$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd9bba4d-0b1e-3246-848a-bbabc58d8f77.roa File: dd9bba4d-0b1e-3246-848a-bbabc58d8f77.roa (raw, json) Hash identifier: PnShgKt13AlI/+FBuoun/eBMxQiqc5oBc3aRfx6Rxjg= Subject key identifier: FE:FF:31:D1:4B:96:F6:47:C1:E6:D1:8C:FC:F3:1F:70:F8:41:57:47 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EF01CD62B28F5F1C687F31C80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd9bba4d-0b1e-3246-848a-bbabc58d8f77.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 269656 IP address blocks: 209.14.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:d6:2b:28:f5:f1:c6:87:f3:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=ffc89f43-2b99-4437-bd89-30ba1a52c2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2e:36:5c:c5:94:c6:b7:a0:a8:b8:9a:72:10: 53:01:9f:d6:09:08:14:a0:e2:5b:56:4b:1a:28:07: e9:ac:02:8a:e2:2c:2c:d2:2f:75:32:45:06:76:dd: e4:2f:5a:00:cb:58:7a:f6:d7:ed:76:93:3a:b7:89: 7f:09:3d:d5:5c:17:98:7f:97:d7:03:6c:29:48:7c: 44:19:66:da:40:cf:17:09:11:78:f9:42:14:85:4a: 66:21:c0:9f:73:46:e9:20:ca:14:60:dc:0a:3c:3a: cc:22:88:52:8c:a1:18:b1:13:a2:78:c7:20:4d:0d: ba:2c:0b:1e:44:cb:92:4b:23:62:53:c0:f4:24:2d: 3f:96:98:1c:6d:cb:66:b4:b8:90:33:d7:a7:e9:5b: f2:1f:e0:48:70:3d:13:27:dd:9e:87:16:27:47:9b: cf:07:af:d6:8c:08:80:8b:05:66:6d:6b:2d:f9:5a: 8f:15:0f:13:d9:59:96:2f:7f:57:72:0f:1f:f7:3b: 1b:d5:af:b9:d4:c6:c2:64:3a:d8:77:e9:62:38:74: 71:94:fc:a1:96:6f:7a:e6:7e:f3:26:80:07:ad:f7: f7:08:3d:4f:c4:b5:71:e6:6e:6b:39:13:f9:74:5b: 6a:cf:62:6a:ec:a3:73:b5:29:62:c2:0b:3a:5e:6e: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FF:31:D1:4B:96:F6:47:C1:E6:D1:8C:FC:F3:1F:70:F8:41:57:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dd9bba4d-0b1e-3246-848a-bbabc58d8f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 209.14.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f8:b9:e3:7b:f4:83:b7:aa:32:0f:a8:b4:e1:aa:41:62:94: 24:1c:c8:b6:8c:21:84:66:28:2d:3e:2f:79:e7:4a:06:b5:e0: f2:f6:78:f4:bc:41:bf:5c:1f:a6:66:83:a0:57:2d:45:0f:81: dd:04:c4:80:54:ba:2b:1a:46:39:af:44:4d:13:73:d7:d1:b6: 97:d5:e6:d1:0d:0d:08:3a:ae:35:f1:f3:66:cb:5c:12:48:98: c3:81:7a:f5:bc:4f:a2:01:41:4a:74:09:6a:00:3a:f7:55:11: cc:25:08:f5:35:8b:d3:1c:04:2d:72:e9:78:79:29:9b:fa:61: e9:19:e2:f3:e4:01:8c:8a:e3:16:ae:f1:64:93:c6:5c:f7:25: 2c:5a:b9:56:fb:90:0c:49:b2:7c:fd:e1:c1:f5:fa:ea:f5:9b: 15:81:0e:11:4e:36:f0:22:7c:b1:64:5c:8c:df:2f:70:80:3b: 05:4c:92:0c:10:4d:43:59:e8:92:62:3a:57:7b:4e:39:5b:b8: 15:b0:29:b9:74:5c:73:6a:76:ec:64:31:53:76:27:60:31:d8: e6:ce:93:62:09:16:fb:d5:15:40:d9:35:d9:e2:57:a5:8b:ad: 13:8c:9d:42:66:43:ca:a6:89:15:ee:4e:a4:62:f8:a4:4e:ae: 29:97:28:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHNYrKPXxxofzHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZmZjODlmNDMtMmI5OS00NDM3LWJkODktMzBiYTFhNTJjMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S42XMWUxregqLiachBTAZ/WCQgUoOJbVksa KAfprAKK4iws0i91MkUGdt3kL1oAy1h69tftdpM6t4l/CT3VXBeYf5fXA2wpSHxE GWbaQM8XCRF4+UIUhUpmIcCfc0bpIMoUYNwKPDrMIohSjKEYsROieMcgTQ26LAse RMuSSyNiU8D0JC0/lpgcbctmtLiQM9en6VvyH+BIcD0TJ92ehxYnR5vPB6/WjAiA iwVmbWst+VqPFQ8T2VmWL39Xcg8f9zsb1a+51MbCZDrYd+liOHRxlPyhlm965n7z JoAHrff3CD1PxLVx5m5rORP5dFtqz2Jq7KNztSliwgs6Xm7HuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7/MdFLlvZHwebRjPzzH3D4QVdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGQ5YmJhNGQtMGIxZS0z MjQ2LTg0OGEtYmJhYmM1OGQ4Zjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Q6EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP4ueN79IO3qjIPqLThqkFilCQcyLaMIYRmKC0+L3nnSga14PL2ePS8 Qb9cH6Zmg6BXLUUPgd0ExIBUuisaRjmvRE0Tc9fRtpfV5tENDQg6rjXx82bLXBJI mMOBevW8T6IBQUp0CWoAOvdVEcwlCPU1i9McBC1y6Xh5KZv6YekZ4vPkAYyK4xau 8WSTxlz3JSxauVb7kAxJsnz94cH1+ur1mxWBDhFONvAifLFkXIzfL3CAOwVMkgwQ TUNZ6JJiOld7TjlbuBWwKbl0XHNqduxkMVN2J2Ax2ObOk2IJFvvVFUDZNdniV6WL rROMnUJmQ8qmiRXuTqRi+KROrimXKC8= -----END CERTIFICATE-----Generated at Fri Sep 11 13:49:55 2026 by rpki-client