$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9d0b0014-328a-3126-ac3b-86da0d233355.roa File: 9d0b0014-328a-3126-ac3b-86da0d233355.roa (raw, json) Hash identifier: urHmCjEHyBxiReRBZbtXip/in/s2dTWHF0J+EKBTpgE= Subject key identifier: 74:C7:9C:1D:D2:4B:73:F5:B7:D0:8E:0D:09:18:87:1C:87:95:50:79 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F4973DD86F042515C34484980 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9d0b0014-328a-3126-ac3b-86da0d233355.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21734 IP address blocks: 207.218.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:dd:86:f0:42:51:5c:34:48:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ce7444de-a41c-4425-9ce0-7ea087dc72b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5a:52:4e:53:46:40:81:c5:19:11:92:fe:c4: 79:f9:e9:21:1f:cf:72:03:15:86:4e:87:ab:77:7a: 5c:5c:cf:57:fc:22:7c:0b:fa:1a:2d:4b:aa:f9:56: 61:62:6c:72:88:0d:71:69:c4:ef:4d:5b:ab:0f:2d: 74:ad:41:ca:41:0c:e9:02:da:0a:4a:de:76:eb:bb: 9e:7b:80:7e:8f:bf:65:74:04:73:ee:a0:98:45:82: 65:be:e4:c0:03:5f:b3:98:9b:7a:12:00:1e:e6:c9: 02:53:ab:1a:04:f3:0e:82:f6:41:51:5f:e9:59:f0: 04:8d:41:5a:2f:ac:c8:6f:a5:cd:73:08:e0:bb:1d: 84:cf:be:4d:6b:68:30:0e:ba:08:ad:f2:9c:32:1d: 95:82:5b:4b:7e:5b:19:e3:c7:a0:a6:4a:8d:89:b4: 5e:a2:5e:0e:4d:fa:6f:54:09:d2:78:71:53:81:71: b5:e1:c1:b8:a1:ea:ec:3b:84:2c:43:38:99:11:c5: 94:d3:35:20:ce:02:a6:1f:8d:6b:55:c0:a8:bf:7c: d9:c6:a6:32:8a:01:96:98:d0:98:ea:6f:2e:e1:f1: a0:73:15:d8:06:ab:48:d0:42:4c:c3:a3:c4:7f:1f: 36:84:f2:56:bb:12:c3:09:b3:da:e7:0d:1d:62:07: f9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C7:9C:1D:D2:4B:73:F5:B7:D0:8E:0D:09:18:87:1C:87:95:50:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9d0b0014-328a-3126-ac3b-86da0d233355.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 207.218.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:39:b4:03:7c:82:f2:07:27:d6:e9:d2:31:e5:97:8a:d2:4d: 0f:93:b9:b0:d2:9f:06:d0:db:96:d6:03:ee:a0:97:0c:74:2b: 10:70:ac:33:55:49:47:3b:c9:a5:1b:a8:8c:05:43:9c:0a:14: df:bd:44:81:00:37:79:8f:9a:20:34:15:79:88:48:64:2a:2b: 86:67:6a:b0:5f:64:d8:b6:c5:b7:68:f0:53:f2:2d:c2:5e:51: 44:85:1d:09:b8:94:b6:14:21:ed:40:13:b0:6c:a1:72:00:ad: c1:11:1f:b9:ff:a2:50:89:cf:e1:59:30:9c:ea:e5:6d:c7:6f: 8e:4c:39:90:3c:43:3a:eb:83:7c:56:dc:10:8a:c3:6c:54:5a: 0b:e3:93:3d:91:58:3b:b3:78:9c:32:53:bf:de:d1:e6:af:7a: 09:b2:7a:32:b0:da:f5:bb:63:2b:ef:6d:6d:0e:e6:26:ea:44: 3a:01:59:bc:bb:c2:d0:3a:87:dc:5b:6c:75:4c:d9:24:85:1b: a0:6b:09:2c:51:50:fe:f6:e6:bc:c6:7e:c4:54:9d:fc:de:a7: b4:0c:4a:59:dc:0d:59:0b:07:75:5a:cf:8b:af:3e:a1:5a:2b: 62:dc:d0:f0:d4:c8:33:f7:6e:ba:11:60:bd:ee:0d:80:b5:53: fd:ea:e8:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc92G8EJRXDRISYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2U3NDQ0ZGUtYTQxYy00NDI1LTljZTAtN2VhMDg3ZGM3MmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1pSTlNGQIHFGRGS/sR5+ekhH89yAxWGToer d3pcXM9X/CJ8C/oaLUuq+VZhYmxyiA1xacTvTVurDy10rUHKQQzpAtoKSt5267ue e4B+j79ldARz7qCYRYJlvuTAA1+zmJt6EgAe5skCU6saBPMOgvZBUV/pWfAEjUFa L6zIb6XNcwjgux2Ez75Na2gwDroIrfKcMh2VgltLflsZ48egpkqNibReol4OTfpv VAnSeHFTgXG14cG4oersO4QsQziZEcWU0zUgzgKmH41rVcCov3zZxqYyigGWmNCY 6m8u4fGgcxXYBqtI0EJMw6PEfx82hPJWuxLDCbPa5w0dYgf5WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTHnB3SS3P1t9CODQkYhxyHlVB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOWQwYjAwMTQtMzI4YS0z MTI2LWFjM2ItODZkYTBkMjMzMzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz9qaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD05tAN8gvIHJ9bp0jHll4rSTQ+TubDSnwbQ25bWA+6glwx0KxBwrDNV SUc7yaUbqIwFQ5wKFN+9RIEAN3mPmiA0FXmISGQqK4ZnarBfZNi2xbdo8FPyLcJe UUSFHQm4lLYUIe1AE7BsoXIArcERH7n/olCJz+FZMJzq5W3Hb45MOZA8Qzrrg3xW 3BCKw2xUWgvjkz2RWDuzeJwyU7/e0eavegmyejKw2vW7YyvvbW0O5ibqRDoBWby7 wtA6h9xbbHVM2SSFG6BrCSxRUP725rzGfsRUnfzep7QMSlncDVkLB3Vaz4uvPqFa K2Lc0PDUyDP3broRYL3uDYC1U/3q6NY= -----END CERTIFICATE-----Generated at Mon Sep 28 20:28:27 2026 by rpki-client