$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f8a149f8-10c8-3ecf-a0be-eaf9f726b68d.roa File: f8a149f8-10c8-3ecf-a0be-eaf9f726b68d.roa (raw, json) Hash identifier: gr+VscG6R/iMNSr46OQAt8ILeS2w2FmYzUAAfqnVaZA= Subject key identifier: DC:43:47:E0:D6:A3:7B:3D:5D:F3:53:0A:6E:A4:FD:EE:78:4D:CB:29 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584ECA6C6D2609F0DE2384C54A80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f8a149f8-10c8-3ecf-a0be-eaf9f726b68d.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 272106 IP address blocks: 209.14.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:6d:26:09:f0:de:23:84:c5:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=d88b770b-1e83-4399-b3f1-4f1ae2e1d313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:3f:53:4a:af:05:72:62:50:1e:0a:2e:fe: f6:c7:31:f8:d2:fe:1c:20:6f:1f:8a:63:50:c3:f3: 36:d0:a6:8d:f4:e3:37:ff:48:48:3d:c4:f5:97:82: e7:be:e5:ad:c9:de:c4:92:4d:32:6e:4c:d8:d0:3b: 82:25:56:e3:07:28:b9:10:c8:8d:e3:02:df:5f:bd: d6:5d:d7:56:9c:df:92:14:42:17:2a:43:02:fa:ea: 30:91:6d:1c:f8:4d:2a:77:d8:8c:95:93:00:f0:89: 37:d9:0e:37:5a:9a:ab:92:e1:6d:c5:78:6b:4a:25: 80:7b:d2:b5:31:20:10:60:ab:72:dd:6c:fa:f4:75: 17:20:db:82:8b:a8:9c:87:3c:00:ff:47:75:81:ee: 9f:c0:0b:e7:b0:c1:45:86:af:5a:58:99:6c:fb:43: 56:b1:5e:9c:16:14:bc:43:08:56:40:d5:ea:82:ac: 70:5e:c2:2a:d7:5b:95:8c:ba:5f:89:4e:ce:e2:0a: 16:4f:f0:76:10:d1:1e:1a:ec:ec:54:c2:41:b0:a8: 7b:50:db:36:21:db:6e:9f:03:1a:d9:a1:60:29:bc: ae:00:c0:b4:f9:36:2b:08:e4:92:76:ac:40:8b:fa: 43:f4:19:e1:ba:be:5a:7c:2d:23:92:8b:bd:3c:e8: 55:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:43:47:E0:D6:A3:7B:3D:5D:F3:53:0A:6E:A4:FD:EE:78:4D:CB:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/f8a149f8-10c8-3ecf-a0be-eaf9f726b68d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 209.14.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:c4:9e:cf:23:2a:b2:18:c1:eb:d0:92:df:7b:40:db:a5:ab: 91:66:d8:b1:ae:71:59:4e:a2:18:18:b5:dc:bd:ab:43:93:33: 22:7a:a8:fa:7c:74:5f:b8:07:6f:da:84:12:fd:dd:4d:bf:a0: e2:79:3e:00:ff:ce:69:9c:f7:92:d6:66:59:15:15:5d:c8:8a: 01:db:8d:d7:d9:2f:ab:2c:1c:c1:f4:46:ac:d9:c3:84:7f:88: ab:9f:6d:5b:4c:a7:75:07:76:d9:a1:7a:c4:67:43:c8:ce:45: f3:cb:1a:ee:49:30:e5:f6:d5:fe:54:17:d9:87:2f:01:a6:ab: 8c:ae:b4:43:c4:f4:03:f8:d4:e0:9c:11:31:37:11:31:f5:ad: 57:2c:8f:78:17:9d:64:57:c1:40:4e:62:6b:4e:50:9b:73:c2: d8:c1:cf:37:ac:ea:e5:8e:fb:05:bc:e5:5c:eb:05:ba:33:08: 28:35:9c:e0:91:77:b6:53:83:de:0c:e5:73:d5:80:05:80:43: bd:1f:08:c6:e1:13:e0:5f:9f:b3:3a:be:70:8b:c7:db:61:61: 1d:c5:80:78:7d:97:b2:e1:86:d9:5c:94:5e:ee:55:63:4b:83: 81:89:ba:4c:1d:6c:1a:76:22:c9:18:5c:f1:0e:0c:e5:8a:da: 00:2c:04:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbG0mCfDeI4TFSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk ZDg4Yjc3MGItMWU4My00Mzk5LWIzZjEtNGYxYWUyZTFkMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwI/U0qvBXJiUB4KLv72xzH40v4cIG8fimNQ w/M20KaN9OM3/0hIPcT1l4LnvuWtyd7Ekk0ybkzY0DuCJVbjByi5EMiN4wLfX73W XddWnN+SFEIXKkMC+uowkW0c+E0qd9iMlZMA8Ik32Q43WpqrkuFtxXhrSiWAe9K1 MSAQYKty3Wz69HUXINuCi6ichzwA/0d1ge6fwAvnsMFFhq9aWJls+0NWsV6cFhS8 QwhWQNXqgqxwXsIq11uVjLpfiU7O4goWT/B2ENEeGuzsVMJBsKh7UNs2IdtunwMa 2aFgKbyuAMC0+TYrCOSSdqxAi/pD9Bnhur5afC0jkou9POhVSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxDR+DWo3s9XfNTCm6k/e54TcspMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZjhhMTQ5ZjgtMTBjOC0z ZWNmLWEwYmUtZWFmOWY3MjZiNjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Q5sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7Ens8jKrIYwevQkt97QNulq5Fm2LGucVlOohgYtdy9q0OTMyJ6qPp8 dF+4B2/ahBL93U2/oOJ5PgD/zmmc95LWZlkVFV3IigHbjdfZL6ssHMH0RqzZw4R/ iKufbVtMp3UHdtmhesRnQ8jORfPLGu5JMOX21f5UF9mHLwGmq4yutEPE9AP41OCc ETE3ETH1rVcsj3gXnWRXwUBOYmtOUJtzwtjBzzes6uWO+wW85VzrBbozCCg1nOCR d7ZTg94M5XPVgAWAQ70fCMbhE+Bfn7M6vnCLx9thYR3FgHh9l7LhhtlclF7uVWNL g4GJukwdbBp2IskYXPEODOWK2gAsBMA= -----END CERTIFICATE-----Generated at Fri Sep 11 13:07:07 2026 by rpki-client