$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/e96993f5-ca60-3022-be74-738b3dcf4ced.roa File: e96993f5-ca60-3022-be74-738b3dcf4ced.roa (raw, json) Hash identifier: CXAJJ1Vdwb/sFDu7Izffiecxlhq3apZ8Ib5YRsF5yiE= Subject key identifier: D6:24:63:67:AA:C7:EF:0B:E3:9E:00:8D:4F:61:14:81:F0:38:CC:68 Certificate issuer: /CN=c42349db-6c0b-49d8-aceb-7b4888a22b1d Certificate serial: 010D0C9F4328584F119CFFE43F36B797E73B0480 Authority key identifier: C0:C3:17:27:70:3D:87:FE:DF:CE:92:CD:32:77:D6:0C:12:A4:20:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/e96993f5-ca60-3022-be74-738b3dcf4ced.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 17297 IP address blocks: 209.112.110.0/24 maxlen: 24 2602:f8df::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:ff:e4:3f:36:b7:97:e7:3b:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42349db-6c0b-49d8-aceb-7b4888a22b1d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=25d925ba-5b20-465e-8706-cd0f08fa2332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4c:2f:14:98:65:1a:c3:09:94:80:9d:6f:96: d2:ff:58:73:65:2f:cf:de:1e:6f:e1:4b:da:48:4d: 28:71:06:c0:61:3a:4e:c4:7a:10:de:20:9f:40:17: 28:aa:98:a6:e8:f5:12:1a:26:21:ab:97:96:77:a4: 93:4d:95:23:d5:77:c8:f0:ee:81:6f:fc:0c:58:2c: be:4c:93:3c:f5:65:3f:6f:d7:35:1d:ac:78:87:d3: 17:94:d7:44:43:18:15:9a:0c:86:f3:0b:3e:32:37: c2:c8:b5:d4:90:a0:0f:85:d0:4a:ad:57:f2:70:66: 66:e2:b8:b3:d2:49:c7:d8:ff:a6:7b:de:b5:78:da: 9e:8f:05:ee:16:81:cd:38:7c:40:3e:73:b6:2c:0a: 1d:bc:cc:bd:77:e6:f3:3e:57:6a:9f:4b:9e:83:f5: 41:69:e1:b8:89:c7:d1:9d:46:9a:e4:33:2b:94:7d: 32:a4:60:c5:2b:ce:2a:a5:3a:90:91:27:a5:64:80: 3a:3c:bc:ac:3b:bd:1e:d5:f0:65:37:fd:54:fb:ae: b5:07:9a:90:7b:42:c5:d1:61:38:83:90:a9:20:1f: cf:6f:39:a3:26:f8:ab:34:ec:d3:f4:5f:d9:0c:75: c1:3a:7a:f8:63:ea:4a:52:db:ce:da:f0:7a:7d:29: d3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:24:63:67:AA:C7:EF:0B:E3:9E:00:8D:4F:61:14:81:F0:38:CC:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/e96993f5-ca60-3022-be74-738b3dcf4ced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d/c42349db-6c0b-49d8-aceb-7b4888a22b1d.crl X509v3 Authority Key Identifier: keyid:C0:C3:17:27:70:3D:87:FE:DF:CE:92:CD:32:77:D6:0C:12:A4:20:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c42349db-6c0b-49d8-aceb-7b4888a22b1d.cer sbgp-ipAddrBlock: critical IPv4: 209.112.110.0/24 IPv6: 2602:f8df::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:40:7c:2f:b1:47:f3:3f:fc:0f:13:41:be:d3:1a:69:7d:e5: 