$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c09686ce-8d57-3a1d-af24-08d3edcfd893.roa File: c09686ce-8d57-3a1d-af24-08d3edcfd893.roa (raw, json) Hash identifier: qIs5MVCcTAOzq2/IMbwCqLpOlLcnXatUhcOk1qiKEuY= Subject key identifier: 1C:DF:41:CF:76:E9:72:50:69:38:EB:B8:81:3C:90:2B:6A:45:03:0F Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F62930FDDF7B272F38E69E380 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c09686ce-8d57-3a1d-af24-08d3edcfd893.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 16509 IP address blocks: 204.157.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:0f:dd:f7:b2:72:f3:8e:69:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=4b579e9b-20bf-4ce8-813a-054849e4b8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cf:8c:a9:77:f9:54:7a:32:37:9a:48:63:19: 6e:a2:f2:f0:88:97:74:4c:8c:66:97:6f:ad:5c:8e: a4:cf:ed:c3:45:fb:33:b7:5f:98:01:42:f4:04:f6: ff:dd:f9:b7:b5:c9:e2:aa:e9:f9:b0:fa:6f:de:20: ad:97:23:0f:ce:6a:2f:f8:78:c4:f1:98:4b:bd:b7: 4d:b8:d3:cc:b1:0d:d8:c4:c5:9c:f6:df:c8:c6:1b: dd:7e:52:fc:0d:0a:ba:3e:fa:36:cc:f1:df:a0:d8: 5f:e7:a3:2a:a5:e3:ae:82:50:0b:7b:0c:70:2e:ee: 71:da:8a:2f:ef:d8:9f:f3:14:82:b5:c6:b9:24:12: 0f:50:40:7a:7c:67:ca:dc:8d:08:21:08:ea:40:41: d7:8c:34:4d:0d:0f:1f:68:fd:b2:4d:f5:dc:b1:4e: 97:4e:24:8d:2b:b3:73:70:d0:fa:c7:b4:ef:33:3b: d7:60:05:34:01:17:c5:fd:15:b2:89:1a:eb:5a:ea: a4:41:69:01:c4:02:06:2e:b2:14:26:03:a4:a6:2b: 24:c3:fb:9a:ec:1f:de:37:b5:94:57:ee:f1:3e:83: aa:ed:54:6e:c0:56:dd:6b:fe:94:5c:57:a4:39:62: b2:58:3d:cb:0b:f2:aa:90:4e:cc:15:74:d9:bc:84: 01:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DF:41:CF:76:E9:72:50:69:38:EB:B8:81:3C:90:2B:6A:45:03:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c09686ce-8d57-3a1d-af24-08d3edcfd893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 204.157.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b0:95:29:81:e4:4c:c6:92:35:72:37:2f:d5:e6:c5:eb:10: fb:94:5a:70:07:ea:8d:18:45:f2:a1:60:a3:b1:8f:59:71:01: 7d:d3:4f:cb:52:30:36:f6:30:1c:b8:34:15:9f:bd:63:16:32: e5:eb:cd:93:a4:08:17:67:12:24:1d:4e:21:99:6d:2b:90:0d: f1:2e:e3:c9:45:72:96:dc:a1:6d:cd:05:ba:dd:d9:00:a2:b7: 8b:6e:71:26:e4:f9:ca:4b:c7:23:ab:84:fd:18:ca:9f:70:bf: e7:4f:91:21:c3:d2:2a:60:83:fe:0b:c6:ca:d2:05:95:59:ed: f3:8b:06:75:a3:48:96:21:7e:80:51:66:fb:49:c7:03:3c:04: 63:02:5e:70:56:3c:11:0f:1d:0f:0a:a1:6e:d4:77:3a:24:05: a5:b2:e2:5e:f1:4c:66:e7:fa:b3:a4:f2:80:09:b9:cf:a0:83: 58:1c:3d:5f:f5:c8:a4:f8:6c:b9:e5:15:92:60:96:05:49:7c: c6:e4:1b:64:d2:01:8f:26:4e:41:b7:b0:e4:b2:47:a4:56:26: db:58:78:15:f8:65:5a:71:c7:da:a6:81:3c:ab:78:29:fa:cf: 13:5d:7a:8d:8e:17:5f:fa:08:e8:a8:24:ba:ad:1e:5b:d6:e2: c2:d4:a2:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikw/d97Jy845p44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NGI1NzllOWItMjBiZi00Y2U4LTgxM2EtMDU0ODQ5ZTRiOGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM+MqXf5VHoyN5pIYxluovLwiJd0TIxml2+t XI6kz+3DRfszt1+YAUL0BPb/3fm3tcniqun5sPpv3iCtlyMPzmov+HjE8ZhLvbdN uNPMsQ3YxMWc9t/IxhvdflL8DQq6Pvo2zPHfoNhf56MqpeOuglALewxwLu5x2oov 79if8xSCtca5JBIPUEB6fGfK3I0IIQjqQEHXjDRNDQ8faP2yTfXcsU6XTiSNK7Nz cND6x7TvMzvXYAU0ARfF/RWyiRrrWuqkQWkBxAIGLrIUJgOkpiskw/ua7B/eN7WU V+7xPoOq7VRuwFbda/6UXFekOWKyWD3LC/KqkE7MFXTZvIQBeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzfQc926XJQaTjruIE8kCtqRQMPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzA5Njg2Y2UtOGQ1Ny0z YTFkLWFmMjQtMDhkM2VkY2ZkODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJ38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSwlSmB5EzGkjVyNy/V5sXrEPuUWnAH6o0YRfKhYKOxj1lxAX3TT8tS MDb2MBy4NBWfvWMWMuXrzZOkCBdnEiQdTiGZbSuQDfEu48lFcpbcoW3NBbrd2QCi t4tucSbk+cpLxyOrhP0Yyp9wv+dPkSHD0ipgg/4LxsrSBZVZ7fOLBnWjSJYhfoBR ZvtJxwM8BGMCXnBWPBEPHQ8KoW7UdzokBaWy4l7xTGbn+rOk8oAJuc+gg1gcPV/1 yKT4bLnlFZJglgVJfMbkG2TSAY8mTkG3sOSyR6RWJttYeBX4ZVpxx9qmgTyreCn6 zxNdeo2OF1/6COioJLqtHlvW4sLUouw= -----END CERTIFICATE-----Generated at Tue Oct 27 20:31:34 2026 by rpki-client