$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7e97c27-2ab3-427f-8e53-bccc0725a7e7/bc06b0cd-9d3f-3c57-8e2d-ba67a24f1442.roa File: bc06b0cd-9d3f-3c57-8e2d-ba67a24f1442.roa (raw, json) Hash identifier: PfSkc7Uwykb5n7T+joGYF8a8a2ATvgC/367WR5uxkto= Subject key identifier: 99:0A:FB:DA:D6:69:97:38:BB:0E:39:B5:49:AD:43:D9:2D:6A:F1:3D Certificate issuer: /CN=a7e97c27-2ab3-427f-8e53-bccc0725a7e7 Certificate serial: 010D0C9F4328584EA797E4720BA9D69ACF4795A0 Authority key identifier: 75:F4:51:09:3B:8C:07:31:1B:F6:62:A9:27:58:F7:61:6B:05:D3:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7e97c27-2ab3-427f-8e53-bccc0725a7e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7e97c27-2ab3-427f-8e53-bccc0725a7e7/bc06b0cd-9d3f-3c57-8e2d-ba67a24f1442.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22196 IP address blocks: 209.87.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7e97c27-2ab3-427f-8e53-bccc0725a7e7/a7e97c27-2ab3-427f-8e53-bccc0725a7e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7e97c27-2ab3-427f-8e53-bccc0725a7e7/a7e97c27-2ab3-427f-8e53-bccc0725a7e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7e97c27-2ab3-427f-8e53-bccc0725a7e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:e4:72:0b:a9:d6:9a:cf:47:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e97c27-2ab3-427f-8e53-bccc0725a7e7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=955b2812-4902-4cef-ba6d-5f5017644a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:56:ca:ee:b6:fe:41:d7:a9:06:24:7f:ce:3d: 00:b2:e8:e1:8c:0b:32:b2:85:24:bd:49:88:79:d2: 61:f6:25:11:b4:68:97:39:ae:bd:03:1d:82:95:c8: da:7f:47:e2:5a:e6:5b:58:04:41:79:79:6c:51:b5: 78:05:e1:46:df:dc:82:88:ed:67:ea:a0:89:ac:45: c3:f2:a4:b0:5d:3b:32:b2:65:ad:18:86:83:11:c0: 30:13:a6:40:54:42:39:e3:d6:60:f3:87:ed:29:31: f7:6f:1d:b6:6d:64:49:fb:08:a7:da:30:33:d9:a9: 5e:80:b2:7f:ab:dc:56:50:24:3f:8d:62:57:ca:0b: 05:95:82:27:37:b7:84:ff:03:2f:7a:5e:95:c2:bc: 57:a6:70:78:05:56:20:74:54:01:46:53:70:32:9a: 3d:3b:8c:b8:61:23:96:13:67:08:43:1f:bb:11:10: 5d:dc:df:20:98:33:0d:3a:85:c4:a8:ab:f3:65:77: 81:74:de:89:81:a1:6e:c9:24:70:fe:47:23:bf:3f: b6:57:f9:74:cd:f8:48:a6:51:35:99:e6:09:b6:a5: 7a:53:96:65:76:56:95:08:44:92:a5:a0:68:38:95: 8c:e6:2b:e5:70:16:ad:fa:06:cb:a6:0d:b1:4b:c4: e4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0A:FB:DA:D6:69:97:38:BB:0E:39:B5:49:AD:43:D9:2D:6A:F1:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7e97c27-2ab3-427f-8e53-bccc0725a7e7/bc06b0cd-9d3f-3c57-8e2d-ba67a24f1442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7e97c27-2ab3-427f-8e53-bccc0725a7e7/a7e97c27-2ab3-427f-8e53-bccc0725a7e7.crl X509v3 Authority Key Identifier: keyid:75:F4:51:09:3B:8C:07:31:1B:F6:62:A9:27:58:F7:61:6B:05:D3:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a7e97c27-2ab3-427f-8e53-bccc0725a7e7.cer sbgp-ipAddrBlock: critical IPv4: 209.87.