$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf2e8e1c-c614-33e3-bcdb-bd179cb0b052.roa File: cf2e8e1c-c614-33e3-bcdb-bd179cb0b052.roa (raw, json) Hash identifier: tRkPjcXhEl5qTaZE8uRRQ3j1aMQQMHzgK8i0tm0gcEA= Subject key identifier: DC:75:5E:1A:EE:DA:B4:6E:99:55:C0:BF:9C:A3:19:61:DF:12:23:ED Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7A1C7C9C6FAF39A771900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf2e8e1c-c614-33e3-bcdb-bd179cb0b052.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 209.17.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a1:c7:c9:c6:fa:f3:9a:77:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=1bc8edb5-d78c-4d2e-94d9-914385d8fae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:08:18:f6:64:88:21:75:3c:83:85:6b:2b:54: 7a:13:7a:cd:9e:9f:cf:ab:ef:41:42:59:be:76:96: 9e:04:c0:48:32:d2:c3:88:91:cc:92:9b:03:11:23: db:40:1a:2f:2a:59:a6:2f:f7:ae:33:3e:b1:64:e3: 31:b3:09:e6:51:fb:42:72:cc:a0:3c:7d:08:2d:d9: 36:cc:29:d0:19:e8:3e:3c:55:88:a7:39:7d:44:05: e0:2a:30:94:3f:90:69:2e:2b:45:06:61:63:99:5a: 6a:4a:4d:1f:8d:39:ec:a8:a5:3d:e7:7f:34:5e:4e: c5:e8:93:40:37:43:bd:0e:de:a6:dd:47:3f:ac:02: fe:65:16:00:c9:68:a8:3e:98:3b:f3:ab:20:fb:ff: d9:bf:31:41:50:bc:06:fc:ba:a9:64:86:f3:43:c7: 49:23:04:bd:be:9d:3d:69:9d:52:70:ea:72:8d:71: 46:68:7c:e6:af:66:67:c5:23:21:44:c8:dd:aa:d1: 81:51:c7:3c:6b:78:19:6f:45:a4:f8:3e:5c:31:7e: e9:44:44:3d:60:a4:e4:27:7b:2b:c8:52:1e:1d:f0: bf:5a:af:91:45:b8:e5:17:ca:62:05:7b:1c:8a:6a: 8b:93:ec:bb:39:b2:6c:59:96:e0:bc:c2:54:31:6c: 10:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:75:5E:1A:EE:DA:B4:6E:99:55:C0:BF:9C:A3:19:61:DF:12:23:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf2e8e1c-c614-33e3-bcdb-bd179cb0b052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 209.17.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:4d:b3:c9:ae:37:14:66:32:78:c4:8b:ec:73:bb:d8:00:e8: 64:a9:94:85:a6:a8:22:55:64:05:50:9c:a7:f2:22:9c:51:28: 2d:19:89:c2:8e:58:5f:6f:2a:45:39:6d:96:b7:7b:2d:87:06: 61:b1:a2:2a:bc:1f:97:d4:ac:eb:1d:bc:29:05:57:f5:6c:4c: e2:a7:80:0d:f6:6f:0e:e0:46:a5:3b:55:d2:53:1d:4c:bd:a0: 63:a8:e8:a7:1f:56:49:3a:4a:a0:6c:92:e4:9a:87:38:74:24: 61:6d:36:fa:dd:55:e0:c4:42:53:5b:d4:2b:dd:3b:5e:82:28: bb:dd:64:d6:b3:a0:ad:4b:4b:f3:b9:dd:9e:31:8e:4a:17:ef: 36:61:a9:e8:19:ea:3b:b4:22:20:01:41:07:19:4f:1b:33:b9: 8b:86:c0:d9:a9:8a:86:c1:23:bc:99:f2:e1:f3:bf:b5:c1:86: 47:64:60:cc:db:4c:a5:9c:9d:8a:b3:9f:4d:45:82:ad:b7:2c: 43:73:5f:26:45:ee:a0:06:f2:34:b8:34:33:14:a0:0a:56:dc: 6e:48:64:57:14:cf:24:2a:98:ab:3b:f3:8d:d5:eb:66:b4:26: 83:ac:66:53:fb:b0:49:14:a4:11:33:3f:fa:0d:2e:30:66:b2: c1:df:78:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96HHycb685p3GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MWJjOGVkYjUtZDc4Yy00ZDJlLTk0ZDktOTE0Mzg1ZDhmYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzggY9mSIIXU8g4VrK1R6E3rNnp/Pq+9BQlm+ dpaeBMBIMtLDiJHMkpsDESPbQBovKlmmL/euMz6xZOMxswnmUftCcsygPH0ILdk2 zCnQGeg+PFWIpzl9RAXgKjCUP5BpLitFBmFjmVpqSk0fjTnsqKU95380Xk7F6JNA N0O9Dt6m3Uc/rAL+ZRYAyWioPpg786sg+//ZvzFBULwG/LqpZIbzQ8dJIwS9vp09 aZ1ScOpyjXFGaHzmr2ZnxSMhRMjdqtGBUcc8a3gZb0Wk+D5cMX7pREQ9YKTkJ3sr yFIeHfC/Wq+RRbjlF8piBXscimqLk+y7ObJsWZbgvMJUMWwQswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNx1Xhru2rRumVXAv5yjGWHfEiPtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2YyZThlMWMtYzYxNC0z M2UzLWJjZGItYmQxNzljYjBiMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0REyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFNs8muNxRmMnjEi+xzu9gA6GSplIWmqCJVZAVQnKfyIpxRKC0ZicKO WF9vKkU5bZa3ey2HBmGxoiq8H5fUrOsdvCkFV/VsTOKngA32bw7gRqU7VdJTHUy9 oGOo6KcfVkk6SqBskuSahzh0JGFtNvrdVeDEQlNb1CvdO16CKLvdZNazoK1LS/O5 3Z4xjkoX7zZhqegZ6ju0IiABQQcZTxszuYuGwNmpiobBI7yZ8uHzv7XBhkdkYMzb TKWcnYqzn01Fgq23LENzXyZF7qAG8jS4NDMUoApW3G5IZFcUzyQqmKs7843V62a0 JoOsZlP7sEkUpBEzP/oNLjBmssHfeLo= -----END CERTIFICATE-----Generated at Mon Sep 21 21:18:49 2026 by rpki-client