$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa File: a502b432-1632-3940-872f-cd24ee7e9163.roa (raw, json) Hash identifier: ZN8yED55aBorRYdQEgqxowu+slFfDpBWy8BP+C4UyO4= Subject key identifier: B2:DF:DA:34:59:28:6F:31:58:C8:EC:4D:EB:9D:1A:DC:45:2C:C8:35 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584F480D3B475A1E7232D9C9A380 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 14369 IP address blocks: 209.173.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:3b:47:5a:1e:72:32:d9:c9:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=6dee2480-ebcc-47ae-9d84-63fc1ce8e4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2a:ce:34:99:c6:03:c1:99:6c:7e:f1:af:61: 26:fc:14:ad:33:95:bd:ab:e7:3a:d8:c8:e5:7e:81: 28:af:17:35:9c:60:f0:44:e6:e6:48:fc:a5:53:d1: f4:f1:3f:fb:c4:92:7c:53:ac:ae:91:86:54:19:7f: 64:eb:8f:12:8a:cb:e1:d4:8f:7f:cb:f2:43:ba:df: 23:ea:03:79:47:43:bd:38:06:34:8a:3f:a1:87:52: dd:ec:57:a4:97:9b:66:bc:64:24:a8:96:fa:69:c3: b3:35:7b:e2:83:0c:b0:99:80:77:a5:fe:bf:20:57: b1:ff:00:b9:4b:0a:de:27:7d:5a:a0:55:0f:71:38: bc:ad:63:78:4a:53:ea:83:dd:c2:e2:1c:1c:b3:76: 78:66:a8:9c:5f:a7:bf:7f:66:35:e6:d8:8c:f6:f2: 0f:44:be:2d:4e:67:91:10:a4:48:87:6b:21:25:f8: f0:9b:9f:95:5a:6d:8d:0c:58:b6:12:4e:51:2f:61: 27:e2:d9:b5:a4:87:2b:1c:36:72:c1:5a:3f:d7:14: e7:57:73:22:89:ff:d4:2c:0e:20:ec:95:57:05:b1: f1:1e:a1:9b:ba:3e:8a:70:5f:90:86:d5:65:c3:ad: ae:3d:bf:4e:52:bd:7b:29:28:8e:c7:0b:96:19:c9: e0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DF:DA:34:59:28:6F:31:58:C8:EC:4D:EB:9D:1A:DC:45:2C:C8:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/a502b432-1632-3940-872f-cd24ee7e9163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.173.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b0:1d:ff:2f:9e:1e:97:82:2c:1d:26:cc:02:76:47:98:30: 53:6a:0d:88:41:d0:dd:2d:35:70:83:ae:80:01:8b:ab:0e:09: 10:e6:90:01:11:dd:91:66:7d:bb:19:80:12:14:63:fd:44:07: ca:89:28:6c:48:49:a0:1f:64:35:99:a4:f2:42:ad:f9:1c:9b: 93:5b:be:c6:2e:78:69:bc:a8:0b:06:b6:51:ca:4c:4e:d0:73: 58:5a:88:29:b5:c4:26:3a:83:ae:6b:d8:cf:bc:d7:81:54:b9: 9c:7c:39:8b:ce:57:ca:c3:4f:55:90:ac:33:35:bf:33:b8:f3: fd:9b:88:73:bb:71:03:70:c6:9c:02:b3:7a:6f:9b:4d:88:15: 46:5f:3a:9b:e1:d4:82:21:21:08:ed:c7:20:d2:81:db:c2:c0: 61:ab:ac:c6:4f:34:3f:1f:3c:e5:96:c8:21:d5:d1:d7:7c:5a: 2b:4b:88:b1:ff:e5:0e:3f:2b:47:9e:54:84:d6:e6:1b:b4:2c: 2a:24:6b:83:7f:8a:b2:7f:44:3c:af:ba:41:15:fc:8c:5a:e9: 10:f6:f4:0e:34:b0:43:30:87:3c:94:91:24:34:ba:a5:df:c5: 91:1c:f7:c0:df:d8:5f:4a:87:19:25:8c:17:f1:05:4f:94:c4: 55:07:96:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDTtHWh5yMtnJo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk NmRlZTI0ODAtZWJjYy00N2FlLTlkODQtNjNmYzFjZThlNGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjirONJnGA8GZbH7xr2Em/BStM5W9q+c62Mjl foEorxc1nGDwRObmSPylU9H08T/7xJJ8U6yukYZUGX9k648Sisvh1I9/y/JDut8j 6gN5R0O9OAY0ij+hh1Ld7Fekl5tmvGQkqJb6acOzNXvigwywmYB3pf6/IFex/wC5 SwreJ31aoFUPcTi8rWN4SlPqg93C4hwcs3Z4ZqicX6e/f2Y15tiM9vIPRL4tTmeR EKRIh2shJfjwm5+VWm2NDFi2Ek5RL2En4tm1pIcrHDZywVo/1xTnV3Miif/ULA4g 7JVXBbHxHqGbuj6KcF+QhtVlw62uPb9OUr17KSiOxwuWGcngKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLf2jRZKG8xWMjsTeudGtxFLMg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvYTUwMmI0MzItMTYzMi0z OTQwLTg3MmYtY2QyNGVlN2U5MTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0a0JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADywHf8vnh6XgiwdJswCdkeYMFNqDYhB0N0tNXCDroABi6sOCRDmkAER 3ZFmfbsZgBIUY/1EB8qJKGxISaAfZDWZpPJCrfkcm5NbvsYueGm8qAsGtlHKTE7Q c1haiCm1xCY6g65r2M+814FUuZx8OYvOV8rDT1WQrDM1vzO48/2biHO7cQNwxpwC s3pvm02IFUZfOpvh1IIhIQjtxyDSgdvCwGGrrMZPND8fPOWWyCHV0dd8WitLiLH/ 5Q4/K0eeVITW5hu0LCoka4N/irJ/RDyvukEV/Ixa6RD29A40sEMwhzyUkSQ0uqXf xZEc98Df2F9KhxkljBfxBU+UxFUHloc= -----END CERTIFICATE-----Generated at Fri Sep 25 19:58:57 2026 by rpki-client