$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa File: 6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa (raw, json) Hash identifier: TIjLzhbueUk/MS7s6tUCFhgvKwTy/Pd9w3ZrOFmDv2E= Subject key identifier: F2:B5:AA:2B:12:DF:2E:82:2E:66:81:2D:F2:DA:EF:54:BC:32:E3:BB Certificate issuer: /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Certificate serial: 010D0C9F4328584F49740B4E0E51F49DBC4B0E60 Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 209.127.216.0/24 maxlen: 24 209.188.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0b:4e:0e:51:f4:9d:bc:4b:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=853c9c77-55aa-45af-b8b2-b6413e715259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fb:82:33:12:92:cb:59:15:c8:90:cc:95:47: 2c:c2:5f:4f:2f:b8:ef:bb:34:30:9e:a0:59:c7:e9: 42:7f:50:53:c4:9f:de:d4:7a:92:cb:1b:c1:a9:39: 08:3a:89:92:e1:ef:8e:a5:01:dc:fe:c4:cf:cd:b2: e4:65:6c:24:f1:b7:57:58:30:60:ac:06:a2:2d:dc: 4d:12:50:01:9d:a6:95:d4:d8:46:4d:49:57:be:5e: 29:4f:cb:54:5b:4e:f7:72:65:94:a0:3f:a0:45:26: ac:18:f5:44:00:65:12:b3:b5:7e:ce:25:15:4d:6a: cf:fa:21:28:fa:5c:3d:7e:d7:00:83:46:45:3e:e1: ca:92:0c:79:17:e1:6f:5f:ff:e3:f7:4e:ed:f1:2d: 62:4f:91:c6:8a:f0:5c:30:16:c5:79:17:51:d6:68: e9:8e:16:6b:67:72:d9:87:53:f1:a4:56:b2:3c:6d: b6:a4:62:e5:e7:41:08:96:f4:0f:76:db:88:9c:71: 06:f2:b4:bf:aa:12:17:71:d5:5d:94:c6:29:85:84: f7:28:a9:b9:b4:11:db:1c:ad:97:96:33:a3:0a:12: 11:59:38:0d:ce:95:15:e1:79:fc:25:ad:32:4a:6d: 90:8f:a6:ba:0c:d0:c4:a7:fb:e0:ce:a6:62:ce:01: 1b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B5:AA:2B:12:DF:2E:82:2E:66:81:2D:F2:DA:EF:54:BC:32:E3:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/6f4b9c20-3128-3f1d-b3e6-05a2c64446b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl X509v3 Authority Key Identifier: keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer sbgp-ipAddrBlock: critical IPv4: 209.127.216.0/24 209.188.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:fd:66:f3:9d:39:3e:b2:6a:46:1a:4d:c7:b7:07:4d:f4:da: 18:a4:99:46:04:ce:77:cd:b6:e0:30:49:d0:19:51:20:99:f1: d4:da:29:19:90:d7:64:91:4e:78:da:2d:73:2f:34:0c:a2:c5: b5:2d:a0:5a:29:50:e0:1b:b0:e5:fe:24:79:6e:26:52:d3:47: 20:8c:75:da:ea:dc:da:49:0d:b4:7b:af:69:a4:33:f3:64:0b: d6:30:30:21:77:fa:d7:aa:8e:bd:8e:87:95:10:d1:35:4a:d6: f7:e4:77:87:5c:ea:c8:64:2f:2c:20:95:4b:14:8a:cd:1e:fe: 3a:f2:e7:a5:4a:98:c8:98:5e:73:0e:74:a2:71:c3:f5:8c:94: 60:95:2e:dc:34:36:4e:b6:47:67:57:1c:ad:aa:d3:93:31:d5: 77:9a:2a:8b:93:8a:2b:9d:8c:8f:53:b0:5f:cc:6c:6d:c3:fb: c1:21:06:0f:21:d3:41:29:75:c1:29:83:6b:a4:4b:d3:2f:c0: 70:5a:16:45:b9:6d:a2:2d:43:05:17:44:38:4c:f3:59:e4:d3: de:b6:1b:c9:8e:8e:fa:0a:2e:5f:f0:71:68:81:18:29:65:c3: ae:1a:58:9a:e1:3e:ae:19:df:5f:eb:d7:88:9f:90:99:08:0e: 2d:8d:37:48 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdAtODlH0nbxLDmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlmZTQ2YjAtNzAzNC00ZDdiLWE3NDYtN2E3MGY3ODhj M2Y1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODUzYzljNzctNTVhYS00NWFmLWI4YjItYjY0MTNlNzE1MjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPuCMxKSy1kVyJDMlUcswl9PL7jvuzQwnqBZ x+lCf1BTxJ/e1HqSyxvBqTkIOomS4e+OpQHc/sTPzbLkZWwk8bdXWDBgrAaiLdxN ElABnaaV1NhGTUlXvl4pT8tUW073cmWUoD+gRSasGPVEAGUSs7V+ziUVTWrP+iEo +lw9ftcAg0ZFPuHKkgx5F+FvX//j907t8S1iT5HGivBcMBbFeRdR1mjpjhZrZ3LZ h1PxpFayPG22pGLl50EIlvQPdtuInHEG8rS/qhIXcdVdlMYphYT3KKm5tBHbHK2X ljOjChIRWTgNzpUV4Xn8Ja0ySm2Qj6a6DNDEp/vgzqZizgEb+QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPK1qisS3y6CLmaBLfLa71S8MuO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZl NDZiMC03MDM0LTRkN2ItYTc0Ni03YTcwZjc4OGMzZjUvNmY0YjljMjAtMzEyOC0z ZjFkLWIzZTYtMDVhMmM2NDQ0NmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDlmZTQ2YjAtNzAzNC00ZDdiLWE3 NDYtN2E3MGY3ODhjM2Y1LzA5ZmU0NmIwLTcwMzQtNGQ3Yi1hNzQ2LTdhNzBmNzg4 YzNmNS5jcmwwHwYDVR0jBBgwFoAUKlIbdd2p7j6R7Mtvp8LrPeq8OEswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wOWZlNDZiMC03MDM0LTRkN2ItYTc0Ni03YTcw Zjc4OGMzZjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0X/YAwQA 0bxtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALb9ZvOdOT6yakYaTce3B0302hikmUYEznfNtuAwSdAZUSCZ 8dTaKRmQ12SRTnjaLXMvNAyixbUtoFopUOAbsOX+JHluJlLTRyCMddrq3NpJDbR7 r2mkM/NkC9YwMCF3+teqjr2Oh5UQ0TVK1vfkd4dc6shkLywglUsUis0e/jry56VK mMiYXnMOdKJxw/WMlGCVLtw0Nk62R2dXHK2q05Mx1XeaKouTiiudjI9TsF/MbG3D +8EhBg8h00EpdcEpg2ukS9MvwHBaFkW5baItQwUXRDhM81nk0962G8mOjvoKLl/w cWiBGCllw64aWJrhPq4Z31/r14ifkJkIDi2NN0g= -----END CERTIFICATE-----Generated at Fri Oct 9 11:41:44 2026 by rpki-client