$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa File: 23108a10-4450-3a24-b6ea-1b522a5b1f91.roa (raw, json) Hash identifier: KkqjdlAx6SqWZHfGjH63qtjVDb2Mur791QaQcY6HpZI= Subject key identifier: 14:60:F8:00:22:AB:FB:B0:75:AF:E8:5F:F1:8A:11:4B:A9:A4:B6:2B Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584F6F22E67FB6624B3498F5CB40 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 62651 IP address blocks: 209.107.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:e6:7f:b6:62:4b:34:98:f5:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=f3438844-6247-447f-919c-51dd99145232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:79:dd:e5:5d:5a:18:03:2f:42:3e:1a:56:f3: 6e:f0:d5:78:e2:1b:de:0f:bd:94:e3:a4:31:27:62: 8e:ea:e7:66:ef:00:73:5f:71:fb:a2:10:a2:2e:b2: fc:50:11:fe:ce:a1:67:af:ab:1f:fd:95:63:81:bd: 2c:77:9c:5b:26:24:bf:dc:e4:f2:19:d6:ce:91:d4: 38:a0:66:11:e9:54:1d:7f:f1:45:dc:05:3a:4d:86: f0:4d:4c:80:54:c8:81:4c:d6:b1:48:8a:b0:62:87: 2b:94:33:f2:2a:48:53:e3:7f:10:20:02:e3:90:ab: f0:5e:da:15:15:cd:20:c3:02:e9:6a:84:70:39:99: 20:29:e3:ff:00:37:11:46:c8:38:67:f9:68:b8:34: ba:a7:28:42:87:83:10:52:0f:cf:8e:8d:ee:3d:73: 30:ef:bd:cb:f8:ae:db:96:d8:cd:24:6b:31:3c:ff: 4a:95:f5:04:aa:97:bf:41:5d:89:2c:7d:e7:4d:51: 61:5e:f9:2a:d7:6c:a8:3a:31:a8:51:b1:af:04:14: ea:52:64:a9:2d:4d:6e:2e:e0:70:eb:34:ff:de:7c: 86:c6:fd:97:cd:a9:af:f9:62:bc:35:c4:14:41:b1: b2:ce:9a:cf:9a:1c:f2:6b:d8:c5:17:3c:a1:5d:49: d0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:60:F8:00:22:AB:FB:B0:75:AF:E8:5F:F1:8A:11:4B:A9:A4:B6:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:cb:c1:9f:31:5a:14:e8:6d:35:39:fd:f3:aa:37:af:61:1b: cb:e5:5d:5f:3e:70:68:6d:5e:45:ea:46:a8:4e:49:51:a4:b8: 09:c8:35:84:35:e2:82:6e:57:ff:7a:fe:47:6b:ed:76:a8:ca: 4d:0e:e8:03:29:26:9a:ed:17:e8:e5:4f:f1:ce:9d:46:57:fc: 37:8d:73:55:43:df:dd:a0:71:9d:39:81:2b:c1:ab:d6:85:06: 17:4d:f6:ce:49:f5:2e:b5:99:97:0b:c8:42:2e:00:45:31:85: 1f:97:50:6f:c1:5f:10:77:d5:c5:34:f7:c8:a0:c6:90:9f:90: c7:ce:36:a3:3d:ac:71:14:19:78:91:0c:13:50:79:8e:2a:b0: a1:72:01:64:d4:26:a7:46:e2:46:76:39:c5:d9:bf:88:60:6e: e7:d2:1c:4f:20:be:21:7a:f2:79:a4:2c:8b:4c:fb:c0:77:e2: 50:f4:3d:6a:10:a6:22:48:6d:9d:8b:7a:9b:31:ac:f6:68:f6: 86:b8:6f:03:a6:ec:e8:37:b6:98:1e:12:6a:26:e7:2a:76:a3: a6:db:dc:9b:0c:99:fc:ba:fc:6f:62:d1:e7:47:4f:fb:98:08: 9b:99:d8:15:b2:91:f6:f4:94:74:f3:4d:78:fb:d2:1c:52:3a: a6:0b:e1:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIuZ/tmJLNJj1y0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjM0Mzg4NDQtNjI0Ny00NDdmLTkxOWMtNTFkZDk5MTQ1MjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3nd5V1aGAMvQj4aVvNu8NV44hveD72U46Qx J2KO6udm7wBzX3H7ohCiLrL8UBH+zqFnr6sf/ZVjgb0sd5xbJiS/3OTyGdbOkdQ4 oGYR6VQdf/FF3AU6TYbwTUyAVMiBTNaxSIqwYocrlDPyKkhT438QIALjkKvwXtoV Fc0gwwLpaoRwOZkgKeP/ADcRRsg4Z/louDS6pyhCh4MQUg/Pjo3uPXMw773L+K7b ltjNJGsxPP9KlfUEqpe/QV2JLH3nTVFhXvkq12yoOjGoUbGvBBTqUmSpLU1uLuBw 6zT/3nyGxv2Xzamv+WK8NcQUQbGyzprPmhzya9jFFzyhXUnQaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRg+AAiq/uwda/oX/GKEUuppLYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMjMxMDhhMTAtNDQ1MC0z YTI0LWI2ZWEtMWI1MjJhNWIxZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHLwZ8xWhTobTU5/fOqN69hG8vlXV8+cGhtXkXqRqhOSVGkuAnINYQ1 4oJuV/96/kdr7Xaoyk0O6AMpJprtF+jlT/HOnUZX/DeNc1VD392gcZ05gSvBq9aF BhdN9s5J9S61mZcLyEIuAEUxhR+XUG/BXxB31cU098igxpCfkMfONqM9rHEUGXiR DBNQeY4qsKFyAWTUJqdG4kZ2OcXZv4hgbufSHE8gviF68nmkLItM+8B34lD0PWoQ piJIbZ2LepsxrPZo9oa4bwOm7Og3tpgeEmom5yp2o6bb3JsMmfy6/G9i0edHT/uY CJuZ2BWykfb0lHTzTXj70hxSOqYL4bA= -----END CERTIFICATE-----Generated at Sun Oct 11 10:31:08 2026 by rpki-client