$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/25164ba1-f06b-347e-8764-cf13e4daaf78.roa File: 25164ba1-f06b-347e-8764-cf13e4daaf78.roa (raw, json) Hash identifier: JQqcryHT+ZEbyfFLaw1El74CT7Yez269C1u+q2LAB40= Subject key identifier: 5C:53:24:F2:F6:6F:C4:03:57:8C:0B:0F:BB:89:F4:E1:A1:FD:C2:6E Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584F3052720A4EC5C939E0E94E00 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/25164ba1-f06b-347e-8764-cf13e4daaf78.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 22157 IP address blocks: 208.71.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:72:0a:4e:c5:c9:39:e0:e9:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=b1c45d20-062a-4966-a32f-35fbc47c3b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9c:cb:8a:ca:a4:ab:e5:e9:b5:a6:78:92:49: 4f:46:70:0d:aa:44:c6:ef:9a:ed:3a:9b:80:e5:08: 29:39:50:12:cb:8b:e7:13:1c:92:c7:65:f7:7f:1c: e4:52:6a:7e:22:35:f2:86:9b:f4:b8:f8:17:59:78: 7b:f8:92:e4:8e:f1:a5:72:1d:d3:d9:c8:64:0a:05: 87:95:44:5a:a2:51:c8:b6:1b:ab:a1:0a:bb:04:60: 81:7d:13:cb:89:79:b9:39:d7:39:f0:47:87:1d:71: 90:ae:2b:d9:5e:07:a2:1e:76:c9:35:14:ea:0d:9b: 84:67:e4:47:85:ab:85:35:b9:51:c4:9b:90:f3:87: fc:67:7a:ab:0f:60:ec:1d:66:c3:1c:1a:63:52:a7: ef:21:b8:6e:c4:42:a5:78:d4:0a:97:1b:f3:05:ae: e2:48:99:42:5f:36:f1:56:a0:1d:2e:e0:f6:1d:3a: 28:f9:b3:c1:f3:df:00:06:88:4d:25:1f:63:67:fc: b7:f8:c3:3f:12:b1:c5:58:d0:17:48:12:a8:cd:49: 56:b9:80:a3:fe:18:5c:c9:f0:d0:2b:ae:b1:9a:24: 71:69:a8:4b:eb:03:a1:6b:b8:51:9c:61:d2:01:12: 98:3e:94:32:f3:23:43:3e:ea:6c:e1:23:7e:ea:a1: 27:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:53:24:F2:F6:6F:C4:03:57:8C:0B:0F:BB:89:F4:E1:A1:FD:C2:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/25164ba1-f06b-347e-8764-cf13e4daaf78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9b:43:5b:81:8f:db:1f:96:27:64:1b:0e:7a:d9:da:fe:d9: 6a:11:2b:d8:5e:99:f2:10:e7:f0:b6:e4:e0:cb:a9:02:0c:d2: c0:ec:2c:f3:6f:e7:5c:b7:d6:34:95:02:d8:c8:43:ba:a1:6f: 4e:f8:da:8b:ec:22:d9:8c:4a:2f:08:08:77:00:48:da:b9:70: 36:eb:ed:da:56:3e:27:7c:03:c6:cd:01:e4:ae:9a:76:8a:fe: b8:28:47:cb:35:31:47:5c:05:0b:b6:cb:53:3c:db:b1:ed:7c: 4c:02:42:ac:fb:db:4f:ac:d2:42:06:1a:3d:b8:2c:fa:5c:ca: f2:c7:ee:12:4c:98:70:3b:fe:a9:5a:e8:1e:1c:eb:e1:b8:f6: 3e:cf:d9:ec:46:e2:88:14:20:01:51:b6:0e:b0:d4:9a:8e:bb: 22:9f:ce:4a:10:97:46:f3:49:54:cf:df:9b:f8:17:a5:95:c3: 3f:d9:60:9d:47:cf:95:27:f8:d1:d6:34:ec:57:91:3e:4e:5f: a0:0f:71:28:d7:d2:04:79:84:b2:61:52:d8:08:a7:74:56:2a: 28:fb:88:5c:54:25:fe:08:fd:a1:19:41:60:88:a5:3f:2e:05: 07:ec:eb:83:5a:fb:9f:a0:4b:d1:99:a3:20:ef:73:b7:df:b8: d4:8c:85:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUnIKTsXJOeDpTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk YjFjNDVkMjAtMDYyYS00OTY2LWEzMmYtMzVmYmM0N2MzYjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJzLisqkq+XptaZ4kklPRnANqkTG75rtOpuA 5QgpOVASy4vnExySx2X3fxzkUmp+IjXyhpv0uPgXWXh7+JLkjvGlch3T2chkCgWH lURaolHIthuroQq7BGCBfRPLiXm5Odc58EeHHXGQrivZXgeiHnbJNRTqDZuEZ+RH hauFNblRxJuQ84f8Z3qrD2DsHWbDHBpjUqfvIbhuxEKleNQKlxvzBa7iSJlCXzbx VqAdLuD2HToo+bPB898ABohNJR9jZ/y3+MM/ErHFWNAXSBKozUlWuYCj/hhcyfDQ K66xmiRxaahL6wOha7hRnGHSARKYPpQy8yNDPups4SN+6qEnbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxTJPL2b8QDV4wLD7uJ9OGh/cJuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvMjUxNjRiYTEtZjA2Yi0z NDdlLTg3NjQtY2YxM2U0ZGFhZjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICbQ1uBj9sflidkGw562dr+2WoRK9hemfIQ5/C25ODLqQIM0sDsLPNv 51y31jSVAtjIQ7qhb0742ovsItmMSi8ICHcASNq5cDbr7dpWPid8A8bNAeSumnaK /rgoR8s1MUdcBQu2y1M827HtfEwCQqz720+s0kIGGj24LPpcyvLH7hJMmHA7/qla 6B4c6+G49j7P2exG4ogUIAFRtg6w1JqOuyKfzkoQl0bzSVTP35v4F6WVwz/ZYJ1H z5Un+NHWNOxXkT5OX6APcSjX0gR5hLJhUtgIp3RWKij7iFxUJf4I/aEZQWCIpT8u BQfs64Na+5+gS9GZoyDvc7ffuNSMhTQ= -----END CERTIFICATE-----Generated at Sun Oct 11 15:03:33 2026 by rpki-client