$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa File: d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa (raw, json) Hash identifier: SnAKj81gnSMjXBs+A4vDyDnhqquEbOYGK2Y8K6HwiHs= Subject key identifier: 54:EA:61:78:98:CB:AD:DF:D6:1B:FD:29:9F:32:DC:55:A2:D6:DD:F8 Certificate issuer: /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Certificate serial: 010D0C9F4328584F2EED1C61A1B7D9873C634DC0 Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 23470 IP address blocks: 209.222.100.0/24 maxlen: 24 209.222.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:1c:61:a1:b7:d9:87:3c:63:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=42755237-518a-4f2c-967e-dc7efd230746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d9:3e:6f:8f:23:64:8f:d8:8d:b2:c9:81:bf: 51:13:5e:ce:15:3e:da:86:28:82:6e:ae:ec:e9:b8: ff:da:01:76:d2:52:c5:3d:25:00:e1:3d:07:4a:8d: 66:2d:42:6a:d1:06:49:36:f2:83:69:f8:3a:fb:ba: 9a:e3:f8:2f:61:5c:36:6b:10:c2:c5:7b:b5:70:9c: a4:f3:04:fa:e7:49:53:fd:9c:f3:e7:f1:a9:dc:c6: d2:da:db:05:aa:af:86:70:30:ac:62:15:cb:0f:b7: 3f:c0:05:37:b4:be:c5:f6:37:06:a0:47:ac:50:48: 80:ef:27:52:50:8c:e9:ec:26:5d:21:7f:02:43:df: 68:78:38:44:7e:3d:65:4a:23:6c:92:16:c8:e7:70: dd:4a:88:32:ee:f2:c3:7d:e7:d2:6c:1a:d4:85:2b: b9:f3:9f:4f:5d:a4:25:68:92:ad:8a:26:e1:94:38: d4:a4:57:3b:cb:34:a9:6d:30:b3:94:79:46:20:09: c6:61:c5:e3:c3:1b:5d:ed:d2:28:63:5d:ab:1a:74: 24:64:ee:8f:31:77:d3:70:a8:7d:d9:66:f0:23:09: 26:ea:36:70:e3:77:d9:2e:6a:45:c6:41:64:f1:3b: 08:ff:23:df:47:2d:b8:96:03:76:b1:e5:21:06:0c: b7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EA:61:78:98:CB:AD:DF:D6:1B:FD:29:9F:32:DC:55:A2:D6:DD:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d1f16f21-2123-35e0-9e87-9914f0b4d70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl X509v3 Authority Key Identifier: keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer sbgp-ipAddrBlock: critical IPv4: 209.222.100.0/24 209.222.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:fe:c4:fc:d8:6f:73:d0:d6:79:fc:f9:df:3f:9f:bc:b7:4c: df:81:81:09:3e:b7:bc:59:7c:94:d9:d7:65:8f:13:46:e4:b3: c4:9a:60:49:94:8d:c8:9a:f9:c5:ae:3c:5c:7b:b7:d7:e6:71: 49:1b:89:8b:22:5f:d4:26:12:79:6a:78:85:21:e4:ec:93:b0: 01:c1:7b:cb:7d:ff:37:84:d1:4a:3f:3b:b5:81:9f:0d:43:8e: 80:d5:46:1c:2e:ff:f3:e8:6a:b7:59:70:43:1f:bc:62:1d:d7: 20:5d:9e:fd:ae:82:ad:e9:12:41:fa:b7:94:b2:40:a4:0a:46: 13:92:bb:79:b1:ff:48:a3:d2:0c:43:a9:66:1c:d2:dc:d8:a8: 40:e8:8c:81:2e:f1:a3:b0:9a:e5:6d:b3:14:71:e7:8e:93:a1: 16:f1:76:62:2a:da:f8:58:ba:c3:03:f2:c3:d6:a7:3d:53:00: 88:b7:6e:ab:fe:db:59:ce:3a:86:c0:4c:9c:60:ee:50:47:fb: bc:fb:85:36:d6:e8:b2:d9:12:fd:ae:35:82:bf:a7:7b:b3:c2: 55:e5:64:e6:9a:75:e1:e0:ff:b8:05:d2:33:ea:2b:91:e5:a1: e6:bf:e8:e7:23:ac:10:0d:69:ce:31:08:da:51:97:b8:20:71: 59:0d:08:f2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8u7RxhobfZhzxjTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2OWIzMjEtNjliYy00MWM0LWE2ZTEtMzQ5MWRiZmMy NTQ0MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk NDI3NTUyMzctNTE4YS00ZjJjLTk2N2UtZGM3ZWZkMjMwNzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitk+b48jZI/YjbLJgb9RE17OFT7ahiiCbq7s 6bj/2gF20lLFPSUA4T0HSo1mLUJq0QZJNvKDafg6+7qa4/gvYVw2axDCxXu1cJyk 8wT650lT/Zzz5/Gp3MbS2tsFqq+GcDCsYhXLD7c/wAU3tL7F9jcGoEesUEiA7ydS UIzp7CZdIX8CQ99oeDhEfj1lSiNskhbI53DdSogy7vLDfefSbBrUhSu5859PXaQl aJKtiibhlDjUpFc7yzSpbTCzlHlGIAnGYcXjwxtd7dIoY12rGnQkZO6PMXfTcKh9 2WbwIwkm6jZw43fZLmpFxkFk8TsI/yPfRy24lgN2seUhBgy3VQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFTqYXiYy63f1hv9KZ8y3FWi1t34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5 YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkxZGJmYzI1NDQvZDFmMTZmMjEtMjEyMy0z NWUwLTllODctOTkxNGYwYjRkNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWM2OWIzMjEtNjliYy00MWM0LWE2 ZTEtMzQ5MWRiZmMyNTQ0LzljNjliMzIxLTY5YmMtNDFjNC1hNmUxLTM0OTFkYmZj MjU0NC5jcmwwHwYDVR0jBBgwFoAUHjmb1lU0mBF67zRaH+8vJwq9KawwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85YzY5YjMyMS02OWJjLTQxYzQtYTZlMS0zNDkx ZGJmYzI1NDQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA0d5kAwQA 0d5mMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHz+xPzYb3PQ1nn8+d8/n7y3TN+BgQk+t7xZfJTZ12WPE0bk s8SaYEmUjcia+cWuPFx7t9fmcUkbiYsiX9QmEnlqeIUh5OyTsAHBe8t9/zeE0Uo/ O7WBnw1DjoDVRhwu//PoardZcEMfvGId1yBdnv2ugq3pEkH6t5SyQKQKRhOSu3mx /0ij0gxDqWYc0tzYqEDojIEu8aOwmuVtsxRx546ToRbxdmIq2vhYusMD8sPWpz1T AIi3bqv+21nOOobATJxg7lBH+7z7hTbW6LLZEv2uNYK/p3uzwlXlZOaadeHg/7gF 0jPqK5Hloea/6OcjrBANac4xCNpRl7ggcVkNCPI= -----END CERTIFICATE-----Generated at Thu Oct 8 08:41:17 2026 by rpki-client