$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa File: 3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa (raw, json) Hash identifier: i0u9kExCtp2sXZ9Flfd6EQiwzmFoC0dwLOuHSJc7/yE= Subject key identifier: 46:20:6E:10:9A:75:9A:5F:DB:73:74:6B:63:03:AB:34:13:21:07:22 Certificate issuer: /CN=883ca040-a898-4e47-b1e1-f2461996a058 Certificate serial: 010D0C9F4328584EEEB7571B4EBD83FFEE8EB1C0 Authority key identifier: BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 54249 IP address blocks: 209.189.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:57:1b:4e:bd:83:ff:ee:8e:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883ca040-a898-4e47-b1e1-f2461996a058 Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=d946f965-04f7-4e60-9435-8ffe7d77971b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:a4:35:22:65:ce:2f:d1:34:71:04:32:8f: bd:ba:ef:c9:14:ca:c9:7f:d0:23:2f:9b:3c:1a:da: 74:1e:20:5e:1b:74:82:c9:11:12:96:19:08:12:5c: 83:92:c6:92:99:68:00:b9:40:29:44:1d:4b:47:33: fc:99:57:8d:79:c6:8f:c7:70:a4:a5:81:3f:14:2d: 26:ed:94:6a:45:6e:96:65:d5:3e:19:65:cc:58:32: ca:af:ad:96:2b:de:66:8a:93:70:37:97:43:2c:0d: 50:1c:65:d1:a5:cf:7b:2f:37:b0:83:bf:1e:85:4c: 45:0c:2f:d4:a3:92:6d:61:65:60:d1:7d:e4:76:3c: f5:1a:64:7e:af:11:71:c0:91:46:c8:1f:01:82:11: 0c:e7:a7:bf:12:a5:62:5e:b2:cb:60:1f:6a:0d:3e: 8b:42:2d:21:31:4d:4a:74:e0:c5:9d:b9:7b:00:e4: dd:e1:13:35:4d:66:3f:6d:14:ae:ef:c0:c2:ac:ea: 0f:a0:21:25:4b:7a:c2:f9:eb:78:77:41:a1:e0:29: 59:12:d9:d6:1e:f3:bf:9b:c6:b7:68:6a:85:78:82: ac:a3:eb:c6:fc:ef:92:53:2b:53:31:dd:31:8d:c0: 13:0f:f2:73:0b:e3:7c:c0:89:01:2e:1f:90:3c:3f: 5d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:20:6E:10:9A:75:9A:5F:DB:73:74:6B:63:03:AB:34:13:21:07:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/3123dd87-4931-3dcf-87ea-bfa126e10ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058/883ca040-a898-4e47-b1e1-f2461996a058.crl X509v3 Authority Key Identifier: keyid:BD:0F:53:5E:2E:CC:2D:87:40:F4:DE:A1:FC:0E:1C:C9:4B:B8:70:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/883ca040-a898-4e47-b1e1-f2461996a058.cer sbgp-ipAddrBlock: critical IPv4: 209.189.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ec:0a:56:80:3d:98:37:6f:07:78:8e:aa:bd:80:3b:d5:37: 81:1b:9e:40:c5:52:41:50:69:5e:6d:39:54:26:0b:41:ad:ff: d9:5d:a8:11:cb:35:01:9f:73:a8:09:b4:e3:af:e1:d1:56:1b: 3a:47:18:f0:e2:54:d7:df:3e:12:e0:5f:ef:96:ec:cc:41:e2: e6:1c:4f:6a:13:3e:da:da:b3:6a:6d:c2:b5:26:6d:4a:8b:12: b8:3d:73:90:c5:95:c5:c2:b2:4a:f5:c6:88:cf:37:cd:3a:b3: d4:81:01:02:99:bd:84:83:a1:93:a8:59:49:59:d3:d3:13:10: d1:31:4b:08:99:28:26:f2:be:f0:2c:0d:a3:b1:f1:7d:be:46: cf:49:9f:a6:df:2f:e6:5b:79:63:2f:a0:17:b5:19:f6:c7:2f: 6c:99:a8:cc:5d:df:37:a1:32:b0:bb:84:89:6f:b7:79:20:fe: 97:96:03:db:6b:e9:26:28:bd:3c:09:37:30:21:90:1d:11:f1: de:70:a4:58:33:b4:cc:d4:ed:1e:40:5a:26:a3:1d:5e:ab:2e: 73:57:3a:d0:ca:50:a1:69:08:0f:74:94:26:5c:54:0a:1b:f0: 4b:31:e1:db:43:16:37:2f:99:8d:4a:ba:41:a6:cf:33:89:fd: 3e:55:0e:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut1cbTr2D/+6OscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgzY2EwNDAtYTg5OC00ZTQ3LWIxZTEtZjI0NjE5OTZh MDU4MB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZDk0NmY5NjUtMDRmNy00ZTYwLTk0MzUtOGZmZTdkNzc5NzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlWkNSJlzi/RNHEEMo+9uu/JFMrJf9AjL5s8 Gtp0HiBeG3SCyRESlhkIElyDksaSmWgAuUApRB1LRzP8mVeNecaPx3CkpYE/FC0m 7ZRqRW6WZdU+GWXMWDLKr62WK95mipNwN5dDLA1QHGXRpc97Lzewg78ehUxFDC/U o5JtYWVg0X3kdjz1GmR+rxFxwJFGyB8BghEM56e/EqViXrLLYB9qDT6LQi0hMU1K dODFnbl7AOTd4RM1TWY/bRSu78DCrOoPoCElS3rC+et4d0Gh4ClZEtnWHvO/m8a3 aGqFeIKso+vG/O+SUytTMd0xjcATD/JzC+N8wIkBLh+QPD9dGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYgbhCadZpf23N0a2MDqzQTIQciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84ODNj YTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2MTk5NmEwNTgvMzEyM2RkODctNDkzMS0z ZGNmLTg3ZWEtYmZhMTI2ZTEwZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvODgzY2EwNDAtYTg5OC00ZTQ3LWIx ZTEtZjI0NjE5OTZhMDU4Lzg4M2NhMDQwLWE4OTgtNGU0Ny1iMWUxLWYyNDYxOTk2 YTA1OC5jcmwwHwYDVR0jBBgwFoAUvQ9TXi7MLYdA9N6h/A4cyUu4cJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy84ODNjYTA0MC1hODk4LTRlNDctYjFlMS1mMjQ2 MTk5NmEwNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0b2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3sClaAPZg3bwd4jqq9gDvVN4EbnkDFUkFQaV5tOVQmC0Gt/9ldqBHL NQGfc6gJtOOv4dFWGzpHGPDiVNffPhLgX++W7MxB4uYcT2oTPtras2ptwrUmbUqL Erg9c5DFlcXCskr1xojPN806s9SBAQKZvYSDoZOoWUlZ09MTENExSwiZKCbyvvAs DaOx8X2+Rs9Jn6bfL+ZbeWMvoBe1GfbHL2yZqMxd3zehMrC7hIlvt3kg/peWA9tr 6SYovTwJNzAhkB0R8d5wpFgztMzU7R5AWiajHV6rLnNXOtDKUKFpCA90lCZcVAob 8Esx4dtDFjcvmY1KukGmzzOJ/T5VDmQ= -----END CERTIFICATE-----Generated at Tue Sep 29 04:17:17 2026 by rpki-client