$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa File: 2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa (raw, json) Hash identifier: Ppn8B6O4NGBZsTlhe4IGfXA97Bh9K/xFkJeIdCfQl3E= Subject key identifier: 26:3F:DC:CC:22:F6:B5:66:78:5C:99:24:7D:EB:EC:C2:19:DB:07:86 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584EF2E772246695DCB500902CC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 7342 IP address blocks: 209.131.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:72:24:66:95:dc:b5:00:90:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=325b691e-0c7f-4ea8-8250-17d003fa2001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:84:00:c3:35:1e:b0:f2:12:ba:a7:87:de: 85:ab:07:3f:9c:af:b9:d1:ad:c8:a9:ed:c2:0a:61: 94:2a:3e:a0:aa:ed:d3:65:ff:fe:d9:e4:af:e5:a8: 5d:ea:97:b1:91:42:59:a6:a9:3f:05:84:f8:63:ee: ec:66:85:31:90:24:78:35:f1:d7:85:6e:01:d7:36: e2:48:cc:4d:3d:bb:28:6c:bb:9e:97:06:6a:11:f8: 90:22:44:86:90:c2:df:a4:75:d4:2c:6e:b5:05:bd: be:63:51:bf:5c:f0:5c:b9:8b:d0:64:ec:cb:67:2f: bc:8c:e4:ed:d9:ca:04:80:37:c9:c4:68:bd:84:1f: 8b:21:66:dd:9b:f1:c3:a3:ff:21:4b:68:39:1e:55: 30:50:fd:99:c2:8c:a0:b2:ee:15:b5:fa:f4:a3:dd: 98:14:eb:21:8b:07:49:d5:2c:eb:4b:6d:c5:d2:fb: fa:98:10:20:b8:d4:bb:27:c2:b3:59:4b:e9:06:52: 5e:c2:e6:41:6f:64:f0:56:1a:01:39:89:74:a9:8d: 0a:04:f1:f1:ab:6d:75:6f:d0:4b:6f:61:72:d7:b7: 55:72:65:cf:50:6d:d3:47:9e:1e:57:25:26:c6:ba: e8:f0:88:aa:91:9d:bd:a2:27:2f:c7:77:f8:b7:13: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3F:DC:CC:22:F6:B5:66:78:5C:99:24:7D:EB:EC:C2:19:DB:07:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ab8e301-8ff3-38c7-ac4f-9c49cd02e1ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:1e:a5:89:12:1d:40:d2:e9:e7:dd:b0:60:04:a0:95:18:a0: 29:e5:da:b2:5a:fd:de:2b:97:62:1a:d8:39:09:b0:74:19:73: 50:0f:fe:37:f5:89:d3:35:aa:aa:e8:ad:90:f3:a2:ba:d8:22: f9:63:d4:16:9c:37:66:80:3d:e4:fa:c5:6d:f6:0f:43:72:8c: 68:d7:88:6a:87:2e:c3:e7:d4:01:71:44:c2:19:07:c1:64:3c: 4e:f9:bf:d8:86:16:0a:41:44:93:c9:a0:cc:31:78:a3:0e:3c: f6:90:d0:a2:b6:12:55:5e:cd:5c:74:0a:a9:ed:84:e7:82:2c: 6d:38:5c:1e:c8:13:90:d4:02:da:e0:6e:fd:a1:30:8d:7a:20: 90:4b:18:e6:34:76:01:d4:46:43:4c:1b:71:63:31:df:0d:6d: 15:7b:35:ed:c9:29:00:8e:ad:05:be:09:be:1f:74:1a:41:9e: bf:15:b0:84:4e:a3:58:bb:55:54:d1:72:11:ea:35:27:a2:6d: f1:9a:7d:55:14:ad:e2:bc:28:ea:ec:79:fe:f1:68:d9:a0:f8: 2f:29:b1:77:55:93:e1:b3:24:fa:88:b1:2c:78:4a:99:b6:81: 66:6e:1c:6e:52:dc:d0:5d:84:62:ea:3d:a7:ef:a7:69:e8:89: 51:71:81:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53IkZpXctQCQLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MzI1YjY5MWUtMGM3Zi00ZWE4LTgyNTAtMTdkMDAzZmEyMDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ziEAMM1HrDyErqnh96Fqwc/nK+50a3Iqe3C CmGUKj6gqu3TZf/+2eSv5ahd6pexkUJZpqk/BYT4Y+7sZoUxkCR4NfHXhW4B1zbi SMxNPbsobLuelwZqEfiQIkSGkMLfpHXULG61Bb2+Y1G/XPBcuYvQZOzLZy+8jOTt 2coEgDfJxGi9hB+LIWbdm/HDo/8hS2g5HlUwUP2Zwoygsu4Vtfr0o92YFOshiwdJ 1SzrS23F0vv6mBAguNS7J8KzWUvpBlJewuZBb2TwVhoBOYl0qY0KBPHxq211b9BL b2Fy17dVcmXPUG3TR54eVyUmxrro8IiqkZ29oicvx3f4txMdiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCY/3Mwi9rVmeFyZJH3r7MIZ2weGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmFiOGUzMDEtOGZmMy0z OGM3LWFjNGYtOWM0OWNkMDJlMWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIepYkSHUDS6efdsGAEoJUYoCnl2rJa/d4rl2Ia2DkJsHQZc1AP/jf1 idM1qqrorZDzorrYIvlj1BacN2aAPeT6xW32D0NyjGjXiGqHLsPn1AFxRMIZB8Fk PE75v9iGFgpBRJPJoMwxeKMOPPaQ0KK2ElVezVx0CqnthOeCLG04XB7IE5DUAtrg bv2hMI16IJBLGOY0dgHURkNMG3FjMd8NbRV7Ne3JKQCOrQW+Cb4fdBpBnr8VsIRO o1i7VVTRchHqNSeibfGafVUUreK8KOrsef7xaNmg+C8psXdVk+GzJPqIsSx4Spm2 gWZuHG5S3NBdhGLqPafvp2noiVFxgTU= -----END CERTIFICATE-----Generated at Thu Sep 24 06:41:24 2026 by rpki-client