$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/8dff3c1b-6a84-3cb5-a867-74d4ab7facdc.roa File: 8dff3c1b-6a84-3cb5-a867-74d4ab7facdc.roa (raw, json) Hash identifier: XD9h+T9F8MpalnvvZ1BUsBRiQY9c/QuXOr3KH9lfnqY= Subject key identifier: DE:B3:B2:83:C1:61:66:3C:70:89:C5:CE:FD:4A:5E:57:20:2E:06:C0 Certificate issuer: /CN=01a4b3c4-670e-4045-9d0e-a7046f352d92 Certificate serial: 010D0C9F4328584F06723182A4DC4C701E8F6080 Authority key identifier: 51:97:4C:3C:57:09:75:CE:02:5D:DA:91:32:8B:19:B0:C0:A9:99:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/8dff3c1b-6a84-3cb5-a867-74d4ab7facdc.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 399332 IP address blocks: 209.209.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/01a4b3c4-670e-4045-9d0e-a7046f352d92.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/01a4b3c4-670e-4045-9d0e-a7046f352d92.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:31:82:a4:dc:4c:70:1e:8f:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01a4b3c4-670e-4045-9d0e-a7046f352d92 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=6187932f-3c77-4349-86d8-63bd3bd42bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4f:43:81:17:03:3b:9e:b3:ff:08:35:16:d4: 5b:89:d8:f5:a5:d7:b0:37:b9:8c:ed:58:ee:c3:33: bb:49:6b:7e:eb:61:1a:4c:bb:fe:f2:1a:58:50:ca: 71:02:ca:d9:e9:0d:1e:a7:d9:c7:f7:08:ea:5a:85: 8b:76:72:cc:66:90:40:dc:3f:33:c2:21:48:4a:8f: f7:40:39:10:14:d5:89:da:d2:21:d2:b3:68:55:6b: df:04:36:12:db:9c:a4:38:ac:94:87:c4:7b:1b:5f: f5:88:d8:3f:73:83:da:f7:64:fb:51:06:79:4d:65: da:e3:c2:26:59:90:20:c1:5b:4f:6a:fb:af:3e:e8: f0:37:89:93:77:56:68:19:0b:1c:8b:e6:cc:4e:46: 98:7a:0a:11:e8:c5:4e:0c:21:e5:f3:02:a8:16:2d: 5a:8e:b2:c0:43:4b:31:a0:83:de:ad:0e:a6:5c:62: 48:08:4e:10:13:2c:04:43:14:ea:87:42:32:73:ed: 4e:a6:44:c2:7f:93:a6:e2:20:b8:f2:36:f4:6d:ab: 15:eb:98:d5:13:64:d1:6f:50:fb:70:f9:4c:96:da: 0b:b7:af:c5:d2:ad:b6:c5:b5:c4:56:8a:d2:56:0c: cc:3d:d0:7a:32:ee:3f:b7:f1:a0:e3:0b:77:dc:53: 30:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B3:B2:83:C1:61:66:3C:70:89:C5:CE:FD:4A:5E:57:20:2E:06:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/8dff3c1b-6a84-3cb5-a867-74d4ab7facdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92/01a4b3c4-670e-4045-9d0e-a7046f352d92.crl X509v3 Authority Key Identifier: keyid:51:97:4C:3C:57:09:75:CE:02:5D:DA:91:32:8B:19:B0:C0:A9:99:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01a4b3c4-670e-4045-9d0e-a7046f352d92.cer sbgp-ipAddrBlock: critical IPv4: 209.209.