$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/34854ee7-6e5a-3d87-9f2d-b33309bc46ba.roa File: 34854ee7-6e5a-3d87-9f2d-b33309bc46ba.roa (raw, json) Hash identifier: vLGfG53UtkhqfXNOFF2iCD6lDQwYhZ/hEHIZdV0Kmd4= Subject key identifier: 02:5E:A0:28:88:F1:11:C6:29:0E:2A:77:9E:24:EA:97:2B:3F:E8:4F Certificate issuer: /CN=de519df3-4594-450e-ac51-a7e085408381 Certificate serial: 010D0C9F4328584EF2E757BCF2E13E9DEEF52300 Authority key identifier: 59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/34854ee7-6e5a-3d87-9f2d-b33309bc46ba.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 209.205.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:57:bc:f2:e1:3e:9d:ee:f5:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de519df3-4594-450e-ac51-a7e085408381 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=99e274c1-7878-4945-803d-b4137a119890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:45:8d:4a:18:65:fd:03:47:b0:51:7b:11:c5: 39:45:df:dd:f3:05:cd:f3:3e:42:b7:f9:36:96:0b: c8:14:76:fa:a2:a6:b2:ff:a4:37:71:d8:69:19:aa: 9b:7b:4d:9e:f9:4b:64:dc:ed:43:58:df:70:fe:fd: c4:3b:75:c9:94:0e:8d:cd:9a:a4:87:2a:b6:bd:55: ce:a7:92:eb:96:3a:92:07:7e:0c:f5:46:45:21:14: ad:12:e6:7f:4c:94:21:28:2c:74:10:70:93:d1:43: a6:2e:4d:df:7d:fb:b7:a1:9d:c5:66:06:a2:63:94: 7b:50:53:42:49:34:45:6e:d2:b9:98:bf:7f:b9:e4: db:c6:aa:10:31:c9:99:b2:06:b1:24:f4:a8:bb:71: ff:9a:28:cc:fc:25:74:df:3f:76:90:af:3d:32:55: 81:1f:f2:17:84:11:6a:85:75:28:81:c6:55:d7:6d: a9:6a:ac:a8:87:4e:1f:4e:42:be:51:e0:36:c5:44: 46:69:95:be:47:85:79:ce:10:16:cc:18:e0:b2:20: 3d:01:e1:7e:56:2a:71:4f:23:9e:34:aa:22:7e:d9: 66:f9:7c:3a:36:e8:44:ab:18:36:44:37:55:7b:6c: 01:26:6e:06:d2:bf:92:29:34:82:5a:9a:57:a9:ff: a5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5E:A0:28:88:F1:11:C6:29:0E:2A:77:9E:24:EA:97:2B:3F:E8:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/34854ee7-6e5a-3d87-9f2d-b33309bc46ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl X509v3 Authority Key Identifier: keyid:59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer sbgp-ipAddrBlock: critical IPv4: 209.205.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:51:21:f2:67:dd:c0:4c:c7:ef:3a:54:b2:a9:e5:7f:05:08: 06:7b:2a:1d:97:43:79:39:8f:72:6c:ac:d1:4c:54:c6:db:f4: 67:31:6d:8f:eb:27:fa:a4:c5:e7:fc:95:ea:13:12:26:4f:fa: 05:0b:f6:28:f8:a0:6c:a0:d2:74:06:e5:f1:2d:2d:b6:4b:fa: f2:88:b7:d3:66:8a:ee:77:f1:da:c0:b2:aa:19:cf:ae:d2:d9: f9:8f:41:c6:1c:9c:59:66:e9:92:be:c8:d8:32:3b:71:23:1f: 6f:bb:b6:1b:a2:ff:64:c0:3e:d8:6d:ed:b9:c3:37:3a:ef:97: 38:89:42:b2:30:38:99:54:27:e3:f1:b8:1d:d0:5a:c5:01:ef: 91:8a:07:69:1b:56:be:44:5e:a8:87:2d:10:1c:eb:72:76:81: a8:af:2c:63:ad:94:cc:0a:d9:32:64:09:25:aa:d9:3d:1f:e3: 1e:a5:54:51:73:7f:98:08:9e:77:0a:fe:c2:22:53:35:6e:eb: 99:d5:e2:b5:ec:97:f3:ae:d1:63:37:6c:18:52:3a:ed:8c:2d: 55:6c:96:af:01:9e:02:eb:e1:04:98:cf:de:a8:a8:7f:97:44: f6:1c:80:f6:1e:4b:9a:c1:65:fd:bb:ab:fe:0d:3a:c5:31:55: c1:cc:a2:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y51e88uE+ne71IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1MTlkZjMtNDU5NC00NTBlLWFjNTEtYTdlMDg1NDA4 MzgxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk OTllMjc0YzEtNzg3OC00OTQ1LTgwM2QtYjQxMzdhMTE5ODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0WNShhl/QNHsFF7EcU5Rd/d8wXN8z5Ct/k2 lgvIFHb6oqay/6Q3cdhpGaqbe02e+Utk3O1DWN9w/v3EO3XJlA6NzZqkhyq2vVXO p5LrljqSB34M9UZFIRStEuZ/TJQhKCx0EHCT0UOmLk3fffu3oZ3FZgaiY5R7UFNC STRFbtK5mL9/ueTbxqoQMcmZsgaxJPSou3H/mijM/CV03z92kK89MlWBH/IXhBFq hXUogcZV122paqyoh04fTkK+UeA2xURGaZW+R4V5zhAWzBjgsiA9AeF+VipxTyOe NKoiftlm+Xw6NuhEqxg2RDdVe2wBJm4G0r+SKTSCWppXqf+loQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJeoCiI8RHGKQ4qd54k6pcrP+hPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUx OWRmMy00NTk0LTQ1MGUtYWM1MS1hN2UwODU0MDgzODEvMzQ4NTRlZTctNmU1YS0z ZDg3LTlmMmQtYjMzMzA5YmM0NmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGU1MTlkZjMtNDU5NC00NTBlLWFj NTEtYTdlMDg1NDA4MzgxL2RlNTE5ZGYzLTQ1OTQtNDUwZS1hYzUxLWE3ZTA4NTQw ODM4MS5jcmwwHwYDVR0jBBgwFoAUWZ5KRx4ypygRBMpIFYzUGC2wuRwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUxOWRmMy00NTk0LTQ1MGUtYWM1MS1hN2Uw ODU0MDgzODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0c3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZRIfJn3cBMx+86VLKp5X8FCAZ7Kh2XQ3k5j3JsrNFMVMbb9GcxbY/r J/qkxef8leoTEiZP+gUL9ij4oGyg0nQG5fEtLbZL+vKIt9Nmiu538drAsqoZz67S 2fmPQcYcnFlm6ZK+yNgyO3EjH2+7thui/2TAPtht7bnDNzrvlziJQrIwOJlUJ+Px uB3QWsUB75GKB2kbVr5EXqiHLRAc63J2gaivLGOtlMwK2TJkCSWq2T0f4x6lVFFz f5gInncK/sIiUzVu65nV4rXsl/Ou0WM3bBhSOu2MLVVslq8BngLr4QSYz96oqH+X RPYcgPYeS5rBZf27q/4NOsUxVcHMoow= -----END CERTIFICATE-----Generated at Sun Sep 27 23:57:21 2026 by rpki-client