$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa File: 23108a10-4450-3a24-b6ea-1b522a5b1f91.roa (raw, json) Hash identifier: KdFTjXwqtHhu6Gic9G2IWD6MRubAHhujRG8FUeDnEZE= Subject key identifier: 8A:C2:63:1A:03:E0:E0:5F:CC:81:5E:EB:F2:00:33:E1:EA:21:35:44 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584ECBD1DD655533973FEC4CA000 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 62651 IP address blocks: 209.107.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:dd:65:55:33:97:3f:ec:4c:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=884a054d-4b56-413e-9bdd-d60c29c67c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cc:e6:1a:31:54:3c:c5:b4:f4:f3:4a:d2:29: ab:2f:aa:42:43:d9:57:88:8d:98:16:cc:9d:85:70: ae:6a:b2:93:46:74:f1:00:e2:60:95:59:74:be:7d: 18:39:d5:83:20:22:e8:40:e5:52:ad:7a:d4:c8:31: 29:72:bd:41:a9:5d:58:de:31:ea:14:5a:a3:6f:33: 72:3a:3d:77:ba:5b:f8:52:52:e6:99:a9:04:3f:12: 1b:7f:86:ba:8f:09:4c:2c:fd:22:39:f6:e3:88:05: 35:70:e2:11:00:fa:21:0d:fb:25:52:e9:81:cb:d1: 7d:61:ee:69:64:90:b2:f0:c4:6f:8d:f9:df:98:ff: f5:9e:91:c2:dd:3f:a2:63:6a:75:31:0d:13:b2:36: d8:05:89:1b:cf:3d:c4:5c:ae:15:0b:03:e7:e7:dd: e1:9a:7a:ea:3b:12:b5:60:66:47:81:85:46:b9:f2: 24:a9:da:11:b1:e4:02:ee:c5:0f:ee:7d:44:cc:4d: d7:aa:e3:9b:44:fa:ee:4c:7a:bd:5e:7e:5d:41:7c: 5b:3b:56:f7:03:40:b2:54:03:ef:36:86:8e:49:9b: 70:d1:5d:5e:82:65:ff:fe:38:d5:90:e2:73:cb:68: 3a:56:63:66:8f:95:af:bb:83:c6:b9:4a:3f:58:4d: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C2:63:1A:03:E0:E0:5F:CC:81:5E:EB:F2:00:33:E1:EA:21:35:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/23108a10-4450-3a24-b6ea-1b522a5b1f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c7:f5:d9:01:69:f0:3a:68:cd:2d:5a:05:d0:e6:05:93:c0: 07:4d:fe:c7:64:d4:c9:ff:51:66:cc:c3:d6:9d:2a:1f:0e:69: 4e:c8:fa:4b:a8:ea:aa:c9:76:80:33:10:45:86:9e:64:1c:f9: ad:aa:e5:c0:ec:4a:d0:de:d0:93:88:e4:45:7d:22:a2:2a:d9: 18:11:36:1d:b1:b9:c0:8c:f7:ba:d9:cf:07:df:59:db:7a:e0: 36:29:77:00:b0:a3:70:6c:3e:26:27:b7:6b:b1:87:bf:91:8c: e0:4b:fc:ea:58:87:5d:74:07:ba:d6:12:83:db:ab:c1:d7:9d: 5b:29:96:57:cd:bb:bb:fd:a6:f1:82:f0:10:e7:d4:e4:0e:f9: b0:73:d2:02:4b:c0:dc:1e:e6:c2:9f:5a:c3:6a:31:88:6c:7a: 45:74:d6:a8:b6:98:19:4a:27:c5:36:0d:71:be:69:1f:d3:9e: 64:b3:e2:eb:ab:36:f5:5e:24:ae:74:fa:ff:35:2c:1b:bf:59: 9a:65:e0:00:35:0a:8e:18:53:c5:f0:97:30:c0:c3:0b:90:68: b8:4e:cd:44:11:5f:d3:57:d8:0a:fe:7a:e2:66:40:44:7c:f2: 06:81:c7:0d:53:0a:ec:13:2b:9e:19:52:cf:48:eb:23:5e:46: c9:e9:3b:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0d1lVTOXP+xMoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk ODg0YTA1NGQtNGI1Ni00MTNlLTliZGQtZDYwYzI5YzY3YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8zmGjFUPMW09PNK0imrL6pCQ9lXiI2YFsyd hXCuarKTRnTxAOJglVl0vn0YOdWDICLoQOVSrXrUyDEpcr1BqV1Y3jHqFFqjbzNy Oj13ulv4UlLmmakEPxIbf4a6jwlMLP0iOfbjiAU1cOIRAPohDfslUumBy9F9Ye5p ZJCy8MRvjfnfmP/1npHC3T+iY2p1MQ0TsjbYBYkbzz3EXK4VCwPn593hmnrqOxK1 YGZHgYVGufIkqdoRseQC7sUP7n1EzE3XquObRPruTHq9Xn5dQXxbO1b3A0CyVAPv NoaOSZtw0V1egmX//jjVkOJzy2g6VmNmj5Wvu4PGuUo/WE05JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrCYxoD4OBfzIFe6/IAM+HqITVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMjMxMDhhMTAtNDQ1MC0z YTI0LWI2ZWEtMWI1MjJhNWIxZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLH9dkBafA6aM0tWgXQ5gWTwAdN/sdk1Mn/UWbMw9adKh8OaU7I+kuo 6qrJdoAzEEWGnmQc+a2q5cDsStDe0JOI5EV9IqIq2RgRNh2xucCM97rZzwffWdt6 4DYpdwCwo3BsPiYnt2uxh7+RjOBL/OpYh110B7rWEoPbq8HXnVspllfNu7v9pvGC 8BDn1OQO+bBz0gJLwNwe5sKfWsNqMYhsekV01qi2mBlKJ8U2DXG+aR/TnmSz4uur NvVeJK50+v81LBu/WZpl4AA1Co4YU8XwlzDAwwuQaLhOzUQRX9NX2Ar+euJmQER8 8gaBxw1TCuwTK54ZUs9I6yNeRsnpO9c= -----END CERTIFICATE-----Generated at Fri Sep 18 22:27:07 2026 by rpki-client