$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/2c9ec597-3437-3eed-b7f5-6fae686d7c21.roa File: 2c9ec597-3437-3eed-b7f5-6fae686d7c21.roa (raw, json) Hash identifier: wYH5+OdVmpa3h7GHE/ks7LEaK2sW/zw8yHT5hOcYR+M= Subject key identifier: D0:F7:4C:CA:C1:44:A2:B6:9E:47:F3:A5:33:7B:7B:D2:25:A1:86:02 Certificate issuer: /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Certificate serial: 010D0C9F4328584F225D234BE2EC9ADBDC2E4D30 Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/2c9ec597-3437-3eed-b7f5-6fae686d7c21.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 834 IP address blocks: 208.123.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5d:23:4b:e2:ec:9a:db:dc:2e:4d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=d6c9c31b-5370-4d73-a36a-1ab85c55920d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d8:98:ad:67:71:86:8a:7e:93:1c:5f:cc:71: 27:2e:4d:34:35:7f:1c:34:e5:da:18:f5:1c:1c:70: 10:28:76:80:66:fd:05:f3:9f:79:da:24:60:11:03: 13:03:b9:70:e1:c8:7c:e2:5c:a1:06:4f:3e:19:45: 0e:5f:84:7d:d9:e5:0c:39:6e:8e:aa:05:5b:5d:2a: e8:89:c2:3f:9f:75:19:af:26:a0:43:66:c4:d6:27: a5:13:52:48:73:e0:f6:94:81:90:17:8d:98:74:9b: ff:e8:e3:bd:ad:2b:de:8c:ab:ea:ca:fa:c6:df:d3: bf:a6:c8:3c:25:36:a3:51:9e:41:bb:f4:59:31:72: 04:bf:78:01:d0:6b:7b:f3:e6:d3:cf:48:0c:94:76: 62:b7:4f:92:fa:61:51:f4:49:71:31:c8:0a:9e:cd: 8d:2e:17:6c:fa:d4:cc:9d:4f:0e:02:b4:5e:26:61: 74:f5:c4:dc:1e:4c:3d:11:ab:cb:f3:7e:47:ad:d1: 85:5b:58:1f:37:f1:e4:f8:a5:d3:f7:98:14:92:32: 25:0b:e0:06:4a:90:a0:e4:89:ec:c5:00:9c:68:5e: 66:12:d0:e0:68:44:c5:33:1b:8b:5f:42:94:50:8f: a8:ce:35:1e:71:14:b0:ef:72:1f:e9:5d:bb:d5:e0: fe:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F7:4C:CA:C1:44:A2:B6:9E:47:F3:A5:33:7B:7B:D2:25:A1:86:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/2c9ec597-3437-3eed-b7f5-6fae686d7c21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl X509v3 Authority Key Identifier: keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer sbgp-ipAddrBlock: critical IPv4: 208.123.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:87:68:cd:09:0d:7b:e5:eb:2f:20:00:df:42:d4:ab:5f:5a: b6:fb:6d:b1:06:85:3b:ca:19:3c:a3:92:80:51:8a:c3:d7:4a: 84:cb:0c:92:e0:2d:20:25:95:b4:cb:80:9a:97:35:e7:cb:3b: 19:bb:ff:55:7d:02:a7:76:6e:21:0a:0f:0e:67:b6:a6:72:67: 50:f9:e2:b6:3b:17:a1:5a:a4:e5:f0:cc:b9:71:05:9a:91:fe: ca:2a:71:c9:48:8f:17:9b:44:dd:34:98:ae:ee:02:78:59:77: a4:b8:55:2a:9c:cc:ec:88:b8:71:22:e9:c0:ec:02:b2:26:c1: 76:ed:2f:cc:52:80:5d:8b:27:3d:48:9c:49:b4:e8:e7:97:ad: 2a:ef:02:6a:b3:b4:9e:64:a2:de:30:4e:02:66:39:a8:56:b5: 31:60:d2:6a:cc:ab:7e:a2:cd:08:5a:63:8a:fd:fa:10:48:bd: 87:dc:75:a3:4c:e6:bf:5a:37:6f:51:d9:5e:57:1d:49:36:df: 80:4a:cf:11:5e:51:2b:26:ef:c2:41:a0:65:09:5a:66:11:bb: 80:4d:76:08:56:ed:98:e0:2c:15:f0:02:33:a9:a1:89:c8:6b: 91:f9:12:68:b8:8b:d5:7d:2c:8d:e9:99:b9:e6:1a:47:76:28: e6:ca:f0:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXSNL4uya29wuTTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk NWVlMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk ZDZjOWMzMWItNTM3MC00ZDczLWEzNmEtMWFiODVjNTU5MjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNiYrWdxhop+kxxfzHEnLk00NX8cNOXaGPUc HHAQKHaAZv0F85952iRgEQMTA7lw4ch84lyhBk8+GUUOX4R92eUMOW6OqgVbXSro icI/n3UZryagQ2bE1ielE1JIc+D2lIGQF42YdJv/6OO9rSvejKvqyvrG39O/psg8 JTajUZ5Bu/RZMXIEv3gB0Gt78+bTz0gMlHZit0+S+mFR9ElxMcgKns2NLhds+tTM nU8OArReJmF09cTcHkw9EavL835HrdGFW1gfN/Hk+KXT95gUkjIlC+AGSpCg5Ins xQCcaF5mEtDgaETFMxuLX0KUUI+ozjUecRSw73If6V271eD+qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFND3TMrBRKK2nkfzpTN7e9IloYYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5 MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvMmM5ZWM1OTctMzQzNy0z ZWVkLWI3ZjUtNmZhZTY4NmQ3YzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4 Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1 YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HvRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyHaM0JDXvl6y8gAN9C1KtfWrb7bbEGhTvKGTyjkoBRisPXSoTLDJLg LSAllbTLgJqXNefLOxm7/1V9Aqd2biEKDw5ntqZyZ1D54rY7F6FapOXwzLlxBZqR /soqcclIjxebRN00mK7uAnhZd6S4VSqczOyIuHEi6cDsArImwXbtL8xSgF2LJz1I nEm06OeXrSrvAmqztJ5kot4wTgJmOahWtTFg0mrMq36izQhaY4r9+hBIvYfcdaNM 5r9aN29R2V5XHUk234BKzxFeUSsm78JBoGUJWmYRu4BNdghW7ZjgLBXwAjOpoYnI a5H5Emi4i9V9LI3pmbnmGkd2KObK8Es= -----END CERTIFICATE-----Generated at Tue Sep 22 13:36:48 2026 by rpki-client