$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/fd142f82-06f7-3937-9314-8f3c2d7275aa.roa File: fd142f82-06f7-3937-9314-8f3c2d7275aa.roa (raw, json) Hash identifier: JSTMYXhGSUuqwhIbtFIueNpQaQ9wKCEOU/XkZdsq0dU= Subject key identifier: F9:98:DA:89:D5:72:29:E0:2C:54:7A:06:91:DB:99:D5:47:A3:A0:26 Certificate issuer: /CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Certificate serial: 010D0C9F4328584F4973ECFDDF37EB8FBCAA4010 Authority key identifier: EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/fd142f82-06f7-3937-9314-8f3c2d7275aa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 207645 IP address blocks: 209.240.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ec:fd:df:37:eb:8f:bc:aa:40:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfe98912-51fc-490e-b52f-0f6db9a2847e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d1e5a5d2-359a-450b-a1a1-a1ceaa412075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:81:16:41:84:d7:6b:64:e0:cb:d3:3f:11:9d: f5:69:aa:e5:90:29:e4:1c:86:02:c7:45:9f:7e:75: bf:56:c3:df:6e:d1:5f:b7:5c:86:b5:ab:7b:0b:f5: fc:da:a4:b1:a9:34:9f:ab:a5:58:26:38:90:29:d9: 18:a7:1e:22:31:06:74:3a:ee:e7:7b:4c:5e:02:75: 7c:a4:dd:a3:68:08:0b:ea:43:16:0e:51:77:c9:cd: 25:5e:8e:92:70:35:ef:88:be:d2:06:19:29:8e:9f: 59:2f:3b:57:ab:05:3f:fd:a2:bd:1f:c3:1f:78:8e: 73:bd:b5:17:cd:98:d9:f4:06:20:fd:73:bc:6c:ac: a5:aa:d6:d9:3b:ed:a8:f0:19:82:64:05:42:8f:7e: 96:dd:a6:34:2c:3c:ac:3b:32:9d:0e:2a:cb:46:88: de:f9:2e:92:fe:e2:24:e3:98:38:d5:fb:53:9b:6a: 61:d3:8f:14:79:1b:6d:cf:0d:62:e1:8e:4e:66:a2: c4:4c:d2:02:2b:2a:b7:0b:4b:38:2f:db:ac:85:c4: 3b:36:cc:9a:c3:15:50:a5:98:4a:84:5e:03:af:12: c1:bd:cc:36:ba:b8:6e:bc:07:09:7b:50:e2:25:8f: 20:a6:7a:46:98:5e:6e:79:a0:90:d4:f0:8b:57:58: a5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:98:DA:89:D5:72:29:E0:2C:54:7A:06:91:DB:99:D5:47:A3:A0:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/fd142f82-06f7-3937-9314-8f3c2d7275aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e/dfe98912-51fc-490e-b52f-0f6db9a2847e.crl X509v3 Authority Key Identifier: keyid:EC:81:53:34:C0:5B:18:F9:7E:DF:43:4A:6F:1A:97:CF:A0:AF:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfe98912-51fc-490e-b52f-0f6db9a2847e.cer sbgp-ipAddrBlock: critical IPv4: 209.240.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:cd:e0:4b:02:76:89:58:2a:14:33:c1:27:60:57:4c:f7:dc: a3:5a:0d:e1:92:e0:f6:51:8d:80:a2:70:0f:ef:2b:5f:0d:45: b3:6b:a4:8c:62:ef:32:17:ea:08:7f:4b:c5:b6:2e:ec:07:d1: e2:c4:71:ad:b1:9d:12:a2:f1:d6:aa:0e:d9:d5:c4:fa:5a:68: 3d:cf:5b:4a:87:c8:1a:a8:12:ea:8e:10:f8:68:0c:c6:9f:01: 28:39:85:50:1e:eb:5f:b0:ee:8b:2b:39:28:74:8a:25:32:04: 3b:91:2c:a2:4b:8f:b5:71:86:8c:39:c3:62:2c:06:cf:b9:52: fa:9a:b9:f4:1f:74:b0:7a:89:2f:a1:00:1b:60:54:80:56:9a: d2:f7:1e:a8:ed:30:d2:a7:0e:11:19:03:99:7c:08:56:4f:bc: 33:ee:66:72:9b:f9:15:71:d3:7e:b4:66:cf:0b:ae:34:58:89: 6c:e5:8a:cf:f4:0a:09:32:9b:9a:8f:ff:26:0f:85:98:d4:ae: b7:77:ba:db:04:9e:4c:46:c9:ad:15:7e:08:68:90:53:10:8b: 37:7f:34:3a:5c:d9:bb:6d:c7:85:f4:fa:90:82:b7:66:9d:d5: b6:69:47:e9:d2:b2:e1:e9:60:34:ef:c7:3f:73:9c:6f:2a:11: 81:ec:e6:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+z93zfrj7yqQBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGZlOTg5MTItNTFmYy00OTBlLWI1MmYtMGY2ZGI5YTI4 NDdlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDFlNWE1ZDItMzU5YS00NTBiLWExYTEtYTFjZWFhNDEyMDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4EWQYTXa2Tgy9M/EZ31aarlkCnkHIYCx0Wf fnW/VsPfbtFft1yGtat7C/X82qSxqTSfq6VYJjiQKdkYpx4iMQZ0Ou7ne0xeAnV8 pN2jaAgL6kMWDlF3yc0lXo6ScDXviL7SBhkpjp9ZLztXqwU//aK9H8MfeI5zvbUX zZjZ9AYg/XO8bKylqtbZO+2o8BmCZAVCj36W3aY0LDysOzKdDirLRoje+S6S/uIk 45g41ftTm2ph048UeRttzw1i4Y5OZqLETNICKyq3C0s4L9ushcQ7NsyawxVQpZhK hF4DrxLBvcw2urhuvAcJe1DiJY8gpnpGmF5ueaCQ1PCLV1il9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmY2onVcingLFR6BpHbmdVHo6AmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5 ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZkYjlhMjg0N2UvZmQxNDJmODItMDZmNy0z OTM3LTkzMTQtOGYzYzJkNzI3NWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZlOTg5MTItNTFmYy00OTBlLWI1 MmYtMGY2ZGI5YTI4NDdlL2RmZTk4OTEyLTUxZmMtNDkwZS1iNTJmLTBmNmRiOWEy ODQ3ZS5jcmwwHwYDVR0jBBgwFoAU7IFTNMBbGPl+30NKbxqXz6CvV2kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmU5ODkxMi01MWZjLTQ5MGUtYjUyZi0wZjZk YjlhMjg0N2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0fAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHN4EsCdolYKhQzwSdgV0z33KNaDeGS4PZRjYCicA/vK18NRbNrpIxi 7zIX6gh/S8W2LuwH0eLEca2xnRKi8daqDtnVxPpaaD3PW0qHyBqoEuqOEPhoDMaf ASg5hVAe61+w7osrOSh0iiUyBDuRLKJLj7Vxhow5w2IsBs+5UvqaufQfdLB6iS+h ABtgVIBWmtL3HqjtMNKnDhEZA5l8CFZPvDPuZnKb+RVx0360Zs8LrjRYiWzlis/0 Cgkym5qP/yYPhZjUrrd3utsEnkxGya0VfghokFMQizd/NDpc2bttx4X0+pCCt2ad 1bZpR+nSsuHpYDTvxz9znG8qEYHs5oY= -----END CERTIFICATE-----Generated at Sat Oct 10 17:57:45 2026 by rpki-client