52:66:99:1e:ba:71:95:c2:f9:31:92:cc:45:01:cb:f1:08:0a: 53:89:d1:a4:2c:93:be:d1:47:fd:6a:59:cb:f2:70:7e:dc:44: f7:04:f2:73:53:0b:3a:11:da:59:e5:55:4c:af:e6:8f:ca:fd: a5:06:44:2e:ef:0d:1f:a0:8f:b8:df:10:9c:06:6d:2b:dc:b5: 35:f7:fa:63:ab:1e:2f:19:a7:63:d8:46:32:e4:80:19:c1:57: 16:b6:9b:99:aa:4c:2f:e5:8d:39:cb:eb:b7:00:b8:1d:45:ee: fd:8e:91:73:cb:13:f9:86:f3:21:54:84:ba:48:c3:4b:56:29: 76:72:f5:07:84:02:c6:92:e6:ee:7c:6a:72:61:a4:40:0b:6b: 3f:44:97:4a:55:0f:8f:cc:f9:cc:3a:50:be:de:5b:ed:d3:7d: c4:47:0a:c5:66:7c:04:f9:08:eb:9f:0f:c0:a8:9c:47:dc:ac: 3c:f9:83:7b:48:07:71:61:21:84:0b:6b:a5:57:24:11:5d:fb: 52:1b:da:69:26:30:f7:17:02:a9:ba:1e:04:e3:cd:a6:7a:9c: b8:26:5d:09:2f:43:d8:fc:6b:ed:54:14:ff:98:cc:bd:f9:ab: b7:fc:09:11 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8RnP/kPza3l+c7BIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMzQ5ZGItNmMwYi00OWQ4LWFjZWItN2I0ODg4YTIy YjFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MjVkOTI1YmEtNWIyMC00NjVlLTg3MDYtY2QwZjA4ZmEyMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0wvFJhlGsMJlICdb5bS/1hzZS/P3h5v4Uva SE0ocQbAYTpOxHoQ3iCfQBcoqpim6PUSGiYhq5eWd6STTZUj1XfI8O6Bb/wMWCy+ TJM89WU/b9c1Hax4h9MXlNdEQxgVmgyG8ws+MjfCyLXUkKAPhdBKrVfycGZm4riz 0knH2P+me961eNqejwXuFoHNOHxAPnO2LAodvMy9d+bzPldqn0ueg/VBaeG4icfR nUaa5DMrlH0ypGDFK84qpTqQkSelZIA6PLysO70e1fBlN/1U+661B5qQe0LF0WE4 g5CpIB/PbzmjJvirNOzT9F/ZDHXBOnr4Y+pKUtvO2vB6fSnTDQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNYkY2eqx+8L454AjU9hFIHwOMxoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNDIz NDlkYi02YzBiLTQ5ZDgtYWNlYi03YjQ4ODhhMjJiMWQvZTk2OTkzZjUtY2E2MC0z MDIyLWJlNzQtNzM4YjNkY2Y0Y2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzQyMzQ5ZGItNmMwYi00OWQ4LWFj ZWItN2I0ODg4YTIyYjFkL2M0MjM0OWRiLTZjMGItNDlkOC1hY2ViLTdiNDg4OGEy MmIxZC5jcmwwHwYDVR0jBBgwFoAUwMMXJ3A9h/7fzpLNMnfWDBKkIJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNDIzNDlkYi02YzBiLTQ5ZDgtYWNlYi03YjQ4 ODhhMjJiMWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQA0XBuMA4E AgACMAgDBgAmAvjfADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRQHwvsUfzP/wPE0G+0xppfeVSZpkeunGV wvkxksxFAcvxCApTidGkLJO+0Uf9alnL8nB+3ET3BPJzUws6EdpZ5VVMr+aPyv2l BkQu7w0foI+43xCcBm0r3LU19/pjqx4vGadj2EYy5IAZwVcWtpuZqkwv5Y05y+u3 ALgdRe79jpFzyxP5hvMhVIS6SMNLVil2cvUHhALGkubufGpyYaRAC2s/RJdKVQ+P zPnMOlC+3lvt033ERwrFZnwE+Qjrnw/AqJxH3Kw8+YN7SAdxYSGEC2ulVyQRXftS G9ppJjD3FwKpuh4E482mepy4Jl0JL0PY/GvtVBT/mMy9+au3/AkR -----END CERTIFICATE-----Generated at Tue Sep 22 14:50:36 2026 by rpki-client