$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/db1075eb-0323-4b19-ad5a-e1b79845b9b9/3941f5d5-a08a-3165-9d2e-40c884fc11ac.roa File: 3941f5d5-a08a-3165-9d2e-40c884fc11ac.roa (raw, json) Hash identifier: xHRZcOx2FMwIT+bmV4J/z6ExTQvOyyv/UQs7r0pB4hs= Subject key identifier: D7:5D:AB:D7:7D:54:FE:B1:D9:A5:2A:13:D5:44:6B:FC:3A:0D:14:93 Certificate issuer: /CN=db1075eb-0323-4b19-ad5a-e1b79845b9b9 Certificate serial: 010D0C9F4328584F1CC7C45A0D02C1D95DFBB080 Authority key identifier: B7:30:4F:A0:99:D4:2E:5D:26:35:E2:17:B9:92:CA:D5:DD:A2:A6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/db1075eb-0323-4b19-ad5a-e1b79845b9b9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/db1075eb-0323-4b19-ad5a-e1b79845b9b9/3941f5d5-a08a-3165-9d2e-40c884fc11ac.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 46746 IP address blocks: 209.127.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/db1075eb-0323-4b19-ad5a-e1b79845b9b9/db1075eb-0323-4b19-ad5a-e1b79845b9b9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/db1075eb-0323-4b19-ad5a-e1b79845b9b9/db1075eb-0323-4b19-ad5a-e1b79845b9b9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/db1075eb-0323-4b19-ad5a-e1b79845b9b9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:c4:5a:0d:02:c1:d9:5d:fb:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db1075eb-0323-4b19-ad5a-e1b79845b9b9 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=ab4a38c3-b7fa-4579-ab84-ba43ab4fc543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e4:93:4e:51:36:3f:2c:e2:64:9d:4a:79:45: a7:36:01:68:2e:7e:d6:f7:dd:5d:22:9e:e3:ff:b0: e9:5f:16:2f:68:71:9a:cf:49:de:fb:c5:6f:f6:e0: e5:4a:0d:b1:28:96:87:21:1a:cc:56:76:a7:76:00: 9e:eb:2c:f7:46:15:2d:c5:21:c8:55:07:b2:7c:80: 5f:d3:28:b5:3d:c0:b3:bd:39:75:d1:65:07:09:d9: 22:05:58:2c:5b:cd:10:e6:db:b7:37:0f:c0:4d:ae: bb:01:de:27:06:d8:82:12:bb:1b:a3:01:f4:ad:13: ca:c6:f8:3a:0d:c8:c2:b0:d4:ad:97:8d:32:38:8b: 01:a8:6c:c7:a6:03:10:da:3d:8e:0e:71:78:21:15: 3b:f9:be:fe:83:7b:ac:cf:9a:47:16:bc:6a:12:2d: 6c:0e:c0:76:15:6d:a3:b9:ae:28:6c:18:95:cf:09: 8d:66:35:2b:d7:f8:ad:88:3b:5d:2c:b6:a6:8a:4c: ec:8e:c9:9c:5e:7f:a4:02:31:7c:a7:00:97:6c:b3: d4:36:8c:19:f6:40:74:cd:21:be:63:7b:5c:53:d3: f8:dd:cf:0e:86:0a:32:09:ff:89:c7:38:83:ab:d7: fe:87:f5:69:d2:01:3c:cb:64:ae:83:e8:f1:5c:99: f6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5D:AB:D7:7D:54:FE:B1:D9:A5:2A:13:D5:44:6B:FC:3A:0D:14:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/db1075eb-0323-4b19-ad5a-e1b79845b9b9/3941f5d5-a08a-3165-9d2e-40c884fc11ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/db1075eb-0323-4b19-ad5a-e1b79845b9b9/db1075eb-0323-4b19-ad5a-e1b79845b9b9.crl X509v3 Authority Key Identifier: keyid:B7:30:4F:A0:99:D4:2E:5D:26:35:E2:17:B9:92:CA:D5:DD:A2:A6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/db1075eb-0323-4b19-ad5a-e1b79845b9b9.cer sbgp-ipAddrBlock: critical IPv4: 209.127.