$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/663dfbd5-7f2f-3791-bba5-4b83f30c62e1.roa File: 663dfbd5-7f2f-3791-bba5-4b83f30c62e1.roa (raw, json) Hash identifier: bLrAkXfkAPFS57zO8bcJ59oCQDTzn3jcP/nyfjyKybA= Subject key identifier: F5:9B:C5:EC:99:DB:7F:6C:95:1D:D8:18:FE:9F:98:ED:BD:E9:5A:38 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584F331D234043F72AC1FDB00480 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/663dfbd5-7f2f-3791-bba5-4b83f30c62e1.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 393249 IP address blocks: 206.87.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:23:40:43:f7:2a:c1:fd:b0:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=7e58d635-342e-4067-8220-cfc8eef3265e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:77:3d:83:3b:32:39:4e:78:ad:6f:90:2b: a3:50:67:38:5b:e7:5d:a8:a7:0b:f9:54:70:b6:71: 16:0e:84:64:56:58:6a:43:65:52:9e:97:46:a0:f0: 99:4e:81:39:07:43:29:c1:95:91:2b:ff:b0:b0:7c: 20:da:4b:3d:f5:d5:d7:cd:35:08:39:05:02:3e:dd: e9:46:73:bd:c7:66:ce:39:a2:15:a6:b1:8a:49:9a: 98:eb:02:26:a0:03:fa:7a:80:14:87:0c:c8:38:1f: 2f:ab:24:25:cc:58:f0:54:d6:86:3a:3d:09:c1:92: 2c:54:0e:b6:71:b1:f6:e5:51:05:85:dc:c0:92:83: 16:94:36:73:8e:10:40:5d:94:3d:6e:77:1b:fd:06: bf:fe:af:9e:2d:57:6c:dd:24:c5:11:b6:48:ed:a4: a9:95:ef:20:a1:83:53:44:04:1f:e7:97:ce:ca:ed: 1c:3c:24:c1:a5:ff:92:cd:2d:63:db:21:32:b7:c1: 33:ab:cd:0c:30:f7:c1:31:5c:2f:eb:82:67:73:9a: 5f:04:2b:7c:27:b6:4f:9c:84:01:4a:51:e5:c4:1d: e3:d1:13:f0:5f:c8:07:76:e5:ba:54:00:29:1a:b2: a9:62:49:ab:cf:cd:8c:11:c8:82:23:f8:da:d7:15: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9B:C5:EC:99:DB:7F:6C:95:1D:D8:18:FE:9F:98:ED:BD:E9:5A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/663dfbd5-7f2f-3791-bba5-4b83f30c62e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 206.87.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:14:21:7f:20:21:d0:10:a5:74:dd:80:fe:7f:be:98:96:c5: d3:74:19:e6:a8:f5:0f:66:da:a1:4a:c0:aa:f2:40:49:3e:d0: 5c:6d:37:9a:c3:86:f7:0e:5f:83:6b:37:08:17:70:73:c9:6e: 32:6f:f5:47:7e:1b:72:26:02:07:40:7f:92:cf:f0:4c:e0:82: e3:57:35:72:6c:de:3a:e5:2b:a6:f0:ce:10:6e:05:35:0c:44: 76:a2:b3:6c:43:21:09:6f:49:b8:a2:ed:31:c9:1c:f6:9c:4a: e9:c1:74:cd:e9:d8:fe:5d:45:fe:77:00:08:9e:7b:2b:99:54: b0:d4:97:ea:2a:90:37:6d:f7:87:17:13:e3:01:8e:90:66:57: 7e:e8:09:6c:d7:09:ba:43:78:ed:3f:d4:d2:a2:d5:4e:25:f9: 09:90:ae:6d:56:f6:3e:30:dc:cb:df:88:f9:2a:65:62:a2:93: 1f:a7:15:5b:0b:74:24:f5:c5:5a:70:63:8a:9a:55:26:dd:fd: 8c:fa:63:e6:fa:1d:38:78:65:ef:74:89:09:0c:23:a5:d1:86: 75:71:92:e0:30:c7:de:cf:e8:e4:cb:00:79:88:29:62:6c:ce: c8:b5:7a:37:88:c4:50:da:ce:de:b3:be:81:cf:1d:10:52:3d: 23:19:35:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSNAQ/cqwf2wBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk N2U1OGQ2MzUtMzQyZS00MDY3LTgyMjAtY2ZjOGVlZjMyNjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VR3PYM7MjlOeK1vkCujUGc4W+ddqKcL+VRw tnEWDoRkVlhqQ2VSnpdGoPCZToE5B0MpwZWRK/+wsHwg2ks99dXXzTUIOQUCPt3p RnO9x2bOOaIVprGKSZqY6wImoAP6eoAUhwzIOB8vqyQlzFjwVNaGOj0JwZIsVA62 cbH25VEFhdzAkoMWlDZzjhBAXZQ9bncb/Qa//q+eLVds3STFEbZI7aSple8goYNT RAQf55fOyu0cPCTBpf+SzS1j2yEyt8Ezq80MMPfBMVwv64Jnc5pfBCt8J7ZPnIQB SlHlxB3j0RPwX8gHduW6VAApGrKpYkmrz82MEciCI/ja1xXSOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPWbxeyZ239slR3YGP6fmO296Vo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNjYzZGZiZDUtN2YyZi0z NzkxLWJiYTUtNGI4M2YzMGM2MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzlfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgUIX8gIdAQpXTdgP5/vpiWxdN0Geao9Q9m2qFKwKryQEk+0FxtN5rD hvcOX4NrNwgXcHPJbjJv9Ud+G3ImAgdAf5LP8EzgguNXNXJs3jrlK6bwzhBuBTUM RHais2xDIQlvSbii7THJHPacSunBdM3p2P5dRf53AAieeyuZVLDUl+oqkDdt94cX E+MBjpBmV37oCWzXCbpDeO0/1NKi1U4l+QmQrm1W9j4w3MvfiPkqZWKikx+nFVsL dCT1xVpwY4qaVSbd/Yz6Y+b6HTh4Ze90iQkMI6XRhnVxkuAwx97P6OTLAHmIKWJs zsi1ejeIxFDazt6zvoHPHRBSPSMZNYI= -----END CERTIFICATE-----Generated at Tue Sep 29 00:59:38 2026 by rpki-client