$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6/ff09405a-6ca3-3b54-9b61-e9a7ea1636cb.roa File: ff09405a-6ca3-3b54-9b61-e9a7ea1636cb.roa (raw, json) Hash identifier: tQ5gMX8Elk/WBzMQLLRi8bPTyDKJPmDstUoAMBGtmzk= Subject key identifier: 36:B2:5E:00:2A:33:50:7A:73:47:88:95:94:11:30:7F:3A:6A:2E:E1 Certificate issuer: /CN=d7c772f5-c64d-4a1c-92fd-29cec8597ea6 Certificate serial: 010D0C9F4328584F49748D269B2F4FE47F76AC00 Authority key identifier: 71:B5:D7:F3:75:E1:6C:A8:1A:0B:99:37:A2:CE:46:8E:F5:74:34:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6/ff09405a-6ca3-3b54-9b61-e9a7ea1636cb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398885 IP address blocks: 209.240.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6/d7c772f5-c64d-4a1c-92fd-29cec8597ea6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6/d7c772f5-c64d-4a1c-92fd-29cec8597ea6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:8d:26:9b:2f:4f:e4:7f:76:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c772f5-c64d-4a1c-92fd-29cec8597ea6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b560177e-d943-4ae0-878d-47a2fa653f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3e:2a:f1:85:42:9b:e6:8e:6b:fd:5d:37:72: 29:45:cc:fe:4f:ce:f3:74:60:4a:9e:16:8c:4b:3e: 6c:84:b8:a1:a0:c9:17:0f:67:48:92:75:f8:50:5e: 86:7c:93:18:18:4b:a1:c9:1b:3d:89:45:83:59:6d: cd:53:45:2c:2f:87:58:cc:88:fc:0f:7c:0d:57:e3: 6d:1c:be:ad:89:1a:40:f8:40:a6:a9:63:4d:c4:20: a1:34:d0:c8:4b:bf:90:2f:21:cd:19:84:ea:e2:9a: a1:20:89:25:9f:44:6a:b0:cf:08:31:fc:c3:71:22: 3a:f3:52:ea:ed:58:4a:cd:c4:f1:d0:fc:85:db:c6: 5d:29:ea:7f:e3:ba:c0:ee:ad:96:e5:72:62:a3:49: 61:ba:e4:c7:7f:02:55:6a:74:f8:45:dd:0e:89:b2: 85:89:00:e8:0c:74:23:c7:6c:2d:ba:65:27:f4:f8: f2:37:5e:9c:f5:ae:78:30:88:c8:e6:7a:76:64:e2: e8:f8:e0:33:f4:6c:48:1d:e7:77:f4:95:73:f5:b6: e8:64:93:7f:88:29:14:3d:1c:a4:fb:fc:61:f8:e1: 76:ac:9f:18:bb:19:48:a5:8b:71:93:cf:97:cf:99: f8:57:cc:92:10:9a:0f:c2:28:65:40:c2:81:51:d5: 4a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B2:5E:00:2A:33:50:7A:73:47:88:95:94:11:30:7F:3A:6A:2E:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6/ff09405a-6ca3-3b54-9b61-e9a7ea1636cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6/d7c772f5-c64d-4a1c-92fd-29cec8597ea6.crl X509v3 Authority Key Identifier: keyid:71:B5:D7:F3:75:E1:6C:A8:1A:0B:99:37:A2:CE:46:8E:F5:74:34:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7c772f5-c64d-4a1c-92fd-29cec8597ea6.cer sbgp-ipAddrBlock: critical IPv4: 209.240.