$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/920ed1d3-3772-403b-95ae-31fe0b51e4c3/39394e6d-9942-3aec-9359-4b59f5c0ff28.roa File: 39394e6d-9942-3aec-9359-4b59f5c0ff28.roa (raw, json) Hash identifier: pBBnslSqCj/nmWbMQlZ/fTDmMDvOIj+jGh/4k2Oiw64= Subject key identifier: 36:AF:96:38:94:FD:09:2A:67:C0:8A:E1:5D:48:CE:F5:BB:90:78:61 Certificate issuer: /CN=920ed1d3-3772-403b-95ae-31fe0b51e4c3 Certificate serial: 010D0C9F4328584F1467B26687B1F68D1C605400 Authority key identifier: 57:D9:41:80:E2:E4:2A:77:4C:F0:31:4F:07:D6:6C:1A:5C:E8:BD:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/920ed1d3-3772-403b-95ae-31fe0b51e4c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/920ed1d3-3772-403b-95ae-31fe0b51e4c3/39394e6d-9942-3aec-9359-4b59f5c0ff28.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 13335 IP address blocks: 209.234.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/920ed1d3-3772-403b-95ae-31fe0b51e4c3/920ed1d3-3772-403b-95ae-31fe0b51e4c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/920ed1d3-3772-403b-95ae-31fe0b51e4c3/920ed1d3-3772-403b-95ae-31fe0b51e4c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/920ed1d3-3772-403b-95ae-31fe0b51e4c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:b2:66:87:b1:f6:8d:1c:60:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=920ed1d3-3772-403b-95ae-31fe0b51e4c3 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=12474f22-abc5-4332-877f-faf358861e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d9:ef:53:41:d1:1a:ea:87:d6:d5:3d:28:f4: 00:2c:c9:85:19:7f:9a:d4:ea:a1:44:8b:a0:4d:a9: e3:c0:8e:5d:2c:1f:37:64:72:c4:d1:f5:5f:ec:2e: 5c:3a:4e:25:f1:81:05:c7:29:f4:8a:7d:e8:9b:bc: 19:45:5d:05:88:22:0d:b3:95:ab:da:55:d1:29:1e: 62:7f:b6:27:a2:7e:89:9e:cb:f5:c2:7a:a5:9b:5f: 76:b0:79:73:53:0e:7d:89:04:9a:6d:cf:7a:2b:5a: 75:77:d2:c4:9c:4b:e2:3e:95:ce:39:f2:c9:e6:4a: 4c:a2:cc:58:76:d1:e5:cd:3c:72:7f:c3:98:95:6b: fb:fa:f8:a1:ba:db:55:57:95:6e:fa:1a:7f:12:db: 7b:dc:39:a2:19:33:e7:79:3a:5d:e4:5a:10:49:98: d9:bc:f9:e1:9e:86:b8:08:73:a3:e6:de:d7:40:c2: 90:2f:b0:11:c2:40:64:d4:71:89:df:62:7d:f9:16: 7f:e1:04:ca:81:b8:8d:49:fd:43:62:8b:f4:a2:ae: d3:82:54:c8:fb:77:2f:1d:4c:b4:d3:a2:3e:63:0b: 4c:ac:ab:22:61:6b:ce:06:17:2d:81:93:13:73:a9: 88:95:38:6f:fa:34:d5:e5:88:70:13:ff:86:d4:61: bd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AF:96:38:94:FD:09:2A:67:C0:8A:E1:5D:48:CE:F5:BB:90:78:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/920ed1d3-3772-403b-95ae-31fe0b51e4c3/39394e6d-9942-3aec-9359-4b59f5c0ff28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/920ed1d3-3772-403b-95ae-31fe0b51e4c3/920ed1d3-3772-403b-95ae-31fe0b51e4c3.crl X509v3 Authority Key Identifier: keyid:57:D9:41:80:E2:E4:2A:77:4C:F0:31:4F:07:D6:6C:1A:5C:E8:BD:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/920ed1d3-3772-403b-95ae-31fe0b51e4c3.cer sbgp-ipAddrBlock: critical IPv4: 209.234.