$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/44f4d94e-6d2b-3fc6-90f2-5d4925f83f9a.roa File: 44f4d94e-6d2b-3fc6-90f2-5d4925f83f9a.roa (raw, json) Hash identifier: 4P7t8CSq1nXr07FgnsSxqig5PhBs8RXd8jqv9Bblssk= Subject key identifier: 0B:21:02:06:FA:04:44:CD:7B:56:30:AE:AE:FB:52:73:E3:67:DE:83 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584F45428D67B29C64073655F480 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/44f4d94e-6d2b-3fc6-90f2-5d4925f83f9a.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 11105 IP address blocks: 209.87.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:8d:67:b2:9c:64:07:36:55:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=cd8da716-9c19-426f-9cc7-16595a588bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bf:8c:26:ec:57:5d:5c:49:43:d1:44:07:85: 0b:8d:de:82:f2:64:61:dd:ac:70:c9:a6:0f:7a:18: 38:29:08:76:46:8b:97:a8:f6:31:67:33:e4:60:07: f9:0d:8c:f0:6f:61:22:2e:03:4c:d5:c8:54:18:22: fc:a8:d3:c7:33:95:00:f3:f3:09:30:f3:a1:03:5d: 6f:d4:cf:5a:24:7b:25:0a:fd:39:61:af:1c:9c:17: 9a:8b:be:89:93:56:0d:2d:4b:61:17:85:10:f8:df: 98:24:c2:b6:5f:c9:e5:5c:a1:52:d1:29:d2:e8:87: 1a:cf:55:81:f1:7f:5b:82:c3:34:71:52:93:cd:7d: 42:3a:42:18:ef:df:c4:35:68:5d:8a:d6:bd:c3:52: c9:57:07:0b:f4:a7:2b:1d:43:29:18:3e:06:17:8c: f3:d2:20:cd:0d:58:6a:d0:6f:30:33:cd:32:b2:c2: 20:e8:34:27:bb:9b:75:c1:98:26:57:c6:4c:12:c5: c4:e0:ca:1b:7b:7d:70:60:67:bf:4b:c9:94:90:51: 75:bd:a3:c4:be:d3:a2:8f:94:8f:b3:f5:40:4b:be: ad:0d:5e:e8:8e:e2:37:10:0b:85:c0:36:7a:a8:e2: 27:62:04:ba:36:75:80:5c:ff:dd:0c:d6:02:b8:e9: 34:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:21:02:06:FA:04:44:CD:7B:56:30:AE:AE:FB:52:73:E3:67:DE:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/44f4d94e-6d2b-3fc6-90f2-5d4925f83f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:48:7b:c6:67:ea:af:00:75:51:43:db:cf:0d:83:2b:9d:e8: 06:41:3c:fd:87:3d:bc:35:52:34:70:89:37:53:6c:03:e7:38: 2e:dd:9f:de:6d:36:a3:da:c0:82:b4:8c:80:49:15:cc:82:61: 8c:3c:ac:81:a7:6e:13:32:24:9d:10:d1:70:15:88:7c:d7:b7: fa:ba:25:9a:5c:f7:e6:4c:46:54:96:f9:8c:12:2d:b7:c4:83: d8:26:20:f7:29:c6:82:87:58:a8:2d:d4:bf:92:4f:7e:c7:3b: 46:dd:8e:f1:72:14:12:cf:c6:e1:d4:7c:dd:c0:22:ab:cf:2d: 50:b5:c5:0d:e2:80:6a:2b:2a:fd:d1:19:e5:4d:75:1c:87:1c: 27:11:39:24:e4:95:cf:ea:2e:25:02:02:fb:48:7d:75:7b:82: 70:ce:c9:da:91:32:6d:06:8e:49:04:b7:1f:c3:85:8e:e0:8f: 5d:54:3a:2e:8c:0e:a3:88:07:65:4e:ab:c3:84:19:f3:0b:f7: 23:f8:d9:07:cd:be:35:41:5c:6f:33:b4:31:ae:36:41:20:bc: fd:16:7e:a1:53:c8:53:09:7e:92:ef:49:09:a2:1d:9c:25:8e: f8:1b:fe:dd:6d:4f:a9:0e:25:5a:c6:06:21:f1:f7:b9:8e:bc: a8:0b:09:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQo1nspxkBzZV9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk Y2Q4ZGE3MTYtOWMxOS00MjZmLTljYzctMTY1OTVhNTg4YmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7+MJuxXXVxJQ9FEB4ULjd6C8mRh3axwyaYP ehg4KQh2RouXqPYxZzPkYAf5DYzwb2EiLgNM1chUGCL8qNPHM5UA8/MJMPOhA11v 1M9aJHslCv05Ya8cnBeai76Jk1YNLUthF4UQ+N+YJMK2X8nlXKFS0SnS6Icaz1WB 8X9bgsM0cVKTzX1COkIY79/ENWhdita9w1LJVwcL9KcrHUMpGD4GF4zz0iDNDVhq 0G8wM80yssIg6DQnu5t1wZgmV8ZMEsXE4Mobe31wYGe/S8mUkFF1vaPEvtOij5SP s/VAS76tDV7ojuI3EAuFwDZ6qOInYgS6NnWAXP/dDNYCuOk0RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAshAgb6BETNe1Ywrq77UnPjZ96DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvNDRmNGQ5NGUtNmQyYi0z ZmM2LTkwZjItNWQ0OTI1ZjgzZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNIe8Zn6q8AdVFD288Ngyud6AZBPP2HPbw1UjRwiTdTbAPnOC7dn95t NqPawIK0jIBJFcyCYYw8rIGnbhMyJJ0Q0XAViHzXt/q6JZpc9+ZMRlSW+YwSLbfE g9gmIPcpxoKHWKgt1L+ST37HO0bdjvFyFBLPxuHUfN3AIqvPLVC1xQ3igGorKv3R GeVNdRyHHCcROSTklc/qLiUCAvtIfXV7gnDOydqRMm0GjkkEtx/DhY7gj11UOi6M DqOIB2VOq8OEGfML9yP42QfNvjVBXG8ztDGuNkEgvP0WfqFTyFMJfpLvSQmiHZwl jvgb/t1tT6kOJVrGBiHx97mOvKgLCcM= -----END CERTIFICATE-----Generated at Sat Oct 3 20:23:03 2026 by rpki-client