$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa File: d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa (raw, json) Hash identifier: dXVCPBXSMfWjehhMgeVqwVdxzeVq5Se/3ktiLh/LIz8= Subject key identifier: 66:28:F3:C2:25:5C:D7:65:D3:F9:25:18:90:40:3F:0B:E3:35:E8:9B Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584F20F7C158E2A908BD7A759040 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 35908 IP address blocks: 209.11.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c1:58:e2:a9:08:bd:7a:75:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=5316c70f-fa9b-4ef7-9b29-4ff41dd5110c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c0:72:a8:82:8d:70:74:d5:5a:40:bf:dc:ae: 7a:2b:91:5a:d5:08:65:0c:fa:5c:24:9d:bf:6a:9b: 4b:0f:2a:18:30:89:fa:65:00:18:dd:3f:39:d6:e2: 6c:24:64:da:af:24:e6:40:e6:3c:70:cd:ec:5e:be: 2d:bf:67:cc:81:93:69:e9:7d:a8:61:68:83:c5:48: 13:34:3b:3a:df:6f:fd:a1:97:39:57:fb:ec:5a:82: 1b:eb:62:82:c6:96:d6:82:9f:bf:95:6d:aa:6f:79: c6:69:8c:8e:9f:27:9c:ef:27:75:4b:ae:50:7d:c3: 43:fa:3c:9d:f1:99:ad:48:37:5e:17:0c:01:62:6b: b4:d9:f8:e2:98:66:dc:c9:22:12:d7:cf:77:78:99: a9:ad:23:12:fd:57:29:f1:51:f8:aa:9c:ec:87:08: 90:d4:6c:03:b6:4f:d5:03:1a:5a:17:98:7c:ca:ed: 82:1c:c2:3b:ca:15:4d:72:fe:6b:df:88:68:76:87: d6:33:23:4f:b7:37:55:f0:97:9d:45:8c:99:41:fd: 7c:38:9e:32:fc:27:11:51:11:3f:14:1f:44:31:2f: 15:2a:ab:69:f7:81:f6:b0:d4:32:3f:54:73:1d:7f: 29:55:8e:df:9c:79:e5:2e:a3:f6:c0:c0:9f:03:ad: bb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:28:F3:C2:25:5C:D7:65:D3:F9:25:18:90:40:3F:0B:E3:35:E8:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/d6b50da1-f00c-38e1-92c4-b97a4a80f043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 209.11.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:18:bc:ef:0b:4c:65:d6:bd:fd:2a:da:91:60:83:d2:38:0e: f7:be:eb:be:12:28:25:1d:0a:aa:0d:ca:c3:a9:60:1f:b7:87: 14:c3:0e:b3:5b:13:2a:ac:47:dc:85:45:cb:98:c7:76:fa:de: 3d:52:08:ed:76:07:9b:27:56:c3:9f:8a:3d:91:10:f7:30:9d: 9a:bf:60:fa:35:35:37:fc:51:00:71:c4:ce:f5:be:0b:65:33: 8f:ea:3d:83:1c:64:d3:d6:35:39:de:4d:f8:a4:39:f8:1f:35: 28:fc:fb:ab:a6:13:e8:88:6f:1f:93:f5:cf:dc:ce:66:b2:2f: dc:cc:3b:af:ce:f1:28:ba:c7:e5:7f:26:f0:3b:04:80:df:e9: 9b:11:ca:32:94:a9:86:b8:23:d1:fe:01:04:de:1e:c8:14:12: 3e:10:bd:3a:bd:85:d2:dc:20:5e:7d:a7:8e:e9:a8:b6:ca:d8: 1c:2e:bf:2c:f0:0e:7a:1d:65:94:6d:7d:89:47:f4:78:37:35: e4:ff:a7:99:06:33:d8:7a:ce:72:f2:a6:c7:fc:26:30:30:25: c8:5b:c9:14:53:06:15:df:d6:45:34:49:b7:61:62:e3:ed:94: 43:b7:1a:fb:64:15:99:8b:b1:f7:ec:ea:30:db:85:f4:b9:3d: 07:77:17:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98FY4qkIvXp1kEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTMxNmM3MGYtZmE5Yi00ZWY3LTliMjktNGZmNDFkZDUxMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMByqIKNcHTVWkC/3K56K5Fa1QhlDPpcJJ2/ aptLDyoYMIn6ZQAY3T851uJsJGTaryTmQOY8cM3sXr4tv2fMgZNp6X2oYWiDxUgT NDs632/9oZc5V/vsWoIb62KCxpbWgp+/lW2qb3nGaYyOnyec7yd1S65QfcND+jyd 8ZmtSDdeFwwBYmu02fjimGbcySIS1893eJmprSMS/Vcp8VH4qpzshwiQ1GwDtk/V AxpaF5h8yu2CHMI7yhVNcv5r34hodofWMyNPtzdV8JedRYyZQf18OJ4y/CcRURE/ FB9EMS8VKqtp94H2sNQyP1RzHX8pVY7fnHnlLqP2wMCfA627PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYo88IlXNdl0/klGJBAPwvjNeibMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvZDZiNTBkYTEtZjAwYy0z OGUxLTkyYzQtYjk3YTRhODBmMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0QvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0YvO8LTGXWvf0q2pFgg9I4Dve+674SKCUdCqoNysOpYB+3hxTDDrNb EyqsR9yFRcuYx3b63j1SCO12B5snVsOfij2REPcwnZq/YPo1NTf8UQBxxM71vgtl M4/qPYMcZNPWNTneTfikOfgfNSj8+6umE+iIbx+T9c/czmayL9zMO6/O8Si6x+V/ JvA7BIDf6ZsRyjKUqYa4I9H+AQTeHsgUEj4QvTq9hdLcIF59p47pqLbK2Bwuvyzw DnodZZRtfYlH9Hg3NeT/p5kGM9h6znLypsf8JjAwJchbyRRTBhXf1kU0SbdhYuPt lEO3GvtkFZmLsffs6jDbhfS5PQd3F8k= -----END CERTIFICATE-----Generated at Fri Sep 25 06:37:51 2026 by rpki-client