$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/c7f45504-5453-3fc8-bae9-5b1687268202.roa File: c7f45504-5453-3fc8-bae9-5b1687268202.roa (raw, json) Hash identifier: 2CvxHp3ckpXBVCvhS0v0d3YYul4wUgDrgl2PcjWEWkE= Subject key identifier: EF:B8:CA:F8:05:D8:DA:E4:56:12:50:90:F4:30:62:35:92:A8:C0:67 Certificate issuer: /CN=1b14096a-f8aa-4856-9b09-db3034f885a7 Certificate serial: 010D0C9F4328584EA794EA96057C56DF9EF5E880 Authority key identifier: A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/c7f45504-5453-3fc8-bae9-5b1687268202.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399446 IP address blocks: 209.209.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:94:ea:96:05:7c:56:df:9e:f5:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b14096a-f8aa-4856-9b09-db3034f885a7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=dafb73b9-7b4a-486a-95dd-37d6714045fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:3e:77:36:74:72:e0:a0:6e:a1:8e:65:fd: b6:7b:b7:05:1f:61:ab:3b:13:06:6f:34:b4:a4:f0: b1:73:73:f2:8f:8f:6d:37:5c:b4:3c:a6:a7:b5:6e: b0:f2:e5:98:d3:e8:d2:cd:b1:fc:82:1b:cc:c0:6e: 8c:f7:b2:63:cd:84:94:bf:5a:b6:bf:f6:87:0c:2d: fe:11:33:e1:cd:31:58:ba:cc:4b:c7:25:94:42:13: 8b:0b:e6:65:f9:80:72:7a:d5:54:f1:01:19:b3:15: cc:f1:70:ed:37:96:75:e6:c3:47:a0:23:fe:c7:55: 11:aa:9b:6d:88:62:fd:c4:a5:38:46:6b:c4:92:f1: 9e:72:fc:48:39:a3:5d:d8:68:33:78:99:06:3a:12: ed:21:db:d1:ef:b4:5c:99:f1:1a:71:31:5a:d9:f7: 8c:95:91:70:8f:29:28:cc:d0:05:9a:08:76:ad:6c: 1c:94:99:c6:21:fa:d1:a4:e5:1a:05:04:41:2e:36: 3c:8e:e8:3b:d0:9b:e7:6f:f8:c5:16:a5:33:a6:aa: 1a:d6:4f:c8:cb:e7:d5:77:90:7e:60:65:ae:30:e9: 0e:f4:4d:aa:67:ee:d3:6d:91:af:ec:84:b4:8d:42: bb:43:52:ab:68:33:c5:e7:46:1b:45:0a:8e:d6:17: 02:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B8:CA:F8:05:D8:DA:E4:56:12:50:90:F4:30:62:35:92:A8:C0:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/c7f45504-5453-3fc8-bae9-5b1687268202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7/1b14096a-f8aa-4856-9b09-db3034f885a7.crl X509v3 Authority Key Identifier: keyid:A8:CC:17:4D:87:CE:97:21:C6:6F:1A:D9:86:67:B7:CA:41:82:EF:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b14096a-f8aa-4856-9b09-db3034f885a7.cer sbgp-ipAddrBlock: critical IPv4: 209.209.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:79:e3:58:32:59:5a:94:b6:2f:17:bc:4f:b7:bd:34:72:e4: 20:91:63:45:40:4a:90:a9:78:bf:3f:ab:3e:58:21:a5:03:c6: 44:13:2f:9d:3a:5c:fc:0a:4d:8f:bb:e6:0a:ae:18:24:94:ec: 8d:5d:bf:95:65:5f:7d:44:70:c6:13:be:f1:2e:b8:1c:31:a9: 82:3a:f7:58:5f:58:00:90:1f:97:a8:59:89:91:1e:5b:35:80: 15:b9:3d:dc:78:7b:90:f1:bb:86:ca:87:42:fb:f4:ec:07:2b: a6:6d:ac:08:66:33:c2:7f:ee:61:ac:0d:b2:bc:ae:b4:7c:15: cd:08:83:45:c2:30:9f:9b:d4:c4:70:5f:81:83:36:ad:75:eb: a1:8c:2d:51:f4:6e:fb:62:99:61:d7:bd:ac:11:22:bc:0f:2f: 85:92:0b:6e:0a:a8:1a:60:f0:98:ae:68:ce:d4:e1:25:2d:9e: 4e:f9:47:84:3e:06:1b:72:76:41:e6:f8:c8:00:49:4d:37:95: 31:95:0f:ab:13:87:1d:c5:24:c0:c0:fb:c7:ab:cb:94:11:64: 6c:e3:7e:85:45:10:78:30:48:3f:df:27:a7:80:cb:cc:cb:cd: f1:89:c5:64:08:24:3f:2e:c5:51:d8:15:95:61:5f:2e:c2:16: 1f:ed:0e:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlOqWBXxW35716IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWIxNDA5NmEtZjhhYS00ODU2LTliMDktZGIzMDM0Zjg4 NWE3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGFmYjczYjktN2I0YS00ODZhLTk1ZGQtMzdkNjcxNDA0NWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDA+dzZ0cuCgbqGOZf22e7cFH2GrOxMGbzS0 pPCxc3Pyj49tN1y0PKantW6w8uWY0+jSzbH8ghvMwG6M97JjzYSUv1q2v/aHDC3+ ETPhzTFYusxLxyWUQhOLC+Zl+YByetVU8QEZsxXM8XDtN5Z15sNHoCP+x1URqptt iGL9xKU4RmvEkvGecvxIOaNd2GgzeJkGOhLtIdvR77RcmfEacTFa2feMlZFwjyko zNAFmgh2rWwclJnGIfrRpOUaBQRBLjY8jug70Jvnb/jFFqUzpqoa1k/Iy+fVd5B+ YGWuMOkO9E2qZ+7TbZGv7IS0jUK7Q1KraDPF50YbRQqO1hcCOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+4yvgF2NrkVhJQkPQwYjWSqMBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjE0 MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMwMzRmODg1YTcvYzdmNDU1MDQtNTQ1My0z ZmM4LWJhZTktNWIxNjg3MjY4MjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWIxNDA5NmEtZjhhYS00ODU2LTli MDktZGIzMDM0Zjg4NWE3LzFiMTQwOTZhLWY4YWEtNDg1Ni05YjA5LWRiMzAzNGY4 ODVhNy5jcmwwHwYDVR0jBBgwFoAUqMwXTYfOlyHGbxrZhme3ykGC7x8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjE0MDk2YS1mOGFhLTQ4NTYtOWIwOS1kYjMw MzRmODg1YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1541gyWVqUti8XvE+3vTRy5CCRY0VASpCpeL8/qz5YIaUDxkQTL506 XPwKTY+75gquGCSU7I1dv5VlX31EcMYTvvEuuBwxqYI691hfWACQH5eoWYmRHls1 gBW5Pdx4e5Dxu4bKh0L79OwHK6ZtrAhmM8J/7mGsDbK8rrR8Fc0Ig0XCMJ+b1MRw X4GDNq1166GMLVH0bvtimWHXvawRIrwPL4WSC24KqBpg8JiuaM7U4SUtnk75R4Q+ BhtydkHm+MgASU03lTGVD6sThx3FJMDA+8ery5QRZGzjfoVFEHgwSD/fJ6eAy8zL zfGJxWQIJD8uxVHYFZVhXy7CFh/tDhI= -----END CERTIFICATE-----Generated at Mon Aug 31 11:38:14 2026 by rpki-client