$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/42b38733-d52e-372d-b451-7cecd7972e32.roa File: 42b38733-d52e-372d-b451-7cecd7972e32.roa (raw, json) Hash identifier: prXHaQEV8h2weSUbikMn0hvkZoegAjs4msMGLapCJy4= Subject key identifier: 67:57:BF:AC:02:02:98:F4:C8:7A:EC:81:4D:B5:CD:92:A3:05:8F:80 Certificate issuer: /CN=09440a93-986f-41da-8723-7b67f81bdbce Certificate serial: 010D0C9F4328584F0672A2EB66311661887A8F00 Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/42b38733-d52e-372d-b451-7cecd7972e32.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 19901 IP address blocks: 208.161.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:a2:eb:66:31:16:61:88:7a:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=225fbe4e-0aeb-4359-a45e-6fbeac6b779e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f9:7a:b0:4b:4c:81:70:9b:7d:14:15:e0:aa: ca:c3:35:39:c3:c2:38:4d:73:23:68:5a:e9:f2:ac: 44:03:da:6a:7a:7a:87:50:24:7d:df:4d:77:76:59: c4:72:87:68:01:84:b4:c6:1f:2c:21:10:a8:5f:f5: 77:f6:97:53:4c:77:77:b0:9d:6f:2d:0d:24:e5:91: 28:7c:19:45:2b:e3:e1:19:45:87:f0:49:eb:ec:ab: 8f:4c:87:fa:a8:3d:c6:56:93:2b:ea:e6:7e:cb:1c: 2e:01:58:7b:55:ef:18:62:1f:b9:da:3c:18:19:c5: e0:3c:20:e3:4d:98:0e:c1:d9:ec:d0:79:e0:04:b2: 3f:23:f4:8f:0a:a8:9e:64:6f:d8:86:88:3f:d0:03: e6:56:b4:4a:9b:93:4f:32:c9:ee:f5:12:63:30:d9: c8:83:ee:e7:f8:55:22:d4:ac:e9:0b:70:bc:6c:ca: 08:60:39:0d:c0:dd:b4:dd:27:e6:31:6e:64:70:98: da:dd:d9:ce:3b:15:dc:54:9d:c9:3c:fb:ad:a5:88: 18:da:38:06:75:35:b4:be:f1:e6:38:fe:76:64:3d: 04:91:78:c1:82:34:10:f4:0b:76:47:cb:55:9c:9c: 1b:44:ed:15:3e:28:e2:51:be:87:2f:a8:2f:ac:95: f3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:57:BF:AC:02:02:98:F4:C8:7A:EC:81:4D:B5:CD:92:A3:05:8F:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/42b38733-d52e-372d-b451-7cecd7972e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl X509v3 Authority Key Identifier: keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer sbgp-ipAddrBlock: critical IPv4: 208.161.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c9:2c:8f:c1:9e:86:67:4d:53:ef:db:0b:d0:db:62:9a:75: 84:9d:b9:73:f9:fb:1b:c7:01:a5:bb:9b:9b:09:ac:30:16:19: fc:bd:b8:eb:2d:2d:1a:e2:57:c6:15:a8:09:01:24:28:59:0a: d4:e5:5a:3f:93:80:76:c0:38:24:a0:59:70:9d:7f:83:28:53: dd:e8:6e:6c:87:42:5c:fc:f2:f7:2e:98:9b:fe:2d:99:7a:6b: 43:a8:8c:52:1e:d8:1e:b5:cd:bf:fb:8a:43:5b:98:8c:6f:76: 4e:68:fd:7d:24:07:f0:e5:52:14:81:23:52:9b:aa:78:7d:fe: 3b:bd:f3:b7:fe:a0:b7:e0:c3:a5:3d:09:1e:51:30:38:88:8e: e4:ca:f5:9e:3b:3a:97:56:ba:16:cb:e5:7c:2a:dd:65:76:db: 78:e2:ec:9e:91:ab:e1:05:33:7b:ab:0b:7c:19:79:86:71:a1: 67:da:63:d4:74:6c:86:73:9b:2b:0c:cc:55:13:8f:93:a1:06: 57:11:d4:c5:cc:67:b7:09:51:81:1b:79:5f:cb:9e:88:55:b2: b9:6e:56:98:11:fe:c9:e9:ff:50:07:fa:ae:15:34:87:c6:1f: 49:fd:0d:12:8b:62:23:f7:2d:1c:12:21:55:40:f2:b1:8f:36: 00:e6:56:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcqLrZjEWYYh6jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk YmNlMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MjI1ZmJlNGUtMGFlYi00MzU5LWE0NWUtNmZiZWFjNmI3NzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/l6sEtMgXCbfRQV4KrKwzU5w8I4TXMjaFrp 8qxEA9pqenqHUCR93013dlnEcodoAYS0xh8sIRCoX/V39pdTTHd3sJ1vLQ0k5ZEo fBlFK+PhGUWH8Enr7KuPTIf6qD3GVpMr6uZ+yxwuAVh7Ve8YYh+52jwYGcXgPCDj TZgOwdns0HngBLI/I/SPCqieZG/Yhog/0APmVrRKm5NPMsnu9RJjMNnIg+7n+FUi 1KzpC3C8bMoIYDkNwN203SfmMW5kcJja3dnOOxXcVJ3JPPutpYgY2jgGdTW0vvHm OP52ZD0EkXjBgjQQ9At2R8tVnJwbRO0VPijiUb6HL6gvrJXzWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdXv6wCApj0yHrsgU21zZKjBY+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0 MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvNDJiMzg3MzMtZDUyZS0z NzJkLWI0NTEtN2NlY2Q3OTcyZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3 MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3 ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0KHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXJLI/BnoZnTVPv2wvQ22KadYSduXP5+xvHAaW7m5sJrDAWGfy9uOst LRriV8YVqAkBJChZCtTlWj+TgHbAOCSgWXCdf4MoU93obmyHQlz88vcumJv+LZl6 a0OojFIe2B61zb/7ikNbmIxvdk5o/X0kB/DlUhSBI1Kbqnh9/ju987f+oLfgw6U9 CR5RMDiIjuTK9Z47OpdWuhbL5Xwq3WV223ji7J6Rq+EFM3urC3wZeYZxoWfaY9R0 bIZzmysMzFUTj5OhBlcR1MXMZ7cJUYEbeV/LnohVsrluVpgR/snp/1AH+q4VNIfG H0n9DRKLYiP3LRwSIVVA8rGPNgDmVgM= -----END CERTIFICATE-----Generated at Sun Sep 13 13:25:21 2026 by rpki-client