$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfb5cfa1-f296-3040-8331-1e871d24498a.roa File: bfb5cfa1-f296-3040-8331-1e871d24498a.roa (raw, json) Hash identifier: HvizX8T8Nmr2TT5o6dv+Wip9RSGTYO4yujDtoVyQl6E= Subject key identifier: 09:B1:71:2D:54:49:FE:39:2D:45:0C:DC:AD:FE:8C:B3:92:BE:25:16 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EE921F5BEEBBE549C15E11B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfb5cfa1-f296-3040-8331-1e871d24498a.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 32787 IP address blocks: 209.200.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:f5:be:eb:be:54:9c:15:e1:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=51991404-ffc1-4cb2-be3b-caf814850c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bb:f8:c5:22:6f:3c:ae:f8:b4:d8:a4:12:8a: b4:ef:a8:c7:98:e0:6f:bf:43:5a:56:6a:00:97:cd: 5b:14:a0:5a:9b:73:66:d1:10:81:54:56:3e:39:59: ee:1e:73:a3:f7:d5:c8:c2:32:42:8f:45:7f:df:7c: 47:2a:08:6f:44:48:37:81:a3:ed:53:6f:06:1a:cd: 42:d0:93:7e:1d:0c:68:7a:89:8f:fa:c0:28:92:f4: 49:68:d4:a0:4a:60:19:4e:8e:95:b7:c1:09:54:48: 5e:58:e8:a9:d6:c4:50:b9:6f:0c:33:d9:e0:04:78: e6:32:9d:4e:cf:e9:f1:38:94:66:1a:a5:3c:38:e0: a8:1d:b1:80:91:cf:9f:e7:ad:84:24:41:fa:cb:96: f4:26:ec:78:41:7f:56:50:80:14:3c:de:8f:c0:fb: 14:85:3e:06:a8:7e:24:8b:fa:41:72:dc:b5:e6:a6: 66:e1:75:fb:d3:b3:0c:7f:6b:2e:02:e6:35:48:fa: 87:3a:cd:0f:4f:f6:5f:75:b0:91:1d:41:33:5e:07: aa:6b:3f:27:8d:68:27:51:d2:a2:e6:ae:0a:5c:79: 7a:c9:34:fb:0f:8a:bc:c1:f7:c0:d7:af:5b:44:b8: 10:f6:e2:82:1b:f5:eb:9c:3b:d6:4d:23:9c:93:b4: 8b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B1:71:2D:54:49:FE:39:2D:45:0C:DC:AD:FE:8C:B3:92:BE:25:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bfb5cfa1-f296-3040-8331-1e871d24498a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d4:76:af:52:b4:94:3f:34:b0:63:54:1d:38:85:91:38:81: 8f:ca:92:e1:09:d2:6b:0a:cb:7a:18:47:52:d5:ff:50:02:e4: b4:b2:4a:5c:eb:fe:b3:5a:99:d6:a9:57:09:78:c3:49:66:e5: 19:e7:6a:d8:dd:0b:09:9a:0f:04:c3:9c:46:18:34:e3:be:44: a5:dd:73:10:8e:fd:4c:7c:00:01:d1:92:ac:72:a9:56:cf:ad: 7f:7e:63:66:ec:da:2e:19:0b:68:14:94:04:fd:3c:cb:74:33: 1f:45:52:f4:a5:3b:24:21:58:05:27:36:c7:bf:28:5e:cd:21: a7:99:af:a0:eb:79:0a:11:f7:59:ce:0f:aa:e1:84:79:e9:74: 61:53:78:0c:42:98:57:f7:2d:03:8e:6f:2d:e9:bd:d2:1d:51: 14:21:74:3d:5a:19:a5:f0:89:09:3c:94:a4:b4:f2:07:ed:ed: 20:81:f5:5b:4d:a4:b1:f3:66:ff:7a:39:50:ea:35:86:f5:4b: a8:97:f4:5b:c5:69:4e:cb:2b:b8:ea:8f:da:a8:ca:b4:f5:b1: 77:c0:14:af:66:48:de:3c:72:8e:f4:37:a7:76:c6:7d:ae:06: 90:cb:4f:67:49:b7:ba:58:29:77:0c:d6:45:d4:a7:66:00:bc: 26:2b:da:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pIfW+675UnBXhG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk NTE5OTE0MDQtZmZjMS00Y2IyLWJlM2ItY2FmODE0ODUwYzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLv4xSJvPK74tNikEoq076jHmOBvv0NaVmoA l81bFKBam3Nm0RCBVFY+OVnuHnOj99XIwjJCj0V/33xHKghvREg3gaPtU28GGs1C 0JN+HQxoeomP+sAokvRJaNSgSmAZTo6Vt8EJVEheWOip1sRQuW8MM9ngBHjmMp1O z+nxOJRmGqU8OOCoHbGAkc+f562EJEH6y5b0Jux4QX9WUIAUPN6PwPsUhT4GqH4k i/pBcty15qZm4XX707MMf2suAuY1SPqHOs0PT/ZfdbCRHUEzXgeqaz8njWgnUdKi 5q4KXHl6yTT7D4q8wffA169bRLgQ9uKCG/XrnDvWTSOck7SLqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmxcS1USf45LUUM3K3+jLOSviUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmZiNWNmYTEtZjI5Ni0z MDQwLTgzMzEtMWU4NzFkMjQ0OThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ciPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfUdq9StJQ/NLBjVB04hZE4gY/KkuEJ0msKy3oYR1LV/1AC5LSySlzr /rNamdapVwl4w0lm5RnnatjdCwmaDwTDnEYYNOO+RKXdcxCO/Ux8AAHRkqxyqVbP rX9+Y2bs2i4ZC2gUlAT9PMt0Mx9FUvSlOyQhWAUnNse/KF7NIaeZr6DreQoR91nO D6rhhHnpdGFTeAxCmFf3LQOOby3pvdIdURQhdD1aGaXwiQk8lKS08gft7SCB9VtN pLHzZv96OVDqNYb1S6iX9FvFaU7LK7jqj9qoyrT1sXfAFK9mSN48co70N6d2xn2u BpDLT2dJt7pYKXcM1kXUp2YAvCYr2to= -----END CERTIFICATE-----Generated at Tue Sep 29 05:05:51 2026 by rpki-client