$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa File: 10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa (raw, json) Hash identifier: Jbz+VQnYDZeoYJ4Pvdcsv24SN2m3qhNUER8fhDfSWxs= Subject key identifier: 8E:01:F8:2A:0A:11:7D:03:1D:A4:3B:60:B7:FB:19:30:64:FD:B5:54 Certificate issuer: /CN=8c902da3-488d-44d9-9833-f1295a9fd887 Certificate serial: 010D0C9F4328584F4973D9CC48646E5ED6F80E00 Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3925 IP address blocks: 209.165.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d9:cc:48:64:6e:5e:d6:f8:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cf314ff5-cb84-465c-87e0-b48080969dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:76:92:3d:40:51:4a:e0:2f:5d:4a:80:39:27: 70:d9:da:e5:7a:8f:ea:0e:d4:0e:86:d3:eb:98:63: e4:f3:23:25:1d:48:63:62:b5:c3:d6:fc:22:d3:9e: 1f:fa:8d:9b:d0:4e:1b:e0:4a:d9:10:50:89:bc:57: cd:23:9f:2e:ac:0e:43:1c:a0:12:8d:9d:a7:4b:2d: 5a:01:7a:f2:98:c5:a4:85:26:b2:2d:4b:b6:b1:0f: 7a:a3:ef:49:ea:45:1c:3b:a6:97:fc:d4:6b:ec:5e: 37:bb:d4:81:fb:90:62:56:91:be:2e:2f:1f:a8:9d: 5f:dd:71:f7:76:d8:7e:1e:77:05:4b:a1:c2:98:40: ba:bb:f6:18:3f:6c:8e:a6:92:a6:15:25:6b:01:de: 80:f9:ee:49:c2:a4:5f:4b:c1:40:6b:ac:d4:24:da: e2:c5:d6:2c:1b:74:da:d5:59:f8:1a:54:16:d9:6c: 56:f7:d4:96:86:73:1a:eb:76:5f:04:a5:1a:cb:af: 85:dc:bf:08:98:58:4a:ba:4f:0a:94:52:d0:de:a2: 34:9d:b5:c3:3b:59:34:5e:a8:b7:52:72:64:af:f0: cd:a2:8f:c5:c1:20:1f:21:62:52:da:b1:a7:87:c7: 6d:df:e8:10:6e:5e:bd:98:2b:f5:25:2f:f4:d0:94: f3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:01:F8:2A:0A:11:7D:03:1D:A4:3B:60:B7:FB:19:30:64:FD:B5:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl X509v3 Authority Key Identifier: keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer sbgp-ipAddrBlock: critical IPv4: 209.165.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:86:1f:90:b7:aa:e0:0b:83:5b:5a:3b:15:85:ae:c8:d4:d9: c8:fc:2a:6e:8d:70:c3:19:de:b3:b8:95:80:53:b2:83:11:d0: ac:26:97:59:85:f4:84:1d:6a:e5:e4:b4:dd:61:c1:34:2a:60: f3:2c:f5:ac:ce:f0:3c:20:47:42:65:f5:0f:06:7a:4d:ea:5c: 68:ed:a5:46:84:29:e4:bd:68:ea:8a:b3:f3:66:64:0d:61:bc: 9a:a9:7c:71:8c:8a:d7:17:72:81:fb:15:d0:9d:be:ec:ce:fd: 0d:14:2e:7a:af:a0:15:54:ad:f9:74:a9:3b:8f:e6:4f:7d:26: 48:8c:60:88:2e:87:6d:65:b8:f5:32:81:fd:27:8b:31:e6:38: 95:ab:78:43:c6:88:8f:1f:0b:71:6a:da:b2:31:f7:4c:e2:99: 6b:c0:a5:12:2e:fc:53:a8:e8:bf:56:3e:f1:88:a6:ee:db:a2: ab:a9:8a:5c:ca:dd:7c:fc:d1:6a:a0:19:1c:80:91:3f:e0:c5: 14:ee:f0:7d:be:3a:05:a9:f2:41:f4:c2:19:9b:b8:cf:a8:83: dc:0e:98:d6:dc:13:54:b4:eb:a6:ae:29:79:19:e5:cb:9e:08: 29:dc:f8:22:96:34:80:90:4c:04:b8:53:45:e3:9c:a3:c8:1f: d6:0f:8c:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9nMSGRuXtb4DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5MDJkYTMtNDg4ZC00NGQ5LTk4MzMtZjEyOTVhOWZk ODg3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2YzMTRmZjUtY2I4NC00NjVjLTg3ZTAtYjQ4MDgwOTY5ZGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3aSPUBRSuAvXUqAOSdw2drleo/qDtQOhtPr mGPk8yMlHUhjYrXD1vwi054f+o2b0E4b4ErZEFCJvFfNI58urA5DHKASjZ2nSy1a AXrymMWkhSayLUu2sQ96o+9J6kUcO6aX/NRr7F43u9SB+5BiVpG+Li8fqJ1f3XH3 dth+HncFS6HCmEC6u/YYP2yOppKmFSVrAd6A+e5JwqRfS8FAa6zUJNrixdYsG3Ta 1Vn4GlQW2WxW99SWhnMa63ZfBKUay6+F3L8ImFhKuk8KlFLQ3qI0nbXDO1k0Xqi3 UnJkr/DNoo/FwSAfIWJS2rGnh8dt3+gQbl69mCv1JS/00JTz9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4B+CoKEX0DHaQ7YLf7GTBk/bVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84Yzkw MmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5NWE5ZmQ4ODcvMTBhNTk4NTYtZjcxYS0z NWZhLWFhMGQtM2MyOTNmYWE4Y2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGM5MDJkYTMtNDg4ZC00NGQ5LTk4 MzMtZjEyOTVhOWZkODg3LzhjOTAyZGEzLTQ4OGQtNDRkOS05ODMzLWYxMjk1YTlm ZDg4Ny5jcmwwHwYDVR0jBBgwFoAUGj+9SLgY1i6JF4HSClS12Uz2NvIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84YzkwMmRhMy00ODhkLTQ0ZDktOTgzMy1mMTI5 NWE5ZmQ4ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0aXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSGH5C3quALg1taOxWFrsjU2cj8Km6NcMMZ3rO4lYBTsoMR0Kwml1mF 9IQdauXktN1hwTQqYPMs9azO8DwgR0Jl9Q8Gek3qXGjtpUaEKeS9aOqKs/NmZA1h vJqpfHGMitcXcoH7FdCdvuzO/Q0ULnqvoBVUrfl0qTuP5k99JkiMYIguh21luPUy gf0nizHmOJWreEPGiI8fC3Fq2rIx90zimWvApRIu/FOo6L9WPvGIpu7boqupilzK 3Xz80WqgGRyAkT/gxRTu8H2+OgWp8kH0whmbuM+og9wOmNbcE1S066auKXkZ5cue CCnc+CKWNICQTAS4U0XjnKPIH9YPjLk= -----END CERTIFICATE-----Generated at Sun Oct 11 20:30:03 2026 by rpki-client