$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/f054ea12-3853-302f-9dff-eb2166c427f7.roa File: f054ea12-3853-302f-9dff-eb2166c427f7.roa (raw, json) Hash identifier: bMM4vMTNvsbcKV9/FvlThMKLCPw4QK/Xh0Bc9QV3ziY= Subject key identifier: 20:B4:E9:EE:36:35:88:66:B5:8D:FB:36:41:04:28:79:AA:90:19:6E Certificate issuer: /CN=a25dba35-fbce-4e02-ac3e-dba534f71021 Certificate serial: 010D0C9F4328584F497471362895DD604C0EAD80 Authority key identifier: EC:C7:E0:F6:5F:96:C5:4D:B8:72:64:41:06:4C:37:23:0B:FE:46:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/f054ea12-3853-302f-9dff-eb2166c427f7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 209.94.64.0/24 maxlen: 24 209.94.76.0/24 maxlen: 24 209.94.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/a25dba35-fbce-4e02-ac3e-dba534f71021.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/a25dba35-fbce-4e02-ac3e-dba534f71021.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:71:36:28:95:dd:60:4c:0e:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a25dba35-fbce-4e02-ac3e-dba534f71021 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1b85d96f-331a-4f2e-bb61-309eb52edc45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bc:fb:ca:c8:d0:ed:96:72:4f:3a:27:8e:55: c2:42:56:15:80:cc:59:50:c4:12:73:d4:9f:ad:0a: e4:44:c8:e4:5f:7a:cd:27:d5:d3:fb:d1:c2:f1:12: 5e:47:69:68:95:de:25:99:02:bc:5d:9f:46:08:59: 4f:db:f6:aa:14:e2:20:bc:7d:05:c7:05:a8:4b:f1: a0:0e:af:00:bf:b3:e2:42:d6:f3:de:f1:6a:7d:54: 6d:76:c8:83:9c:7c:8c:86:17:e5:ff:ae:59:6c:08: c2:7c:4e:9b:24:86:5f:59:32:1d:54:cb:99:9d:b0: 67:a3:ba:39:2b:af:a8:57:8d:e4:11:90:44:b0:2f: e4:38:cb:63:0c:be:1b:b8:0e:40:25:9b:0d:97:14: 32:93:d3:fb:22:55:8e:67:19:f0:60:73:df:b7:06: 80:b5:be:ea:24:4d:26:db:75:75:96:fc:dc:61:96: 7d:ad:2c:b6:3d:7d:65:6f:c0:c1:e4:2d:02:50:f0: cf:a6:b6:a9:6d:dd:a5:d4:07:51:01:ca:14:a5:36: 84:7f:93:6f:8b:cb:50:ad:3e:db:af:a1:03:44:7a: 77:3d:04:58:00:fa:c6:f8:81:26:18:f0:2b:32:26: 66:8b:31:d8:11:f7:95:63:86:87:8d:cf:c5:e1:bc: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B4:E9:EE:36:35:88:66:B5:8D:FB:36:41:04:28:79:AA:90:19:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/f054ea12-3853-302f-9dff-eb2166c427f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021/a25dba35-fbce-4e02-ac3e-dba534f71021.crl X509v3 Authority Key Identifier: keyid:EC:C7:E0:F6:5F:96:C5:4D:B8:72:64:41:06:4C:37:23:0B:FE:46:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a25dba35-fbce-4e02-ac3e-dba534f71021.cer sbgp-ipAddrBlock: critical IPv4: 209.94.64.0/24 209.94.76.0/24 209.94.