$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa File: d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa (raw, json) Hash identifier: i30Eml/yeN8wblOuTN6kMs6h535jrILjjfVgzDToajY= Subject key identifier: B0:4B:21:5A:0F:55:FD:65:B5:62:E3:79:EE:FE:0A:29:CB:75:C8:00 Certificate issuer: /CN=57b5faad-63db-4cfd-a55b-4143c3e94291 Certificate serial: 010D0C9F4328584F189793393F3AAA162488AC00 Authority key identifier: 4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 22675 IP address blocks: 209.239.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:93:39:3f:3a:aa:16:24:88:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57b5faad-63db-4cfd-a55b-4143c3e94291 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=23606877-275d-41a0-bb8c-30085fe588c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:ee:8e:0a:41:b7:ad:e7:e1:97:16:9f:f1: 34:e7:84:fa:92:6a:d5:cd:8f:82:50:31:b0:91:bd: ba:c8:56:a1:61:7f:ff:80:50:51:89:63:21:2e:37: 89:6a:46:98:92:76:0c:8c:5d:5b:94:69:06:be:c5: 03:45:5f:d3:fb:e0:3f:cf:f0:74:88:92:32:82:6c: b5:ea:c7:49:b4:8a:0d:91:0b:a5:91:32:72:2d:f2: 48:be:3e:ff:61:1e:16:7f:fd:49:07:50:ef:78:72: fa:fa:0c:1b:18:34:f5:5c:9c:d1:67:51:b1:c3:96: ea:c3:e5:85:b4:2f:7a:a4:5b:d9:3c:04:7b:11:d2: ff:aa:91:ce:f5:5e:13:0a:f9:d0:e4:e0:34:bc:7c: d7:4e:25:36:b8:bf:9f:b1:fb:b6:8f:11:36:ac:57: de:04:d4:e3:87:f2:b9:e9:d8:8e:57:61:ba:98:0b: 31:f7:fa:f4:e4:cc:25:01:08:74:c9:09:51:85:9e: 39:c7:a3:d4:c4:75:b2:aa:f9:46:77:e8:78:91:14: 08:11:67:56:31:59:44:1a:f1:2d:b1:96:5f:dd:53: fc:1c:fe:df:7e:c4:7b:4c:46:0b:a3:04:22:34:d8: ec:77:76:2f:6a:15:9f:d2:87:7a:81:81:c9:e0:f6: e6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4B:21:5A:0F:55:FD:65:B5:62:E3:79:EE:FE:0A:29:CB:75:C8:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/d7e67bfc-db7e-3ceb-a6f1-0ef099aa78a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291/57b5faad-63db-4cfd-a55b-4143c3e94291.crl X509v3 Authority Key Identifier: keyid:4B:76:1B:8E:DD:55:DB:AE:42:36:F8:67:89:20:67:7A:94:F3:ED:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/57b5faad-63db-4cfd-a55b-4143c3e94291.cer sbgp-ipAddrBlock: critical IPv4: 209.239.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:7d:24:44:a1:75:12:5b:d2:d0:2b:3a:c5:10:44:c6:66:53: 45:00:e4:70:fa:5f:cd:a6:f9:de:0d:78:65:84:49:f8:b8:90: 0c:6a:ae:91:40:78:b4:71:73:07:28:84:07:ca:db:dd:0e:02: 3e:6e:d8:91:88:57:7c:0a:99:27:79:ca:ca:50:80:99:e3:43: 4e:71:e9:19:15:36:a5:b1:b2:68:86:43:06:6d:cb:da:b7:fa: 19:e9:b2:b7:71:e5:a0:d9:02:7e:6f:de:ec:99:72:63:3f:df: 58:a8:4d:e8:53:e0:0f:31:bb:d3:9c:f1:9e:42:a8:9d:73:9a: 68:42:8d:a6:13:4b:1a:7c:86:c6:df:6c:32:7a:4e:a6:b3:17: 93:4d:35:25:e4:ce:83:6f:8d:a8:b1:68:63:a8:7c:c7:7e:02: da:f9:37:a1:f0:78:49:65:46:04:d9:5a:a5:62:e5:2d:7e:53: fc:53:22:e6:ad:91:17:d6:92:cc:d7:d0:e6:7e:d5:92:1a:4a: 58:b0:8e:5b:88:53:76:3c:d8:52:f8:9d:74:a6:c4:cf:e8:03: 7a:a1:13:71:68:26:29:f7:57:ce:93:a6:05:1f:e6:47:c5:c1: b8:39:49:72:3b:6f:56:dd:20:57:f0:60:25:11:86:74:46:b2: a6:3f:f8:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5M5PzqqFiSIrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdiNWZhYWQtNjNkYi00Y2ZkLWE1NWItNDE0M2MzZTk0 MjkxMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MjM2MDY4NzctMjc1ZC00MWEwLWJiOGMtMzAwODVmZTU4OGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqprujgpBt63n4ZcWn/E054T6kmrVzY+CUDGw kb26yFahYX//gFBRiWMhLjeJakaYknYMjF1blGkGvsUDRV/T++A/z/B0iJIygmy1 6sdJtIoNkQulkTJyLfJIvj7/YR4Wf/1JB1DveHL6+gwbGDT1XJzRZ1Gxw5bqw+WF tC96pFvZPAR7EdL/qpHO9V4TCvnQ5OA0vHzXTiU2uL+fsfu2jxE2rFfeBNTjh/K5 6diOV2G6mAsx9/r05MwlAQh0yQlRhZ45x6PUxHWyqvlGd+h4kRQIEWdWMVlEGvEt sZZf3VP8HP7ffsR7TEYLowQiNNjsd3YvahWf0od6gYHJ4PbmswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBLIVoPVf1ltWLjee7+CinLdcgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81N2I1 ZmFhZC02M2RiLTRjZmQtYTU1Yi00MTQzYzNlOTQyOTEvZDdlNjdiZmMtZGI3ZS0z Y2ViLWE2ZjEtMGVmMDk5YWE3OGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTdiNWZhYWQtNjNkYi00Y2ZkLWE1 NWItNDE0M2MzZTk0MjkxLzU3YjVmYWFkLTYzZGItNGNmZC1hNTViLTQxNDNjM2U5 NDI5MS5jcmwwHwYDVR0jBBgwFoAUS3Ybjt1V265CNvhniSBnepTz7ZowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81N2I1ZmFhZC02M2RiLTRjZmQtYTU1Yi00MTQz YzNlOTQyOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0e9jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADV9JEShdRJb0tArOsUQRMZmU0UA5HD6X82m+d4NeGWESfi4kAxqrpFA eLRxcwcohAfK290OAj5u2JGIV3wKmSd5yspQgJnjQ05x6RkVNqWxsmiGQwZty9q3 +hnpsrdx5aDZAn5v3uyZcmM/31ioTehT4A8xu9Oc8Z5CqJ1zmmhCjaYTSxp8hsbf bDJ6TqazF5NNNSXkzoNvjaixaGOofMd+Atr5N6HweEllRgTZWqVi5S1+U/xTIuat kRfWkszX0OZ+1ZIaSliwjluIU3Y82FL4nXSmxM/oA3qhE3FoJin3V86TpgUf5kfF wbg5SXI7b1bdIFfwYCURhnRGsqY/+F0= -----END CERTIFICATE-----Generated at Wed Sep 23 15:25:01 2026 by rpki-client