$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/7831e487-0399-3f84-a527-c82b0043a0e5.roa File: 7831e487-0399-3f84-a527-c82b0043a0e5.roa (raw, json) Hash identifier: J8YvBCIqqcHINTnj1qWHg0UH1fAkypF1+wz3bL0xJ/4= Subject key identifier: 34:A3:37:E5:C9:1A:45:84:AE:A1:7D:08:34:13:0E:FE:D7:24:0C:17 Certificate issuer: /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Certificate serial: 010D0C9F4328584F5767F51BE81ECD43567D6C80 Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/7831e487-0399-3f84-a527-c82b0043a0e5.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 33146 IP address blocks: 209.222.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:67:f5:1b:e8:1e:cd:43:56:7d:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=bda1a8f1-85d8-4090-9581-b55cee8a05cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:60:40:dd:b5:d7:54:fe:38:6a:a8:aa:ec:2a: 5c:cd:76:e6:fc:be:99:67:b2:40:2b:a0:0c:d2:2b: 34:cc:aa:e1:b2:83:34:6f:47:45:d8:4f:04:79:58: 0e:f7:98:e6:83:04:1b:c3:92:1c:f1:73:61:85:2f: a4:38:eb:7b:f8:0c:52:be:b7:f5:45:21:a0:1c:d9: 46:b7:2e:81:00:51:e6:8f:b5:5e:8e:aa:7d:e0:6d: f2:0f:bd:8a:3e:f1:92:44:da:ec:ae:09:32:a4:ee: e9:bb:bc:e0:27:df:ac:5b:f5:d1:59:9a:14:3b:66: b6:b6:1b:4f:8f:6f:55:31:a5:84:49:f0:3f:18:48: 8f:53:7e:e1:e8:3a:f2:0c:18:a0:47:df:42:15:12: 19:6a:4a:70:af:2c:5f:77:28:3a:56:f8:51:31:06: 14:f4:15:34:3a:1f:73:a4:a8:b7:f9:83:d8:7c:6f: 7f:20:39:e3:75:8d:f4:10:f4:d1:69:23:38:d7:14: 1a:6e:7b:1f:2b:85:15:0b:63:40:be:a0:2a:05:4e: 88:b8:92:02:40:11:73:f3:3c:78:cc:dd:5a:52:0d: fc:7b:1f:f7:38:b8:dc:eb:16:ae:7e:48:64:46:cf: 39:ff:3b:52:3e:80:2c:b1:67:1b:f3:f2:d4:18:9a: 44:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A3:37:E5:C9:1A:45:84:AE:A1:7D:08:34:13:0E:FE:D7:24:0C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/7831e487-0399-3f84-a527-c82b0043a0e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl X509v3 Authority Key Identifier: keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer sbgp-ipAddrBlock: critical IPv4: 209.222.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:2c:3b:a7:6f:6c:b7:2d:62:e9:40:a8:e4:86:9c:2e:4a:84: a2:62:dc:7d:ed:dd:f3:18:30:b5:4a:5e:8a:b4:fe:46:b6:b5: 8d:21:c6:e0:53:17:2e:70:65:13:c8:e6:e1:d7:88:0d:50:f9: e8:da:51:ca:6a:a4:76:30:d6:ba:6c:6c:22:61:5c:e9:32:48: 4e:8a:15:2a:2d:5e:9b:9f:f4:75:49:9c:ec:2f:3b:8a:76:54: d8:d6:8e:52:67:13:4c:e0:a7:e7:97:73:bf:52:5b:e1:2f:98: 85:2e:ee:bc:13:84:c5:77:82:58:d5:ad:e1:82:2a:d4:a2:20: 75:db:b7:8e:bc:02:93:1d:6a:e9:09:43:3f:5f:a7:28:1c:d1: d7:96:eb:11:a2:d0:fa:32:22:d2:b5:95:8b:75:68:7c:5a:c9: 56:1a:70:be:3f:2d:43:c0:02:73:66:b5:6a:92:7c:48:24:b4: d1:98:a1:28:23:f1:12:02:12:bc:01:07:4a:d3:a2:77:c9:07: 52:56:a5:18:69:21:6f:24:fc:ab:0f:3a:73:9f:29:c9:d5:a0: c5:44:9c:75:af:61:35:10:55:fa:ca:18:1a:d4:88:d8:d2:98: f3:fd:fb:0d:dd:f8:ba:a3:0e:56:c2:55:9b:46:2b:9f:2d:6d: 95:1f:89:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XZ/Ub6B7NQ1Z9bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYzgzYjUtNGNmZC00YjM4LWIxYmItNDUwMDBlZWJh NmFlMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk YmRhMWE4ZjEtODVkOC00MDkwLTk1ODEtYjU1Y2VlOGEwNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mBA3bXXVP44aqiq7CpczXbm/L6ZZ7JAK6AM 0is0zKrhsoM0b0dF2E8EeVgO95jmgwQbw5Ic8XNhhS+kOOt7+AxSvrf1RSGgHNlG ty6BAFHmj7Vejqp94G3yD72KPvGSRNrsrgkypO7pu7zgJ9+sW/XRWZoUO2a2thtP j29VMaWESfA/GEiPU37h6DryDBigR99CFRIZakpwryxfdyg6VvhRMQYU9BU0Oh9z pKi3+YPYfG9/IDnjdY30EPTRaSM41xQabnsfK4UVC2NAvqAqBU6IuJICQBFz8zx4 zN1aUg38ex/3OLjc6xaufkhkRs85/ztSPoAssWcb8/LUGJpEvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSjN+XJGkWErqF9CDQTDv7XJAwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFj ODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAwMGVlYmE2YWUvNzgzMWU0ODctMDM5OS0z Zjg0LWE1MjctYzgyYjAwNDNhMGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjFhYzgzYjUtNGNmZC00YjM4LWIx YmItNDUwMDBlZWJhNmFlL2YxYWM4M2I1LTRjZmQtNGIzOC1iMWJiLTQ1MDAwZWVi YTZhZS5jcmwwHwYDVR0jBBgwFoAUCrA0V1FPrMSLEXsWcz7MjvXGb0YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mMWFjODNiNS00Y2ZkLTRiMzgtYjFiYi00NTAw MGVlYmE2YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d71MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAsO6dvbLctYulAqOSGnC5KhKJi3H3t3fMYMLVKXoq0/ka2tY0hxuBT Fy5wZRPI5uHXiA1Q+ejaUcpqpHYw1rpsbCJhXOkySE6KFSotXpuf9HVJnOwvO4p2 VNjWjlJnE0zgp+eXc79SW+EvmIUu7rwThMV3gljVreGCKtSiIHXbt468ApMdaukJ Qz9fpygc0deW6xGi0PoyItK1lYt1aHxayVYacL4/LUPAAnNmtWqSfEgktNGYoSgj 8RICErwBB0rTonfJB1JWpRhpIW8k/KsPOnOfKcnVoMVEnHWvYTUQVfrKGBrUiNjS mPP9+w3d+LqjDlbCVZtGK58tbZUfiRU= -----END CERTIFICATE-----Generated at Tue Oct 6 19:46:14 2026 by rpki-client