$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/e209f09c-e8e1-33b5-a54b-e827603c3f64.roa File: e209f09c-e8e1-33b5-a54b-e827603c3f64.roa (raw, json) Hash identifier: g9aZtb01ZQ1dF3ckUZ6RB8qHl6iXBePaRqgwfNKgJiQ= Subject key identifier: 2E:E0:4C:F0:68:E6:B5:91:70:DA:00:B8:0E:AB:3A:82:A2:6F:58:59 Certificate issuer: /CN=8e34a71f-aa28-4e58-b789-2715811effcc Certificate serial: 010D0C9F4328584F49737B5EE6C3DB3CF4CEE6E0 Authority key identifier: 81:E2:E5:45:2B:2A:E0:16:B1:47:63:52:47:B0:3C:0D:21:7C:31:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/e209f09c-e8e1-33b5-a54b-e827603c3f64.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397696 IP address blocks: 209.99.160.0/24 maxlen: 24 209.99.161.0/24 maxlen: 24 209.99.162.0/24 maxlen: 24 209.99.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:7b:5e:e6:c3:db:3c:f4:ce:e6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e34a71f-aa28-4e58-b789-2715811effcc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a8907660-f619-4275-9d62-9f6c32061b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:db:52:04:e7:6e:72:fc:8e:99:73:4c:51:74: 77:b8:ba:26:43:ac:3e:1a:92:e3:5d:11:39:36:ab: 3e:bc:6e:e8:a5:86:9b:6c:ac:a3:4d:aa:51:69:97: da:e8:dc:b3:3d:1d:82:b6:e2:d2:5a:75:93:ed:65: e0:dd:c7:7e:ed:eb:2e:d5:88:57:5d:b5:03:31:09: d6:6e:da:8a:71:a7:f4:30:2c:44:26:1c:78:2a:10: 74:47:4f:88:d6:8d:e3:c8:e8:27:26:89:58:9e:5d: 49:a9:97:bb:29:67:c9:ca:a2:ce:61:52:43:a4:65: c1:62:44:e3:8f:e9:7b:56:01:cb:bb:15:90:9f:0c: 49:e7:bf:ea:1f:1e:a9:67:68:92:b8:ef:a6:c0:86: 8e:83:ca:b3:d3:8c:76:9e:e3:06:b2:25:d9:b7:79: 21:81:43:93:8c:e1:16:ea:65:96:dd:47:de:fd:ad: f5:88:76:d5:d2:b6:79:50:ff:fa:82:27:41:89:6c: 98:c0:f5:ed:5e:b6:4a:70:9c:4e:43:4b:f8:6d:bf: f8:24:89:36:1a:1d:80:2a:70:88:70:70:6f:e4:bf: 77:27:80:90:be:fa:40:df:45:d5:34:7e:4f:99:67: a5:53:1f:5b:af:de:1b:b6:c9:c3:41:37:83:91:bc: 04:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E0:4C:F0:68:E6:B5:91:70:DA:00:B8:0E:AB:3A:82:A2:6F:58:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/e209f09c-e8e1-33b5-a54b-e827603c3f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.crl X509v3 Authority Key Identifier: keyid:81:E2:E5:45:2B:2A:E0:16:B1:47:63:52:47:B0:3C:0D:21:7C:31:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer sbgp-ipAddrBlock: critical IPv4: 209.99.