$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa File: f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa (raw, json) Hash identifier: jNlvi6nvBtVhN02hGAqvHlWGLy13JP33FD1wCHR0iDM= Subject key identifier: C4:13:04:52:6F:0B:44:1A:5F:E4:04:2D:D6:D8:62:DE:2D:DF:CA:A3 Certificate issuer: /CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Certificate serial: 010D0C9F4328584F2EED124748E894B1BF3F6C80 Authority key identifier: 04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 209.46.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:12:47:48:e8:94:b1:bf:3f:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=53a882f2-bbee-4447-9abe-03322c2ff38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e9:cc:5a:e2:ec:54:d6:89:fa:9e:51:9f:8e: 91:bf:e3:19:58:c2:0c:ce:b1:7c:bd:63:03:4a:8b: de:65:05:6b:90:9e:90:e5:28:54:0f:0f:6f:c1:cd: 5a:b8:39:f3:10:de:9a:b9:e9:88:4a:94:15:e9:be: e0:eb:67:7f:5c:f9:e7:f6:7a:03:8d:c4:b8:2f:06: 48:d3:92:ef:0d:5c:52:ba:06:24:b3:43:6c:08:d0: 1a:60:98:fa:4e:a1:cd:a6:6b:58:e3:50:a5:bb:27: a2:cb:3d:d6:5e:f0:80:48:40:fc:85:4b:83:89:42: 0c:99:de:3d:37:19:e0:4e:a0:58:7d:59:a2:15:70: ac:5e:75:25:f7:a1:b1:9b:45:df:a8:45:f1:13:6c: 24:0f:e4:51:36:e0:a0:67:44:47:a6:48:cc:d1:b5: bb:7d:d8:30:3e:2e:88:b1:bd:e3:ae:e9:76:54:9c: fa:50:67:87:b0:af:03:ea:52:2d:3c:78:d8:57:ff: c1:67:85:ce:28:5a:e6:9e:e4:e6:ed:ac:03:3c:ba: a4:a6:1e:1a:8e:3b:2d:8f:65:df:bf:cb:a9:42:39: c1:7b:27:ec:75:42:12:50:4b:de:86:20:21:b7:0a: a6:34:cf:28:91:9b:35:6b:60:4b:43:60:13:18:38: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:13:04:52:6F:0B:44:1A:5F:E4:04:2D:D6:D8:62:DE:2D:DF:CA:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl X509v3 Authority Key Identifier: keyid:04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer sbgp-ipAddrBlock: critical IPv4: 209.46.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:46:ee:a5:3a:b2:68:8c:29:71:18:1e:f1:ef:28:56:82:16: 24:9d:3d:dd:a0:79:aa:97:5e:16:3e:7f:4a:be:77:65:21:00: c7:01:5c:b1:22:71:42:0d:61:0f:0a:07:20:9d:75:da:9a:3a: d7:87:05:dc:a3:5b:39:d2:73:4f:5a:74:7e:f3:bc:f6:ca:2a: 11:71:4f:cc:cd:a5:9e:df:1c:0c:d5:a8:80:6a:64:58:f1:ca: 1e:19:4e:16:40:bd:72:ab:75:be:a9:0e:61:2f:8a:95:30:c1: ca:9e:d8:bc:d1:cd:79:d7:fe:1c:6a:1a:b0:f4:a0:fa:bc:c3: 3c:e1:e7:d6:65:41:72:c9:02:fc:77:ef:62:a9:e6:34:94:aa: da:be:dd:e6:1d:27:86:3b:56:1c:5c:16:6a:28:7a:ca:53:39: dd:e6:e5:b3:b8:eb:4e:16:cd:a0:87:00:9f:c6:b1:9a:41:32: a7:6a:78:6d:4f:1c:50:93:6b:83:ad:42:8a:b8:d2:04:11:74: 6b:2a:7f:41:ff:26:7a:00:25:7a:ad:1f:2c:67:b4:a8:84:b2: 0d:ae:96:77:1a:0b:39:f5:a2:f4:55:73:cd:61:d3:85:bb:2e: af:03:ab:75:f3:76:c5:04:d4:9e:60:90:29:83:e6:77:fc:02: 67:77:8e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RJHSOiUsb8/bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwM2JlOGMtYjIzYy00ZDgyLTlmOGQtNjRlZDdhOGEz OWQyMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk NTNhODgyZjItYmJlZS00NDQ3LTlhYmUtMDMzMjJjMmZmMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgunMWuLsVNaJ+p5Rn46Rv+MZWMIMzrF8vWMD SoveZQVrkJ6Q5ShUDw9vwc1auDnzEN6auemISpQV6b7g62d/XPnn9noDjcS4LwZI 05LvDVxSugYks0NsCNAaYJj6TqHNpmtY41Cluyeiyz3WXvCASED8hUuDiUIMmd49 NxngTqBYfVmiFXCsXnUl96Gxm0XfqEXxE2wkD+RRNuCgZ0RHpkjM0bW7fdgwPi6I sb3jrul2VJz6UGeHsK8D6lItPHjYV//BZ4XOKFrmnuTm7awDPLqkph4ajjstj2Xf v8upQjnBeyfsdUISUEvehiAhtwqmNM8okZs1a2BLQ2ATGDhtQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQTBFJvC0QaX+QELdbYYt4t38qjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAz YmU4Yy1iMjNjLTRkODItOWY4ZC02NGVkN2E4YTM5ZDIvZjg4MWVhZmMtNWViYi0z ZTk2LWI0NTktMWVlZTBmNTNjYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWEwM2JlOGMtYjIzYy00ZDgyLTlm OGQtNjRlZDdhOGEzOWQyL2FhMDNiZThjLWIyM2MtNGQ4Mi05ZjhkLTY0ZWQ3YThh MzlkMi5jcmwwHwYDVR0jBBgwFoAUBKl4dY7BlRymLC8L+jIv28vjJDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAzYmU4Yy1iMjNjLTRkODItOWY4ZC02NGVk N2E4YTM5ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0S41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9G7qU6smiMKXEYHvHvKFaCFiSdPd2geaqXXhY+f0q+d2UhAMcBXLEi cUINYQ8KByCdddqaOteHBdyjWznSc09adH7zvPbKKhFxT8zNpZ7fHAzVqIBqZFjx yh4ZThZAvXKrdb6pDmEvipUwwcqe2LzRzXnX/hxqGrD0oPq8wzzh59ZlQXLJAvx3 72Kp5jSUqtq+3eYdJ4Y7VhxcFmooespTOd3m5bO4604WzaCHAJ/GsZpBMqdqeG1P HFCTa4OtQoq40gQRdGsqf0H/JnoAJXqtHyxntKiEsg2ulncaCzn1ovRVc81h04W7 Lq8Dq3XzdsUE1J5gkCmD5nf8Amd3jpE= -----END CERTIFICATE-----Generated at Thu Sep 24 02:05:17 2026 by rpki-client