$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17d88fe-6db1-3169-a42b-613612114fd6.roa File: d17d88fe-6db1-3169-a42b-613612114fd6.roa (raw, json) Hash identifier: Zr1Fm0A18dPa+70RronAJret3kjVu2fHql/ixo7VbOI= Subject key identifier: D0:C2:41:07:39:FE:67:92:25:0F:B3:25:1C:12:01:DB:EF:3C:2D:F1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F374D54E21E09821A846BD1C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17d88fe-6db1-3169-a42b-613612114fd6.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 32787 IP address blocks: 209.200.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:54:e2:1e:09:82:1a:84:6b:d1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=8c3614e3-ca90-46d3-97f7-f50edc0bbdf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ef:2c:21:a8:dc:af:5e:84:92:af:de:f0:18: 0b:57:8d:30:90:1c:b8:8f:04:b5:ce:f1:e4:ea:db: 8d:73:8f:c7:07:50:83:20:ab:40:53:d9:fa:db:98: 1e:89:58:66:54:a1:7f:32:ec:ca:56:59:a3:24:45: f9:5e:2e:70:fc:bb:0b:4e:62:7f:56:e6:c2:f5:e7: 5c:d9:dd:1f:53:9f:f1:b3:2f:62:5f:ab:fb:6d:7c: 14:93:11:22:e6:a6:6f:7e:31:b5:c5:ba:97:56:a1: 90:50:79:c4:f8:f8:3d:22:d8:c0:fa:c5:5c:bf:02: 87:03:04:9b:d6:22:eb:81:99:fd:0c:af:bb:5e:1a: 2c:ca:14:c3:b3:41:87:0c:f8:c2:81:e6:dd:a2:3b: 24:52:63:72:e2:eb:90:4f:3f:c0:79:1a:86:00:2b: e5:c0:c2:ef:57:f5:c0:21:a4:5e:01:b7:3a:f3:0f: 52:4f:ed:b5:de:e3:89:06:67:81:26:f5:bf:3c:5a: 56:c9:40:21:fa:da:20:19:c3:fc:57:ac:83:a3:45: 76:e1:19:6a:d0:5a:7f:67:be:d4:56:92:9b:3a:bc: db:f1:67:e8:d6:32:23:04:7c:bc:f3:ba:3d:fc:2a: 14:f7:30:45:51:59:7b:b4:0f:05:df:d4:71:b9:af: 90:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C2:41:07:39:FE:67:92:25:0F:B3:25:1C:12:01:DB:EF:3C:2D:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17d88fe-6db1-3169-a42b-613612114fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 209.200.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:4e:f6:93:6c:ad:9a:d3:4d:3e:da:c9:df:65:e2:53:66:4d: 75:fd:6f:b2:96:da:06:bb:a3:e1:fc:4e:83:e3:f2:5b:ba:62: f2:49:ed:15:db:c5:75:ad:bf:39:48:a9:43:d8:9b:bf:07:b5: 08:2d:86:1f:be:a3:8b:22:e3:5e:81:63:d5:ac:5b:7b:93:35: f8:be:3b:63:2a:4e:42:92:3d:d5:53:d1:e6:1d:91:44:e1:4f: 69:8a:ee:98:e4:66:4f:98:14:56:9c:68:81:ae:bf:5b:4c:ba: f5:ac:ee:74:92:86:70:cc:90:1d:fd:f1:b9:c9:cb:55:3e:44: 82:4f:06:45:66:7e:71:38:c8:0a:e0:e2:fe:01:ce:60:26:f9: 71:a4:30:e2:e7:e2:15:88:bb:69:b9:d9:3b:dd:af:a6:b6:77: 43:45:de:ea:d2:c8:27:5f:e7:0b:69:08:13:40:53:5f:ef:47: 89:32:14:b7:61:39:74:82:30:6d:51:9e:8c:09:28:a0:b0:7b: b0:93:b3:54:13:7f:a9:df:a1:66:2b:87:fa:9a:05:19:2e:7d: dd:ed:a3:cc:8b:fe:dd:4f:65:89:31:a5:c2:c0:0b:d7:f7:c0: 4a:44:2f:8d:1c:6d:28:e0:d3:51:08:55:82:e6:ff:41:e2:22: 26:ca:01:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TVTiHgmCGoRr0cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk OGMzNjE0ZTMtY2E5MC00NmQzLTk3ZjctZjUwZWRjMGJiZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhO8sIajcr16Ekq/e8BgLV40wkBy4jwS1zvHk 6tuNc4/HB1CDIKtAU9n625geiVhmVKF/MuzKVlmjJEX5Xi5w/LsLTmJ/VubC9edc 2d0fU5/xsy9iX6v7bXwUkxEi5qZvfjG1xbqXVqGQUHnE+Pg9ItjA+sVcvwKHAwSb 1iLrgZn9DK+7XhosyhTDs0GHDPjCgebdojskUmNy4uuQTz/AeRqGACvlwMLvV/XA IaReAbc68w9ST+213uOJBmeBJvW/PFpWyUAh+togGcP8V6yDo0V24Rlq0Fp/Z77U VpKbOrzb8Wfo1jIjBHy887o9/CoU9zBFUVl7tA8F39Rxua+QHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDCQQc5/meSJQ+zJRwSAdvvPC3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDE3ZDg4ZmUtNmRiMS0z MTY5LWE0MmItNjEzNjEyMTE0ZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ci5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBO9pNsrZrTTT7ayd9l4lNmTXX9b7KW2ga7o+H8ToPj8lu6YvJJ7RXb xXWtvzlIqUPYm78HtQgthh++o4si416BY9WsW3uTNfi+O2MqTkKSPdVT0eYdkUTh T2mK7pjkZk+YFFacaIGuv1tMuvWs7nSShnDMkB398bnJy1U+RIJPBkVmfnE4yArg 4v4BzmAm+XGkMOLn4hWIu2m52Tvdr6a2d0NF3urSyCdf5wtpCBNAU1/vR4kyFLdh OXSCMG1RnowJKKCwe7CTs1QTf6nfoWYrh/qaBRkufd3to8yL/t1PZYkxpcLAC9f3 wEpEL40cbSjg01EIVYLm/0HiIibKAfA= -----END CERTIFICATE-----Generated at Tue Sep 22 17:52:10 2026 by rpki-client