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:39:f3:54:3a:ff:cd:31:11:1d:ff:a8:9d:70:c8:b6:f7:34: 2f:6d:48:8d:06:e4:73:8e:d9:fd:f7:99:ec:6c:6e:c3:b0:cb: db:35:d9:36:b1:3b:9d:26:ad:81:88:44:dd:0e:27:eb:0e:a2: c9:67:5f:05:0d:4b:b6:66:88:2b:7d:4a:12:dc:f4:73:bc:61: aa:6a:c6:5e:f3:03:44:29:d6:2f:a8:c7:1d:98:b9:cd:85:02: 30:40:57:b2:23:56:fc:39:6b:ba:c2:bf:a8:64:42:c2:d1:54: ba:df:a8:e5:5f:a9:7b:82:3a:46:0a:e6:56:0e:7b:13:ea:5f: 5a:ec:2a:fe:54:ae:79:77:77:ac:c5:56:b8:a4:07:86:db:9a: 10:25:f5:d3:15:30:36:32:52:29:81:62:c1:f4:68:7c:fd:bb: 28:ca:c6:dc:0d:0f:b1:5a:55:01:f8:13:ce:ad:fd:ed:88:1d: 7b:c0:4f:bc:2b:25:b5:a6:54:67:58:29:00:fa:ba:b7:18:83: 3a:00:90:68:5a:02:7c:03:fd:81:35:2a:e2:cf:56:d5:a9:7c: 57:98:43:a5:b6:3e:ab:33:41:b7:52:7f:3a:fe:aa:3e:a1:2d: f5:f0:87:73:b2:eb:14:43:45:91:0d:5f:cb:d4:c3:4b:71:0d: b7:ec:6d:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl+RyC6nWms9HlaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdlOTdjMjctMmFiMy00MjdmLThlNTMtYmNjYzA3MjVh N2U3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OTU1YjI4MTItNDkwMi00Y2VmLWJhNmQtNWY1MDE3NjQ0YTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1bK7rb+QdepBiR/zj0AsujhjAsysoUkvUmI edJh9iURtGiXOa69Ax2Clcjaf0fiWuZbWARBeXlsUbV4BeFG39yCiO1n6qCJrEXD 8qSwXTsysmWtGIaDEcAwE6ZAVEI549Zg84ftKTH3bx22bWRJ+win2jAz2alegLJ/ q9xWUCQ/jWJXygsFlYInN7eE/wMvel6VwrxXpnB4BVYgdFQBRlNwMpo9O4y4YSOW E2cIQx+7ERBd3N8gmDMNOoXEqKvzZXeBdN6JgaFuySRw/kcjvz+2V/l0zfhIplE1 meYJtqV6U5ZldlaVCESSpaBoOJWM5ivlcBat+gbLpg2xS8Tk/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkK+9rWaZc4uw45tUmtQ9ktavE9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hN2U5 N2MyNy0yYWIzLTQyN2YtOGU1My1iY2NjMDcyNWE3ZTcvYmMwNmIwY2QtOWQzZi0z YzU3LThlMmQtYmE2N2EyNGYxNDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYTdlOTdjMjctMmFiMy00MjdmLThl NTMtYmNjYzA3MjVhN2U3L2E3ZTk3YzI3LTJhYjMtNDI3Zi04ZTUzLWJjY2MwNzI1 YTdlNy5jcmwwHwYDVR0jBBgwFoAUdfRRCTuMBzEb9mKpJ1j3YWsF0zowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hN2U5N2MyNy0yYWIzLTQyN2YtOGU1My1iY2Nj MDcyNWE3ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VeKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4581Q6/80xER3/qJ1wyLb3NC9tSI0G5HOO2f33mexsbsOwy9s12Tax O50mrYGIRN0OJ+sOoslnXwUNS7ZmiCt9ShLc9HO8Yapqxl7zA0Qp1i+oxx2Yuc2F AjBAV7IjVvw5a7rCv6hkQsLRVLrfqOVfqXuCOkYK5lYOexPqX1rsKv5Urnl3d6zF VrikB4bbmhAl9dMVMDYyUimBYsH0aHz9uyjKxtwND7FaVQH4E86t/e2IHXvAT7wr JbWmVGdYKQD6urcYgzoAkGhaAnwD/YE1KuLPVtWpfFeYQ6W2PqszQbdSfzr+qj6h LfXwh3Oy6xRDRZENX8vUw0txDbfsbY0= -----END CERTIFICATE-----Generated at Sat Sep 5 04:38:03 2026 by rpki-client