$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa File: daf14092-dafe-3ba6-9746-8236744966f4.roa (raw, json) Hash identifier: vxoRo4DvN4vKTufioy11pGHA+cVehaJspHkQmkaQRI8= Subject key identifier: 19:4D:BB:0A:0D:26:04:C1:C3:1F:A8:B7:2B:BD:05:5B:13:42:35:99 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584EBB11B995920A62FBF6252DC0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 397422 IP address blocks: 209.237.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:b9:95:92:0a:62:fb:f6:25:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=ab6a1f94-c145-45e1-900d-86d71823f251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:31:50:56:d3:8d:7f:f3:5c:99:04:3d:e5:2c: 47:ae:3f:c9:ee:3a:bd:80:29:3d:85:0a:37:44:f5: ba:90:f8:54:fb:d6:d5:26:61:21:0c:5e:2e:e6:e5: f8:28:b1:44:59:ac:1b:3a:34:28:b3:88:72:a5:43: 35:16:b8:82:55:04:4c:e1:52:76:a6:9b:a2:b8:a0: dc:23:43:64:17:98:e9:1e:07:a5:cc:e8:04:df:9a: 90:ee:a1:4e:f3:27:4b:1a:c6:df:8c:04:6d:4c:c4: 1a:ed:73:05:88:e3:0c:c3:f5:10:82:ca:35:64:9c: 5f:36:28:7b:a6:83:a3:36:a5:f8:c7:cb:46:85:17: c6:6b:46:54:1c:13:c2:f3:fe:6a:a0:65:b0:f6:8c: ec:b2:9c:bf:25:c5:b6:ec:6a:67:5e:f7:1e:b5:3c: c2:1c:26:a2:87:3b:21:24:af:40:0f:8e:54:c4:98: 79:65:0d:86:35:32:78:dc:8b:95:a6:a3:5e:fc:66: e9:fe:ed:f6:51:91:ff:c4:b8:bb:25:8e:86:74:b5: a7:ce:bd:d2:69:e9:43:b2:35:1c:c9:98:0b:47:02: 33:29:82:57:44:a1:8f:61:00:0e:98:67:4e:0f:95: 8c:65:32:92:cc:2a:70:b2:05:30:b6:d9:e6:69:5d: b1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:4D:BB:0A:0D:26:04:C1:C3:1F:A8:B7:2B:BD:05:5B:13:42:35:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d3:d0:c7:83:f0:2f:fb:e4:8e:25:7b:3e:4d:a0:f6:29:32: 91:e5:86:0d:5c:f8:c8:b7:ea:06:ca:11:f1:71:78:2a:e6:e5: fe:4c:ba:e9:56:2b:24:b3:87:28:a3:ec:9b:b3:7d:ca:bd:ca: a5:db:bd:47:ea:8c:3a:37:15:d1:be:e8:22:e3:92:03:db:0b: ad:74:31:59:81:6a:42:74:86:53:1b:c4:0d:96:36:d1:4f:3d: 35:1b:34:2d:69:9f:50:71:cc:a0:3c:dc:c3:4e:6a:01:da:fe: b6:a5:75:aa:fb:b3:39:d0:8b:55:17:0a:5a:b1:a4:be:57:39: 87:46:39:e1:6c:76:41:ae:6c:29:32:c6:0f:68:db:b4:ec:11: 83:0f:8f:f5:06:6b:54:c7:86:13:4e:98:30:a3:44:35:69:3f: 07:66:74:13:3e:c4:01:4b:ee:c9:c7:87:56:75:d8:cc:57:56: f6:64:15:3d:4b:bd:a5:01:b6:87:c4:36:bf:12:ce:18:0b:35: 45:ee:0d:b3:f5:44:9e:c2:3c:d2:ab:9f:0e:a9:95:57:b5:27: aa:fe:93:06:69:b6:a0:23:92:ec:0b:6e:a4:e3:33:a8:6a:1b: 90:f9:1b:50:31:cb:ee:d4:2c:41:f0:f8:10:0e:80:36:82:90: b4:c4:7e:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE67EbmVkgpi+/YlLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk YWI2YTFmOTQtYzE0NS00NWUxLTkwMGQtODZkNzE4MjNmMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzFQVtONf/NcmQQ95SxHrj/J7jq9gCk9hQo3 RPW6kPhU+9bVJmEhDF4u5uX4KLFEWawbOjQos4hypUM1FriCVQRM4VJ2ppuiuKDc I0NkF5jpHgelzOgE35qQ7qFO8ydLGsbfjARtTMQa7XMFiOMMw/UQgso1ZJxfNih7 poOjNqX4x8tGhRfGa0ZUHBPC8/5qoGWw9ozsspy/JcW27GpnXvcetTzCHCaihzsh JK9AD45UxJh5ZQ2GNTJ43IuVpqNe/Gbp/u32UZH/xLi7JY6GdLWnzr3SaelDsjUc yZgLRwIzKYJXRKGPYQAOmGdOD5WMZTKSzCpwsgUwttnmaV2xZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlNuwoNJgTBwx+otyu9BVsTQjWZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGFmMTQwOTItZGFmZS0z YmE2LTk3NDYtODIzNjc0NDk2NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjT0MeD8C/75I4lez5NoPYpMpHlhg1c+Mi36gbKEfFxeCrm5f5MuulW KySzhyij7Juzfcq9yqXbvUfqjDo3FdG+6CLjkgPbC610MVmBakJ0hlMbxA2WNtFP PTUbNC1pn1BxzKA83MNOagHa/raldar7sznQi1UXClqxpL5XOYdGOeFsdkGubCky xg9o27TsEYMPj/UGa1THhhNOmDCjRDVpPwdmdBM+xAFL7snHh1Z12MxXVvZkFT1L vaUBtofENr8SzhgLNUXuDbP1RJ7CPNKrnw6plVe1J6r+kwZptqAjkuwLbqTjM6hq G5D5G1Axy+7ULEHw+BAOgDaCkLTEfso= -----END CERTIFICATE-----Generated at Mon Aug 31 11:24:18 2026 by rpki-client