$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa File: a502b432-1632-3940-872f-cd24ee7e9163.roa (raw, json) Hash identifier: QVlt161+JkfGwSY7xcCMkTGN3vhAOdU1fZr7JZcYWOs= Subject key identifier: B0:C7:99:AA:19:88:8E:EB:09:8D:0B:26:75:CE:01:8F:18:48:8D:3C Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584EA5AA6E22451E1BA3BC8D1800 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 14369 IP address blocks: 209.173.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:6e:22:45:1e:1b:a3:bc:8d:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=1ef64095-e6d3-4bfd-acfe-23af8469650c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e6:3d:fd:ab:b4:46:fe:e7:5e:1d:38:6e:71: 1a:33:3e:cf:be:ca:a4:9f:61:22:cf:eb:ed:cc:58: 64:b0:c0:f9:bf:35:8f:c9:aa:b0:c6:b8:90:54:72: b2:c1:d5:02:fa:b9:ec:30:9e:bf:c2:73:8e:4d:9c: cc:4d:46:6a:f8:b1:ea:2b:f2:23:aa:da:dc:fa:c0: 37:92:ed:f1:ee:6c:d7:9e:6e:ce:50:85:d6:eb:96: ed:6c:b8:d3:25:c8:90:61:0f:32:97:01:9d:3f:19: a6:00:b9:4b:4d:09:80:49:fd:e9:da:e9:f0:4d:b6: 18:1b:be:df:13:bc:e0:1d:ad:82:7c:c9:81:74:59: a9:27:4f:e8:4e:9b:2c:82:07:44:de:3e:ad:2e:68: e2:68:59:22:ff:09:a8:71:fe:90:41:0f:58:0d:bd: 77:2e:71:06:98:e8:42:eb:2d:4b:1b:fc:bd:d5:6c: 28:6d:ec:a7:4d:78:4f:1e:1b:cd:b2:e8:2d:57:b7: 6b:0e:2e:7a:5d:39:7b:99:ca:df:38:f1:46:24:c7: b3:66:8f:2d:d1:40:bd:11:c6:99:f7:35:75:ce:53: f7:6a:05:7e:05:33:79:cb:06:ac:6b:1d:c3:04:98: 7d:f5:2a:ba:c2:cd:63:ff:ba:57:49:68:f3:92:b4: 72:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C7:99:AA:19:88:8E:EB:09:8D:0B:26:75:CE:01:8F:18:48:8D:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.173.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c1:18:cf:7a:24:9e:df:f1:bd:26:6a:b5:6d:8c:d5:59:15: 52:42:85:c9:0b:56:55:99:51:c0:fa:03:88:61:98:a0:91:25: 3f:45:98:ce:27:31:72:ef:9b:d7:4b:0e:40:ab:3f:cd:df:35: 06:fb:bb:9c:69:b1:3c:11:b2:69:db:8b:36:fb:e5:8d:05:24: af:dc:90:27:2f:c9:ed:5d:1c:4f:f8:3d:71:70:b4:14:3b:5f: e4:42:18:7f:23:ed:bb:55:24:d5:5d:43:03:ff:15:94:07:3f: dc:af:29:8e:d2:7f:32:d8:dc:5e:cd:ad:ef:ca:ac:c6:68:86: 32:66:d4:fe:73:5d:5f:0f:0c:26:b7:fb:1f:c2:b0:02:3f:21: 0e:6c:db:8f:eb:81:4c:6a:83:d1:b3:f9:37:a1:e1:29:fb:83: bc:1d:72:23:0f:3f:24:f7:d3:22:5e:b5:e6:c2:6a:7c:db:e6: 95:e6:d6:31:3e:c7:6c:38:d2:ce:f0:f7:09:d0:46:79:0a:59: c0:14:35:56:c8:26:66:16:04:f8:e1:31:09:0d:c0:5d:a0:6f: 2d:e4:6b:c2:32:f2:44:7d:e3:fd:f5:82:32:d6:bd:13:1b:44: 74:a2:51:65:99:8b:c0:02:e1:66:c1:d1:54:dd:3c:e2:7b:51: e1:1c:4c:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqm4iRR4bo7yNGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk MWVmNjQwOTUtZTZkMy00YmZkLWFjZmUtMjNhZjg0Njk2NTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OY9/au0Rv7nXh04bnEaMz7Pvsqkn2Eiz+vt zFhksMD5vzWPyaqwxriQVHKywdUC+rnsMJ6/wnOOTZzMTUZq+LHqK/Ijqtrc+sA3 ku3x7mzXnm7OUIXW65btbLjTJciQYQ8ylwGdPxmmALlLTQmASf3p2unwTbYYG77f E7zgHa2CfMmBdFmpJ0/oTpssggdE3j6tLmjiaFki/wmocf6QQQ9YDb13LnEGmOhC 6y1LG/y91WwobeynTXhPHhvNsugtV7drDi56XTl7mcrfOPFGJMezZo8t0UC9EcaZ 9zV1zlP3agV+BTN5ywasax3DBJh99Sq6ws1j/7pXSWjzkrRyoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDHmaoZiI7rCY0LJnXOAY8YSI08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvYTUwMmI0MzItMTYzMi0z OTQwLTg3MmYtY2QyNGVlN2U5MTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a0JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjBGM96JJ7f8b0marVtjNVZFVJChckLVlWZUcD6A4hhmKCRJT9FmM4n MXLvm9dLDkCrP83fNQb7u5xpsTwRsmnbizb75Y0FJK/ckCcvye1dHE/4PXFwtBQ7 X+RCGH8j7btVJNVdQwP/FZQHP9yvKY7SfzLY3F7Nre/KrMZohjJm1P5zXV8PDCa3 +x/CsAI/IQ5s24/rgUxqg9Gz+Teh4Sn7g7wdciMPPyT30yJetebCanzb5pXm1jE+ x2w40s7w9wnQRnkKWcAUNVbIJmYWBPjhMQkNwF2gby3ka8Iy8kR94/31gjLWvRMb RHSiUWWZi8AC4WbB0VTdPOJ7UeEcTFM= -----END CERTIFICATE-----Generated at Wed Jul 29 06:23:43 2026 by rpki-client