$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa File: d9010bb7-b127-300d-8f26-9f8325848a6d.roa (raw, json) Hash identifier: 0CbR7S40UGuW54FoBatjzTogY9nv4R56Hco6xQXVUbI= Subject key identifier: 67:7C:11:D0:DC:DA:80:B0:CD:1D:57:44:CD:8E:F4:1D:04:87:CA:C9 Certificate issuer: /CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Certificate serial: 010D0C9F4328584F549D6F898264C0116764E9C0 Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 208.71.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:6f:89:82:64:c0:11:67:64:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=4688a62c-8214-4087-aaa0-275bc8e3d886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9d:e7:80:b5:17:56:6f:ef:af:62:b0:62:dc: 80:7d:c1:a0:c3:b2:dd:51:1b:88:df:f4:52:a8:d8: 66:6c:1f:0d:ce:40:1b:0f:b0:7b:dc:f0:cf:a3:58: a3:92:f3:2d:0f:7d:77:eb:37:e8:25:2f:f8:9a:46: d6:4f:e7:1e:8f:1a:91:ae:44:da:86:2f:ec:96:05: 63:ee:57:3b:b7:81:e4:07:fc:30:5c:4d:78:a8:bd: 7a:b5:92:fd:1b:18:f6:97:a8:84:d6:c7:ad:c8:7e: b6:39:e0:ff:64:73:dc:a8:4d:c1:5b:a5:55:14:b5: ad:ad:b3:7d:4a:0d:f5:eb:cd:06:7a:a5:bd:69:85: 40:1e:e6:74:0e:09:00:8d:80:58:11:8e:0f:07:2a: 65:04:10:d3:7b:c1:99:ea:92:2f:a4:93:27:fe:45: 36:a0:1f:5c:96:fe:74:d6:e4:3c:95:f2:15:04:b4: 77:73:71:ee:88:46:5c:d2:f2:f4:c6:8f:f0:5a:81: a5:2c:e1:fd:a1:01:a3:33:97:67:cf:39:f6:b5:55: 92:68:4b:d5:5f:71:98:83:3a:a9:9e:84:5c:12:b4: b3:de:5f:67:ba:f5:8b:16:5e:25:23:a9:70:ae:a5: ef:8e:e1:f8:6c:09:6e:4c:b2:68:09:f1:12:da:e7: 49:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7C:11:D0:DC:DA:80:B0:CD:1D:57:44:CD:8E:F4:1D:04:87:CA:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/d9010bb7-b127-300d-8f26-9f8325848a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl X509v3 Authority Key Identifier: keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer sbgp-ipAddrBlock: critical IPv4: 208.71.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:d6:53:8e:25:1e:68:2e:6e:59:80:78:5a:f8:a9:8d:1a:69: b1:94:ca:01:1b:b1:c5:f5:4e:53:2f:ef:6a:76:5f:5a:60:2a: 5c:41:15:a3:99:75:13:07:a4:0b:12:4d:09:60:6e:ce:de:b2: 7f:19:5f:49:4e:77:82:e6:08:96:3c:18:4b:7f:61:1d:b1:39: 2b:0a:64:cd:b7:1f:b9:1b:f4:62:fd:21:b9:de:b5:3f:1e:5c: 25:b9:6c:0b:5c:f1:08:20:3b:48:f1:68:d9:a9:98:a2:12:04: 38:b7:2b:ac:2a:da:19:8b:bd:89:a8:97:10:09:ea:e9:9d:c7: 5a:da:49:9e:39:94:25:b7:7c:db:83:46:0d:e2:38:88:19:d4: d2:8e:d9:d4:e2:56:63:c7:24:9b:7f:ff:1e:69:6e:4d:6f:85: 15:47:aa:a9:f2:9e:3a:a9:40:97:a9:18:08:b9:ee:f7:bb:36: 78:69:40:23:70:08:ca:bb:70:14:80:73:62:94:59:ee:00:99: d2:db:fa:66:ec:b1:73:a0:14:1e:d6:16:ef:98:22:65:00:5b: ee:7e:d6:5f:b5:22:a6:f7:0e:cf:6e:ce:33:ee:8e:b9:7c:18: da:e8:bc:d8:88:9e:08:cd:52:bf:04:64:62:0e:37:b6:58:f7: 99:f6:33:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnW+JgmTAEWdk6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTA5YTFiYTQtZjAzMy00ZTliLTg5ZTEtOGRmMDczMzc1 YjE3MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NDY4OGE2MmMtODIxNC00MDg3LWFhYTAtMjc1YmM4ZTNkODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ3ngLUXVm/vr2KwYtyAfcGgw7LdURuI3/RS qNhmbB8NzkAbD7B73PDPo1ijkvMtD3136zfoJS/4mkbWT+cejxqRrkTahi/slgVj 7lc7t4HkB/wwXE14qL16tZL9Gxj2l6iE1setyH62OeD/ZHPcqE3BW6VVFLWtrbN9 Sg31680GeqW9aYVAHuZ0DgkAjYBYEY4PByplBBDTe8GZ6pIvpJMn/kU2oB9clv50 1uQ8lfIVBLR3c3HuiEZc0vL0xo/wWoGlLOH9oQGjM5dnzzn2tVWSaEvVX3GYgzqp noRcErSz3l9nuvWLFl4lI6lwrqXvjuH4bAluTLJoCfES2udJ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd8EdDc2oCwzR1XRM2O9B0Eh8rJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MDlh MWJhNC1mMDMzLTRlOWItODllMS04ZGYwNzMzNzViMTcvZDkwMTBiYjctYjEyNy0z MDBkLThmMjYtOWY4MzI1ODQ4YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTA5YTFiYTQtZjAzMy00ZTliLTg5 ZTEtOGRmMDczMzc1YjE3LzUwOWExYmE0LWYwMzMtNGU5Yi04OWUxLThkZjA3MzM3 NWIxNy5jcmwwHwYDVR0jBBgwFoAUfM1NY/lw+7+G/z74RQ5Pru6ZV4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MDlhMWJhNC1mMDMzLTRlOWItODllMS04ZGYw NzMzNzViMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTWU44lHmgublmAeFr4qY0aabGUygEbscX1TlMv72p2X1pgKlxBFaOZ dRMHpAsSTQlgbs7esn8ZX0lOd4LmCJY8GEt/YR2xOSsKZM23H7kb9GL9IbnetT8e XCW5bAtc8QggO0jxaNmpmKISBDi3K6wq2hmLvYmolxAJ6umdx1raSZ45lCW3fNuD Rg3iOIgZ1NKO2dTiVmPHJJt//x5pbk1vhRVHqqnynjqpQJepGAi57ve7NnhpQCNw CMq7cBSAc2KUWe4AmdLb+mbssXOgFB7WFu+YImUAW+5+1l+1Iqb3Ds9uzjPujrl8 GNrovNiIngjNUr8EZGION7ZY95n2MzA= -----END CERTIFICATE-----Generated at Fri Oct 9 21:16:33 2026 by rpki-client