$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/ab591c93-613c-3098-aeeb-3f9ed3b4760b.roa File: ab591c93-613c-3098-aeeb-3f9ed3b4760b.roa (raw, json) Hash identifier: QFPDv59P4Sh+u8CvJguAfxX6w1A7r0yvdQ7zqvEE4eU= Subject key identifier: 8D:AB:F2:17:EB:96:B3:BA:77:B1:91:7B:12:5A:66:70:73:29:E2:4F Certificate issuer: /CN=a5099040-6590-4125-a5e9-764c474479ba Certificate serial: 010D0C9F4328584F2F5BF34BFF0E1E854D5E0F40 Authority key identifier: 71:71:F1:55:08:90:28:26:77:94:8F:E3:C1:98:7C:B3:BE:C9:0A:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/ab591c93-613c-3098-aeeb-3f9ed3b4760b.roa Signing time: Tue 15 Sep 2026 16:43:43 +0000 ROA not before: Tue 15 Sep 2026 16:43:43 +0000 ROA not after: Mon 14 Dec 2026 17:43:43 +0000 asID: 46175 IP address blocks: 209.41.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/a5099040-6590-4125-a5e9-764c474479ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/a5099040-6590-4125-a5e9-764c474479ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2f:5b:f3:4b:ff:0e:1e:85:4d:5e:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5099040-6590-4125-a5e9-764c474479ba Validity Not Before: Sep 15 16:43:43 2026 GMT Not After : Dec 14 17:43:43 2026 GMT Subject: CN=b3ce0b25-03bc-4f64-906d-e4a61e27f5f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fd:f8:79:6f:45:89:d1:3d:4e:ed:66:1e:df: 89:67:f2:c8:07:93:93:6e:c5:41:7f:15:d6:ca:bc: 61:80:eb:1a:c9:58:6a:43:86:e4:71:b0:8a:f1:09: ba:07:30:ef:23:a9:b5:c1:62:d0:15:96:18:27:9d: 04:c2:9b:1d:b5:5b:27:40:18:a0:8c:3d:43:fb:f6: e1:a3:39:35:2c:7c:58:a2:f0:85:25:2f:17:b4:6b: 61:63:db:16:c3:fe:2c:0b:b1:ce:a1:e6:8e:8c:f9: 83:dc:8c:8c:4e:58:7d:01:c2:75:b4:2e:9f:6b:ff: 8e:b8:dc:a6:98:e7:12:86:81:8c:af:3e:8b:d1:45: bb:fe:f7:af:f8:6c:7e:f7:a0:00:bc:38:46:17:f3: 91:f6:77:25:33:8a:27:4e:98:19:af:bb:d8:21:c8: 79:ca:9f:b0:b1:64:fb:de:33:8f:31:f7:5d:3c:ea: e0:cd:7f:0c:c9:0d:de:d6:f9:67:74:6d:22:ac:dd: 6d:90:27:89:2f:5a:3e:97:58:1d:9a:55:d2:d1:43: 23:f8:60:ac:fa:7e:87:ff:b4:11:d1:58:f3:bb:82: 44:de:ba:84:03:60:fb:90:68:09:4e:98:60:21:ae: c8:9c:e6:d8:25:d9:37:8a:89:13:47:31:e7:28:e5: 30:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:AB:F2:17:EB:96:B3:BA:77:B1:91:7B:12:5A:66:70:73:29:E2:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/ab591c93-613c-3098-aeeb-3f9ed3b4760b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba/a5099040-6590-4125-a5e9-764c474479ba.crl X509v3 Authority Key Identifier: keyid:71:71:F1:55:08:90:28:26:77:94:8F:E3:C1:98:7C:B3:BE:C9:0A:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a5099040-6590-4125-a5e9-764c474479ba.cer sbgp-ipAddrBlock: critical IPv4: 209.41.