$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa File: 8cd9bb4a-ed14-375c-aa14-4200b366035f.roa (raw, json) Hash identifier: ShQcMH6UQOSTTo+5eqK3EULwYBPrd1ty3gtLJT2K5Wk= Subject key identifier: BE:25:69:81:7B:16:49:D2:C1:35:A1:B7:C6:F9:12:56:06:8A:B9:ED Certificate issuer: /CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Certificate serial: 010D0C9F4328584F4277F7A9D5C5DB3CC9079B00 Authority key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 209.127.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:f7:a9:d5:c5:db:3c:c9:07:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=b97ac22f-c599-4816-b6a1-3d0f409ac21b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:09:fc:85:a7:97:07:b5:35:00:8c:c6:a3: cd:c6:f0:44:e7:6b:8c:13:3b:19:4f:43:11:8a:d7: 95:7f:d7:42:7c:c9:76:e0:97:f5:41:d1:9e:d0:13: 2d:95:ac:ec:8e:28:03:5b:bc:76:85:6a:91:a3:d0: 7e:89:4f:7c:be:69:45:db:cb:91:57:33:c4:8d:20: 4c:9a:24:ef:00:82:9c:a3:71:48:4d:a4:4a:8a:ab: ec:e5:6b:ce:39:cc:21:b6:01:6d:f4:37:6e:31:ca: c8:e2:30:90:af:44:02:97:3c:c1:d7:f3:78:6a:04: 43:1a:62:72:62:94:82:6d:c7:75:be:ed:88:0c:ef: 1e:94:2b:ce:f2:dd:f6:aa:68:d4:7c:30:18:3a:4b: d4:0f:42:0f:11:f6:34:35:f9:a2:8e:06:f6:e6:3b: 70:70:a0:0e:be:95:5d:8e:bf:71:0b:22:59:91:60: 9d:8a:13:09:7c:c2:fa:f3:85:9b:19:fc:44:ec:8c: 6b:cf:39:74:57:20:f8:00:67:f4:f5:0f:6e:70:e6: 6c:10:17:8b:fe:51:9c:50:b8:d7:76:d3:7e:e5:05: 5f:4c:5d:08:99:5d:2c:9d:fe:57:81:a9:bf:03:31: db:3c:98:05:cc:7b:46:3c:88:c7:0f:fa:46:c2:0e: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:25:69:81:7B:16:49:D2:C1:35:A1:B7:C6:F9:12:56:06:8A:B9:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/8cd9bb4a-ed14-375c-aa14-4200b366035f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl X509v3 Authority Key Identifier: keyid:31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer sbgp-ipAddrBlock: critical IPv4: 209.127.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ab:ba:ee:cd:c4:0e:04:a4:10:41:e6:41:9e:3f:8a:f6:ad: 79:42:b3:ec:01:77:67:b8:81:54:5a:33:cc:90:04:95:f3:35: 24:ef:41:47:1b:d0:c7:2f:23:32:62:c1:2c:66:e4:fc:23:e8: 1b:5f:43:e1:f4:d0:a0:78:fa:a2:8d:df:3e:82:2e:1b:86:52: d4:79:8f:d6:08:04:b3:bc:64:fa:ac:10:5b:69:d4:b2:92:1c: 1e:f4:46:34:13:e8:d2:c4:52:2d:fa:09:40:ca:9f:22:5a:59: 60:78:dc:f9:b9:01:bc:b3:3a:4a:d7:48:e1:bb:f5:e4:86:16: 48:3b:37:cb:a2:2d:0d:b6:c0:cb:87:46:af:8d:c6:f6:cc:bb: ee:d4:c4:83:ee:58:9c:11:c7:15:b1:8c:fd:3f:e0:ca:67:c4: 7d:f6:bc:0d:ba:d2:85:96:66:12:3e:fe:b6:31:45:d4:86:cb: 4c:4d:b3:4b:7f:50:d6:38:03:a8:10:81:11:a6:44:4b:dc:89: a3:44:d7:22:03:33:71:a7:19:20:ac:40:e9:d1:f1:c1:7e:01: cd:f1:d9:8d:18:96:24:e8:64:b9:b8:01:26:f9:b4:e4:6e:10: e0:85:5b:88:6f:9d:9f:95:a6:23:91:c3:97:94:15:07:29:1e: bb:09:d7:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd/ep1cXbPMkHmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY4ZWMyNWQtOTMyYS00ZGQ0LThmODMtZjFkYTA0OTA2 OGVjMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk Yjk3YWMyMmYtYzU5OS00ODE2LWI2YTEtM2QwZjQwOWFjMjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZwJ/IWnlwe1NQCMxqPNxvBE52uMEzsZT0MR iteVf9dCfMl24Jf1QdGe0BMtlazsjigDW7x2hWqRo9B+iU98vmlF28uRVzPEjSBM miTvAIKco3FITaRKiqvs5WvOOcwhtgFt9DduMcrI4jCQr0QClzzB1/N4agRDGmJy YpSCbcd1vu2IDO8elCvO8t32qmjUfDAYOkvUD0IPEfY0Nfmijgb25jtwcKAOvpVd jr9xCyJZkWCdihMJfML684WbGfxE7Ixrzzl0VyD4AGf09Q9ucOZsEBeL/lGcULjX dtN+5QVfTF0ImV0snf5Xgam/AzHbPJgFzHtGPIjHD/pGwg5wmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4laYF7FknSwTWht8b5ElYGirntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Zjhl YzI1ZC05MzJhLTRkZDQtOGY4My1mMWRhMDQ5MDY4ZWMvOGNkOWJiNGEtZWQxNC0z NzVjLWFhMTQtNDIwMGIzNjYwMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGY4ZWMyNWQtOTMyYS00ZGQ0LThm ODMtZjFkYTA0OTA2OGVjLzRmOGVjMjVkLTkzMmEtNGRkNC04ZjgzLWYxZGEwNDkw NjhlYy5jcmwwHwYDVR0jBBgwFoAUMcXgnadCF+8nR36OpSmNPzPy5U0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjhlYzI1ZC05MzJhLTRkZDQtOGY4My1mMWRh MDQ5MDY4ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0X/pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyruu7NxA4EpBBB5kGeP4r2rXlCs+wBd2e4gVRaM8yQBJXzNSTvQUcb 0McvIzJiwSxm5Pwj6BtfQ+H00KB4+qKN3z6CLhuGUtR5j9YIBLO8ZPqsEFtp1LKS HB70RjQT6NLEUi36CUDKnyJaWWB43Pm5AbyzOkrXSOG79eSGFkg7N8uiLQ22wMuH Rq+NxvbMu+7UxIPuWJwRxxWxjP0/4MpnxH32vA260oWWZhI+/rYxRdSGy0xNs0t/ UNY4A6gQgRGmREvciaNE1yIDM3GnGSCsQOnR8cF+Ac3x2Y0YliToZLm4ASb5tORu EOCFW4hvnZ+VpiORw5eUFQcpHrsJ1wY= -----END CERTIFICATE-----Generated at Mon Sep 28 10:33:16 2026 by rpki-client