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:86:fe:bf:30:2d:6e:50:d5:24:2d:4e:44:64:32:97:52:e5: 88:dc:82:b0:ad:0f:a6:1f:05:2d:67:7e:25:46:d2:4f:d7:f4: bf:29:43:03:5f:71:b6:59:e7:1c:4c:4c:81:16:ec:37:2c:4e: 7f:4e:a6:38:0a:5e:70:72:aa:56:d8:56:eb:4a:41:4e:ac:27: 5d:22:f1:33:38:c6:06:78:1a:b3:ad:3c:a7:57:eb:ee:e8:a7: 52:f1:ff:87:cf:86:a7:0f:d9:95:f2:41:07:a2:2c:31:ae:37: d3:bf:f7:f5:2f:45:a2:f5:93:94:a4:25:fa:89:43:c5:4a:c1: d6:73:34:ce:3d:c0:23:3b:d6:53:87:63:a2:1b:d7:37:bc:6c: 87:7b:46:a1:71:8d:ad:fa:24:91:c8:83:62:f2:8f:3f:9f:03: c6:84:9d:d3:42:10:23:54:ad:a7:23:f7:87:fa:ba:62:36:fc: b6:d4:57:8c:5a:34:31:d9:d4:61:3d:d2:9f:a2:d0:7d:04:6a: 40:53:c2:eb:81:14:7d:9e:68:72:4b:fb:aa:23:8c:86:cd:d3: bc:a0:5e:e6:2e:af:8d:5d:7b:75:c5:bc:48:df:f3:63:92:ff: 61:7a:75:c6:ee:84:49:98:20:4d:27:6a:81:d5:7d:40:a8:41: ac:37:7f:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc3te5sPbPPTO5uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUzNGE3MWYtYWEyOC00ZTU4LWI3ODktMjcxNTgxMWVm ZmNjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTg5MDc2NjAtZjYxOS00Mjc1LTlkNjItOWY2YzMyMDYxYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqttSBOducvyOmXNMUXR3uLomQ6w+GpLjXRE5 Nqs+vG7opYabbKyjTapRaZfa6NyzPR2CtuLSWnWT7WXg3cd+7esu1YhXXbUDMQnW btqKcaf0MCxEJhx4KhB0R0+I1o3jyOgnJolYnl1JqZe7KWfJyqLOYVJDpGXBYkTj j+l7VgHLuxWQnwxJ57/qHx6pZ2iSuO+mwIaOg8qz04x2nuMGsiXZt3khgUOTjOEW 6mWW3Ufe/a31iHbV0rZ5UP/6gidBiWyYwPXtXrZKcJxOQ0v4bb/4JIk2Gh2AKnCI cHBv5L93J4CQvvpA30XVNH5PmWelUx9br94btsnDQTeDkbwE4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7gTPBo5rWRcNoAuA6rOoKib1hZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZTM0 YTcxZi1hYTI4LTRlNTgtYjc4OS0yNzE1ODExZWZmY2MvZTIwOWYwOWMtZThlMS0z M2I1LWE1NGItZTgyNzYwM2MzZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGUzNGE3MWYtYWEyOC00ZTU4LWI3 ODktMjcxNTgxMWVmZmNjLzhlMzRhNzFmLWFhMjgtNGU1OC1iNzg5LTI3MTU4MTFl ZmZjYy5jcmwwHwYDVR0jBBgwFoAUgeLlRSsq4BaxR2NSR7A8DSF8MWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZTM0YTcxZi1hYTI4LTRlNTgtYjc4OS0yNzE1 ODExZWZmY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0WOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByG/r8wLW5Q1SQtTkRkMpdS5YjcgrCtD6YfBS1nfiVG0k/X9L8pQwNf cbZZ5xxMTIEW7DcsTn9OpjgKXnByqlbYVutKQU6sJ10i8TM4xgZ4GrOtPKdX6+7o p1Lx/4fPhqcP2ZXyQQeiLDGuN9O/9/UvRaL1k5SkJfqJQ8VKwdZzNM49wCM71lOH Y6Ib1ze8bId7RqFxja36JJHIg2Lyjz+fA8aEndNCECNUracj94f6umI2/LbUV4xa NDHZ1GE90p+i0H0EakBTwuuBFH2eaHJL+6ojjIbN07ygXuYur41de3XFvEjf82OS /2F6dcbuhEmYIE0naoHVfUCoQaw3f4g= -----END CERTIFICATE-----Generated at Fri Sep 25 23:11:09 2026 by rpki-client