$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa File: be603bce-d702-3a38-a547-dae20b5de158.roa (raw, json) Hash identifier: m+QMEpRogPTY0K5kntZxQoz9zWya+pmh26ndG8SsD40= Subject key identifier: E2:08:82:63:F6:2A:3A:7D:E7:58:5C:D1:35:C3:BF:92:DC:8F:4C:80 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584F49740F4B64D1280E1800A580 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31813 IP address blocks: 209.221.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0f:4b:64:d1:28:0e:18:00:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e0b0ec07-3c39-43e4-8ee7-f18530da0477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ac:40:2d:ed:87:bf:b5:a2:9e:f5:b9:78:af: 17:f8:53:c0:31:44:2a:de:62:89:55:73:2c:76:66: 79:18:94:86:6f:65:7a:8d:e1:4b:6e:15:b5:05:83: b6:4d:6e:03:20:f5:df:e3:81:01:e0:bb:dd:96:d9: 2c:89:2c:f9:cf:5c:bd:98:88:b6:36:92:ec:c4:18: b8:23:cd:b3:16:eb:d9:ed:bf:25:a3:e6:0a:ab:21: 5e:8b:5b:0b:cd:c0:84:6f:93:f7:d4:67:21:6a:a7: 5d:18:3a:04:4c:78:67:70:39:c3:8a:3d:81:f4:67: 2b:f6:82:da:9a:cf:e6:4f:f2:7a:3b:01:3b:97:4a: cc:69:c8:5d:db:c9:06:46:4c:9f:6b:d7:10:9c:91: 61:c2:53:5e:a6:4a:e0:16:4e:4c:3c:f6:71:7a:8b: 6d:60:da:92:61:5f:1a:23:71:42:55:08:7c:43:97: 4c:2c:c8:9e:84:dd:80:0d:cc:77:6d:cd:35:46:bd: bf:3d:00:fc:7d:97:2a:2d:1f:18:ba:31:5f:00:03: f6:af:08:21:ed:c4:b0:96:a7:66:37:9b:28:47:eb: a6:7c:ff:b5:bd:51:7b:fe:3e:25:9a:99:c5:e9:67: 1c:aa:58:60:ba:80:7b:c8:fe:0e:6a:6e:4c:61:17: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:08:82:63:F6:2A:3A:7D:E7:58:5C:D1:35:C3:BF:92:DC:8F:4C:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/be603bce-d702-3a38-a547-dae20b5de158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 209.221.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:51:21:cb:2f:e3:2b:49:d8:1e:e1:96:65:35:de:7a:17:f3: 78:f4:6c:e3:12:b4:ba:36:76:8b:d4:5d:b3:d7:55:93:41:de: 8b:53:83:bf:53:dc:19:c5:03:cb:e9:c0:4d:a3:3c:07:d0:e1: ed:62:a4:2c:11:4e:75:bb:70:7a:05:97:1d:2c:73:25:f6:93: 16:dc:74:cd:7a:b1:bf:2d:05:88:8e:44:cb:36:99:04:15:3a: 5b:cd:f8:50:17:48:2b:bc:7e:a6:0f:ec:33:fa:46:50:94:13: f8:c0:cd:98:27:af:8c:22:97:0f:e3:6c:5a:c3:c1:bc:fa:ca: 1b:f2:e8:d6:86:1d:1f:48:56:68:49:87:58:70:aa:e2:11:54: 5c:29:68:6b:bf:a5:1d:b7:9d:1e:84:6a:fc:e7:96:b2:43:fd: ad:ca:49:99:67:5a:49:d7:7f:67:95:b2:8b:27:16:f8:ad:37: 6b:31:50:bb:1f:fa:18:ec:70:b0:a0:16:07:ec:49:e5:78:fd: 90:d6:fb:4e:17:21:d6:d0:9f:65:3b:e5:71:79:00:10:0c:f3: 6d:e2:1b:5a:14:bf:66:2a:5c:7d:32:16:28:f9:00:eb:22:a4: 7e:24:cb:be:a6:3a:4f:85:d1:34:00:00:e2:df:e0:3d:ea:e8: 6e:18:e5:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdA9LZNEoDhgApYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTBiMGVjMDctM2MzOS00M2U0LThlZTctZjE4NTMwZGEwNDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqxALe2Hv7WinvW5eK8X+FPAMUQq3mKJVXMs dmZ5GJSGb2V6jeFLbhW1BYO2TW4DIPXf44EB4LvdltksiSz5z1y9mIi2NpLsxBi4 I82zFuvZ7b8lo+YKqyFei1sLzcCEb5P31GchaqddGDoETHhncDnDij2B9Gcr9oLa ms/mT/J6OwE7l0rMachd28kGRkyfa9cQnJFhwlNepkrgFk5MPPZxeottYNqSYV8a I3FCVQh8Q5dMLMiehN2ADcx3bc01Rr2/PQD8fZcqLR8YujFfAAP2rwgh7cSwlqdm N5soR+umfP+1vVF7/j4lmpnF6WccqlhguoB7yP4Oam5MYRfYrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIIgmP2Kjp951hc0TXDv5Lcj0yAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYmU2MDNiY2UtZDcwMi0z YTM4LWE1NDctZGFlMjBiNWRlMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBRIcsv4ytJ2B7hlmU13noX83j0bOMStLo2dovUXbPXVZNB3otTg79T 3BnFA8vpwE2jPAfQ4e1ipCwRTnW7cHoFlx0scyX2kxbcdM16sb8tBYiORMs2mQQV OlvN+FAXSCu8fqYP7DP6RlCUE/jAzZgnr4wilw/jbFrDwbz6yhvy6NaGHR9IVmhJ h1hwquIRVFwpaGu/pR23nR6EavznlrJD/a3KSZlnWknXf2eVsosnFvitN2sxULsf +hjscLCgFgfsSeV4/ZDW+04XIdbQn2U75XF5ABAM823iG1oUv2YqXH0yFij5AOsi pH4ky76mOk+F0TQAAOLf4D3q6G4Y5aY= -----END CERTIFICATE-----Generated at Mon Sep 28 12:26:01 2026 by rpki-client