$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/cfeb8d34-e2e5-34f3-9b43-af1beeb344c7.roa File: cfeb8d34-e2e5-34f3-9b43-af1beeb344c7.roa (raw, json) Hash identifier: GEhuexDsi1PD/VTwhvFwfXdXW0QlNdRyxtmFaPB2mtA= Subject key identifier: 46:D6:7A:A0:8E:EF:26:9F:ED:10:07:4A:79:C5:C2:E7:C6:DE:F6:DE Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584ED001D67EBA6E4D97E497F980 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/cfeb8d34-e2e5-34f3-9b43-af1beeb344c7.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 54203 IP address blocks: 209.107.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:d6:7e:ba:6e:4d:97:e4:97:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=78ff44f1-4d5e-4aed-b214-7baf73d958d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c5:f6:94:7e:92:d5:42:b4:04:bd:04:4d:8b: b5:f6:dc:f0:21:2b:b7:49:77:3e:d8:39:4d:bd:50: ac:1e:27:8a:b8:6a:f2:42:56:c4:46:8d:32:ab:8c: 90:f0:dc:c6:b8:59:ac:15:05:60:83:cb:bf:7f:33: e9:bb:03:96:cd:3d:f7:13:96:0c:79:36:59:67:52: 6b:2c:b8:fb:a3:5c:0a:1e:d1:08:6f:8e:87:3e:85: e0:c9:38:30:21:54:7d:8d:c8:55:3e:bd:d2:5e:9d: ea:6b:cc:f1:91:fe:b8:ff:0a:fa:8b:0a:56:66:b5: cf:f7:05:08:ff:ea:b9:5a:1b:86:a3:35:c9:54:66: 35:79:5d:81:84:e8:93:17:2d:07:b3:3a:0d:cc:42: 52:bd:97:62:3e:14:0c:41:87:84:7b:5e:72:d7:b4: 7f:6e:33:09:31:23:88:b5:5e:91:cb:ad:6f:eb:fa: 0e:39:44:2c:ce:00:ba:44:0c:1a:6a:50:87:48:8f: a2:d7:92:da:eb:b7:4a:ac:12:d2:2f:c0:4f:12:3d: 60:8d:94:48:3c:72:78:92:04:75:b3:43:fd:fb:6c: a5:6e:27:d3:7b:e9:a0:b1:a9:42:d2:66:33:f9:09: b1:fe:b2:0f:b5:49:a5:01:f4:26:0f:ce:29:b1:41: cc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D6:7A:A0:8E:EF:26:9F:ED:10:07:4A:79:C5:C2:E7:C6:DE:F6:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/cfeb8d34-e2e5-34f3-9b43-af1beeb344c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 209.107.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:5f:47:9e:9e:61:1a:7c:81:4f:df:73:35:96:04:3b:d7:66: 8d:2d:24:58:f5:82:e2:e9:e3:c8:75:bb:5e:79:0c:ae:f3:61: a2:87:69:07:89:45:66:b1:a3:e5:20:6b:c0:71:ba:f0:13:45: fa:3c:04:33:e5:26:13:52:ca:3e:4b:52:8d:ab:7b:0d:b7:8a: 68:fd:48:3e:87:73:7b:77:56:28:40:15:39:7e:e1:ef:6f:65: 71:3b:e2:dc:c4:df:86:62:fe:ac:04:71:a8:80:09:9f:9b:b9: e2:12:7c:97:b8:2c:2c:f2:e2:dd:bf:a7:f4:f3:7b:a2:54:b2: 3a:78:df:72:f9:51:c1:a2:5c:5d:4a:f4:a3:60:c8:ae:c3:df: 51:ad:b9:3a:55:73:56:05:ff:40:27:20:ea:be:1e:1e:9a:3d: db:e6:e6:50:1b:10:75:a9:71:83:c5:dd:42:70:77:75:e0:ae: 2c:9b:07:27:c3:72:c0:ad:ad:d1:d0:46:6e:7b:3b:dd:d4:06: d4:60:2e:35:00:31:19:d5:e6:4f:0f:e8:51:77:10:a5:e7:8f: 35:2d:1d:25:f5:e6:18:54:da:b2:ea:8c:ba:bf:61:ca:2c:c0: 1d:8d:cf:17:c9:60:26:49:bc:5a:c1:a0:fe:3c:97:2e:90:8d: c8:81:54:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAdZ+um5Nl+SX+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NzhmZjQ0ZjEtNGQ1ZS00YWVkLWIyMTQtN2JhZjczZDk1OGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssX2lH6S1UK0BL0ETYu19tzwISu3SXc+2DlN vVCsHieKuGryQlbERo0yq4yQ8NzGuFmsFQVgg8u/fzPpuwOWzT33E5YMeTZZZ1Jr LLj7o1wKHtEIb46HPoXgyTgwIVR9jchVPr3SXp3qa8zxkf64/wr6iwpWZrXP9wUI /+q5WhuGozXJVGY1eV2BhOiTFy0HszoNzEJSvZdiPhQMQYeEe15y17R/bjMJMSOI tV6Ry61v6/oOOUQszgC6RAwaalCHSI+i15La67dKrBLSL8BPEj1gjZRIPHJ4kgR1 s0P9+2ylbifTe+mgsalC0mYz+Qmx/rIPtUmlAfQmD84psUHMsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbWeqCO7yaf7RAHSnnFwufG3vbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvY2ZlYjhkMzQtZTJlNS0z NGYzLTliNDMtYWYxYmVlYjM0NGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WvUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJfR56eYRp8gU/fczWWBDvXZo0tJFj1guLp48h1u155DK7zYaKHaQeJ RWaxo+Uga8BxuvATRfo8BDPlJhNSyj5LUo2rew23imj9SD6Hc3t3VihAFTl+4e9v ZXE74tzE34Zi/qwEcaiACZ+bueISfJe4LCzy4t2/p/Tze6JUsjp433L5UcGiXF1K 9KNgyK7D31GtuTpVc1YF/0AnIOq+Hh6aPdvm5lAbEHWpcYPF3UJwd3XgriybByfD csCtrdHQRm57O93UBtRgLjUAMRnV5k8P6FF3EKXnjzUtHSX15hhU2rLqjLq/Ycos wB2NzxfJYCZJvFrBoP48ly6QjciBVGM= -----END CERTIFICATE-----Generated at Fri Sep 18 22:14:31 2026 by rpki-client