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:e0:ad:06:60:a5:d8:64:68:05:cb:4c:b6:d8:95:f3:7c:01: 5d:70:77:80:a7:71:42:a0:b7:3e:9b:b1:f6:f2:0b:cf:a8:6f: 99:52:e8:7d:44:77:fe:4b:02:7d:45:5f:6d:bb:bf:1f:f9:18: 28:a0:e5:3f:ea:35:90:4f:8b:d3:f7:26:b1:ec:ac:a1:88:e7: bf:ee:bf:b1:4d:84:07:ce:6d:82:97:a9:65:8c:c4:78:fe:14: 50:24:30:0a:9f:6d:ce:21:ce:69:e4:35:c5:32:18:1f:dd:38: 1b:89:90:23:17:7c:f4:2d:37:36:30:d0:e7:a8:e5:1c:8b:cb: 55:ad:35:62:7c:03:d4:1d:0b:e9:d3:00:f7:19:72:91:fb:66: 2b:20:30:b4:37:e7:59:a5:e2:d6:fa:88:5b:12:e8:d5:62:2d: 90:bd:5c:00:30:b8:cd:14:95:49:68:91:1b:79:2e:44:4e:ef: 9d:23:a1:64:6d:21:24:05:b5:ff:2e:75:30:63:8a:b4:1f:fe: 34:ef:f5:09:c6:9e:cd:f1:8a:a5:65:fa:a8:11:4f:75:0d:61: fc:99:d4:41:37:67:19:5d:3f:ee:02:a7:ad:c1:85:0b:f1:28: 15:8c:28:61:fa:b4:f2:be:7a:fa:1a:69:dd:a4:c1:e5:f0:f0: e5:80:a3:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx8RaDQLB2V37sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIxMDc1ZWItMDMyMy00YjE5LWFkNWEtZTFiNzk4NDVi OWI5MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk YWI0YTM4YzMtYjdmYS00NTc5LWFiODQtYmE0M2FiNGZjNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+STTlE2PyziZJ1KeUWnNgFoLn7W991dIp7j /7DpXxYvaHGaz0ne+8Vv9uDlSg2xKJaHIRrMVnandgCe6yz3RhUtxSHIVQeyfIBf 0yi1PcCzvTl10WUHCdkiBVgsW80Q5tu3Nw/ATa67Ad4nBtiCErsbowH0rRPKxvg6 DcjCsNStl40yOIsBqGzHpgMQ2j2ODnF4IRU7+b7+g3usz5pHFrxqEi1sDsB2FW2j ua4obBiVzwmNZjUr1/itiDtdLLamikzsjsmcXn+kAjF8pwCXbLPUNowZ9kB0zSG+ Y3tcU9P43c8OhgoyCf+JxziDq9f+h/Vp0gE8y2Sug+jxXJn2uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNddq9d9VP6x2aUqE9VEa/w6DRSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kYjEw NzVlYi0wMzIzLTRiMTktYWQ1YS1lMWI3OTg0NWI5YjkvMzk0MWY1ZDUtYTA4YS0z MTY1LTlkMmUtNDBjODg0ZmMxMWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGIxMDc1ZWItMDMyMy00YjE5LWFk NWEtZTFiNzk4NDViOWI5L2RiMTA3NWViLTAzMjMtNGIxOS1hZDVhLWUxYjc5ODQ1 YjliOS5jcmwwHwYDVR0jBBgwFoAUtzBPoJnULl0mNeIXuZLK1d2ipmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kYjEwNzVlYi0wMzIzLTRiMTktYWQ1YS1lMWI3 OTg0NWI5YjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X++MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDgrQZgpdhkaAXLTLbYlfN8AV1wd4CncUKgtz6bsfbyC8+ob5lS6H1E d/5LAn1FX227vx/5GCig5T/qNZBPi9P3JrHsrKGI57/uv7FNhAfObYKXqWWMxHj+ FFAkMAqfbc4hzmnkNcUyGB/dOBuJkCMXfPQtNzYw0Oeo5RyLy1WtNWJ8A9QdC+nT APcZcpH7ZisgMLQ351ml4tb6iFsS6NViLZC9XAAwuM0UlUlokRt5LkRO750joWRt ISQFtf8udTBjirQf/jTv9QnGns3xiqVl+qgRT3UNYfyZ1EE3ZxldP+4Cp63BhQvx KBWMKGH6tPK+evoaad2kweXw8OWAo94= -----END CERTIFICATE-----Generated at Sat Sep 26 10:40:38 2026 by rpki-client