$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/834e115f-402c-426f-945e-d1559aee07f4/8d6af9d3-a191-3a7a-982b-7200dcc5e115.roa File: 8d6af9d3-a191-3a7a-982b-7200dcc5e115.roa (raw, json) Hash identifier: MG6MwoTg5UBWTSqEH2IjODFMAzSft0mi42/K8Wj5BiM= Subject key identifier: BF:05:A7:7D:91:DB:CE:B6:0F:A1:75:E6:32:F3:AB:85:2F:AA:99:C0 Certificate issuer: /CN=834e115f-402c-426f-945e-d1559aee07f4 Certificate serial: 010D0C9F4328584F23C288E69BFE5CD3F8D03C80 Authority key identifier: C2:9E:C7:6D:EB:C9:17:23:4A:8E:78:0D:E0:06:90:60:91:A3:F5:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/834e115f-402c-426f-945e-d1559aee07f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/834e115f-402c-426f-945e-d1559aee07f4/8d6af9d3-a191-3a7a-982b-7200dcc5e115.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 7341 IP address blocks: 209.225.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/834e115f-402c-426f-945e-d1559aee07f4/834e115f-402c-426f-945e-d1559aee07f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/834e115f-402c-426f-945e-d1559aee07f4/834e115f-402c-426f-945e-d1559aee07f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/834e115f-402c-426f-945e-d1559aee07f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:88:e6:9b:fe:5c:d3:f8:d0:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=834e115f-402c-426f-945e-d1559aee07f4 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=63925b7f-0fc2-4851-a644-152c76916ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a2:f4:0f:b5:d3:84:48:bf:8d:86:af:df:a8: 65:56:1e:c9:7f:c1:02:0a:de:6a:0d:57:b8:70:55: 84:4e:7f:ca:e7:5a:d8:06:1c:5e:6b:9d:87:45:4b: 6d:eb:2a:d1:4f:2b:e8:95:30:99:3e:5c:96:57:3e: 52:23:eb:f1:11:cd:f6:1a:e7:6c:d5:07:0c:03:5f: c8:90:da:98:90:b6:20:9b:bf:73:10:0d:1a:7e:e9: ff:64:44:46:41:59:55:26:53:d6:e1:e5:31:0b:f0: 0b:8e:cc:83:8b:ce:46:49:f4:a7:20:42:5d:28:c2: c5:e6:c4:8d:25:f8:b8:5d:28:81:26:57:b6:30:7f: 76:b5:20:4a:27:8a:67:04:8c:c9:95:f9:fb:f5:16: 7f:c2:8e:64:8f:6d:c0:47:65:44:3d:25:a5:53:40: 6c:30:d7:2e:73:bd:41:5b:43:73:e3:72:9c:13:ee: 9a:0d:40:06:9b:1d:ea:3a:04:04:ee:82:94:48:fe: 8a:b1:5f:68:c7:c6:e2:6b:37:93:b6:43:f5:64:80: 8c:25:b7:37:0b:52:f4:05:a6:b8:46:9b:48:ea:d6: 83:fd:45:75:e1:86:c2:6e:11:0d:d1:0e:33:18:36: 7c:b3:f4:02:dd:f1:78:70:ab:e1:cd:f0:bb:b0:82: 73:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:05:A7:7D:91:DB:CE:B6:0F:A1:75:E6:32:F3:AB:85:2F:AA:99:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/834e115f-402c-426f-945e-d1559aee07f4/8d6af9d3-a191-3a7a-982b-7200dcc5e115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/834e115f-402c-426f-945e-d1559aee07f4/834e115f-402c-426f-945e-d1559aee07f4.crl X509v3 Authority Key Identifier: keyid:C2:9E:C7:6D:EB:C9:17:23:4A:8E:78:0D:E0:06:90:60:91:A3:F5:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/834e115f-402c-426f-945e-d1559aee07f4.cer sbgp-ipAddrBlock: critical IPv4: 209.225.