$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa File: daf14092-dafe-3ba6-9746-8236744966f4.roa (raw, json) Hash identifier: GSncEgDTuxUgt9VCgpjLrpS4g5zeIYsZsVNFJhmw2ps= Subject key identifier: CD:5C:EF:87:15:23:43:51:C1:10:A1:EC:F6:84:F7:7E:DF:F9:1E:51 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584F5E62C0D36CE9B66CF09727C0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 397422 IP address blocks: 209.237.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c0:d3:6c:e9:b6:6c:f0:97:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=998dece8-7c86-447d-a265-531fd1166634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7f:ad:1d:fb:f6:8d:26:8e:48:99:b7:89:2c: c3:0b:1d:89:30:f2:dc:2e:06:25:e8:b4:43:43:c9: df:6c:ff:3f:2d:93:ed:8e:88:64:ed:11:b6:fe:46: 84:e3:70:c7:24:9d:1f:45:fe:91:bc:48:8e:77:b2: 69:4c:f1:fb:13:46:1c:2a:77:00:94:a6:08:61:8e: d8:c8:66:33:6e:0e:98:15:88:7d:8f:b6:70:ff:11: 0c:e2:07:ba:3e:8a:30:85:7a:47:2e:58:b8:43:aa: 95:e0:70:25:ae:37:83:76:bf:1e:0a:61:5a:b5:e3: ea:73:09:05:60:51:d1:45:e5:b2:bd:39:75:42:8c: ca:13:86:18:bb:fa:af:59:5e:83:43:83:fc:c6:7b: 7f:53:d1:99:4e:11:45:48:cf:fd:cf:2d:dc:38:e3: db:2d:49:e4:08:22:04:6e:43:e7:69:61:ac:5b:63: fd:c5:60:b5:9b:d3:9d:e4:bb:6f:84:4c:af:94:a1: ac:aa:21:23:92:fe:a2:f7:df:ac:6a:95:ba:a0:59: b2:20:5b:a9:84:e7:12:50:b6:d5:bb:56:dc:cf:8d: 97:a5:f0:8d:04:e1:cd:a3:c2:53:c3:34:f1:85:5a: 19:58:0e:d3:0b:6f:22:ef:db:66:09:04:64:a6:9b: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5C:EF:87:15:23:43:51:C1:10:A1:EC:F6:84:F7:7E:DF:F9:1E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/daf14092-dafe-3ba6-9746-8236744966f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 209.237.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f9:92:0e:84:0a:59:b0:08:0c:a2:76:51:93:8e:2e:57:f0: c9:10:31:fd:89:14:59:63:df:f4:e4:41:a2:0c:c7:79:9e:69: a6:02:2f:40:c8:80:e9:da:32:86:14:b7:a1:33:2c:75:be:e2: 1a:b8:59:28:af:16:2b:f2:19:aa:6a:47:5b:72:90:1d:2d:74: 0b:b6:a0:09:b5:a2:29:6e:85:de:8f:f4:47:a1:38:c1:35:40: a9:0f:dd:3c:f3:a3:33:0b:62:41:6f:73:2a:b2:7a:88:7e:a4: 40:23:bf:34:09:07:e8:1f:9c:b3:7e:7d:d3:35:f6:2e:a1:5f: 9a:5e:b1:18:45:a8:f1:ab:2e:88:12:dd:01:f2:9d:0c:fc:9a: cf:5f:a7:3a:8d:46:20:49:52:f1:e0:2f:df:a0:d2:2e:e6:7f: 85:fd:13:d3:6b:c8:76:71:e9:86:21:78:d8:29:ea:ec:43:3d: 54:c1:f4:17:06:f8:47:47:b5:77:af:5f:b0:e5:2d:31:91:08: 2e:6e:69:0d:4f:3a:21:a0:a7:b2:25:c2:5d:cd:88:87:b2:25: c5:de:3a:7b:22:7a:79:cc:24:b6:94:bf:98:7f:2d:58:99:1e: 3d:13:27:2f:13:31:cf:9f:ab:6f:93:35:fa:94:44:10:14:ec: cf:12:24:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsDTbOm2bPCXJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk OTk4ZGVjZTgtN2M4Ni00NDdkLWEyNjUtNTMxZmQxMTY2NjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX+tHfv2jSaOSJm3iSzDCx2JMPLcLgYl6LRD Q8nfbP8/LZPtjohk7RG2/kaE43DHJJ0fRf6RvEiOd7JpTPH7E0YcKncAlKYIYY7Y yGYzbg6YFYh9j7Zw/xEM4ge6PoowhXpHLli4Q6qV4HAlrjeDdr8eCmFatePqcwkF YFHRReWyvTl1QozKE4YYu/qvWV6DQ4P8xnt/U9GZThFFSM/9zy3cOOPbLUnkCCIE bkPnaWGsW2P9xWC1m9Od5LtvhEyvlKGsqiEjkv6i99+sapW6oFmyIFuphOcSULbV u1bcz42XpfCNBOHNo8JTwzTxhVoZWA7TC28i79tmCQRkppvZ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1c74cVI0NRwRCh7PaE937f+R5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGFmMTQwOTItZGFmZS0z YmE2LTk3NDYtODIzNjc0NDk2NmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0e1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA75kg6EClmwCAyidlGTji5X8MkQMf2JFFlj3/TkQaIMx3meaaYCL0DI gOnaMoYUt6EzLHW+4hq4WSivFivyGapqR1tykB0tdAu2oAm1oiluhd6P9EehOME1 QKkP3TzzozMLYkFvcyqyeoh+pEAjvzQJB+gfnLN+fdM19i6hX5pesRhFqPGrLogS 3QHynQz8ms9fpzqNRiBJUvHgL9+g0i7mf4X9E9NryHZx6YYheNgp6uxDPVTB9BcG +EdHtXevX7DlLTGRCC5uaQ1POiGgp7Ilwl3NiIeyJcXeOnsiennMJLaUv5h/LViZ Hj0TJy8TMc+fq2+TNfqURBAU7M8SJEQ= -----END CERTIFICATE-----Generated at Sun Oct 18 13:22:26 2026 by rpki-client