$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/0644af4e-9c64-3770-a0dd-44ccf9878f17.roa File: 0644af4e-9c64-3770-a0dd-44ccf9878f17.roa (raw, json) Hash identifier: GCHQfW+zN5y+uKqhTiSYuFGOBdjMumkM/sHhDlZwoyc= Subject key identifier: 1C:18:1D:FF:E3:CD:78:CC:26:BD:8B:AB:77:9B:11:12:BB:D1:93:22 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584F549D61BCA10C05C080D5B290 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/0644af4e-9c64-3770-a0dd-44ccf9878f17.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 13536 IP address blocks: 209.107.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:61:bc:a1:0c:05:c0:80:d5:b2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=581dab64-c571-49f9-98e2-23d83bd0ad20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d1:11:9c:3e:c5:a4:b0:10:6d:c3:24:65:b6: 47:48:7d:43:d6:87:f7:04:d9:69:f8:80:54:a6:d4: d6:c5:0b:5f:3e:be:51:9f:65:43:53:8b:a4:62:3f: 9d:46:49:0e:72:75:95:b0:69:71:c7:d5:ad:0f:dc: 87:25:ac:c8:f5:0f:74:7b:4c:af:d6:39:12:d0:ca: 97:bc:82:99:7a:1f:f0:12:09:dd:79:9c:ce:25:4c: 64:3e:8e:b3:3b:53:59:f6:1b:64:67:9c:bf:5a:a3: b7:2b:a7:02:96:50:66:6e:3f:6a:34:04:39:aa:03: a5:5b:00:93:6d:73:97:e2:c5:8a:ac:73:e7:fa:3f: 2a:10:09:d6:4c:5a:c5:a1:0d:36:1b:64:58:04:45: a8:50:56:67:39:94:7d:79:9c:1e:15:93:b1:ce:61: 53:3b:33:36:be:fc:cb:31:38:b3:fb:fe:85:8b:4c: 20:91:ff:4d:b5:68:8c:f5:f9:d3:e7:ab:09:57:3b: fb:e8:3c:43:a0:25:83:eb:43:6e:c0:df:5e:29:94: 8e:21:72:f2:d2:19:db:27:03:c0:4b:c2:d1:7f:c0: 26:68:9d:04:36:ad:fb:f6:31:34:17:42:a1:a6:43: 97:58:4d:66:c0:66:af:b0:89:d5:d1:60:b7:60:b8: c7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:18:1D:FF:E3:CD:78:CC:26:BD:8B:AB:77:9B:11:12:BB:D1:93:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/0644af4e-9c64-3770-a0dd-44ccf9878f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:76:19:c6:6f:a4:4f:0b:e7:37:e4:26:4e:63:95:d7:01:7b: 52:77:38:e9:de:ee:6c:a8:ad:41:c6:8d:7b:5b:c9:7f:70:cc: f7:23:3b:ce:be:34:36:3b:cc:e7:05:3e:d9:03:ae:1d:17:f1: 94:b5:c2:c5:32:6c:c8:6e:5b:cf:26:11:c7:70:2e:7e:b6:95: a6:82:b8:0c:45:f2:c8:37:b9:f8:dc:1b:85:94:34:ac:e1:bc: 0d:e7:3c:41:e6:6f:b5:39:23:50:d5:cb:01:31:66:fc:0c:4a: f9:02:9d:bb:e2:63:00:e1:b7:fc:dc:e1:c3:31:e9:19:3c:e4: 62:26:28:7a:15:1c:0c:55:41:a3:a4:2a:29:9c:aa:9b:5e:56: ed:02:e1:20:09:2d:f9:ba:e1:6b:93:54:78:cf:0c:fe:e2:39: a0:19:da:32:26:2d:3f:14:82:89:15:40:68:9c:da:18:ff:ee: da:5c:6a:d4:0c:cf:d8:b8:97:1a:b0:c4:0e:36:68:ed:ec:67: cf:9d:da:fa:6a:35:c4:b8:cb:30:ea:0a:8d:ac:9e:06:92:24: ff:b1:23:be:2c:31:77:3f:31:6f:78:69:b4:0e:c8:da:09:e9: 26:44:db:75:b0:56:03:4c:8f:98:69:06:f9:f5:85:63:ee:6c: 37:b3:ac:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWG8oQwFwIDVspAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NTgxZGFiNjQtYzU3MS00OWY5LTk4ZTItMjNkODNiZDBhZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNERnD7FpLAQbcMkZbZHSH1D1of3BNlp+IBU ptTWxQtfPr5Rn2VDU4ukYj+dRkkOcnWVsGlxx9WtD9yHJazI9Q90e0yv1jkS0MqX vIKZeh/wEgndeZzOJUxkPo6zO1NZ9htkZ5y/WqO3K6cCllBmbj9qNAQ5qgOlWwCT bXOX4sWKrHPn+j8qEAnWTFrFoQ02G2RYBEWoUFZnOZR9eZweFZOxzmFTOzM2vvzL MTiz+/6Fi0wgkf9NtWiM9fnT56sJVzv76DxDoCWD60NuwN9eKZSOIXLy0hnbJwPA S8LRf8AmaJ0ENq379jE0F0KhpkOXWE1mwGavsInV0WC3YLjHQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBwYHf/jzXjMJr2Lq3ebERK70ZMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMDY0NGFmNGUtOWM2NC0z NzcwLWEwZGQtNDRjY2Y5ODc4ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ2GcZvpE8L5zfkJk5jldcBe1J3OOne7myorUHGjXtbyX9wzPcjO86+ NDY7zOcFPtkDrh0X8ZS1wsUybMhuW88mEcdwLn62laaCuAxF8sg3ufjcG4WUNKzh vA3nPEHmb7U5I1DVywExZvwMSvkCnbviYwDht/zc4cMx6Rk85GImKHoVHAxVQaOk KimcqpteVu0C4SAJLfm64WuTVHjPDP7iOaAZ2jImLT8UgokVQGic2hj/7tpcatQM z9i4lxqwxA42aO3sZ8+d2vpqNcS4yzDqCo2sngaSJP+xI74sMXc/MW94abQOyNoJ 6SZE23WwVgNMj5hpBvn1hWPubDezrEE= -----END CERTIFICATE-----Generated at Mon Oct 5 00:48:21 2026 by rpki-client