$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86437cbb-3eb1-37a0-a260-3a47f6aa6dc1.roa File: 86437cbb-3eb1-37a0-a260-3a47f6aa6dc1.roa (raw, json) Hash identifier: peCPJdDUMrRI/Q/iW9RCM0fUIAUQWFyZyUNWWi1Dy2w= Subject key identifier: D3:90:22:26:10:9F:B4:65:F1:40:28:75:84:A2:60:54:7A:07:33:A7 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F498A805E112A0E1A94411A80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86437cbb-3eb1-37a0-a260-3a47f6aa6dc1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 274110 IP address blocks: 209.14.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:80:5e:11:2a:0e:1a:94:41:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1fd2da9c-b7ff-4912-a6bb-9ecfdc3f3c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:61:ba:8a:14:16:4b:eb:1c:90:b6:f8:9b:c8: cf:7a:30:35:cf:86:93:09:75:98:e3:d1:43:62:dd: 81:f6:1a:8f:5d:1d:8e:b0:d0:84:cb:11:11:09:b8: 1c:db:07:af:35:99:f8:c5:e5:8c:d7:54:c6:1d:bc: 4a:08:fb:0d:ae:6e:65:7a:13:74:05:20:8d:60:ae: ea:af:c0:38:c0:9b:19:df:ad:d6:88:14:81:23:75: 97:2f:ae:2f:f2:fd:80:53:83:66:01:44:73:61:b5: 8f:af:a3:70:85:8c:77:3d:63:d2:ab:e6:bf:ba:fc: 76:b8:57:ed:0e:db:61:b0:94:53:eb:b5:43:07:e4: 7a:67:ac:a7:6b:51:b7:06:4d:d5:03:56:49:72:40: 67:8f:1e:82:fe:fc:6e:c6:c7:28:71:61:99:fa:99: 1d:39:08:37:2e:00:a0:f4:6b:f3:04:3d:46:b0:99: 26:35:c0:ef:92:da:e3:e8:bd:96:49:9f:eb:00:3b: 71:1b:27:6b:ca:c2:30:6b:0c:43:52:e2:dc:41:93: 80:92:0f:f6:3b:3e:de:9a:87:d9:5a:21:3b:55:4f: 47:85:92:8e:a8:bc:81:33:6d:6a:cd:7f:ce:ba:c2: 9a:57:48:39:b6:e2:93:6e:b7:96:bc:30:d5:20:99: 8c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:90:22:26:10:9F:B4:65:F1:40:28:75:84:A2:60:54:7A:07:33:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/86437cbb-3eb1-37a0-a260-3a47f6aa6dc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 209.14.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:4d:3b:6f:d7:2e:db:59:b4:2c:ae:8e:76:3e:c5:b4:53:31: 03:26:32:c9:e4:a5:23:6c:ee:b9:24:71:69:aa:b0:3e:ac:d9: d8:ab:bc:71:aa:bb:82:66:1f:2c:82:23:9f:df:5e:b0:2f:6c: 23:70:77:9d:2f:c8:b4:2a:14:01:9b:44:66:de:b5:bc:4b:25: f5:ec:f6:a0:63:f1:b0:f6:cc:20:18:06:a3:83:fd:c9:ae:80: 74:0d:03:87:d4:8d:20:3b:32:99:d2:b2:f5:6b:6b:45:e3:03: 6e:ad:3d:cc:93:22:fe:97:94:71:d5:11:84:36:8c:34:49:be: 9a:c3:e6:f5:17:e6:f4:12:98:81:15:57:d7:28:d5:03:e5:35: 99:b0:4b:b5:65:b5:ed:1d:d3:ac:df:5b:cc:07:92:ef:47:06: d3:94:08:40:a9:5e:c9:4b:3b:dc:a7:73:e9:01:b6:d4:1a:da: 86:55:6f:24:48:86:a4:be:db:ef:df:5a:2f:07:5d:a1:c2:cd: b9:8f:c5:5b:89:0f:a9:b7:93:41:6b:a4:35:83:a2:7c:38:0d: 7c:ac:c9:43:be:6b:d5:8e:a8:5f:f6:2f:17:e2:9f:fb:97:fb: 96:a6:7a:f0:8f:a6:df:91:da:7f:2e:06:46:e9:ff:29:a9:5d: 19:d1:1d:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JioBeESoOGpRBGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWZkMmRhOWMtYjdmZi00OTEyLWE2YmItOWVjZmRjM2YzYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmG6ihQWS+sckLb4m8jPejA1z4aTCXWY49FD Yt2B9hqPXR2OsNCEyxERCbgc2wevNZn4xeWM11TGHbxKCPsNrm5lehN0BSCNYK7q r8A4wJsZ363WiBSBI3WXL64v8v2AU4NmAURzYbWPr6NwhYx3PWPSq+a/uvx2uFft DtthsJRT67VDB+R6Z6yna1G3Bk3VA1ZJckBnjx6C/vxuxscocWGZ+pkdOQg3LgCg 9GvzBD1GsJkmNcDvktrj6L2WSZ/rADtxGydrysIwawxDUuLcQZOAkg/2Oz7emofZ WiE7VU9HhZKOqLyBM21qzX/OusKaV0g5tuKTbreWvDDVIJmMbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOQIiYQn7Rl8UAodYSiYFR6BzOnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvODY0MzdjYmItM2ViMS0z N2EwLWEyNjAtM2E0N2Y2YWE2ZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Q5mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRNO2/XLttZtCyujnY+xbRTMQMmMsnkpSNs7rkkcWmqsD6s2dirvHGq u4JmHyyCI5/fXrAvbCNwd50vyLQqFAGbRGbetbxLJfXs9qBj8bD2zCAYBqOD/cmu gHQNA4fUjSA7MpnSsvVra0XjA26tPcyTIv6XlHHVEYQ2jDRJvprD5vUX5vQSmIEV V9co1QPlNZmwS7Vlte0d06zfW8wHku9HBtOUCECpXslLO9ync+kBttQa2oZVbyRI hqS+2+/fWi8HXaHCzbmPxVuJD6m3k0FrpDWDonw4DXysyUO+a9WOqF/2Lxfin/uX +5amevCPpt+R2n8uBkbp/ympXRnRHR4= -----END CERTIFICATE-----Generated at Sun Sep 27 19:42:48 2026 by rpki-client