$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa File: 843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa (raw, json) Hash identifier: CWI8vEj6VNol00kN+Rc8FovVsAknvVA5AmON2tw4ovU= Subject key identifier: 60:52:BB:E8:5D:0D:85:37:91:8D:59:0A:3E:E0:70:35:EC:53:F3:A7 Certificate issuer: /CN=109078e4-3ad5-4242-9f3e-058161c97a9f Certificate serial: 010D0C9F4328584F093CEA2DE52361136C54CE00 Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 2572 IP address blocks: 198.209.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:ea:2d:e5:23:61:13:6c:54:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=0cd97379-13f4-4f95-b398-71397e96e67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c3:2e:d9:ab:e4:07:9a:d6:78:f2:17:70:ee: a6:c4:40:7f:d3:6f:15:44:d0:da:21:ef:f6:df:91: 26:2c:6b:83:92:bb:94:c4:76:13:92:4c:ff:d9:83: 86:ce:b5:dd:65:75:4a:70:90:72:68:8f:e6:4e:98: 48:7a:a8:0e:f4:f0:c5:97:af:82:4e:57:59:0f:c5: 10:59:5c:a0:4c:32:f4:17:e0:e0:47:ed:ab:91:76: 40:c1:fe:8f:59:82:7f:9a:43:a4:e2:05:53:39:ed: 6c:2c:b0:b8:cf:1f:63:20:61:ec:9c:3d:0d:57:00: 5f:17:b9:27:79:cb:17:c0:ec:a5:4a:20:15:92:23: 99:e2:76:0f:2c:92:26:1c:68:0a:2a:f4:ec:05:d0: 97:23:63:df:9b:a2:10:03:a0:e7:ae:70:06:10:57: 02:83:49:18:f7:ac:da:68:fd:dd:29:47:3a:90:43: 08:88:81:24:18:2d:99:ed:15:25:3c:ce:d9:88:71: c4:ba:a1:4b:c6:31:7e:a7:71:47:47:c8:48:17:9d: 08:f6:62:75:10:e4:9c:05:c2:1f:ac:21:f2:cd:7b: 3a:51:30:22:31:d4:64:3c:02:c8:a0:94:e3:f1:c5: 21:6a:eb:58:2b:8a:ad:ad:48:5a:3d:23:b7:0b:d1: 35:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:52:BB:E8:5D:0D:85:37:91:8D:59:0A:3E:E0:70:35:EC:53:F3:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/843b6a1c-9f09-32e6-aa03-d5dd0583d70a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl X509v3 Authority Key Identifier: keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer sbgp-ipAddrBlock: critical IPv4: 198.209.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:e0:14:e9:33:ff:59:4a:70:ad:2b:45:03:19:97:fe:f8:34: 58:1c:97:30:25:84:ac:83:0a:74:fe:46:63:22:93:dd:1f:37: 5e:84:e4:e9:f3:38:b3:4f:1e:74:30:33:5b:4f:0a:cb:ef:57: ae:11:98:21:f0:75:ce:00:62:ed:7a:06:fb:35:3f:50:c2:f1: 51:e1:04:21:f4:98:86:f3:e3:59:ce:8c:68:d5:f6:55:37:58: 01:98:7b:8c:2c:cb:32:18:72:6c:29:27:69:f2:54:8b:d7:3a: 74:f5:3d:cc:60:a2:1b:76:a4:89:4e:3c:17:99:d5:06:41:4a: f9:06:02:c7:72:75:47:31:8c:85:b6:8a:0e:8b:5d:35:21:1e: d7:8e:1e:7b:99:75:7f:22:4b:3b:ca:e6:4b:ae:64:54:19:cd: ea:19:3d:95:90:5f:b9:40:2b:f5:b9:8c:90:1c:0c:94:3d:32: c4:54:47:08:5d:d5:8b:59:2b:e2:3d:66:ed:02:3b:3d:00:46: 0c:30:c0:22:0d:40:c6:4a:e7:93:07:8a:d2:ee:5b:fd:09:c7: 59:cd:e1:13:ef:91:43:a0:8e:90:b3:15:d0:a4:68:8d:ae:c8: 9b:db:a9:97:7b:21:95:90:fe:f1:1b:e3:13:9c:17:54:bf:a1: 8a:ed:d4:f0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8JPOot5SNhE2xUzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA5MDc4ZTQtM2FkNS00MjQyLTlmM2UtMDU4MTYxYzk3 YTlmMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk MGNkOTczNzktMTNmNC00Zjk1LWIzOTgtNzEzOTdlOTZlNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicMu2avkB5rWePIXcO6mxEB/028VRNDaIe/2 35EmLGuDkruUxHYTkkz/2YOGzrXdZXVKcJByaI/mTphIeqgO9PDFl6+CTldZD8UQ WVygTDL0F+DgR+2rkXZAwf6PWYJ/mkOk4gVTOe1sLLC4zx9jIGHsnD0NVwBfF7kn ecsXwOylSiAVkiOZ4nYPLJImHGgKKvTsBdCXI2Pfm6IQA6DnrnAGEFcCg0kY96za aP3dKUc6kEMIiIEkGC2Z7RUlPM7ZiHHEuqFLxjF+p3FHR8hIF50I9mJ1EOScBcIf rCHyzXs6UTAiMdRkPALIoJTj8cUhautYK4qtrUhaPSO3C9E1QQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGBSu+hdDYU3kY1ZCj7gcDXsU/OnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMDkw NzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgxNjFjOTdhOWYvODQzYjZhMWMtOWYwOS0z MmU2LWFhMDMtZDVkZDA1ODNkNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTA5MDc4ZTQtM2FkNS00MjQyLTlm M2UtMDU4MTYxYzk3YTlmLzEwOTA3OGU0LTNhZDUtNDI0Mi05ZjNlLTA1ODE2MWM5 N2E5Zi5jcmwwHwYDVR0jBBgwFoAU1x7+GbjHHxN4q9PR4KiPNXpWxhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMDkwNzhlNC0zYWQ1LTQyNDItOWYzZS0wNTgx NjFjOTdhOWYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxtEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAbOAU6TP/WUpwrStFAxmX/vg0WByXMCWErIMKdP5GYyKT3R83XoTk6fM4 s08edDAzW08Ky+9XrhGYIfB1zgBi7XoG+zU/UMLxUeEEIfSYhvPjWc6MaNX2VTdY AZh7jCzLMhhybCknafJUi9c6dPU9zGCiG3akiU48F5nVBkFK+QYCx3J1RzGMhbaK DotdNSEe144ee5l1fyJLO8rmS65kVBnN6hk9lZBfuUAr9bmMkBwMlD0yxFRHCF3V i1kr4j1m7QI7PQBGDDDAIg1AxkrnkweK0u5b/QnHWc3hE++RQ6COkLMV0KRoja7I m9upl3shlZD+8RvjE5wXVL+hiu3U8A== -----END CERTIFICATE-----Generated at Sun Sep 13 10:26:19 2026 by rpki-client