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:b1:1a:21:42:d0:86:c2:db:a1:f2:80:91:29:50:d6:34:0c: 36:6e:37:cc:28:d3:e4:e7:dc:eb:4a:6b:99:eb:ef:44:02:4f: 62:f8:d2:ef:20:77:2a:94:45:c7:6b:cd:bf:0c:a3:9f:21:65: 48:81:29:17:b0:67:8d:83:ea:62:b5:f9:02:f0:25:27:e7:51: 45:59:5f:f9:ed:8d:85:53:f8:e8:d1:3e:25:a6:6e:c3:ad:2b: c9:71:70:38:2b:da:cb:80:0b:95:e1:41:ff:d4:30:5e:06:50: e5:ce:46:a6:86:42:70:5c:81:da:b2:dd:69:44:55:00:d8:b4: 21:97:08:cb:a1:9f:3a:20:c0:3d:78:e5:d2:e3:9e:40:f9:50: 85:26:77:43:67:b5:63:b9:5a:a3:b7:41:66:90:05:eb:76:f9: c3:ac:d2:9e:3e:64:45:31:6d:16:88:9a:ed:0b:09:ff:0d:aa: 13:f5:b2:0b:78:03:d3:e6:46:ce:49:62:9c:32:0a:7a:84:af: e4:a4:f1:ce:18:95:5d:49:ff:1a:d1:12:c0:39:4a:96:92:bc: fe:c6:0d:0a:43:0e:f4:d0:fa:fa:b1:b6:c9:ad:6e:88:a2:11: 11:b0:85:cd:c8:f9:46:4f:c2:5f:db:70:7a:a1:f2:1a:84:2f: f8:c0:96:a1 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9JdHE2KJXdYEwOrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI1ZGJhMzUtZmJjZS00ZTAyLWFjM2UtZGJhNTM0Zjcx MDIxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWI4NWQ5NmYtMzMxYS00ZjJlLWJiNjEtMzA5ZWI1MmVkYzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLz7ysjQ7ZZyTzonjlXCQlYVgMxZUMQSc9Sf rQrkRMjkX3rNJ9XT+9HC8RJeR2lold4lmQK8XZ9GCFlP2/aqFOIgvH0FxwWoS/Gg Dq8Av7PiQtbz3vFqfVRtdsiDnHyMhhfl/65ZbAjCfE6bJIZfWTIdVMuZnbBno7o5 K6+oV43kEZBEsC/kOMtjDL4buA5AJZsNlxQyk9P7IlWOZxnwYHPftwaAtb7qJE0m 23V1lvzcYZZ9rSy2PX1lb8DB5C0CUPDPprapbd2l1AdRAcoUpTaEf5Nvi8tQrT7b r6EDRHp3PQRYAPrG+IEmGPArMiZmizHYEfeVY4aHjc/F4bxGAQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFCC06e42NYhmtY37NkEEKHmqkBluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjVk YmEzNS1mYmNlLTRlMDItYWMzZS1kYmE1MzRmNzEwMjEvZjA1NGVhMTItMzg1My0z MDJmLTlkZmYtZWIyMTY2YzQyN2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI1ZGJhMzUtZmJjZS00ZTAyLWFj M2UtZGJhNTM0ZjcxMDIxL2EyNWRiYTM1LWZiY2UtNGUwMi1hYzNlLWRiYTUzNGY3 MTAyMS5jcmwwHwYDVR0jBBgwFoAU7Mfg9l+WxU24cmRBBkw3Iwv+RmswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjVkYmEzNS1mYmNlLTRlMDItYWMzZS1kYmE1 MzRmNzEwMjEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA0V5AAwQA 0V5MAwQA0V5fMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAMixGiFC0IbC26HygJEpUNY0DDZuN8wo0+Tn3OtK a5nr70QCT2L40u8gdyqURcdrzb8Mo58hZUiBKRewZ42D6mK1+QLwJSfnUUVZX/nt jYVT+OjRPiWmbsOtK8lxcDgr2suAC5XhQf/UMF4GUOXORqaGQnBcgdqy3WlEVQDY tCGXCMuhnzogwD145dLjnkD5UIUmd0NntWO5WqO3QWaQBet2+cOs0p4+ZEUxbRaI mu0LCf8NqhP1sgt4A9PmRs5JYpwyCnqEr+Sk8c4YlV1J/xrREsA5SpaSvP7GDQpD DvTQ+vqxtsmtboiiERGwhc3I+UZPwl/bcHqh8hqEL/jAlqE= -----END CERTIFICATE-----Generated at Fri Sep 25 11:02:10 2026 by rpki-client