$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa File: 7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa (raw, json) Hash identifier: n76ObZxdc6M4P9hi6NtM0pbHMtuyhpDJ7tySnUhvh/s= Subject key identifier: 43:F4:D3:B6:3D:7D:82:EC:F7:75:94:B3:C7:A7:14:1E:1E:D0:D0:89 Certificate issuer: /CN=cbdc881f-54ac-40a9-89b3-5383cf243bae Certificate serial: 010D0C9F4328584F093CF03D6B463B914303F900 Authority key identifier: 0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 209.240.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:f0:3d:6b:46:3b:91:43:03:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdc881f-54ac-40a9-89b3-5383cf243bae Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=f925958f-2ed7-41ad-a30c-574d046d57e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:29:9b:3e:c2:d7:62:41:47:f6:81:5d:59:cc: 0a:a5:a0:a0:57:25:bf:fa:9e:03:7b:77:cc:ad:6a: 29:56:46:f4:13:e4:21:63:56:fe:10:45:c2:f1:23: 3c:f0:6e:f7:dc:3b:05:67:4f:d2:70:06:e7:54:03: f0:45:4e:94:48:09:97:bd:57:2f:80:e6:6e:f8:83: 11:29:0a:72:c4:4f:a4:32:61:89:a3:8f:7b:9c:a8: f2:5c:62:3d:dd:3e:dd:b4:e7:e5:dd:2e:9c:7e:1c: db:ed:2d:33:3e:da:47:18:a0:8a:1c:de:51:c0:fe: c0:ce:3c:0f:76:11:51:c5:8a:83:68:a5:05:38:8a: 85:39:86:50:a6:1b:61:96:b0:3a:c4:f2:1d:25:ef: ea:81:98:08:57:73:0f:52:1f:40:b5:b3:81:7c:68: 22:e3:1e:b2:04:4f:16:23:ae:b4:5c:c3:cd:5b:99: f0:fe:1f:3c:18:3c:9d:de:06:3c:e9:c9:89:d5:f4: ca:65:5b:18:57:bd:8c:9c:4e:50:8d:94:72:97:0e: 66:63:2a:2c:ec:38:39:7f:5d:d1:1f:08:e3:f2:0e: c4:22:f5:d8:9b:f0:ef:9d:9d:b7:c8:3c:4e:d2:ca: eb:8d:c4:c5:84:f2:8b:41:16:3c:4c:3b:59:ba:70: 01:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F4:D3:B6:3D:7D:82:EC:F7:75:94:B3:C7:A7:14:1E:1E:D0:D0:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/7f168197-3e85-3fd5-b48a-baf1c2344d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae/cbdc881f-54ac-40a9-89b3-5383cf243bae.crl X509v3 Authority Key Identifier: keyid:0B:77:9F:06:0B:42:75:84:12:DE:DC:60:66:74:A4:3B:3B:C5:1C:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbdc881f-54ac-40a9-89b3-5383cf243bae.cer sbgp-ipAddrBlock: critical IPv4: 209.240.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5d:de:b4:3d:39:3b:13:aa:74:6e:81:b9:d1:6c:4b:5a:e8: b3:50:d6:53:c7:9e:44:b2:d8:4a:cd:71:c8:82:ec:5a:ba:68: 83:e4:73:a0:67:85:23:33:68:ed:00:02:92:4e:06:62:f7:af: 45:fc:89:37:8b:15:42:cb:0b:60:e3:be:92:25:d6:fa:36:58: e9:28:39:9c:0c:c6:38:b5:41:36:4c:2b:1c:8e:ac:4e:92:26: 97:f7:db:97:44:ea:75:73:47:62:f6:de:73:0c:17:22:f2:5f: 37:17:38:bc:2a:59:c8:b2:b0:29:a9:32:8e:a3:f1:5e:6d:46: 2d:96:d3:b4:ac:00:a3:94:82:8d:fb:01:c9:ab:ac:56:11:e8: c5:ef:f6:2f:a4:e1:76:eb:c5:c4:86:d3:b4:de:7d:80:4c:a5: 21:da:c3:96:82:6a:75:4e:1d:ee:72:1a:88:5a:af:e8:b2:95: 4e:13:45:79:7b:b2:9b:73:7f:1c:13:d5:a3:98:1a:0b:80:7c: 5f:9b:46:10:25:b2:2a:04:47:ca:75:0b:11:d4:c4:f0:f2:95: 72:16:b6:91:60:06:e2:78:ff:ea:6e:3c:8c:c9:da:80:9c:f1: 41:d6:40:8e:9d:06:37:3a:fb:b1:42:2e:1c:68:0a:6e:84:b0: 23:e6:44:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPPA9a0Y7kUMD+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JkYzg4MWYtNTRhYy00MGE5LTg5YjMtNTM4M2NmMjQz YmFlMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjkyNTk1OGYtMmVkNy00MWFkLWEzMGMtNTc0ZDA0NmQ1N2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgimbPsLXYkFH9oFdWcwKpaCgVyW/+p4De3fM rWopVkb0E+QhY1b+EEXC8SM88G733DsFZ0/ScAbnVAPwRU6USAmXvVcvgOZu+IMR KQpyxE+kMmGJo497nKjyXGI93T7dtOfl3S6cfhzb7S0zPtpHGKCKHN5RwP7AzjwP dhFRxYqDaKUFOIqFOYZQphthlrA6xPIdJe/qgZgIV3MPUh9AtbOBfGgi4x6yBE8W I660XMPNW5nw/h88GDyd3gY86cmJ1fTKZVsYV72MnE5QjZRylw5mYyos7Dg5f13R Hwjj8g7EIvXYm/DvnZ23yDxO0srrjcTFhPKLQRY8TDtZunAB6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEP007Y9fYLs93WUs8enFB4e0NCJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYmRj ODgxZi01NGFjLTQwYTktODliMy01MzgzY2YyNDNiYWUvN2YxNjgxOTctM2U4NS0z ZmQ1LWI0OGEtYmFmMWMyMzQ0ZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2JkYzg4MWYtNTRhYy00MGE5LTg5 YjMtNTM4M2NmMjQzYmFlL2NiZGM4ODFmLTU0YWMtNDBhOS04OWIzLTUzODNjZjI0 M2JhZS5jcmwwHwYDVR0jBBgwFoAUC3efBgtCdYQS3txgZnSkOzvFHDMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYmRjODgxZi01NGFjLTQwYTktODliMy01Mzgz Y2YyNDNiYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0fAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpd3rQ9OTsTqnRugbnRbEta6LNQ1lPHnkSy2ErNcciC7Fq6aIPkc6Bn hSMzaO0AApJOBmL3r0X8iTeLFULLC2DjvpIl1vo2WOkoOZwMxji1QTZMKxyOrE6S Jpf325dE6nVzR2L23nMMFyLyXzcXOLwqWciysCmpMo6j8V5tRi2W07SsAKOUgo37 AcmrrFYR6MXv9i+k4XbrxcSG07TefYBMpSHaw5aCanVOHe5yGohar+iylU4TRXl7 sptzfxwT1aOYGguAfF+bRhAlsioER8p1CxHUxPDylXIWtpFgBuJ4/+puPIzJ2oCc 8UHWQI6dBjc6+7FCLhxoCm6EsCPmRDM= -----END CERTIFICATE-----Generated at Sun Sep 13 15:03:46 2026 by rpki-client