$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/afbd1391-0645-3d4b-9707-bfd2274b0116.roa File: afbd1391-0645-3d4b-9707-bfd2274b0116.roa (raw, json) Hash identifier: nRk8loPJzbFWfulHh+KrTCTcaqlCBV5s/vmhjzfJ3OA= Subject key identifier: FB:59:9C:94:39:D6:6B:46:EF:7A:73:95:44:91:BD:9E:1E:B9:39:A8 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584F1732425566693ED04EA6A680 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/afbd1391-0645-3d4b-9707-bfd2274b0116.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 174 IP address blocks: 209.236.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:42:55:66:69:3e:d0:4e:a6:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=e5d8bba1-bb27-463f-a3ab-7205197e8f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d3:49:40:5b:4d:05:67:cc:20:88:c1:c3:9e: 4e:2a:6e:95:fc:71:f8:19:db:ce:bb:5e:fa:52:c2: b2:2f:14:01:02:af:02:aa:c2:fc:e7:f5:fb:da:b4: 1d:2a:14:71:00:44:a0:2b:ff:88:6b:a0:39:99:e6: 89:30:9d:90:f2:7e:36:a0:c1:48:5a:66:8f:ca:d6: 9f:8a:fa:b5:18:8a:83:31:0e:84:7c:8f:ed:bd:00: 27:c0:9c:09:51:ff:10:06:9f:1e:18:4e:0f:f8:8d: b7:c9:e6:46:02:dc:83:1a:6c:2c:ce:38:da:1f:cc: fd:1f:51:c4:d8:bc:c1:82:5a:73:6c:e5:a2:2f:6d: 9f:1c:cc:6a:28:20:60:c4:02:4f:e6:64:48:44:f4: aa:4e:c9:28:e9:d4:0d:f7:ad:b7:0e:d7:2a:8a:83: ba:33:a9:de:8d:4a:1e:25:9f:02:df:26:ba:2b:a3: 46:e7:a2:8a:f8:0b:c4:44:e7:ad:ec:00:1b:a2:d2: 68:92:bb:f7:1b:70:e0:a4:50:b3:85:d3:34:16:dd: e7:5b:c5:2f:e3:7a:db:93:b3:12:46:da:d6:72:1a: 85:1d:82:dd:67:e4:12:a5:f4:07:5b:ec:6c:5d:c4: a9:09:97:fc:81:47:6f:d3:4f:fd:98:c3:62:46:bb: 4d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:59:9C:94:39:D6:6B:46:EF:7A:73:95:44:91:BD:9E:1E:B9:39:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/afbd1391-0645-3d4b-9707-bfd2274b0116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 209.236.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:f0:6c:83:d6:fd:e9:36:60:70:31:19:19:1f:35:ab:b3:e4: 32:1c:63:95:ea:b4:9f:fc:e5:12:82:7b:9d:84:ed:3c:d9:38: 6c:5d:49:a6:f0:a4:e6:de:a5:87:86:28:6d:cd:41:79:49:95: 42:0d:6d:b1:d8:17:91:2f:9f:64:38:a9:49:07:80:ef:28:ad: 89:5b:49:73:78:9d:53:60:3f:c0:bd:1f:6c:aa:84:e0:03:75: 36:67:f4:2a:ca:79:65:95:c1:e5:25:29:cf:86:3b:0c:3e:fc: 8e:cf:ce:90:31:c7:fb:0e:c1:ef:c5:24:d9:44:d6:49:1e:0e: e6:ab:f0:a3:a7:3e:88:34:ae:0b:d4:91:b0:54:05:9c:25:85: 8e:45:c5:e9:84:82:7d:43:dd:3e:bc:cf:14:f3:1e:39:b5:e0: 0f:b1:5c:5b:c3:f3:f5:bb:96:bb:1f:4a:ad:10:2f:bb:f9:10: bb:98:96:43:25:bf:1c:11:0f:0b:f7:ac:ae:45:47:7f:ec:82: d9:78:4a:24:07:bb:76:f5:36:75:f0:46:02:a1:db:3e:d5:41: 61:11:3e:b7:ec:0b:f5:9d:c0:1d:62:95:d5:f5:18:5a:73:e4: a6:cd:e8:b3:33:37:f8:a3:98:43:f9:db:44:d0:db:2c:82:b9: c9:4e:9a:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMkJVZmk+0E6mpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZTVkOGJiYTEtYmIyNy00NjNmLWEzYWItNzIwNTE5N2U4ZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdNJQFtNBWfMIIjBw55OKm6V/HH4GdvOu176 UsKyLxQBAq8CqsL85/X72rQdKhRxAESgK/+Ia6A5meaJMJ2Q8n42oMFIWmaPytaf ivq1GIqDMQ6EfI/tvQAnwJwJUf8QBp8eGE4P+I23yeZGAtyDGmwszjjaH8z9H1HE 2LzBglpzbOWiL22fHMxqKCBgxAJP5mRIRPSqTsko6dQN9623DtcqioO6M6nejUoe JZ8C3ya6K6NG56KK+AvEROet7AAbotJokrv3G3DgpFCzhdM0Ft3nW8Uv43rbk7MS RtrWchqFHYLdZ+QSpfQHW+xsXcSpCZf8gUdv00/9mMNiRrtNrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtZnJQ51mtG73pzlUSRvZ4euTmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYWZiZDEzOTEtMDY0NS0z ZDRiLTk3MDctYmZkMjI3NGIwMTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHwbIPW/ek2YHAxGRkfNauz5DIcY5XqtJ/85RKCe52E7TzZOGxdSabw pObepYeGKG3NQXlJlUINbbHYF5Evn2Q4qUkHgO8orYlbSXN4nVNgP8C9H2yqhOAD dTZn9CrKeWWVweUlKc+GOww+/I7PzpAxx/sOwe/FJNlE1kkeDuar8KOnPog0rgvU kbBUBZwlhY5FxemEgn1D3T68zxTzHjm14A+xXFvD8/W7lrsfSq0QL7v5ELuYlkMl vxwRDwv3rK5FR3/sgtl4SiQHu3b1NnXwRgKh2z7VQWERPrfsC/WdwB1ildX1GFpz 5KbN6LMzN/ijmEP520TQ2yyCuclOmmY= -----END CERTIFICATE-----Generated at Tue Sep 8 03:47:28 2026 by rpki-client