$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/daf81975-b5e4-386a-ad75-9c616d2d967a.roa File: daf81975-b5e4-386a-ad75-9c616d2d967a.roa (raw, json) Hash identifier: BV9rIby0cjs3vcJ1q4aatGdjc8+uvzkKN4IOSQdvX+s= Subject key identifier: 77:47:3E:9E:EB:5C:C6:53:61:1F:61:21:17:54:7F:DE:A8:7E:B1:34 Certificate issuer: /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4 Certificate serial: 010D0C9F4328584ECBD1DC01B8F8C79CD1FEBB80 Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/daf81975-b5e4-386a-ad75-9c616d2d967a.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 399646 IP address blocks: 209.135.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:dc:01:b8:f8:c7:9c:d1:fe:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=05def8a7-d62e-4656-ac2f-bc3aa77205a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d0:ec:33:1c:ed:57:da:10:58:b3:72:2c:9f: 2b:92:5c:00:ea:a1:cb:44:c0:79:ee:78:44:27:be: 2f:5b:ea:db:27:45:24:d2:0a:be:fa:ff:32:dc:bb: bf:5a:33:82:3f:85:d5:93:fa:20:13:34:d7:4d:7a: 0a:e6:e9:36:48:51:d4:0d:99:65:a4:8e:29:05:69: 7a:b3:37:7a:e6:6d:d7:93:96:1f:f5:38:da:01:f3: 35:b3:2d:bd:e1:aa:ed:f0:5b:2e:25:9a:56:12:8e: be:6b:c8:f0:16:a7:88:ad:d2:e5:72:f5:3a:d4:0f: 13:06:0e:c6:f7:b5:1c:26:44:73:ad:b4:f5:28:46: 8a:88:85:0b:df:a2:23:c4:35:5d:d4:12:dd:91:08: 47:93:a3:d3:36:f8:2b:c7:a8:83:82:18:c9:1d:48: 64:b3:ee:a1:a1:15:45:cd:ed:f1:8c:95:86:98:cf: 44:e0:c0:8d:dd:94:b5:d6:5b:7f:47:88:a4:27:9d: 77:6a:eb:cf:03:9e:73:d8:a1:4d:c0:fa:43:73:65: 16:ed:80:33:78:f3:35:f2:d0:23:77:19:df:d4:33: 79:e1:34:94:90:fd:f4:47:af:3e:51:99:cd:ea:5e: 23:f3:ed:0b:be:b1:80:65:98:dc:6f:f3:b6:e0:d6: bf:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:47:3E:9E:EB:5C:C6:53:61:1F:61:21:17:54:7F:DE:A8:7E:B1:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/daf81975-b5e4-386a-ad75-9c616d2d967a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl X509v3 Authority Key Identifier: keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer sbgp-ipAddrBlock: critical IPv4: 209.135.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:2b:fd:85:c1:4f:2e:35:70:8a:aa:4f:32:8f:12:5f:47:46: ff:39:5a:eb:9d:fe:a1:11:a6:f8:90:95:3e:d3:a9:44:bc:a7: 97:68:00:e4:6b:84:08:f1:f1:e6:9f:04:3d:f9:ab:4e:58:92: ed:d5:d0:45:a5:f9:58:23:66:5a:75:08:80:3c:b7:63:dc:70: 27:56:2b:65:ae:d6:6a:56:dc:34:9f:69:1d:d8:e5:34:01:31: 0e:f8:a9:a2:69:f5:31:6f:fa:ac:51:67:5e:db:2f:05:63:76: 74:77:51:c3:24:cd:f4:6c:ca:81:21:1b:b9:fc:7e:5a:1f:5c: fe:1e:66:e2:9a:a9:49:49:ed:7d:2f:ae:52:5d:7e:f7:4d:28: 0b:b5:22:97:7e:53:28:73:0e:1a:8a:6f:64:1b:90:b7:1f:45: 6d:6f:17:84:04:aa:8d:97:09:55:7b:df:67:12:b4:e2:4a:f3: 0e:1c:e5:f9:20:59:06:c3:64:0e:6b:c5:a9:01:a9:d6:4c:23: fa:c1:fe:3f:31:9b:14:f0:a8:6b:47:55:f0:ba:2a:f3:45:63: 83:60:d1:d6:f2:04:bd:cb:b4:48:ba:f7:09:4b:77:30:52:1e: d8:34:c5:5c:2e:06:c2:71:50:16:7e:1a:15:83:fb:b1:3e:9f: b3:9e:01:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0dwBuPjHnNH+u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2MThjYzgtOTIzMi00ZGE4LThiZjUtZGNjMDM4NmUx M2M0MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk MDVkZWY4YTctZDYyZS00NjU2LWFjMmYtYmMzYWE3NzIwNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldDsMxztV9oQWLNyLJ8rklwA6qHLRMB57nhE J74vW+rbJ0Uk0gq++v8y3Lu/WjOCP4XVk/ogEzTXTXoK5uk2SFHUDZllpI4pBWl6 szd65m3Xk5Yf9TjaAfM1sy294art8FsuJZpWEo6+a8jwFqeIrdLlcvU61A8TBg7G 97UcJkRzrbT1KEaKiIUL36IjxDVd1BLdkQhHk6PTNvgrx6iDghjJHUhks+6hoRVF ze3xjJWGmM9E4MCN3ZS11lt/R4ikJ513auvPA55z2KFNwPpDc2UW7YAzePM18tAj dxnf1DN54TSUkP30R68+UZnN6l4j8+0LvrGAZZjcb/O24Na/lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdHPp7rXMZTYR9hIRdUf96ofrE0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYx OGNjOC05MjMyLTRkYTgtOGJmNS1kY2MwMzg2ZTEzYzQvZGFmODE5NzUtYjVlNC0z ODZhLWFkNzUtOWM2MTZkMmQ5NjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTQ2MThjYzgtOTIzMi00ZGE4LThi ZjUtZGNjMDM4NmUxM2M0LzE0NjE4Y2M4LTkyMzItNGRhOC04YmY1LWRjYzAzODZl MTNjNC5jcmwwHwYDVR0jBBgwFoAUliL1hIIsuSIXyfgcHVDhpAiPYyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYxOGNjOC05MjMyLTRkYTgtOGJmNS1kY2Mw Mzg2ZTEzYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0YeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkr/YXBTy41cIqqTzKPEl9HRv85Wuud/qERpviQlT7TqUS8p5doAORr hAjx8eafBD35q05Yku3V0EWl+VgjZlp1CIA8t2PccCdWK2Wu1mpW3DSfaR3Y5TQB MQ74qaJp9TFv+qxRZ17bLwVjdnR3UcMkzfRsyoEhG7n8flofXP4eZuKaqUlJ7X0v rlJdfvdNKAu1Ipd+UyhzDhqKb2QbkLcfRW1vF4QEqo2XCVV732cStOJK8w4c5fkg WQbDZA5rxakBqdZMI/rB/j8xmxTwqGtHVfC6KvNFY4Ng0dbyBL3LtEi69wlLdzBS Htg0xVwuBsJxUBZ+GhWD+7E+n7OeARI= -----END CERTIFICATE-----Generated at Fri Sep 11 09:27:52 2026 by rpki-client