$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8232a78-952c-374c-b397-532e57c4f5a8.roa File: c8232a78-952c-374c-b397-532e57c4f5a8.roa (raw, json) Hash identifier: ByMXoK7P+VIm+N4RVuPNpCgtOeVaNB9ZzftCtlmP674= Subject key identifier: EE:5E:FF:4E:0F:0D:42:EF:B5:5E:CB:45:1D:FB:49:B4:3E:77:E7:AA Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584F03A83F6A5CD4875667CA72C0 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8232a78-952c-374c-b397-532e57c4f5a8.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 273200 IP address blocks: 209.61.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a8:3f:6a:5c:d4:87:56:67:ca:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=7a91ae00-a25e-4613-85f6-794021c20a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0e:52:6b:09:78:78:a8:99:64:dd:de:b7:35: 90:f3:65:d7:24:55:7b:f1:ef:86:b6:80:cd:b6:96: d3:26:6b:32:ce:e2:81:b7:d3:f9:08:c2:5f:3e:b2: ec:73:bb:79:f4:cb:d0:34:1d:62:1a:4b:45:17:47: 66:16:68:b5:52:da:c0:d0:96:02:68:de:52:9a:ec: 02:86:bc:7d:94:52:85:8c:5f:f3:fd:8a:00:ff:4f: 61:07:76:d9:4e:52:73:01:b5:7f:2f:c8:01:2b:57: f0:3e:c5:44:ec:c9:26:95:d9:4d:dd:6e:14:3a:43: 31:e8:c9:af:07:50:2b:9a:9b:c0:9e:c5:1f:35:26: 97:c4:05:58:d3:e2:a1:0a:f3:2e:12:73:4c:3b:63: 43:45:ca:20:ed:c5:b5:27:96:c5:7d:bf:de:84:94: 47:d6:e4:fd:5c:6e:41:ab:bc:f2:5a:09:f4:a2:f4: f5:24:d3:dc:f9:bd:4e:d8:13:88:b2:2d:b6:fa:aa: 79:f7:9d:53:dd:de:57:c8:4e:67:78:9f:f0:9c:6c: 61:fb:01:a4:e5:a3:42:cf:80:d6:bb:8f:34:f2:31: 9c:7a:47:27:7d:36:9a:b7:89:74:40:74:d4:fb:2b: b8:d9:9a:ca:24:4c:8e:dc:44:06:ef:13:ba:d3:f2: 8e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:5E:FF:4E:0F:0D:42:EF:B5:5E:CB:45:1D:FB:49:B4:3E:77:E7:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8232a78-952c-374c-b397-532e57c4f5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 209.61.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d0:92:0e:de:27:ad:2c:58:fb:64:d9:b9:0f:99:91:06:56: e2:37:fd:86:d4:9a:3e:4d:b0:3d:9a:1f:91:f0:83:48:47:70: 40:9a:0d:50:e2:27:ea:7b:2a:79:de:1c:aa:f7:ff:1a:b4:17: 56:3c:73:c1:0e:d6:e4:44:17:75:3a:a2:f1:d8:a8:7b:bf:ce: aa:d4:32:ce:4a:51:a5:5e:06:92:1f:8c:44:5d:38:64:f7:a3: d2:0a:28:b8:2f:4f:34:39:0b:74:a3:8f:f2:ff:85:25:19:63: 0c:64:1c:3b:c0:f2:0d:50:f2:a7:bd:23:1b:78:ab:ef:9f:f7: e5:84:b9:11:8f:f6:aa:3f:89:1e:32:4a:1f:3f:b6:40:3a:28: 50:e5:3f:0c:0e:8b:00:16:26:47:2e:e9:c8:9a:89:6b:4f:74: 7d:e2:c1:87:41:fd:b3:d7:46:2d:41:67:62:a1:dc:cb:d8:75: d3:78:cc:f4:17:85:2b:dc:ca:6d:5d:3a:38:20:ed:0d:d2:47: d8:62:e8:90:4a:b3:40:f0:3f:11:96:78:79:7e:3c:4c:19:fb: 7c:06:45:40:51:f4:1f:32:1a:75:64:7b:84:75:69:7c:a9:5c: 40:c2:49:0a:f4:41:79:9c:f5:3e:80:23:fa:7b:71:96:10:3f: e9:4a:d4:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8DqD9qXNSHVmfKcsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk N2E5MWFlMDAtYTI1ZS00NjEzLTg1ZjYtNzk0MDIxYzIwYTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5g5Sawl4eKiZZN3etzWQ82XXJFV78e+GtoDN tpbTJmsyzuKBt9P5CMJfPrLsc7t59MvQNB1iGktFF0dmFmi1UtrA0JYCaN5SmuwC hrx9lFKFjF/z/YoA/09hB3bZTlJzAbV/L8gBK1fwPsVE7MkmldlN3W4UOkMx6Mmv B1ArmpvAnsUfNSaXxAVY0+KhCvMuEnNMO2NDRcog7cW1J5bFfb/ehJRH1uT9XG5B q7zyWgn0ovT1JNPc+b1O2BOIsi22+qp5951T3d5XyE5neJ/wnGxh+wGk5aNCz4DW u4808jGcekcnfTaat4l0QHTU+yu42ZrKJEyO3EQG7xO60/KOlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5e/04PDULvtV7LRR37SbQ+d+eqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvYzgyMzJhNzgtOTUyYy0z NzRjLWIzOTctNTMyZTU3YzRmNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0T0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfQkg7eJ60sWPtk2bkPmZEGVuI3/YbUmj5NsD2aH5Hwg0hHcECaDVDi J+p7KnneHKr3/xq0F1Y8c8EO1uREF3U6ovHYqHu/zqrUMs5KUaVeBpIfjERdOGT3 o9IKKLgvTzQ5C3Sjj/L/hSUZYwxkHDvA8g1Q8qe9Ixt4q++f9+WEuRGP9qo/iR4y Sh8/tkA6KFDlPwwOiwAWJkcu6ciaiWtPdH3iwYdB/bPXRi1BZ2Kh3MvYddN4zPQX hSvcym1dOjgg7Q3SR9hi6JBKs0DwPxGWeHl+PEwZ+3wGRUBR9B8yGnVke4R1aXyp XEDCSQr0QXmc9T6AI/p7cZYQP+lK1J0= -----END CERTIFICATE-----Generated at Fri Sep 11 14:30:46 2026 by rpki-client