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:65:1b:0a:6c:d8:3b:da:20:eb:73:b3:d6:cc:1a:25:20:fc: 50:89:e5:4d:b6:7e:06:90:d1:76:15:1c:80:9b:8a:3d:30:36: 21:6c:41:7d:69:da:6a:25:cf:60:17:22:67:e6:ed:e0:d8:e9: 93:2f:36:19:1a:46:fe:65:0f:cf:3f:bb:37:67:cd:26:b4:70: 6a:61:54:78:f4:2b:ec:85:65:84:d4:db:a0:22:af:6c:c5:1f: 8b:b9:b9:e9:8b:55:97:0b:e9:4d:82:75:6f:d1:30:75:b7:6d: f9:cf:f7:13:53:c6:09:e2:ec:aa:f7:98:7a:fe:41:52:2b:14: 98:60:48:76:db:f2:b5:24:a3:d5:7c:bb:2b:bc:43:1b:9d:3b: 75:ab:1e:2a:27:91:86:fc:ec:09:5f:e7:c5:be:ac:ac:b6:67: a7:f0:30:76:53:48:50:a9:50:90:f7:d6:b4:89:82:16:2a:72: 54:bf:2e:7f:1f:6e:e6:74:2a:28:5b:de:44:39:65:81:69:45: b4:ec:64:64:48:8a:ca:6f:35:95:aa:0c:05:dc:29:59:8e:b3: 6c:2e:44:1a:5d:d4:3e:6a:bf:73:19:38:b2:88:64:a2:62:f8: b9:6e:50:53:f0:79:62:69:e6:c1:7a:d2:bb:29:7e:37:92:1f: 4a:e0:f4:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcjGCpNxMcB6PYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDFhNGIzYzQtNjcwZS00MDQ1LTlkMGUtYTcwNDZmMzUy ZDkyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk NjE4NzkzMmYtM2M3Ny00MzQ5LTg2ZDgtNjNiZDNiZDQyYmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE9DgRcDO56z/wg1FtRbidj1pdewN7mM7Vju wzO7SWt+62EaTLv+8hpYUMpxAsrZ6Q0ep9nH9wjqWoWLdnLMZpBA3D8zwiFISo/3 QDkQFNWJ2tIh0rNoVWvfBDYS25ykOKyUh8R7G1/1iNg/c4Pa92T7UQZ5TWXa48Im WZAgwVtPavuvPujwN4mTd1ZoGQsci+bMTkaYegoR6MVODCHl8wKoFi1ajrLAQ0sx oIPerQ6mXGJICE4QEywEQxTqh0Iyc+1OpkTCf5Om4iC48jb0basV65jVE2TRb1D7 cPlMltoLt6/F0q22xbXEVorSVgzMPdB6Mu4/t/Gg4wt33FMwlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6zsoPBYWY8cInFzv1KXlcgLgbAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMWE0 YjNjNC02NzBlLTQwNDUtOWQwZS1hNzA0NmYzNTJkOTIvOGRmZjNjMWItNmE4NC0z Y2I1LWE4NjctNzRkNGFiN2ZhY2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDFhNGIzYzQtNjcwZS00MDQ1LTlk MGUtYTcwNDZmMzUyZDkyLzAxYTRiM2M0LTY3MGUtNDA0NS05ZDBlLWE3MDQ2ZjM1 MmQ5Mi5jcmwwHwYDVR0jBBgwFoAUUZdMPFcJdc4CXdqRMosZsMCpmXIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMWE0YjNjNC02NzBlLTQwNDUtOWQwZS1hNzA0 NmYzNTJkOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dEsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExlGwps2DvaIOtzs9bMGiUg/FCJ5U22fgaQ0XYVHICbij0wNiFsQX1p 2molz2AXImfm7eDY6ZMvNhkaRv5lD88/uzdnzSa0cGphVHj0K+yFZYTU26Air2zF H4u5uemLVZcL6U2CdW/RMHW3bfnP9xNTxgni7Kr3mHr+QVIrFJhgSHbb8rUko9V8 uyu8QxudO3WrHionkYb87Alf58W+rKy2Z6fwMHZTSFCpUJD31rSJghYqclS/Ln8f buZ0Kihb3kQ5ZYFpRbTsZGRIispvNZWqDAXcKVmOs2wuRBpd1D5qv3MZOLKIZKJi +LluUFPweWJp5sF60rspfjeSH0rg9B4= -----END CERTIFICATE-----Generated at Wed Sep 23 00:11:01 2026 by rpki-client