$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa File: dca748a7-33a1-3825-aba7-e83549aaa4f0.roa (raw, json) Hash identifier: 56uieOBgSqkpV9+jzQP7kzdsj/E33v2vI6qAL0VCBAg= Subject key identifier: D1:B8:76:E0:3A:72:DE:4B:55:7E:03:59:1D:E5:3C:D9:A7:11:A2:DF Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Certificate serial: 010D0C9F4328584F4973517FF71B79345249E700 Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 271 IP address blocks: 209.87.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:51:7f:f7:1b:79:34:52:49:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5ee77bbf-a181-4e32-b2ac-917a2740741f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:e0:d8:ea:25:9a:44:a0:3b:55:87:5a:c8: 66:58:d3:68:29:9d:ac:8e:48:f4:07:61:22:b7:9f: dd:c1:9d:97:61:52:67:53:a0:a6:c6:eb:65:4a:46: 81:90:33:44:29:30:18:77:c4:f5:b6:ac:ba:7d:ec: cb:30:09:83:00:fc:80:bd:3b:a3:57:e1:5b:1d:84: dc:28:c6:2e:2a:76:2c:c7:ec:44:02:42:4c:d0:6c: 4c:48:94:f4:b2:b3:ff:4b:8d:8f:98:cf:66:08:e6: 67:c7:9d:01:c3:f4:71:66:f2:c0:ce:d8:ef:2c:77: 77:ea:ba:d8:29:59:18:ef:fc:6a:df:80:96:43:45: 59:a2:7d:14:fd:e4:c4:92:db:6d:62:3d:f2:60:82: 60:63:93:fa:02:6d:6e:a1:c3:a5:ca:6b:a8:75:fe: 97:22:d1:c4:34:d2:12:15:1b:17:80:8d:e4:cf:99: 6b:04:6a:ff:02:0e:ae:dc:a1:61:0f:22:82:ec:2a: 9c:9b:2e:c7:6a:aa:39:f9:1e:17:ea:11:1d:fe:55: 32:be:28:50:6c:f5:f6:91:4e:a8:22:be:7c:3f:a7: 21:7c:c3:4e:b1:b5:1f:48:54:75:79:a6:0c:64:00: e8:04:6b:fc:36:5c:8a:19:19:50:dd:b1:1e:eb:be: db:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B8:76:E0:3A:72:DE:4B:55:7E:03:59:1D:E5:3C:D9:A7:11:A2:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/dca748a7-33a1-3825-aba7-e83549aaa4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl X509v3 Authority Key Identifier: keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer sbgp-ipAddrBlock: critical IPv4: 209.87.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b3:da:ae:50:9d:7e:90:ab:eb:1d:2f:d3:27:54:0b:c9:59: ad:f7:c8:44:2a:a3:dc:6c:33:0e:10:77:33:ca:15:8f:d7:01: cd:65:cd:b0:62:51:bf:af:92:7e:5d:85:f7:d0:46:9c:50:49: 04:0a:28:9d:a6:91:b4:9e:d0:2c:3d:69:37:23:dd:ae:ab:a7: a0:87:a0:03:85:34:63:84:c1:ee:68:00:19:10:bc:8c:ad:ce: 02:0e:be:02:07:0d:21:8b:e1:6a:d7:5c:9e:01:73:94:b0:ef: b2:0f:c1:49:91:6d:98:23:c6:bf:77:95:39:1f:32:4c:59:c5: 52:39:03:f6:54:2d:27:61:3d:60:32:6d:dd:ed:ac:f1:f8:38: 31:05:6a:92:58:e0:23:43:e1:61:13:27:8d:5c:f4:48:d9:c2: 33:04:84:47:6c:f2:73:9c:82:39:fd:f2:1e:66:2c:2d:0a:ac: 85:f8:1e:2d:cb:92:6f:39:6e:19:b3:4a:7b:5a:c0:7d:02:38: b9:a4:89:2b:78:86:4c:cb:cf:3d:9a:4b:0a:0e:0b:8e:fa:18: a4:2f:7e:c9:10:1d:4a:39:e1:53:bd:b0:57:e3:7d:c0:0a:bf: 26:2f:6b:c7:d5:81:37:28:3c:09:40:fd:d8:cf:bc:92:e3:11: 4b:4a:4c:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc1F/9xt5NFJJ5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2 OTZjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWVlNzdiYmYtYTE4MS00ZTMyLWIyYWMtOTE3YTI3NDA3NDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOHg2OolmkSgO1WHWshmWNNoKZ2sjkj0B2Ei t5/dwZ2XYVJnU6CmxutlSkaBkDNEKTAYd8T1tqy6fezLMAmDAPyAvTujV+FbHYTc KMYuKnYsx+xEAkJM0GxMSJT0srP/S42PmM9mCOZnx50Bw/RxZvLAztjvLHd36rrY KVkY7/xq34CWQ0VZon0U/eTEktttYj3yYIJgY5P6Am1uocOlymuodf6XItHENNIS FRsXgI3kz5lrBGr/Ag6u3KFhDyKC7Cqcmy7Haqo5+R4X6hEd/lUyvihQbPX2kU6o Ir58P6chfMNOsbUfSFR1eaYMZADoBGv8NlyKGRlQ3bEe677bjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNG4duA6ct5LVX4DWR3lPNmnEaLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZGNhNzQ4YTctMzNhMS0z ODI1LWFiYTctZTgzNTQ5YWFhNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0VcSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2z2q5QnX6Qq+sdL9MnVAvJWa33yEQqo9xsMw4QdzPKFY/XAc1lzbBi Ub+vkn5dhffQRpxQSQQKKJ2mkbSe0Cw9aTcj3a6rp6CHoAOFNGOEwe5oABkQvIyt zgIOvgIHDSGL4WrXXJ4Bc5Sw77IPwUmRbZgjxr93lTkfMkxZxVI5A/ZULSdhPWAy bd3trPH4ODEFapJY4CND4WETJ41c9EjZwjMEhEds8nOcgjn98h5mLC0KrIX4Hi3L km85bhmzSntawH0COLmkiSt4hkzLzz2aSwoOC476GKQvfskQHUo54VO9sFfjfcAK vyYva8fVgTcoPAlA/djPvJLjEUtKTJw= -----END CERTIFICATE-----Generated at Thu Oct 1 23:44:33 2026 by rpki-client