$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa File: d0006625-f457-3068-ab43-dd1b3162c248.roa (raw, json) Hash identifier: yoSAH7LDw347D1sON1LjlZhhnz7Y+Mf9UtZNhr+a2y8= Subject key identifier: 6F:1E:FE:BA:65:59:F0:56:71:F3:79:67:9D:7F:70:F1:1A:49:FE:90 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584F71EDC00B13E6B2B3B051A1C0 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 20115 IP address blocks: 209.114.4.0/22 maxlen: 24 209.114.8.0/21 maxlen: 24 209.114.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:c0:0b:13:e6:b2:b3:b0:51:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=459e4719-a2b3-4c3a-be3d-7922a3a250b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d4:47:cb:2e:6d:0b:95:33:71:83:11:e8:ee: bf:67:45:27:99:dc:47:74:c5:28:ef:e1:a9:3e:b1: 02:46:05:a7:ab:a2:8f:7a:16:e9:70:0b:e9:73:32: 4c:2c:51:e7:f2:60:0f:95:22:f0:9f:a9:44:4c:2d: d8:b5:e6:bc:74:61:3d:bf:4c:a9:2a:a6:a7:1a:09: 1e:0f:6f:4f:58:3f:e3:4a:85:94:0d:a8:11:cd:9b: 37:ba:1a:d4:e0:82:77:11:20:17:cc:f0:8e:87:df: 9a:e3:1a:73:cc:e6:43:d2:d0:a6:07:99:0f:85:66: e5:0b:cc:3b:92:0b:15:32:e9:22:94:14:14:96:71: 5d:34:c3:46:ee:1d:5c:1c:0e:f7:00:44:69:28:b1: a7:40:15:14:f9:d1:e6:28:5d:f2:7e:20:60:75:5f: a4:8f:8f:87:ca:d9:64:37:1e:d1:5c:4f:13:21:af: ea:2b:80:32:99:33:cb:41:77:bc:cb:13:65:9f:42: 32:ad:c1:ab:18:6b:e2:42:c3:63:3c:a6:bd:fd:86: bd:27:bc:03:29:3f:11:0c:dd:22:0e:7f:58:51:f8: ad:da:8b:a2:a4:7a:56:6a:bc:19:eb:43:cf:13:94: 10:93:e9:2e:e0:c9:2f:c6:42:d3:1b:85:2c:58:b6: fa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1E:FE:BA:65:59:F0:56:71:F3:79:67:9D:7F:70:F1:1A:49:FE:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.4.0-209.114.31.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:5d:61:90:ac:d6:d9:1f:3e:db:75:c2:dd:bf:25:67:4c:81: f1:b5:db:65:3a:02:46:ad:91:a3:b0:d0:66:c0:2f:ae:f6:e7: fc:57:d9:e7:15:45:29:0a:3b:81:4a:66:a1:54:6b:15:54:fe: 76:dc:09:74:2b:9f:21:3b:89:32:0d:d9:ed:e7:b5:b4:14:7a: c5:31:f4:73:a6:35:82:d9:70:bd:d4:3b:ca:cd:cd:a7:3a:52: 02:c8:b6:e9:3b:0e:6b:54:bb:ab:2f:fa:6b:b9:2e:0e:f0:66: 31:f6:86:44:85:45:e3:5c:bd:5b:1c:d2:e2:29:d9:b4:0c:1b: de:b5:30:52:7a:30:cf:38:e8:a1:63:4b:67:ce:b3:43:58:6d: b2:dd:53:c3:e7:78:3f:6b:e6:9f:d2:e6:31:d5:bd:28:07:39: 15:6f:5d:2d:51:4a:05:66:33:68:38:96:68:85:d3:f7:a9:29: 99:f1:61:95:71:96:72:a3:06:1d:3a:6e:50:33:1e:2c:df:db: 62:1a:60:bf:7f:92:f5:f7:11:6a:08:f2:d9:3d:e4:b0:3e:75: c2:21:e5:86:23:67:ad:9a:a8:5d:dd:c5:f2:b0:c8:9b:5d:78: 32:6e:8d:3a:ac:1f:2e:53:32:a0:4b:02:f7:3b:37:42:b6:93: f6:26:d5:4b -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9x7cALE+ays7BRocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NDU5ZTQ3MTktYTJiMy00YzNhLWJlM2QtNzkyMmEzYTI1MGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9RHyy5tC5UzcYMR6O6/Z0UnmdxHdMUo7+Gp PrECRgWnq6KPehbpcAvpczJMLFHn8mAPlSLwn6lETC3Ytea8dGE9v0ypKqanGgke D29PWD/jSoWUDagRzZs3uhrU4IJ3ESAXzPCOh9+a4xpzzOZD0tCmB5kPhWblC8w7 kgsVMukilBQUlnFdNMNG7h1cHA73AERpKLGnQBUU+dHmKF3yfiBgdV+kj4+Hytlk Nx7RXE8TIa/qK4AymTPLQXe8yxNln0IyrcGrGGviQsNjPKa9/Ya9J7wDKT8RDN0i Dn9YUfit2ouipHpWarwZ60PPE5QQk+ku4MkvxkLTG4UsWLb6VwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFG8e/rplWfBWcfN5Z51/cPEaSf6QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvZDAwMDY2MjUtZjQ1Ny0z MDY4LWFiNDMtZGQxYjMxNjJjMjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALRcgQD BAXRcgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEARl1hkKzW2R8+23XC3b8lZ0yB8bXbZToCRq2Ro7DQZsAv rvbn/FfZ5xVFKQo7gUpmoVRrFVT+dtwJdCufITuJMg3Z7ee1tBR6xTH0c6Y1gtlw vdQ7ys3NpzpSAsi26TsOa1S7qy/6a7kuDvBmMfaGRIVF41y9WxzS4inZtAwb3rUw UnowzzjooWNLZ86zQ1htst1Tw+d4P2vmn9LmMdW9KAc5FW9dLVFKBWYzaDiWaIXT 96kpmfFhlXGWcqMGHTpuUDMeLN/bYhpgv3+S9fcRagjy2T3ksD51wiHlhiNnrZqo Xd3F8rDIm114Mm6NOqwfLlMyoEsC9zs3QraT9ibVSw== -----END CERTIFICATE-----Generated at Wed Oct 14 17:45:03 2026 by rpki-client