$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3baafcc-c361-335e-84bb-5a3a91705f0c.roa File: d3baafcc-c361-335e-84bb-5a3a91705f0c.roa (raw, json) Hash identifier: twTd2koYaBliafWBS+naWoyCZdQ0bgBV5MXejJHrnmI= Subject key identifier: 99:9C:44:D6:62:9C:19:56:53:6D:21:AC:8B:FE:69:E9:B7:07:7C:6F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ED001FC81719F3AD54D221F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3baafcc-c361-335e-84bb-5a3a91705f0c.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 7342 IP address blocks: 209.131.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:fc:81:71:9f:3a:d5:4d:22:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=bb2eb516-8df1-4aa5-ade1-99f5fae5c23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:64:f2:36:41:e5:0c:71:64:ec:28:b3:e0: 91:44:10:16:84:5b:d1:97:9c:91:37:cd:7d:6a:7d: 56:80:b1:4f:65:db:cd:60:1a:31:e6:d8:d3:b7:89: b6:72:b5:0d:a4:a4:42:19:01:7b:76:8c:98:31:6a: b6:b9:b5:a4:f7:b8:24:d6:73:dd:99:d6:fa:44:2d: 0c:61:78:06:05:c0:ed:86:e6:b8:5a:58:f1:71:7e: f8:c3:98:86:f4:d3:30:de:8d:f2:f4:cd:01:f5:4e: c8:3d:42:39:ec:d4:58:f4:8b:85:5a:b2:bf:d6:ff: 9d:14:9d:78:f7:19:ce:60:c4:57:ab:ab:0c:4a:74: 0a:ae:8c:96:e3:c2:63:e5:ef:f8:09:99:be:f4:8f: b6:a1:31:85:2e:25:9f:9d:7a:3a:b8:a3:bd:96:4c: bf:fc:05:c9:a2:d3:b8:53:72:eb:8a:c2:7c:29:2a: a5:18:00:2a:d8:6a:5a:b0:b7:f9:a0:47:47:f0:9e: a8:dc:d4:70:d0:e0:e8:80:44:e8:59:81:91:7d:fc: c4:5d:61:f6:2a:36:da:ae:ef:d3:f9:9d:d4:d4:fb: 87:7b:5a:e4:30:95:86:64:21:80:51:40:03:57:28: 7c:96:1a:b2:ce:83:cf:46:7f:f8:41:1e:e7:fb:63: 74:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9C:44:D6:62:9C:19:56:53:6D:21:AC:8B:FE:69:E9:B7:07:7C:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3baafcc-c361-335e-84bb-5a3a91705f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:65:de:13:07:37:fd:7b:64:50:a2:54:c0:b0:4d:0e:d6:0c: 7b:a3:b5:13:2f:8f:25:73:13:ea:5d:5f:8c:dd:b0:3c:e0:2c: 05:7f:ea:16:40:35:3e:ed:dd:04:f8:26:30:4f:03:2b:00:08: 8a:86:77:7a:ba:a6:09:fb:5f:29:df:97:43:06:81:c5:80:b6: 5c:58:4e:b4:80:d2:b1:85:0f:55:85:43:5e:7c:90:49:47:4f: 2c:cd:35:fd:13:f9:a3:0a:68:4d:6c:6f:9a:e2:00:ba:87:cc: 93:b9:36:1d:b6:5a:c0:3d:1b:e3:fa:f8:9e:20:8c:5c:58:e1: 87:d2:67:ff:7d:8b:ca:8d:ca:75:1f:e7:95:1a:6b:20:16:e6: 65:a3:45:67:ae:02:3b:f3:14:62:f6:83:53:10:34:00:ec:41: 2a:81:09:e6:34:32:d1:1f:bc:22:80:4f:bc:02:f1:b4:cd:6d: 35:61:fc:50:dc:7f:14:d3:02:c8:2b:34:26:e3:12:bd:24:9f: a4:6c:4d:1f:11:6c:70:88:88:79:1f:53:d3:35:8d:af:54:42: 27:38:d4:00:ca:06:a5:0a:9c:ea:5c:41:32:b9:c0:a2:c9:3e: 22:e0:68:a8:57:1c:9b:e0:90:ee:fc:ef:88:26:47:41:bb:35: de:53:13:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfyBcZ861U0iH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk YmIyZWI1MTYtOGRmMS00YWE1LWFkZTEtOTlmNWZhZTVjMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt5k8jZB5QxxZOwos+CRRBAWhFvRl5yRN819 an1WgLFPZdvNYBox5tjTt4m2crUNpKRCGQF7doyYMWq2ubWk97gk1nPdmdb6RC0M YXgGBcDthua4WljxcX74w5iG9NMw3o3y9M0B9U7IPUI57NRY9IuFWrK/1v+dFJ14 9xnOYMRXq6sMSnQKroyW48Jj5e/4CZm+9I+2oTGFLiWfnXo6uKO9lky//AXJotO4 U3LrisJ8KSqlGAAq2GpasLf5oEdH8J6o3NRw0ODogEToWYGRffzEXWH2Kjbaru/T +Z3U1PuHe1rkMJWGZCGAUUADVyh8lhqyzoPPRn/4QR7n+2N05wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmcRNZinBlWU20hrIv+aem3B3xvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDNiYWFmY2MtYzM2MS0z MzVlLTg0YmItNWEzYTkxNzA1ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRl3hMHN/17ZFCiVMCwTQ7WDHujtRMvjyVzE+pdX4zdsDzgLAV/6hZA NT7t3QT4JjBPAysACIqGd3q6pgn7Xynfl0MGgcWAtlxYTrSA0rGFD1WFQ158kElH TyzNNf0T+aMKaE1sb5riALqHzJO5Nh22WsA9G+P6+J4gjFxY4YfSZ/99i8qNynUf 55UaayAW5mWjRWeuAjvzFGL2g1MQNADsQSqBCeY0MtEfvCKAT7wC8bTNbTVh/FDc fxTTAsgrNCbjEr0kn6RsTR8RbHCIiHkfU9M1ja9UQic41ADKBqUKnOpcQTK5wKLJ PiLgaKhXHJvgkO7874gmR0G7Nd5TE1c= -----END CERTIFICATE-----Generated at Wed Aug 19 16:03:33 2026 by rpki-client