$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3c9a404-9243-33ca-8441-7d34817db525.roa File: e3c9a404-9243-33ca-8441-7d34817db525.roa (raw, json) Hash identifier: KwwxxVBOY3pLf8ICGEcrZlIR3OYGJtKnrlxBVClh4yc= Subject key identifier: BF:87:B5:90:73:CD:2F:EB:99:A4:D0:36:78:BC:3B:A0:C2:E4:F4:C6 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584F4C3D63069E6EC788A64A1B00 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3c9a404-9243-33ca-8441-7d34817db525.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 29802 IP address blocks: 209.236.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:63:06:9e:6e:c7:88:a6:4a:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=94500311-0685-4913-95b1-15c2abfac956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:41:97:ac:14:33:a5:db:fa:e7:9c:0e:be:67: 96:0c:59:09:f3:dd:8d:7c:12:47:a7:f5:3a:a1:ce: 15:b4:1c:50:8b:c0:f2:d2:10:75:df:ee:cb:bf:0a: 1a:41:97:e7:0a:e1:e1:1f:cb:37:43:40:38:18:80: 68:24:0e:c5:f7:49:15:1d:51:b4:8e:d1:45:0c:d5: 5b:86:88:e7:97:c5:44:f5:be:01:53:61:f1:04:c9: 84:70:16:7c:d2:35:b7:38:b9:ab:65:24:ad:c8:84: 23:cf:e2:1b:f3:d1:0f:a6:15:4a:bb:d6:c1:00:ec: 09:c2:ed:db:09:1c:e0:ff:14:1a:0d:e6:51:2d:6b: 89:89:47:19:a7:ff:2b:73:63:8c:ad:78:53:9f:01: bd:b4:72:07:6d:10:eb:d9:03:5f:b1:70:fb:a0:53: c8:5e:91:f7:d4:d0:fc:5d:d8:74:fa:ed:5b:01:6b: 1e:ba:a6:a4:1d:17:03:bd:22:51:0c:7b:b5:e3:b0: 7b:ab:8b:7f:30:13:db:7b:55:3c:2d:03:01:11:78: 69:90:19:62:47:44:b6:a0:07:ae:7e:0b:7d:45:88: e8:c3:e6:5e:f2:fa:b8:3e:54:6c:3d:61:db:58:d2: 1c:91:59:37:ab:8f:2b:94:e7:6d:7c:a3:d4:8a:ab: 7c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:87:B5:90:73:CD:2F:EB:99:A4:D0:36:78:BC:3B:A0:C2:E4:F4:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3c9a404-9243-33ca-8441-7d34817db525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 209.236.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d2:90:22:a3:b2:40:de:fb:30:fa:d1:bb:c1:d2:a1:4c:c5: a2:b7:85:93:34:18:9e:72:09:5e:47:ef:1f:19:f3:6b:ab:b6: a1:50:e9:b5:7c:67:ea:2f:ff:d6:c4:c5:40:fa:c4:85:b1:5c: 5f:f8:a5:f0:ca:be:8e:e7:f1:c3:de:7d:70:97:a6:2a:00:74: 10:3b:7e:fb:83:05:a9:eb:1b:99:10:f8:b0:34:e0:b0:c2:15: 59:34:6b:3f:77:66:85:4a:83:c0:ba:03:de:58:4e:99:e4:46: a1:84:58:83:1c:e3:aa:9c:e9:c2:84:88:83:06:ee:7e:d8:a1: 94:80:79:c1:92:9a:cc:71:64:1c:70:60:10:25:8a:13:28:71: 9a:a3:3c:98:4a:23:0e:5c:2c:6e:4c:41:e7:19:68:26:09:c9: 12:03:cb:75:02:36:cd:99:38:8d:bc:61:1c:9c:b3:f6:75:8c: f5:64:80:00:9e:62:c1:6c:9c:1e:0d:b4:8b:c8:a7:6e:8e:71: 61:49:64:ed:1a:c0:f2:dd:f0:83:a9:a6:98:7c:9d:44:ef:13: 34:8b:cd:cf:f8:5b:58:8a:bd:34:d4:9e:68:c9:fe:37:bc:71: 56:12:1d:0f:b1:3d:05:75:67:48:9f:e2:d4:c4:63:b6:34:b9: ff:03:e9:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWMGnm7HiKZKGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OTQ1MDAzMTEtMDY4NS00OTEzLTk1YjEtMTVjMmFiZmFjOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykGXrBQzpdv655wOvmeWDFkJ892NfBJHp/U6 oc4VtBxQi8Dy0hB13+7LvwoaQZfnCuHhH8s3Q0A4GIBoJA7F90kVHVG0jtFFDNVb hojnl8VE9b4BU2HxBMmEcBZ80jW3OLmrZSStyIQjz+Ib89EPphVKu9bBAOwJwu3b CRzg/xQaDeZRLWuJiUcZp/8rc2OMrXhTnwG9tHIHbRDr2QNfsXD7oFPIXpH31ND8 Xdh0+u1bAWseuqakHRcDvSJRDHu147B7q4t/MBPbe1U8LQMBEXhpkBliR0S2oAeu fgt9RYjow+Ze8vq4PlRsPWHbWNIckVk3q48rlOdtfKPUiqt81QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+HtZBzzS/rmaTQNni8O6DC5PTGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZTNjOWE0MDQtOTI0My0z M2NhLTg0NDEtN2QzNDgxN2RiNTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrSkCKjskDe+zD60bvB0qFMxaK3hZM0GJ5yCV5H7x8Z82urtqFQ6bV8 Z+ov/9bExUD6xIWxXF/4pfDKvo7n8cPefXCXpioAdBA7fvuDBanrG5kQ+LA04LDC FVk0az93ZoVKg8C6A95YTpnkRqGEWIMc46qc6cKEiIMG7n7YoZSAecGSmsxxZBxw YBAlihMocZqjPJhKIw5cLG5MQecZaCYJyRIDy3UCNs2ZOI28YRycs/Z1jPVkgACe YsFsnB4NtIvIp26OcWFJZO0awPLd8IOppph8nUTvEzSLzc/4W1iKvTTUnmjJ/je8 cVYSHQ+xPQV1Z0if4tTEY7Y0uf8D6ek= -----END CERTIFICATE-----Generated at Sun Sep 27 02:10:29 2026 by rpki-client