$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/e69f2111-152d-3dd1-9d0e-8b74b7ee2a5a.roa File: e69f2111-152d-3dd1-9d0e-8b74b7ee2a5a.roa (raw, json) Hash identifier: EmO64ynZz3FwssstnWOzFMLtR9+UdGnTWtZQMTE33Tg= Subject key identifier: 65:CC:8A:FC:9E:4D:EB:6B:E9:D7:67:60:6F:F7:78:AF:D0:2B:56:4C Certificate issuer: /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Certificate serial: 010D0C9F4328584EFA37051A48DE665CA4DF1B80 Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/e69f2111-152d-3dd1-9d0e-8b74b7ee2a5a.roa Signing time: Thu 27 Aug 2026 15:51:27 +0000 ROA not before: Thu 27 Aug 2026 15:51:27 +0000 ROA not after: Wed 25 Nov 2026 16:51:27 +0000 asID: 394195 IP address blocks: 209.140.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fa:37:05:1a:48:de:66:5c:a4:df:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Validity Not Before: Aug 27 15:51:27 2026 GMT Not After : Nov 25 16:51:27 2026 GMT Subject: CN=4852c732-9b8c-4134-80b1-d254dee0c0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4d:50:49:63:d9:b4:8f:55:13:55:b8:ec:26: 25:e2:65:54:9b:ee:07:a9:eb:9b:b5:94:e6:9d:c0: 41:25:c3:85:c8:cf:7a:96:5a:ad:3e:02:c0:5d:9c: e5:3d:1f:d9:4d:b3:58:21:53:52:ee:67:66:16:3b: f2:39:94:e0:cb:42:4b:dc:34:04:69:37:40:cc:f7: 81:17:7a:13:50:6d:47:af:dc:cc:39:75:f4:80:80: 05:1f:69:b2:24:2b:2f:dc:d1:c4:0b:ee:50:b3:ca: 1a:82:9e:97:9b:4d:2a:a3:bd:c7:eb:74:59:61:20: 73:69:13:b6:85:25:97:ae:fa:5c:97:1b:43:44:0b: 63:e5:12:65:1a:89:f1:96:d0:a6:d2:ec:dd:d5:54: ab:97:52:06:d8:43:5c:23:80:29:d4:70:d4:3c:43: 78:ef:0a:e6:12:d8:f9:cc:06:ca:d1:8d:0a:c3:1d: fb:d4:fd:d2:b0:a0:31:ce:d4:19:fc:44:b9:19:42: cb:b1:f0:3f:66:a7:f0:4d:d3:b1:18:a4:79:0d:fc: ba:72:25:d3:bf:c2:dc:9c:c7:b5:2c:56:96:a0:79: db:c1:80:b7:7c:d9:61:47:a6:73:89:02:00:ff:61: ab:66:a4:b7:3b:2b:f7:2c:3b:d0:3f:29:cb:7b:eb: ca:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CC:8A:FC:9E:4D:EB:6B:E9:D7:67:60:6F:F7:78:AF:D0:2B:56:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/e69f2111-152d-3dd1-9d0e-8b74b7ee2a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl X509v3 Authority Key Identifier: keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer sbgp-ipAddrBlock: critical IPv4: 209.140.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:71:23:11:cb:a2:0c:a3:4c:0b:9b:54:4b:c4:cb:1f:34:8c: 4f:16:72:b2:20:7b:7e:16:0c:df:8f:f5:65:8e:b3:6d:88:83: 64:e4:78:c9:f1:fd:17:46:db:6e:d5:63:ac:d3:41:a3:d6:3a: a7:d5:f8:83:e9:4a:2c:50:3a:5e:38:f8:c7:59:1e:59:66:6b: dc:17:c7:45:78:01:a1:d9:ed:34:16:cf:91:0e:53:d9:cb:7c: 40:63:02:ad:b5:1f:13:23:3c:80:ce:44:4e:f7:9f:e2:8c:86: be:77:66:3a:cf:0c:12:07:b4:0c:b0:8e:30:42:b5:6a:cf:e1: 6d:25:f3:b0:ed:ac:e0:8e:30:21:25:3a:e8:cd:ed:7b:89:cf: 1c:1e:72:3d:48:02:bc:7f:e1:02:10:b7:56:0c:7b:03:aa:1f: 94:c4:33:85:96:e9:c9:4f:87:d2:6e:94:b4:65:50:a7:a9:f2: 4b:f2:71:94:95:55:81:bc:8f:ae:82:9a:c0:f2:a1:7e:b5:4e: 93:2b:21:b3:09:27:5c:88:61:35:75:c8:72:cd:c7:9d:b0:7d: c0:9a:c7:79:91:c6:8c:28:7d:e1:17:d7:51:97:99:40:32:5f: a4:17:54:fd:80:bb:19:af:f6:d4:29:90:21:32:12:96:7f:9d: f9:2f:df:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE76NwUaSN5mXKTfG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUx OTdhMB4XDTI2MDgyNzE1NTEyN1oXDTI2MTEyNTE2NTEyN1owLzEtMCsGA1UEAxMk NDg1MmM3MzItOWI4Yy00MTM0LTgwYjEtZDI1NGRlZTBjMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU1QSWPZtI9VE1W47CYl4mVUm+4HqeubtZTm ncBBJcOFyM96llqtPgLAXZzlPR/ZTbNYIVNS7mdmFjvyOZTgy0JL3DQEaTdAzPeB F3oTUG1Hr9zMOXX0gIAFH2myJCsv3NHEC+5Qs8oagp6Xm00qo73H63RZYSBzaRO2 hSWXrvpclxtDRAtj5RJlGonxltCm0uzd1VSrl1IG2ENcI4Ap1HDUPEN47wrmEtj5 zAbK0Y0Kwx371P3SsKAxztQZ/ES5GULLsfA/ZqfwTdOxGKR5Dfy6ciXTv8LcnMe1 LFaWoHnbwYC3fNlhR6ZziQIA/2GrZqS3Oyv3LDvQPynLe+vKhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXMivyeTetr6ddnYG/3eK/QK1ZMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NDVh N2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvZTY5ZjIxMTEtMTUyZC0z ZGQxLTlkMGUtOGI3NGI3ZWUyYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTQ1YTdmNzYtYmNlMy00ZDg1LWE4 MWUtYzg0ZGY4ZDUxOTdhLzk0NWE3Zjc2LWJjZTMtNGQ4NS1hODFlLWM4NGRmOGQ1 MTk3YS5jcmwwHwYDVR0jBBgwFoAUycbekH+3MjHBmmelTWkcFSB9dfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRk ZjhkNTE5N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YwJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhxIxHLogyjTAubVEvEyx80jE8WcrIge34WDN+P9WWOs22Ig2TkeMnx /RdG227VY6zTQaPWOqfV+IPpSixQOl44+MdZHllma9wXx0V4AaHZ7TQWz5EOU9nL fEBjAq21HxMjPIDORE73n+KMhr53ZjrPDBIHtAywjjBCtWrP4W0l87DtrOCOMCEl OujN7XuJzxwecj1IArx/4QIQt1YMewOqH5TEM4WW6clPh9JulLRlUKep8kvycZSV VYG8j66CmsDyoX61TpMrIbMJJ1yIYTV1yHLNx52wfcCax3mRxowofeEX11GXmUAy X6QXVP2Auxmv9tQpkCEyEpZ/nfkv3+k= -----END CERTIFICATE-----Generated at Tue Sep 22 10:07:26 2026 by rpki-client