$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/42f1c7ed-fb0b-38af-9052-f5d3b1a47a61.roa File: 42f1c7ed-fb0b-38af-9052-f5d3b1a47a61.roa (raw, json) Hash identifier: 4xcyfsXI1Q741yZzV3jsI5g6e4glMs2P//Rns/Qsx/w= Subject key identifier: D9:9E:4D:30:CE:4D:80:80:11:53:70:E1:B4:92:59:87:7D:49:8E:70 Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce Certificate serial: 010D0C9F4328584F3E47DF37BA0E603FA31E5A20 Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/42f1c7ed-fb0b-38af-9052-f5d3b1a47a61.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 19901 IP address blocks: 9.245.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:df:37:ba:0e:60:3f:a3:1e:5a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=a70148a8-41af-4acd-99fb-4227b9a0b986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:a5:9f:f9:85:7b:c8:be:88:32:e7:d0:ba: 53:41:8d:6a:db:42:a2:e6:c1:a9:db:1b:e2:e7:68: 42:95:b4:b2:22:e8:95:9d:a1:0b:88:3a:07:9b:91: 65:de:66:8c:0a:bc:bf:70:7b:2e:d4:94:74:e9:82: cc:c8:62:46:d6:2e:f9:a8:ed:27:68:6e:92:75:63: bb:90:eb:39:14:0b:de:8e:87:bf:06:51:7e:b0:e3: 92:b7:9d:1f:89:cb:89:3a:c0:8f:00:43:37:c3:f5: 12:a6:42:16:90:7a:38:d9:3c:fe:3f:ba:91:5c:f4: dd:c6:99:42:02:56:7c:5b:4d:e4:9b:e4:ab:f2:a3: 18:59:77:66:bf:01:a7:b6:34:10:51:aa:2a:30:37: 10:71:94:e2:72:c1:db:d5:c9:e8:09:d2:aa:33:d5: 58:3b:1b:1b:25:a5:52:19:c4:79:8a:fa:67:3d:52: 79:b6:31:4b:fe:71:67:91:63:9a:61:8c:4b:1e:f3: 2d:e3:7c:22:47:86:75:66:a9:83:2d:bb:82:34:d1: 93:9b:34:ed:7c:ce:98:71:e7:2d:d2:0b:d0:81:7f: f5:83:49:f5:b5:2c:83:3d:69:ee:8e:86:09:73:c8: 11:17:5b:cf:36:23:ad:77:a7:0a:78:06:3a:bf:10: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9E:4D:30:CE:4D:80:80:11:53:70:E1:B4:92:59:87:7D:49:8E:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/42f1c7ed-fb0b-38af-9052-f5d3b1a47a61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl X509v3 Authority Key Identifier: keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer sbgp-ipAddrBlock: critical IPv4: 9.245.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:90:36:3b:19:99:36:74:21:df:56:c5:9c:83:fe:b0:70:2e: 9c:5b:6e:db:46:4c:5e:6c:c1:61:d0:35:3e:38:45:99:d7:70: 84:54:e8:3a:c9:54:61:70:b0:20:8a:9b:83:9c:b8:94:16:b5: f0:a2:cc:c4:20:41:20:24:fc:a4:6b:82:c9:40:4d:ca:4a:06: b2:4f:dc:4e:f0:89:80:db:91:df:d4:35:1e:d8:54:22:ed:63: 1f:db:00:25:64:74:cd:69:68:02:2c:88:82:4d:63:31:2b:f7: 51:99:3e:ed:55:20:11:95:75:38:f2:60:22:ce:11:5d:72:da: 02:ee:8f:74:d6:29:70:19:18:75:68:6f:da:22:6d:58:c2:3f: f2:9a:46:2f:ca:60:32:86:8a:c1:a0:8f:20:2c:89:fe:96:57: 8d:21:27:5b:1b:49:95:48:a5:af:38:c1:51:d9:ab:65:99:b0: 04:7a:da:47:00:c5:f0:15:99:1c:e7:ef:30:26:b9:f7:c3:fb: 86:5a:81:69:e9:a1:24:68:ca:5f:47:56:72:e3:b9:a8:99:21: fe:2b:fb:cf:fb:05:94:3e:e0:b5:79:fc:ba:f3:25:8c:06:25: 59:4c:57:17:fc:2b:db:89:87:e7:aa:fb:fc:dd:c1:5d:1d:6a: b0:b4:09:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R983ug5gP6MeWiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk YmNlMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk YTcwMTQ4YTgtNDFhZi00YWNkLTk5ZmItNDIyN2I5YTBiOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1Oln/mFe8i+iDLn0LpTQY1q20Ki5sGp2xvi 52hClbSyIuiVnaELiDoHm5Fl3maMCry/cHsu1JR06YLMyGJG1i75qO0naG6SdWO7 kOs5FAvejoe/BlF+sOOSt50ficuJOsCPAEM3w/USpkIWkHo42Tz+P7qRXPTdxplC AlZ8W03km+Sr8qMYWXdmvwGntjQQUaoqMDcQcZTicsHb1cnoCdKqM9VYOxsbJaVS GcR5ivpnPVJ5tjFL/nFnkWOaYYxLHvMt43wiR4Z1ZqmDLbuCNNGTmzTtfM6Ycect 0gvQgX/1g0n1tSyDPWnujoYJc8gRF1vPNiOtd6cKeAY6vxCoqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmeTTDOTYCAEVNw4bSSWYd9SY5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0 MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvNDJmMWM3ZWQtZmIwYi0z OGFmLTkwNTItZjVkM2IxYTQ3YTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3 MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3 ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGCfVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuQNjsZmTZ0Id9WxZyD/rBwLpxbbttGTF5swWHQNT44RZnXcIRU6DrJ VGFwsCCKm4OcuJQWtfCizMQgQSAk/KRrgslATcpKBrJP3E7wiYDbkd/UNR7YVCLt Yx/bACVkdM1paAIsiIJNYzEr91GZPu1VIBGVdTjyYCLOEV1y2gLuj3TWKXAZGHVo b9oibVjCP/KaRi/KYDKGisGgjyAsif6WV40hJ1sbSZVIpa84wVHZq2WZsAR62kcA xfAVmRzn7zAmuffD+4ZagWnpoSRoyl9HVnLjuaiZIf4r+8/7BZQ+4LV5/LrzJYwG JVlMVxf8K9uJh+eq+/zdwV0darC0CTQ= -----END CERTIFICATE-----Generated at Tue Sep 22 21:26:19 2026 by rpki-client