$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0fe2b901-899b-3fba-8300-f5c271ee0919.roa File: 0fe2b901-899b-3fba-8300-f5c271ee0919.roa (raw, json) Hash identifier: a5H+nD0lV6rDho1U9FetN5tFYgvlYzdHvcniGNlM7qM= Subject key identifier: BC:97:DF:0B:C2:3A:AB:B5:EE:2D:F1:A9:B9:56:5C:94:43:7F:DD:19 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F8F3DB1AA3C81D3725A0F4100 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0fe2b901-899b-3fba-8300-f5c271ee0919.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 20454 IP address blocks: 209.188.0.0/19 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b1:aa:3c:81:d3:72:5a:0f:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=9bfe8d7d-ab78-4bd9-8896-669b0ad0e7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c9:49:26:b5:a9:cc:c2:b9:31:41:ec:c0:e6: ca:c1:be:dd:c6:4f:b3:25:a6:02:52:16:15:e4:59: 84:12:32:38:91:7d:98:3c:d6:bc:4c:9e:eb:91:fa: 1d:20:a9:b2:94:fa:6a:bb:18:8c:ed:fc:6a:d1:13: 8b:a3:94:11:93:9e:95:59:79:8c:37:41:1b:67:23: a7:42:19:88:37:76:96:29:c3:7f:fe:a9:63:b6:66: 72:b7:26:ec:56:e8:b4:c2:89:5d:03:f9:49:51:20: d0:77:4d:6d:ad:41:6e:5a:37:b4:25:43:e9:82:e3: 36:da:d6:c1:26:04:f8:95:42:ba:d5:30:8d:79:26: b2:d9:d1:f7:9e:ef:09:f4:d9:7a:47:41:19:11:41: a8:8b:2b:cb:90:f8:2a:b5:09:09:73:d6:3f:ff:36: 1a:8d:9b:6f:c8:62:28:d3:32:d7:c3:f2:3f:da:e0: 26:d3:30:d7:ee:03:9b:1a:46:3c:19:d6:93:74:84: 3d:51:c7:a5:60:d4:f2:49:7b:a7:c3:16:7b:64:95: 69:a2:36:3c:d8:c8:31:01:65:24:c6:30:9d:ba:54: 27:19:f7:3c:00:26:31:95:6f:72:16:0d:9f:4c:b7: d7:ba:21:71:03:2e:06:8a:87:87:1d:fe:51:47:3a: 08:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:97:DF:0B:C2:3A:AB:B5:EE:2D:F1:A9:B9:56:5C:94:43:7F:DD:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0fe2b901-899b-3fba-8300-f5c271ee0919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 209.188.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:b5:26:d7:67:a8:25:6f:50:8f:36:6c:50:71:a9:ef:7f:ec: 96:35:51:18:3f:2f:a0:df:63:a9:51:46:a2:f7:bc:66:bc:d8: 80:6d:86:7a:19:5c:1e:2a:31:57:81:75:13:00:c5:77:a2:b0: 8a:0c:79:36:a5:6d:b4:59:94:81:bf:32:b6:4b:00:42:6d:9c: 0f:80:42:6c:9c:af:7f:08:0b:dd:5b:25:8d:c4:87:4e:ad:5a: dc:2c:39:32:08:65:d7:95:da:6e:42:a0:72:dc:49:a7:e2:7f: 3d:99:df:ab:c3:e9:f7:6e:72:d2:27:2b:6f:eb:a3:d3:c3:de: 16:69:8d:d6:56:9e:52:f1:55:e8:61:7f:9d:e1:3a:d1:4c:c7: 9f:1b:2d:d5:ec:95:e6:f2:2f:57:4f:47:96:8b:f0:df:ce:6e: 09:15:23:20:21:ea:24:83:f1:3d:f3:94:41:d1:68:92:1d:94: 9e:d7:7b:4e:9a:ef:b3:06:ec:67:dc:e8:b2:ff:66:ea:5f:ab: ba:e0:93:e5:c1:6b:e9:7e:2b:bd:07:b7:d1:ef:18:a7:3c:75: 4e:82:c4:9c:a5:46:66:48:bb:e3:b1:c7:cf:49:24:9b:e2:cc: e6:1e:b5:e6:79:53:7b:79:7b:45:5e:15:6e:df:ee:5f:43:0c: 5f:7c:10:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPbGqPIHTcloPQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk OWJmZThkN2QtYWI3OC00YmQ5LTg4OTYtNjY5YjBhZDBlN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjslJJrWpzMK5MUHswObKwb7dxk+zJaYCUhYV 5FmEEjI4kX2YPNa8TJ7rkfodIKmylPpquxiM7fxq0ROLo5QRk56VWXmMN0EbZyOn QhmIN3aWKcN//qljtmZytybsVui0woldA/lJUSDQd01trUFuWje0JUPpguM22tbB JgT4lUK61TCNeSay2dH3nu8J9Nl6R0EZEUGoiyvLkPgqtQkJc9Y//zYajZtvyGIo 0zLXw/I/2uAm0zDX7gObGkY8GdaTdIQ9UcelYNTySXunwxZ7ZJVpojY82MgxAWUk xjCdulQnGfc8ACYxlW9yFg2fTLfXuiFxAy4GioeHHf5RRzoIMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyX3wvCOqu17i3xqblWXJRDf90ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMGZlMmI5MDEtODk5Yi0z ZmJhLTgzMDAtZjVjMjcxZWUwOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0bwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe1JtdnqCVvUI82bFBxqe9/7JY1URg/L6DfY6lRRqL3vGa82IBthnoZ XB4qMVeBdRMAxXeisIoMeTalbbRZlIG/MrZLAEJtnA+AQmycr38IC91bJY3Eh06t WtwsOTIIZdeV2m5CoHLcSafifz2Z36vD6fductInK2/ro9PD3hZpjdZWnlLxVehh f53hOtFMx58bLdXslebyL1dPR5aL8N/ObgkVIyAh6iSD8T3zlEHRaJIdlJ7Xe06a 77MG7Gfc6LL/Zupfq7rgk+XBa+l+K70Ht9HvGKc8dU6CxJylRmZIu+Oxx89JJJvi zOYeteZ5U3t5e0VeFW7f7l9DDF98EIY= -----END CERTIFICATE-----Generated at Fri Oct 23 07:42:17 2026 by rpki-client