$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa File: b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa (raw, json) Hash identifier: N00hnV1xsmZZX/bwsn0yhoDW1kMrBJKGnG6N5lchoJQ= Subject key identifier: EB:B9:AE:D2:D9:98:41:46:02:4B:C2:57:C0:F9:F1:35:1A:E0:F7:40 Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584F3FAD41C5D1B3CD304CD2D680 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 393249 IP address blocks: 209.87.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:41:c5:d1:b3:cd:30:4c:d2:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=f4d20c34-3ded-4541-89e9-a5efac56b21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:33:4d:9b:3b:91:37:66:ec:bc:16:72:9b:e4: 59:27:ce:46:7b:02:f4:d1:c4:11:ea:32:1c:1e:9e: 1a:ca:f8:10:ca:be:05:59:41:48:7e:c5:fd:2b:a0: e8:b7:6f:68:e7:78:32:5e:80:b9:ec:e2:be:09:73: 56:5f:e5:2d:f2:c7:c3:9f:e7:3f:ec:6d:a3:3f:23: 48:7d:5b:86:b1:d6:4c:bf:4d:a3:89:8a:23:1d:e8: 78:f1:30:6e:ff:33:f2:8e:13:be:7a:a3:00:69:39: 17:bf:c3:92:0d:74:12:ba:9b:3c:10:9f:61:cb:12: b3:ea:35:ab:cf:01:0f:0a:51:34:d0:34:77:15:0e: a6:20:73:83:c1:ae:63:a9:d0:cd:4d:5d:57:ba:f5: 2c:45:02:af:e0:03:cc:d2:8d:e9:2e:63:e3:5e:a1: ea:e0:30:63:c9:52:69:fc:10:05:2e:66:1d:5b:b0: b1:ab:f9:a6:64:0b:4d:e3:00:c9:fa:0b:f0:7a:d6: ef:e2:bd:30:4d:19:ad:db:b6:3f:f6:cf:17:0d:1a: 40:60:eb:ab:4b:9d:36:41:f9:77:6d:32:e3:2c:b4: 1c:2b:77:50:14:e4:63:e3:bd:70:18:54:1b:11:bd: c5:15:fb:12:77:6d:88:4f:3e:5a:fa:f4:d7:2b:25: a1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B9:AE:D2:D9:98:41:46:02:4B:C2:57:C0:F9:F1:35:1A:E0:F7:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/b8e562b5-d648-3596-b35f-5b44e3a0a9b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:5a:ff:83:2c:60:22:eb:66:ea:a6:3c:01:6f:30:9a:48:fe: 92:4c:80:cf:2d:26:a6:d0:0f:a0:bd:d6:98:1c:8b:d2:c6:92: f5:61:75:0e:73:1d:70:b6:67:97:d8:a3:0d:00:d4:0e:ec:1d: f7:37:a7:72:3c:dc:2d:8d:59:05:ee:50:6f:57:f1:c7:07:dd: c1:fb:89:7b:11:a7:e7:e2:1b:39:70:25:ee:ab:f8:a8:77:95: d8:34:fb:95:82:34:83:65:d4:a0:0a:a2:1d:2a:90:ee:c1:86: 15:17:c7:a0:92:d5:ed:af:d6:7b:06:9a:8e:1d:f8:b3:43:0e: 0e:e6:9e:18:ac:8a:2d:92:09:e3:c2:0b:24:f8:7e:26:cf:bd: d9:5f:48:e7:1c:2c:db:9a:bd:7c:43:39:55:79:7f:72:dd:a9: 4e:98:a9:71:3d:22:d9:9a:08:2f:df:c0:15:93:41:d9:d6:1d: fb:10:44:6b:47:40:2e:80:53:48:1b:5f:4d:bb:a2:94:04:81: 65:d3:fc:19:09:d8:87:27:93:81:d2:47:22:86:47:a3:54:6e: 46:df:2f:79:e7:ef:d0:42:d3:f1:6d:2d:c5:eb:27:ae:99:ac: e8:09:99:e0:a5:a2:3e:60:3f:18:25:52:70:3b:d9:d5:70:d3: ee:3a:60:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUHF0bPNMEzS1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZjRkMjBjMzQtM2RlZC00NTQxLTg5ZTktYTVlZmFjNTZiMjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jNNmzuRN2bsvBZym+RZJ85GewL00cQR6jIc Hp4ayvgQyr4FWUFIfsX9K6Dot29o53gyXoC57OK+CXNWX+Ut8sfDn+c/7G2jPyNI fVuGsdZMv02jiYojHeh48TBu/zPyjhO+eqMAaTkXv8OSDXQSups8EJ9hyxKz6jWr zwEPClE00DR3FQ6mIHODwa5jqdDNTV1XuvUsRQKv4APM0o3pLmPjXqHq4DBjyVJp /BAFLmYdW7Cxq/mmZAtN4wDJ+gvwetbv4r0wTRmt27Y/9s8XDRpAYOurS502Qfl3 bTLjLLQcK3dQFORj471wGFQbEb3FFfsSd22ITz5a+vTXKyWhnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOu5rtLZmEFGAkvCV8D58TUa4PdAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvYjhlNTYyYjUtZDY0OC0z NTk2LWIzNWYtNWI0NGUzYTBhOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VcQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVa/4MsYCLrZuqmPAFvMJpI/pJMgM8tJqbQD6C91pgci9LGkvVhdQ5z HXC2Z5fYow0A1A7sHfc3p3I83C2NWQXuUG9X8ccH3cH7iXsRp+fiGzlwJe6r+Kh3 ldg0+5WCNINl1KAKoh0qkO7BhhUXx6CS1e2v1nsGmo4d+LNDDg7mnhisii2SCePC CyT4fibPvdlfSOccLNuavXxDOVV5f3LdqU6YqXE9ItmaCC/fwBWTQdnWHfsQRGtH QC6AU0gbX027opQEgWXT/BkJ2Icnk4HSRyKGR6NUbkbfL3nn79BC0/FtLcXrJ66Z rOgJmeCloj5gPxglUnA72dVw0+46YEQ= -----END CERTIFICATE-----Generated at Sat Oct 3 15:52:17 2026 by rpki-client