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:51:39:cf:ab:d3:19:e7:4b:b0:ab:d0:31:9b:fa:6e:9c:12: 0e:b0:14:53:a6:f2:ff:19:e2:fe:da:87:0f:18:48:2b:54:fd: ce:ef:a4:63:0c:78:66:c9:d8:d8:87:8f:6e:53:3e:a8:2a:5b: 73:d3:ad:0e:7b:cd:c1:16:b1:6e:6e:25:40:a1:ff:95:4b:03: 56:34:67:6a:bb:23:a3:3c:33:47:65:52:2c:e9:59:19:54:c6: 6f:6f:97:4f:28:c8:0d:58:49:b3:1c:4c:b7:80:a2:ef:01:f2: 86:92:95:ef:8a:44:9d:d7:2e:f1:6e:8b:8b:ad:e5:37:fd:5c: 29:ac:d7:81:56:d4:e5:b0:de:d5:96:9b:3c:0c:f4:2f:44:21: 80:a1:da:b9:eb:8e:4b:d1:c9:06:f6:7f:8a:ff:d5:4b:c2:88: bd:0a:7c:dd:b8:c7:1d:a6:ab:36:85:9d:1f:c5:c6:8a:c2:67: 1f:1f:17:78:21:9d:9d:a1:39:12:33:7f:18:ec:e2:7c:d9:9d: b7:e6:1f:9a:ce:6b:c0:d8:2d:f4:21:fb:ac:06:3d:4c:af:cc: a3:ac:83:d2:d1:89:84:bb:45:7b:af:c0:01:a2:4e:33:2d:6c: ab:d4:19:6c:7d:51:6c:f4:33:67:db:a3:7e:02:ee:fd:29:b4: c2:ff:6a:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ7Jmh7H2jRxgVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTIwZWQxZDMtMzc3Mi00MDNiLTk1YWUtMzFmZTBiNTFl NGMzMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MTI0NzRmMjItYWJjNS00MzMyLTg3N2YtZmFmMzU4ODYxZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNnvU0HRGuqH1tU9KPQALMmFGX+a1OqhRIug TanjwI5dLB83ZHLE0fVf7C5cOk4l8YEFxyn0in3om7wZRV0FiCINs5Wr2lXRKR5i f7Ynon6Jnsv1wnqlm192sHlzUw59iQSabc96K1p1d9LEnEviPpXOOfLJ5kpMosxY dtHlzTxyf8OYlWv7+vihuttVV5Vu+hp/Ett73DmiGTPneTpd5FoQSZjZvPnhnoa4 CHOj5t7XQMKQL7ARwkBk1HGJ32J9+RZ/4QTKgbiNSf1DYov0oq7TglTI+3cvHUy0 06I+YwtMrKsiYWvOBhctgZMTc6mIlThv+jTV5YhwE/+G1GG9vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDavljiU/QkqZ8CK4V1IzvW7kHhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85MjBl ZDFkMy0zNzcyLTQwM2ItOTVhZS0zMWZlMGI1MWU0YzMvMzkzOTRlNmQtOTk0Mi0z YWVjLTkzNTktNGI1OWY1YzBmZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOTIwZWQxZDMtMzc3Mi00MDNiLTk1 YWUtMzFmZTBiNTFlNGMzLzkyMGVkMWQzLTM3NzItNDAzYi05NWFlLTMxZmUwYjUx ZTRjMy5jcmwwHwYDVR0jBBgwFoAUV9lBgOLkKndM8DFPB9ZsGlzovfMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85MjBlZDFkMy0zNzcyLTQwM2ItOTVhZS0zMWZl MGI1MWU0YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMVROc+r0xnnS7Cr0DGb+m6cEg6wFFOm8v8Z4v7ahw8YSCtU/c7vpGMM eGbJ2NiHj25TPqgqW3PTrQ57zcEWsW5uJUCh/5VLA1Y0Z2q7I6M8M0dlUizpWRlU xm9vl08oyA1YSbMcTLeAou8B8oaSle+KRJ3XLvFui4ut5Tf9XCms14FW1OWw3tWW mzwM9C9EIYCh2rnrjkvRyQb2f4r/1UvCiL0KfN24xx2mqzaFnR/FxorCZx8fF3gh nZ2hORIzfxjs4nzZnbfmH5rOa8DYLfQh+6wGPUyvzKOsg9LRiYS7RXuvwAGiTjMt bKvUGWx9UWz0M2fbo34C7v0ptML/apg= -----END CERTIFICATE-----Generated at Sat Sep 26 18:54:28 2026 by rpki-client