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fc:ca:fd:e7:7e:23:cd:f7:ed:3f:53:78:7a:f1:57:8a:f6: 89:51:04:05:5f:d3:18:a8:b3:ed:57:78:14:59:2b:70:ac:dd: a1:a3:2f:f4:ed:58:56:cc:f4:0c:ab:fb:c0:0f:32:57:f1:cd: 3f:58:d0:6f:80:95:9a:46:2e:7f:1f:53:70:4e:0e:19:78:8a: a1:d8:a2:ab:09:ec:ce:2e:29:d7:9b:1d:6f:b7:54:28:d6:5c: 9e:5f:9f:4e:45:fb:ef:7a:8d:5b:aa:dc:aa:e7:60:99:8c:db: e1:b6:3f:f5:ed:68:de:40:83:a3:4c:f5:78:21:4b:16:29:32: f9:11:ea:fe:84:fc:25:e0:03:0c:02:13:88:4c:bb:3e:84:05: c9:58:78:57:32:13:f5:5f:91:a1:74:3b:d5:eb:ff:ab:71:38: e1:ba:57:1c:9f:75:fa:46:57:de:02:b0:d8:fa:f4:d5:bf:57: d0:b9:fa:c7:3b:41:49:a5:f0:a4:4f:17:f0:61:e2:2f:56:41: bf:71:b3:d5:82:0c:6f:8f:25:ba:b5:69:10:f8:82:70:8e:8c: bf:b2:74:66:6f:a6:b9:20:c4:14:8a:f5:70:76:7b:87:3e:45: a0:2c:fe:1d:a4:5d:19:e1:85:fd:16:11:d5:c0:c7:5d:5c:0f: e8:e6:42:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8vW/NL/w4ehU1eD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUwOTkwNDAtNjU5MC00MTI1LWE1ZTktNzY0YzQ3NDQ3 OWJhMB4XDTI2MDkxNTE2NDM0M1oXDTI2MTIxNDE3NDM0M1owLzEtMCsGA1UEAxMk YjNjZTBiMjUtMDNiYy00ZjY0LTkwNmQtZTRhNjFlMjdmNWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/34eW9FidE9Tu1mHt+JZ/LIB5OTbsVBfxXW yrxhgOsayVhqQ4bkcbCK8Qm6BzDvI6m1wWLQFZYYJ50EwpsdtVsnQBigjD1D+/bh ozk1LHxYovCFJS8XtGthY9sWw/4sC7HOoeaOjPmD3IyMTlh9AcJ1tC6fa/+OuNym mOcShoGMrz6L0UW7/vev+Gx+96AAvDhGF/OR9nclM4onTpgZr7vYIch5yp+wsWT7 3jOPMfddPOrgzX8MyQ3e1vlndG0irN1tkCeJL1o+l1gdmlXS0UMj+GCs+n6H/7QR 0Vjzu4JE3rqEA2D7kGgJTphgIa7InObYJdk3iokTRzHnKOUwqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2r8hfrlrO6d7GRexJaZnBzKeJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9hNTA5 OTA0MC02NTkwLTQxMjUtYTVlOS03NjRjNDc0NDc5YmEvYWI1OTFjOTMtNjEzYy0z MDk4LWFlZWItM2Y5ZWQzYjQ3NjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYTUwOTkwNDAtNjU5MC00MTI1LWE1 ZTktNzY0YzQ3NDQ3OWJhL2E1MDk5MDQwLTY1OTAtNDEyNS1hNWU5LTc2NGM0NzQ0 NzliYS5jcmwwHwYDVR0jBBgwFoAUcXHxVQiQKCZ3lI/jwZh8s77JCh8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9hNTA5OTA0MC02NTkwLTQxMjUtYTVlOS03NjRj NDc0NDc5YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0SlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf8yv3nfiPN9+0/U3h68VeK9olRBAVf0xios+1XeBRZK3Cs3aGjL/Tt WFbM9Ayr+8APMlfxzT9Y0G+AlZpGLn8fU3BODhl4iqHYoqsJ7M4uKdebHW+3VCjW XJ5fn05F++96jVuq3KrnYJmM2+G2P/XtaN5Ag6NM9XghSxYpMvkR6v6E/CXgAwwC E4hMuz6EBclYeFcyE/VfkaF0O9Xr/6txOOG6VxyfdfpGV94CsNj69NW/V9C5+sc7 QUml8KRPF/Bh4i9WQb9xs9WCDG+PJbq1aRD4gnCOjL+ydGZvprkgxBSK9XB2e4c+ RaAs/h2kXRnhhf0WEdXAx11cD+jmQpw= -----END CERTIFICATE-----Generated at Wed Sep 16 13:12:23 2026 by rpki-client