$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/9900922b-5c2f-374f-b782-511c12d98afb.roa File: 9900922b-5c2f-374f-b782-511c12d98afb.roa (raw, json) Hash identifier: ICj9vh6+TT+D4fbA/7rrJFRQygQUD6U250JieFyEfRU= Subject key identifier: B4:D2:26:10:AB:80:95:E9:7E:8B:FC:0E:6C:25:1E:D0:D2:5D:F7:3D Certificate issuer: /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Certificate serial: 010D0C9F4328584F34827A40A1AD32B3AA209AC0 Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/9900922b-5c2f-374f-b782-511c12d98afb.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 14090 IP address blocks: 209.243.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:7a:40:a1:ad:32:b3:aa:20:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=5b828deb-c79a-45ce-9afe-8ec8e202ea69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4d:bc:68:ff:d9:ec:77:4c:69:2d:fa:d0:b4: f8:83:35:b6:e6:ad:b9:fc:5f:29:25:3a:1c:89:25: b6:82:5f:f1:9e:d1:6c:44:d4:04:2a:a9:55:b2:91: e3:aa:6f:f6:c1:ee:02:51:e1:c5:d2:6d:5a:3b:31: 0f:ec:80:c2:50:91:0e:db:78:82:6a:64:71:84:d2: 61:93:e1:2b:e0:1d:6c:52:5c:57:84:a4:8f:a2:aa: 81:98:bc:a1:3d:37:68:dd:a5:6d:49:d0:e8:52:f8: 64:c9:95:e6:66:43:7a:bf:a1:75:95:0f:20:c1:87: 57:df:27:4c:a1:49:a7:3a:f2:e5:ad:3e:c2:a1:65: e6:06:a5:db:d1:41:33:88:8b:73:a4:94:28:84:83: 23:2a:9b:45:b4:14:3d:3c:3d:26:9f:13:2c:92:02: 1c:1d:19:26:f4:ad:3d:97:61:3c:55:40:e0:98:7e: 38:57:67:1e:cf:79:62:5d:f7:37:02:26:95:6e:c3: f6:4d:30:89:df:ab:1c:96:24:57:3c:4d:d6:e3:d2: ac:75:a5:86:ad:49:87:83:f9:be:b9:a4:f9:71:35: 19:da:dd:dc:2e:e8:d3:69:47:eb:3e:45:24:6e:d4: dc:5c:cb:f4:01:cc:83:61:49:7e:ef:4e:bc:8d:8f: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D2:26:10:AB:80:95:E9:7E:8B:FC:0E:6C:25:1E:D0:D2:5D:F7:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/9900922b-5c2f-374f-b782-511c12d98afb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl X509v3 Authority Key Identifier: keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer sbgp-ipAddrBlock: critical IPv4: 209.243.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:66:68:6a:20:d9:bd:d3:4d:c2:35:ec:a8:56:fe:ea:ae:21: 89:45:4d:1f:d7:ea:c8:b9:76:b8:a3:35:64:c8:52:8b:ed:c2: fb:e3:52:6d:55:34:13:21:79:70:85:1c:63:f6:ab:f5:4a:6e: 81:d1:01:91:3d:38:77:6c:80:ac:e8:ae:fd:32:af:8c:63:97: d4:50:52:9a:eb:4f:ca:0b:29:39:94:4e:7c:0a:e0:a0:d2:b6: 79:b6:e3:20:1a:6d:79:14:29:21:0c:ea:1e:5c:cf:20:49:09: a3:ae:f0:15:c7:4a:b6:26:5e:94:3e:85:20:44:e7:4d:fe:f2: d2:1b:59:a7:89:ae:ae:b5:23:52:89:c7:2a:f0:76:04:69:9d: 9b:60:8e:2e:ed:f1:38:fc:5e:40:dc:2c:d3:09:73:50:07:40: 3f:cd:5d:03:91:7c:4d:ee:75:e6:a7:e4:85:c0:de:2b:f7:8f: 5d:57:1e:11:4b:0e:e9:b5:e6:f6:15:24:19:74:87:e0:e8:81: 61:47:2d:9c:d9:e6:e9:e5:26:87:10:17:41:13:5b:36:bb:dc: 92:71:cd:cd:d9:c1:bd:c9:37:a1:2b:e7:11:02:06:df:a1:3a: 7c:12:f6:59:e7:83:35:68:13:fa:ba:37:32:05:cb:26:06:8d: 95:89:d9:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gnpAoa0ys6ogmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk ZTYxMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk NWI4MjhkZWItYzc5YS00NWNlLTlhZmUtOGVjOGUyMDJlYTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE28aP/Z7HdMaS360LT4gzW25q25/F8pJToc iSW2gl/xntFsRNQEKqlVspHjqm/2we4CUeHF0m1aOzEP7IDCUJEO23iCamRxhNJh k+Er4B1sUlxXhKSPoqqBmLyhPTdo3aVtSdDoUvhkyZXmZkN6v6F1lQ8gwYdX3ydM oUmnOvLlrT7CoWXmBqXb0UEziItzpJQohIMjKptFtBQ9PD0mnxMskgIcHRkm9K09 l2E8VUDgmH44V2cez3liXfc3AiaVbsP2TTCJ36scliRXPE3W49KsdaWGrUmHg/m+ uaT5cTUZ2t3cLujTaUfrPkUkbtTcXMv0AcyDYUl+7068jY+EwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTSJhCrgJXpfov8DmwlHtDSXfc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3 ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvOTkwMDkyMmItNWMyZi0z NzRmLWI3ODItNTExYzEyZDk4YWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1 NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5 ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0fMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJmaGog2b3TTcI17KhW/uquIYlFTR/X6si5drijNWTIUovtwvvjUm1V NBMheXCFHGP2q/VKboHRAZE9OHdsgKzorv0yr4xjl9RQUprrT8oLKTmUTnwK4KDS tnm24yAabXkUKSEM6h5czyBJCaOu8BXHSrYmXpQ+hSBE503+8tIbWaeJrq61I1KJ xyrwdgRpnZtgji7t8Tj8XkDcLNMJc1AHQD/NXQORfE3udean5IXA3iv3j11XHhFL Dum15vYVJBl0h+DogWFHLZzZ5unlJocQF0ETWza73JJxzc3Zwb3JN6Er5xECBt+h OnwS9lnngzVoE/q6NzIFyyYGjZWJ2VA= -----END CERTIFICATE-----Generated at Thu Sep 24 21:55:27 2026 by rpki-client