3:2a:d7:5c:e3:bd:da:90:d9:21:3b:36:a7:66: 3d:4b:da:b2:3d:e4:d2:5c:4a:93:a0:07:80:d6:56: e3:ec:20:cd:a6:8f:0d:bd:a0:03:a9:1e:61:07:cf: 3b:fc:b0:65:b7:b2:92:06:44:9e:74:3a:ac:18:43: e1:41:b9:f8:dc:a4:5f:e8:14:58:1f:11:ae:3b:58: 0c:99:76:44:3a:0a:34:65:27:49:70:de:7b:a9:74: f0:9b:e4:b8:96:39:8b:c4:7f:31:6b:74:c9:41:33: aa:be:d2:a8:e1:22:c3:d8:ec:4a:f5:79:74:20:31: e1:bb:48:11:cf:4f:ec:d6:8a:92:a0:09:a2:dc:da: 49:35:de:87:33:ff:56:9d:57:9b:34:54:a2:4f:37: 9a:35:40:73:60:61:82:28:a9:b8:89:f0:d2:59:fd: ff:29:3f:72:b2:da:8e:a0:f5:d3:01:51:cd:eb:56: 6e:7c:c3:79:ac:6e:f0:ab:7c:09:45:50:00:28:7c: 9c:b1:6c:42:c0:e1:76:0c:ca:5f:36:76:e9:94:62: 02:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AB:A1:F4:ED:87:C9:58:77:4E:E5:20:FB:4C:AF:9A:73:4E:65:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4d131206-d946-311d-a858-428c81a2c3a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl X509v3 Authority Key Identifier: keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer sbgp-ipAddrBlock: critical IPv4: 209.212.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:fd:27:f2:d1:75:93:fc:a9:97:8b:c4:57:e7:96:90:a3:b9: cd:b4:87:89:87:03:58:ae:6e:05:42:be:81:43:34:7c:52:2d: 87:a2:77:13:d4:64:8d:82:71:f0:cb:22:5f:63:82:40:15:b8: b1:64:46:52:c3:f6:15:24:5a:d9:78:4b:5f:b8:9e:a9:dc:ab: 5d:f9:08:07:17:34:9f:d5:fd:72:2b:82:8b:90:24:f8:46:43: 29:f3:29:f3:6e:d5:75:92:24:d9:c5:15:52:1e:2f:c8:36:62: 05:49:86:77:f3:9e:d9:4b:66:cb:46:48:fb:d7:9f:d5:d6:37: b7:ac:ae:e1:f7:cf:72:e9:5d:18:40:72:1d:7c:64:c4:e8:37: 58:75:8a:88:d7:87:37:48:be:ee:15:73:44:5d:30:4a:e9:f0: 12:1d:03:19:c8:f0:17:98:b3:3d:ec:2b:73:c7:d2:1c:2b:db: 81:b4:4b:a4:d7:41:f0:be:82:40:5d:60:da:a1:f3:a2:46:68: 47:22:21:12:ae:74:95:29:46:98:2c:11:0f:4d:c4:18:29:e0: e1:d3:4c:e5:f7:80:73:e0:67:8a:9e:19:23:da:91:73:63:65: 8f:48:84:2a:21:ff:f5:43:36:f2:9c:3b:34:d2:e6:b6:0b:e2: 8a:79:c2:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdHJaWa4ES8hPQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5Njk3ODMtM2UzNS00NzlkLWIwZTctZTNkYWMwY2Fm OWY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTJiZmFkZWMtODE4ZS00ODgwLWIxNGUtYmQ4MjdiZmM4NTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAE+lHviQovvmqSFOlw1u4Jh25V0ur1LOCRJ uDRbInDuMMosbmiN5xwcCxdF0yrXXOO92pDZITs2p2Y9S9qyPeTSXEqToAeA1lbj 7CDNpo8NvaADqR5hB887/LBlt7KSBkSedDqsGEPhQbn43KRf6BRYHxGuO1gMmXZE Ogo0ZSdJcN57qXTwm+S4ljmLxH8xa3TJQTOqvtKo4SLD2OxK9Xl0IDHhu0gRz0/s 1oqSoAmi3NpJNd6HM/9WnVebNFSiTzeaNUBzYGGCKKm4ifDSWf3/KT9ystqOoPXT AVHN61ZufMN5rG7wq3wJRVAAKHycsWxCwOF2DMpfNnbplGICpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGrofTth8lYd07lIPtMr5pzTmUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2 OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2RhYzBjYWY5ZjkvNGQxMzEyMDYtZDk0Ni0z MTFkLWE4NTgtNDI4YzgxYTJjM2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGY5Njk3ODMtM2UzNS00NzlkLWIw ZTctZTNkYWMwY2FmOWY5LzRmOTY5NzgzLTNlMzUtNDc5ZC1iMGU3LWUzZGFjMGNh ZjlmOS5jcmwwHwYDVR0jBBgwFoAUb5LJGnW0bOelHqUkIxZjVQ0DQIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2Rh YzBjYWY5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dQPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT9J/LRdZP8qZeLxFfnlpCjuc20h4mHA1iubgVCvoFDNHxSLYeidxPU ZI2CcfDLIl9jgkAVuLFkRlLD9hUkWtl4S1+4nqncq135CAcXNJ/V/XIrgouQJPhG QynzKfNu1XWSJNnFFVIeL8g2YgVJhnfzntlLZstGSPvXn9XWN7esruH3z3LpXRhA ch18ZMToN1h1iojXhzdIvu4Vc0RdMErp8BIdAxnI8BeYsz3sK3PH0hwr24G0S6TX QfC+gkBdYNqh86JGaEciIRKudJUpRpgsEQ9NxBgp4OHTTOX3gHPgZ4qeGSPakXNj ZY9IhCoh//VDNvKcOzTS5rYL4op5ws8= -----END CERTIFICATE-----Generated at Sat Oct 3 00:06:57 2026 by rpki-client