$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa File: 8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa (raw, json) Hash identifier: v5f/lFXPCWFKpIiyqfyr637msXePS9ENnqYXrdPFQxA= Subject key identifier: A0:8F:46:AD:D2:98:E6:82:98:B9:90:6B:B0:C8:82:12:FF:A7:09:8F Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584F23C2603B014F92B6AADD7200 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 2152 IP address blocks: 209.129.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:60:3b:01:4f:92:b6:aa:dd:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=f6d18b56-b75a-4442-9691-a3c14c68c41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:8a:3b:dc:e0:d0:21:f7:8e:b4:a2:ae:da: f1:8f:c5:8d:af:ff:de:e0:ac:e9:ed:c7:89:4e:ef: 53:5d:d1:d3:87:a0:09:9d:88:da:52:54:ad:88:19: 6c:ca:b8:0a:ad:6c:7f:79:5f:17:33:59:6f:02:ef: a5:85:f0:9a:a4:b1:61:79:bf:87:a5:01:97:3d:e2: c3:3e:b2:d2:c7:a3:92:85:c7:3a:7f:fa:4a:be:a5: fc:9b:90:00:b0:c0:d5:c9:72:74:50:87:87:9f:89: 21:54:0a:60:6e:56:4f:7e:10:45:95:2e:d5:4f:13: b8:82:35:b5:70:0e:12:24:b4:06:93:78:99:ce:fd: 51:c6:03:59:b6:ba:db:1d:27:94:f6:e8:3c:26:73: 67:f7:58:7d:a0:b4:b7:4b:d0:ff:c9:d9:b3:cb:4e: 60:ec:f1:4e:98:e5:ac:48:b2:c5:03:e9:97:08:90: 28:f2:61:a9:6a:bd:70:90:9c:77:b3:a3:2f:60:30: 9b:12:14:b6:36:0c:7a:60:47:44:82:29:f6:45:12: 3f:54:ad:16:8a:03:af:6b:01:02:e0:f0:8f:d7:20: 1b:be:ad:ec:dd:8b:06:37:7f:ba:96:a1:1e:e7:53: d5:6a:01:3c:ec:8e:cf:6a:d6:96:18:63:74:48:a4: bb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8F:46:AD:D2:98:E6:82:98:B9:90:6B:B0:C8:82:12:FF:A7:09:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/8b998c6d-424f-3afe-8cb1-9b1398fbac74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 209.129.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:aa:83:72:d9:7a:a2:ba:22:ea:75:5f:be:de:ba:9c:2e:85: 22:e3:cd:00:42:36:ef:f3:95:f8:55:df:33:28:e6:f5:02:77: ca:6d:c4:e0:63:f4:68:88:86:68:34:0d:41:09:ad:17:c6:93: 69:2b:ce:24:d2:20:98:a3:88:62:2e:19:89:46:b5:f3:42:64: dd:5a:f6:58:ff:01:91:76:68:08:ea:3e:5e:11:c8:c3:c4:44: c9:ac:c1:be:90:59:e3:af:cb:52:38:14:74:f0:79:23:7f:92: 1b:00:49:a2:15:b2:83:fc:fe:b9:38:78:a2:49:b9:58:9e:da: 76:fa:d9:c7:97:0e:d0:d5:7e:25:05:ca:a0:ca:4c:79:12:03: 68:67:87:08:aa:0e:eb:de:9e:f0:73:a0:12:c0:3f:0c:00:b8: e6:96:6d:37:e9:91:47:be:ca:c4:a9:58:89:f0:ed:b5:bc:39: 7d:35:e1:c5:5c:93:4e:c3:18:73:c7:c9:47:1c:66:84:92:4a: cd:4a:66:be:5e:f2:2f:3c:e3:78:48:0a:36:5b:87:a3:7d:5d: 9a:ab:35:1e:ea:2e:f1:98:b9:ce:d6:82:00:d0:6d:fe:71:0e: 74:7d:ee:75:a0:5f:27:55:77:51:75:99:47:f2:66:14:f4:22: 59:59:5d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwmA7AU+StqrdcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ZjZkMThiNTYtYjc1YS00NDQyLTk2OTEtYTNjMTRjNjhjNDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L6KO9zg0CH3jrSirtrxj8WNr//e4Kzp7ceJ Tu9TXdHTh6AJnYjaUlStiBlsyrgKrWx/eV8XM1lvAu+lhfCapLFheb+HpQGXPeLD PrLSx6OShcc6f/pKvqX8m5AAsMDVyXJ0UIeHn4khVApgblZPfhBFlS7VTxO4gjW1 cA4SJLQGk3iZzv1RxgNZtrrbHSeU9ug8JnNn91h9oLS3S9D/ydmzy05g7PFOmOWs SLLFA+mXCJAo8mGpar1wkJx3s6MvYDCbEhS2Ngx6YEdEgin2RRI/VK0WigOvawEC 4PCP1yAbvq3s3YsGN3+6lqEe51PVagE87I7PataWGGN0SKS7KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCPRq3SmOaCmLmQa7DIghL/pwmPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvOGI5OThjNmQtNDI0Zi0z YWZlLThjYjEtOWIxMzk4ZmJhYzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOqg3LZeqK6Iup1X77eupwuhSLjzQBCNu/zlfhV3zMo5vUCd8ptxOBj 9GiIhmg0DUEJrRfGk2krziTSIJijiGIuGYlGtfNCZN1a9lj/AZF2aAjqPl4RyMPE RMmswb6QWeOvy1I4FHTweSN/khsASaIVsoP8/rk4eKJJuVie2nb62ceXDtDVfiUF yqDKTHkSA2hnhwiqDuvenvBzoBLAPwwAuOaWbTfpkUe+ysSpWInw7bW8OX014cVc k07DGHPHyUccZoSSSs1KZr5e8i8843hICjZbh6N9XZqrNR7qLvGYuc7WggDQbf5x DnR97nWgXydVd1F1mUfyZhT0IllZXds= -----END CERTIFICATE-----Generated at Mon Sep 28 10:53:47 2026 by rpki-client