$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa File: d0006625-f457-3068-ab43-dd1b3162c248.roa (raw, json) Hash identifier: xTYwo7iam4CY5u6lOf3rYOTUSRKBVIjZ0/D45l5o+o8= Subject key identifier: F1:56:FB:F8:CF:CB:87:BD:25:11:96:FF:3F:71:5C:58:0E:F9:12:D6 Certificate issuer: /CN=8ad56193-8e33-4786-9a64-949338fc325a Certificate serial: 010D0C9F4328584ED00210DCAA7C7E80498CA780 Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 20115 IP address blocks: 209.114.4.0/22 maxlen: 24 209.114.8.0/21 maxlen: 24 209.114.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:02:10:dc:aa:7c:7e:80:49:8c:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=4ba8a72b-287d-4419-b5b0-941b681c0551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:63:1e:62:c1:4a:61:93:56:a3:46:4a:09:47: 6d:1e:e8:d1:d2:2c:ed:4f:6c:f8:17:7d:9d:c8:f0: 7d:3c:88:12:b1:03:5a:fb:53:43:0f:18:6f:3f:33: 43:2d:69:6b:12:be:59:09:27:dd:77:47:ea:b9:6a: 0e:fa:cb:b5:70:27:83:b1:98:ef:ed:77:7c:80:50: f7:c5:d3:41:f6:eb:bb:12:e4:5d:06:96:80:bd:ea: f6:37:f2:7c:d9:2e:fa:75:98:97:dd:3d:48:27:79: 8a:7e:53:6c:09:18:9f:c3:ee:ca:a3:d1:16:f4:ba: 09:cf:15:f4:2f:7e:cf:4e:89:9a:f9:aa:62:39:c8: d8:f1:2c:ec:ce:66:bf:ed:e5:d9:64:ed:75:86:2d: 4a:8f:61:24:74:63:7e:d9:c1:df:5c:03:d3:74:31: 71:e4:d3:3a:b8:17:61:4d:dc:d1:29:8a:4d:04:9c: 1b:b0:dd:b0:2a:e0:b2:18:e5:bd:4e:10:22:7f:b7: fe:a4:e8:0a:20:59:37:2c:78:73:57:8f:ae:4c:8c: b1:b1:e5:da:51:75:b1:64:6a:d1:6e:c6:a2:3f:25: 76:35:cc:7d:da:c7:2b:56:d2:05:22:5a:00:b8:c1: 3d:b1:3b:6e:34:0e:6a:5c:f9:27:ab:d9:a6:23:1e: d9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:56:FB:F8:CF:CB:87:BD:25:11:96:FF:3F:71:5C:58:0E:F9:12:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/d0006625-f457-3068-ab43-dd1b3162c248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl X509v3 Authority Key Identifier: keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer sbgp-ipAddrBlock: critical IPv4: 209.114.4.0-209.114.31.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:7c:5a:ce:58:01:34:6a:e4:da:f2:cf:8b:32:0d:89:29:02: 10:45:93:87:46:af:f3:5e:6e:c4:79:8c:d7:d0:3d:ee:96:34: 4f:f9:ef:91:93:ce:75:90:1f:16:86:fe:8d:9e:82:31:ac:35: bf:b2:73:a6:e5:fb:1a:52:5d:8f:24:2c:1a:bd:ff:e4:1f:83: 74:60:46:55:42:3f:90:86:29:aa:cc:b4:4d:ea:57:86:35:3e: 81:b1:a0:69:8f:b1:50:fd:b7:cb:1e:14:b1:30:0a:f9:5a:81: 04:88:23:89:a9:1a:5c:fa:d0:3d:ee:ce:92:39:f9:fa:0d:ce: 3d:f1:ec:cb:20:a3:27:7a:e6:40:43:ef:22:45:5f:22:eb:84: d6:a5:ce:7b:1c:7e:e2:99:f7:39:f9:25:6f:72:18:80:a6:75: 7e:a6:14:db:7c:37:47:df:b3:51:25:b7:f4:ca:2c:e9:a0:31: 23:ae:ea:35:f4:ca:16:7e:e6:0b:1e:ab:8a:9b:f5:71:df:47: 75:de:bc:46:d4:40:54:f3:df:88:cc:c7:98:0d:c8:b2:e9:ae: 7e:91:77:d2:06:77:1a:6c:79:f9:50:15:df:09:c0:d4:ba:57: 50:a1:2e:c3:31:fc:f5:75:f5:cb:22:16:42:af:7f:c1:64:3f: ed:e8:72:20 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7QAhDcqnx+gEmMp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz MjVhMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NGJhOGE3MmItMjg3ZC00NDE5LWI1YjAtOTQxYjY4MWMwNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGMeYsFKYZNWo0ZKCUdtHujR0iztT2z4F32d yPB9PIgSsQNa+1NDDxhvPzNDLWlrEr5ZCSfdd0fquWoO+su1cCeDsZjv7Xd8gFD3 xdNB9uu7EuRdBpaAver2N/J82S76dZiX3T1IJ3mKflNsCRifw+7Ko9EW9LoJzxX0 L37PToma+apiOcjY8Szszma/7eXZZO11hi1Kj2EkdGN+2cHfXAPTdDFx5NM6uBdh TdzRKYpNBJwbsN2wKuCyGOW9ThAif7f+pOgKIFk3LHhzV4+uTIyxseXaUXWxZGrR bsaiPyV2Ncx92scrVtIFIloAuME9sTtuNA5qXPknq9mmIx7Z3QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPFW+/jPy4e9JRGW/z9xXFgO+RLWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1 NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvZDAwMDY2MjUtZjQ1Ny0z MDY4LWFiNDMtZGQxYjMxNjJjMjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz MzhmYzMyNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALRcgQD BAXRcgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAuXxazlgBNGrk2vLPizINiSkCEEWTh0av815uxHmM19A9 7pY0T/nvkZPOdZAfFob+jZ6CMaw1v7JzpuX7GlJdjyQsGr3/5B+DdGBGVUI/kIYp qsy0TepXhjU+gbGgaY+xUP23yx4UsTAK+VqBBIgjiakaXPrQPe7Okjn5+g3OPfHs yyCjJ3rmQEPvIkVfIuuE1qXOexx+4pn3Ofklb3IYgKZ1fqYU23w3R9+zUSW39Mos 6aAxI67qNfTKFn7mCx6ripv1cd9Hdd68RtRAVPPfiMzHmA3IsumufpF30gZ3Gmx5 +VAV3wnA1LpXUKEuwzH89XX1yyIWQq9/wWQ/7ehyIA== -----END CERTIFICATE-----Generated at Sat Sep 5 00:59:30 2026 by rpki-client