$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/d36e2c3a-cbcc-3fa2-b759-128892a175ad.roa File: d36e2c3a-cbcc-3fa2-b759-128892a175ad.roa (raw, json) Hash identifier: +p1naNUpDlydwZIzccSthA7cb5tiTDlrJVapByMY/jk= Subject key identifier: 78:FF:73:2A:60:7A:A4:F9:82:E2:39:CB:64:32:91:A2:5C:7C:FB:C0 Certificate issuer: /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Certificate serial: 010D0C9F4328584F43DD30A818D94C690FF05C80 Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/d36e2c3a-cbcc-3fa2-b759-128892a175ad.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 21669 IP address blocks: 209.212.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:30:a8:18:d9:4c:69:0f:f0:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=05d38643-9c02-4aec-99f1-1fe6ebff214f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9d:55:e4:85:15:c8:44:c2:00:50:85:2d:d5: a1:a5:47:00:67:fc:75:c5:54:d3:59:81:7a:2e:23: 65:09:9b:99:21:b9:67:f5:6c:37:fd:52:46:07:4d: b5:cd:77:0c:b0:08:fa:97:83:2a:34:ce:60:73:f6: 93:41:e2:dd:f1:4e:30:53:ad:e0:df:60:00:25:a2: 13:9b:ba:6f:dc:13:4e:af:eb:c4:85:01:c9:33:ba: 8a:c5:d4:6c:37:11:df:73:ca:43:d1:41:15:62:96: 04:d9:30:05:55:4e:08:97:68:ba:bd:42:67:d4:c8: d7:d7:8b:3a:4b:89:90:4f:7b:3d:25:57:87:e3:1d: e2:89:c9:f5:3a:e5:73:01:15:85:f9:6c:98:03:f7: b2:42:6d:74:84:ec:eb:e4:56:ae:fb:8a:01:0a:93: c1:3b:ab:35:e5:07:78:85:67:ac:41:5f:b2:8d:06: 58:9c:4f:aa:4f:e0:72:8e:ff:69:d1:61:95:77:3b: 2b:93:bf:1d:b9:fc:00:cc:33:c8:e1:a3:e1:52:2b: f4:58:c0:ac:81:d7:c3:bf:bb:62:4c:60:ce:48:6c: 55:09:40:fa:ab:5e:e4:a1:5e:62:8e:2f:0c:c4:9d: 56:4b:54:f1:00:af:49:1c:66:cd:9e:4b:e8:45:d0: 0c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FF:73:2A:60:7A:A4:F9:82:E2:39:CB:64:32:91:A2:5C:7C:FB:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/d36e2c3a-cbcc-3fa2-b759-128892a175ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl X509v3 Authority Key Identifier: keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer sbgp-ipAddrBlock: critical IPv4: 209.212.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:1d:40:4f:3c:d2:45:4a:b1:f3:25:e8:fc:d5:62:41:a1:e8: 42:4c:1a:a3:65:41:df:a8:26:21:ce:1a:59:29:40:cf:46:c8: c6:a4:e0:2f:a8:00:ea:ef:b2:f9:50:4a:a6:4f:71:88:bd:34: d0:89:12:46:1d:45:cd:e5:3c:b1:b2:bf:b1:9e:48:e3:b5:03: 6a:a7:95:f2:ea:42:ff:ce:4e:6d:9a:02:f4:01:5b:a9:c2:5d: b4:6e:f0:1e:44:8e:6e:08:9f:51:5d:d1:40:89:3b:1d:9a:68: 36:73:72:82:6f:a0:b7:fd:01:1b:73:b2:ce:c8:e9:2e:9e:e8: 55:c6:ba:26:fd:ef:ce:6f:b4:e5:1e:73:89:aa:42:a6:4b:a7: de:b0:6c:93:8f:df:6e:35:04:52:f2:b9:7a:fa:76:7b:71:a0: 62:ea:c6:a1:2c:84:91:aa:0d:94:02:fd:72:91:cd:85:6f:cf: e5:d4:97:6a:64:7b:97:4b:60:7d:2d:fc:9f:6e:90:44:5b:05: f1:d0:19:c6:53:1f:42:1c:cd:b5:ea:a2:6b:0d:41:9e:ea:b1: e4:4e:80:eb:47:f5:5e:9d:40:c9:3b:71:46:fd:a8:97:a7:43: 60:59:e4:43:9a:ba:7a:1e:90:c6:59:f9:be:4e:f1:d1:a8:7b: 06:b3:9e:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3TCoGNlMaQ/wXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5Njk3ODMtM2UzNS00NzlkLWIwZTctZTNkYWMwY2Fm OWY5MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MDVkMzg2NDMtOWMwMi00YWVjLTk5ZjEtMWZlNmViZmYyMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm51V5IUVyETCAFCFLdWhpUcAZ/x1xVTTWYF6 LiNlCZuZIbln9Ww3/VJGB021zXcMsAj6l4MqNM5gc/aTQeLd8U4wU63g32AAJaIT m7pv3BNOr+vEhQHJM7qKxdRsNxHfc8pD0UEVYpYE2TAFVU4Il2i6vUJn1MjX14s6 S4mQT3s9JVeH4x3iicn1OuVzARWF+WyYA/eyQm10hOzr5Fau+4oBCpPBO6s15Qd4 hWesQV+yjQZYnE+qT+Byjv9p0WGVdzsrk78dufwAzDPI4aPhUiv0WMCsgdfDv7ti TGDOSGxVCUD6q17koV5iji8MxJ1WS1TxAK9JHGbNnkvoRdAMGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHj/cypgeqT5guI5y2QykaJcfPvAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2 OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2RhYzBjYWY5ZjkvZDM2ZTJjM2EtY2JjYy0z ZmEyLWI3NTktMTI4ODkyYTE3NWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGY5Njk3ODMtM2UzNS00NzlkLWIw ZTctZTNkYWMwY2FmOWY5LzRmOTY5NzgzLTNlMzUtNDc5ZC1iMGU3LWUzZGFjMGNh ZjlmOS5jcmwwHwYDVR0jBBgwFoAUb5LJGnW0bOelHqUkIxZjVQ0DQIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2Rh YzBjYWY5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dQDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4dQE880kVKsfMl6PzVYkGh6EJMGqNlQd+oJiHOGlkpQM9GyMak4C+o AOrvsvlQSqZPcYi9NNCJEkYdRc3lPLGyv7GeSOO1A2qnlfLqQv/OTm2aAvQBW6nC XbRu8B5Ejm4In1Fd0UCJOx2aaDZzcoJvoLf9ARtzss7I6S6e6FXGuib9785vtOUe c4mqQqZLp96wbJOP3241BFLyuXr6dntxoGLqxqEshJGqDZQC/XKRzYVvz+XUl2pk e5dLYH0t/J9ukERbBfHQGcZTH0IczbXqomsNQZ7qseROgOtH9V6dQMk7cUb9qJen Q2BZ5EOaunoekMZZ+b5O8dGoewaznuY= -----END CERTIFICATE-----Generated at Thu Sep 24 00:39:03 2026 by rpki-client