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:2d:0d:72:96:08:c9:95:81:ce:fd:6c:8b:bd:e7:0f:a0:aa: 2e:d3:38:47:3d:3c:00:7e:03:8b:ac:f7:41:8b:77:d0:d1:06: 62:d1:a5:87:fc:35:2b:86:ec:11:28:a1:7f:07:17:f8:41:36: 32:fb:22:fa:bf:6f:c4:4a:ab:c7:c1:0a:9e:fb:58:fa:ca:a2: f0:7e:0e:ae:f5:c5:bc:2f:a4:a7:3b:40:a2:77:85:b3:01:f2: ec:10:bd:59:48:ae:e8:5c:cb:f7:6e:23:70:28:ee:bb:31:f2: a4:f9:dd:c3:53:f6:fb:df:07:6c:ae:85:ac:26:d1:04:3f:74: ee:e5:d7:63:e1:2a:47:20:60:b1:25:f4:e6:3d:32:dc:11:28: a1:53:06:4c:be:d8:90:c4:c1:6c:76:8d:79:ea:34:81:5c:7a: 72:94:9a:58:29:7c:63:62:41:b3:a9:83:7c:52:9c:c0:0a:1d: 91:68:00:1b:a9:0b:46:f4:69:41:37:5f:ad:8a:8e:cb:73:8c: b1:fd:f3:08:43:9e:50:63:ea:f6:97:36:f9:55:7b:97:22:51: 7e:20:fc:91:a5:34:d2:d6:3c:db:b1:04:bb:dd:14:4c:f0:dd: a6:5a:f2:58:59:12:db:d5:dd:95:a3:12:49:3d:33:91:7c:18: 73:ba:a5:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwojmm/5c0/jQPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODM0ZTExNWYtNDAyYy00MjZmLTk0NWUtZDE1NTlhZWUw N2Y0MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NjM5MjViN2YtMGZjMi00ODUxLWE2NDQtMTUyYzc2OTE2ZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaL0D7XThEi/jYav36hlVh7Jf8ECCt5qDVe4 cFWETn/K51rYBhxea52HRUtt6yrRTyvolTCZPlyWVz5SI+vxEc32Guds1QcMA1/I kNqYkLYgm79zEA0afun/ZERGQVlVJlPW4eUxC/ALjsyDi85GSfSnIEJdKMLF5sSN Jfi4XSiBJle2MH92tSBKJ4pnBIzJlfn79RZ/wo5kj23AR2VEPSWlU0BsMNcuc71B W0Nz43KcE+6aDUAGmx3qOgQE7oKUSP6KsV9ox8biazeTtkP1ZICMJbc3C1L0Baa4 RptI6taD/UV14YbCbhEN0Q4zGDZ8s/QC3fF4cKvhzfC7sIJzJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8Fp32R2862D6F15jLzq4UvqpnAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84MzRl MTE1Zi00MDJjLTQyNmYtOTQ1ZS1kMTU1OWFlZTA3ZjQvOGQ2YWY5ZDMtYTE5MS0z YTdhLTk4MmItNzIwMGRjYzVlMTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvODM0ZTExNWYtNDAyYy00MjZmLTk0 NWUtZDE1NTlhZWUwN2Y0LzgzNGUxMTVmLTQwMmMtNDI2Zi05NDVlLWQxNTU5YWVl MDdmNC5jcmwwHwYDVR0jBBgwFoAUwp7HbevJFyNKjngN4AaQYJGj9R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84MzRlMTE1Zi00MDJjLTQyNmYtOTQ1ZS1kMTU1 OWFlZTA3ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0eFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQtDXKWCMmVgc79bIu95w+gqi7TOEc9PAB+A4us90GLd9DRBmLRpYf8 NSuG7BEooX8HF/hBNjL7Ivq/b8RKq8fBCp77WPrKovB+Dq71xbwvpKc7QKJ3hbMB 8uwQvVlIruhcy/duI3Ao7rsx8qT53cNT9vvfB2yuhawm0QQ/dO7l12PhKkcgYLEl 9OY9MtwRKKFTBky+2JDEwWx2jXnqNIFcenKUmlgpfGNiQbOpg3xSnMAKHZFoABup C0b0aUE3X62KjstzjLH98whDnlBj6vaXNvlVe5ciUX4g/JGlNNLWPNuxBLvdFEzw 3aZa8lhZEtvV3ZWjEkk9M5F8GHO6pWU= -----END CERTIFICATE-----Generated at Tue Sep 22 20:22:09 2026 by rpki-client