$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/7484f009-f4f5-3862-8502-0392951ce6da.roa File: 7484f009-f4f5-3862-8502-0392951ce6da.roa (raw, json) Hash identifier: GZz+D6QpAVnxdo19MvywNfZ1yqUx0o8OsCMDMLcuVXE= Subject key identifier: E9:B3:8C:D7:0D:CD:99:D2:D3:A0:7D:92:A6:38:AB:61:A2:F9:6B:32 Certificate issuer: /CN=a278da28-82b3-48fe-bc76-7859a82f5651 Certificate serial: 010D0C9F4328584EA79BBB6887BDDA3A34E93480 Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/7484f009-f4f5-3862-8502-0392951ce6da.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 215748 IP address blocks: 209.209.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:bb:68:87:bd:da:3a:34:e9:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cf08f709-82b6-4241-88eb-4f02b710ad2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f5:99:e2:77:d6:73:25:90:c9:2a:e0:cf:e2: 03:b3:ce:92:c9:f9:57:35:1f:8d:c3:9d:ea:55:26: 6c:47:20:ff:05:54:09:55:8a:d1:4d:6b:96:0a:8b: ea:39:2c:74:b6:2e:ad:87:da:29:c7:a8:e1:01:46: 9a:14:d7:b8:03:55:60:8f:65:b5:40:22:e0:8e:43: 83:38:80:47:2f:a1:98:bb:f0:02:44:8a:04:3f:a4: db:a7:39:60:00:5a:11:27:32:06:65:c1:65:88:94: b8:7e:5e:46:c5:b8:ee:a5:15:d0:be:4a:a2:62:73: 1c:a4:45:9a:7b:79:f4:d5:d7:af:87:2c:6f:55:20: d5:b9:94:a3:d4:e5:0a:67:e8:a3:26:a8:c6:56:70: cd:16:14:6c:a4:e0:54:37:d2:d3:51:be:29:ee:86: 4c:a3:05:be:75:1c:de:b7:68:8b:e5:e1:ef:45:18: 39:4e:b2:82:68:ff:4c:64:4b:74:85:15:65:49:ed: b9:41:34:68:50:74:98:ab:36:d5:41:79:0a:51:1e: d5:f1:81:b9:a3:5b:36:45:90:da:14:99:20:66:70: fc:06:06:3d:9b:0d:c2:26:ed:7c:6d:d6:b9:1f:76: a2:01:4a:bb:6a:f1:f2:af:29:9a:82:b0:05:0b:5c: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B3:8C:D7:0D:CD:99:D2:D3:A0:7D:92:A6:38:AB:61:A2:F9:6B:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/7484f009-f4f5-3862-8502-0392951ce6da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl X509v3 Authority Key Identifier: keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer sbgp-ipAddrBlock: critical IPv4: 209.209.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7c:e0:3d:64:1d:c4:cc:6e:09:b0:9f:26:8d:c7:1d:d0:11: 00:90:2b:85:a8:97:d7:5a:d9:d0:36:10:01:c0:bb:a5:39:6c: b4:9e:75:21:32:8d:9c:e0:25:6a:7c:87:4e:d4:98:a0:f8:aa: 0e:97:bc:54:39:a5:bb:75:f2:75:97:0c:d2:58:96:77:c5:be: 16:91:c0:70:5b:62:fc:81:86:71:69:05:92:af:94:a2:65:7f: 74:c9:7f:b3:69:8e:73:1b:a0:3c:72:54:eb:b9:de:d1:4f:31: 4e:27:83:07:de:55:a1:83:ac:91:b6:f1:e5:4a:6b:da:4a:28: 91:4e:dc:e6:3b:75:6f:83:2a:8a:29:9d:9e:c4:28:73:ea:c1: c3:36:6f:09:e1:65:f7:8d:e3:cc:2e:b1:97:4b:60:1c:8f:aa: c9:63:30:50:88:55:bd:3c:86:0a:7c:b8:98:da:17:d6:70:79: 4c:44:de:1e:4e:50:b7:9b:25:21:e1:30:50:ce:7b:50:83:7e: 9b:6f:39:08:d2:13:8b:3d:4f:e0:bf:82:83:ea:a0:7c:0d:fd: 50:a3:13:6a:23:7c:b7:71:74:bf:7c:bb:a1:58:0c:7b:a4:5e: 9c:7e:15:b6:60:19:59:b0:39:d3:17:10:01:2a:77:1f:2b:12: d6:cb:d0:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm7toh73aOjTpNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI3OGRhMjgtODJiMy00OGZlLWJjNzYtNzg1OWE4MmY1 NjUxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2YwOGY3MDktODJiNi00MjQxLTg4ZWItNGYwMmI3MTBhZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/WZ4nfWcyWQySrgz+IDs86SyflXNR+Nw53q VSZsRyD/BVQJVYrRTWuWCovqOSx0ti6th9opx6jhAUaaFNe4A1Vgj2W1QCLgjkOD OIBHL6GYu/ACRIoEP6TbpzlgAFoRJzIGZcFliJS4fl5GxbjupRXQvkqiYnMcpEWa e3n01devhyxvVSDVuZSj1OUKZ+ijJqjGVnDNFhRspOBUN9LTUb4p7oZMowW+dRze t2iL5eHvRRg5TrKCaP9MZEt0hRVlSe25QTRoUHSYqzbVQXkKUR7V8YG5o1s2RZDa FJkgZnD8BgY9mw3CJu18bda5H3aiAUq7avHyrymagrAFC1xTvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmzjNcNzZnS06B9kqY4q2Gi+WsyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4 ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5YTgyZjU2NTEvNzQ4NGYwMDktZjRmNS0z ODYyLTg1MDItMDM5Mjk1MWNlNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTI3OGRhMjgtODJiMy00OGZlLWJj NzYtNzg1OWE4MmY1NjUxL2EyNzhkYTI4LTgyYjMtNDhmZS1iYzc2LTc4NTlhODJm NTY1MS5jcmwwHwYDVR0jBBgwFoAU9ipjPl1+gQsD5F/PfySWru+jWRkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMjc4ZGEyOC04MmIzLTQ4ZmUtYmM3Ni03ODU5 YTgyZjU2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN84D1kHcTMbgmwnyaNxx3QEQCQK4Wol9da2dA2EAHAu6U5bLSedSEy jZzgJWp8h07UmKD4qg6XvFQ5pbt18nWXDNJYlnfFvhaRwHBbYvyBhnFpBZKvlKJl f3TJf7NpjnMboDxyVOu53tFPMU4ngwfeVaGDrJG28eVKa9pKKJFO3OY7dW+DKoop nZ7EKHPqwcM2bwnhZfeN48wusZdLYByPqsljMFCIVb08hgp8uJjaF9ZweUxE3h5O ULebJSHhMFDOe1CDfptvOQjSE4s9T+C/goPqoHwN/VCjE2ojfLdxdL98u6FYDHuk Xpx+FbZgGVmwOdMXEAEqdx8rEtbL0KU= -----END CERTIFICATE-----Generated at Sat Sep 5 04:02:53 2026 by rpki-client