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:4d:f2:38:7c:1d:b2:c4:f3:3c:4b:48:0a:19:6f:c3:5b:4b: 07:6e:7a:f3:d5:1d:3d:db:cb:fd:46:e8:cd:68:e5:1d:f7:a7: cc:1c:c2:d4:f1:3a:8a:a1:c6:fa:b8:bf:9d:19:24:8d:d8:d6: 71:95:6e:00:b1:de:5a:61:94:cc:a9:28:aa:c3:f1:15:f9:9f: 07:a7:ac:bb:ec:22:b3:9c:a0:c6:ec:28:7d:34:a6:7e:5c:1b: f2:62:8e:4c:82:9f:3d:ad:a0:5d:f9:71:c4:01:9b:d0:89:a5: c1:c7:9a:2a:b3:d3:15:ea:87:5f:1b:4d:63:b1:56:6d:bf:d4: d0:a9:e3:4c:24:06:d0:a9:2e:f0:05:a4:ef:b8:45:bb:20:36: 56:0e:e7:f9:58:e0:35:d9:6e:91:a7:2a:ed:26:2e:d3:8a:02: ef:de:94:d7:19:0f:2b:51:53:44:53:5e:a6:fc:72:7a:50:b8: 50:09:c2:6a:f1:3a:a9:6a:d1:de:ea:c0:92:4a:70:e1:c9:d5: c8:00:2b:9e:8c:53:66:2f:2c:74:64:fc:d8:79:a1:2d:f4:6c: 6a:4f:d7:b3:06:e4:96:4a:67:71:b4:8f:dd:53:48:d6:73:39: 87:05:3f:dd:2e:6d:c4:e4:94:87:07:22:f6:25:89:a0:48:d6: 6a:04:09:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdI0mmy9P5H92rAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNzcyZjUtYzY0ZC00YTFjLTkyZmQtMjljZWM4NTk3 ZWE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjU2MDE3N2UtZDk0My00YWUwLTg3OGQtNDdhMmZhNjUzZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD4q8YVCm+aOa/1dN3IpRcz+T87zdGBKnhaM Sz5shLihoMkXD2dIknX4UF6GfJMYGEuhyRs9iUWDWW3NU0UsL4dYzIj8D3wNV+Nt HL6tiRpA+ECmqWNNxCChNNDIS7+QLyHNGYTq4pqhIIkln0RqsM8IMfzDcSI681Lq 7VhKzcTx0PyF28ZdKep/47rA7q2W5XJio0lhuuTHfwJVanT4Rd0OibKFiQDoDHQj x2wtumUn9PjyN16c9a54MIjI5np2ZOLo+OAz9GxIHed39JVz9bboZJN/iCkUPRyk +/xh+OF2rJ8YuxlIpYtxk8+Xz5n4V8ySEJoPwihlQMKBUdVKvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDayXgAqM1B6c0eIlZQRMH86ai7hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kN2M3 NzJmNS1jNjRkLTRhMWMtOTJmZC0yOWNlYzg1OTdlYTYvZmYwOTQwNWEtNmNhMy0z YjU0LTliNjEtZTlhN2VhMTYzNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDdjNzcyZjUtYzY0ZC00YTFjLTky ZmQtMjljZWM4NTk3ZWE2L2Q3Yzc3MmY1LWM2NGQtNGExYy05MmZkLTI5Y2VjODU5 N2VhNi5jcmwwHwYDVR0jBBgwFoAUcbXX83XhbKgaC5k3os5GjvV0NDEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kN2M3NzJmNS1jNjRkLTRhMWMtOTJmZC0yOWNl Yzg1OTdlYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVN8jh8HbLE8zxLSAoZb8NbSwduevPVHT3by/1G6M1o5R33p8wcwtTx Ooqhxvq4v50ZJI3Y1nGVbgCx3lphlMypKKrD8RX5nwenrLvsIrOcoMbsKH00pn5c G/JijkyCnz2toF35ccQBm9CJpcHHmiqz0xXqh18bTWOxVm2/1NCp40wkBtCpLvAF pO+4RbsgNlYO5/lY4DXZbpGnKu0mLtOKAu/elNcZDytRU0RTXqb8cnpQuFAJwmrx Oqlq0d7qwJJKcOHJ1cgAK56MU2YvLHRk/Nh5oS30bGpP17MG5JZKZ3G0j91TSNZz OYcFP90ubcTklIcHIvYliaBI1moECWc= -----END CERTIFICATE-----Generated at Sat Sep 26 12:50:58 2026 by rpki-client