$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/2ac3854a-5d25-386e-8196-925be0d57ac3.roa File: 2ac3854a-5d25-386e-8196-925be0d57ac3.roa (raw, json) Hash identifier: TYqkeyjzhaeLxmWBVbNWQDXpRfUwACjebHNuS5rT1O0= Subject key identifier: 04:C0:09:E1:FE:DE:F8:D5:07:46:29:BB:E3:D0:81:28:B2:25:6C:30 Certificate issuer: /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Certificate serial: 010D0C9F4328584EA787992D3FDD73DBB90C8080 Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/2ac3854a-5d25-386e-8196-925be0d57ac3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21669 IP address blocks: 209.212.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:99:2d:3f:dd:73:db:b9:0c:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0e24263f-7ce0-44b6-a5f7-e68af5dc119c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:50:fc:17:0b:45:93:82:c3:a6:f1:e5:b9:ec: 6e:6c:db:90:67:58:75:b9:3e:7a:86:09:c9:02:0e: b5:96:6f:ee:b2:aa:52:2b:ce:0b:f9:a0:62:bf:8b: c8:9c:66:84:ad:40:7c:37:8f:a0:93:ac:05:59:65: 83:da:a5:40:eb:de:39:f9:01:d7:0f:f7:be:09:d1: aa:1a:be:7a:81:e3:d4:0c:88:6e:59:f4:79:07:21: 56:12:fb:4e:f4:88:1f:f7:cc:49:5e:05:20:5c:e3: 93:73:cb:c6:81:05:f7:68:eb:60:ed:cd:14:51:0f: 92:8f:88:8d:dc:48:c0:83:bc:be:76:cd:48:d5:4b: 1b:f6:6c:67:07:ca:a3:4d:36:32:ec:ec:de:8c:1f: 88:41:10:b9:82:80:d6:18:dc:cf:d8:a6:17:2c:d0: 42:b3:83:19:df:50:fa:32:de:75:e0:8c:b7:18:f8: a6:0b:fe:b0:cc:88:63:e0:06:c5:b6:51:d5:fe:cc: 41:ee:6b:c6:30:65:d2:48:50:d1:59:98:62:d7:2f: 2e:80:68:c6:c4:95:a9:d9:2a:0d:26:3f:36:5b:c6: 2c:77:10:60:8d:e7:83:3f:f6:f1:4f:29:e5:22:e0: 63:fe:57:f5:e1:d3:e0:14:6a:5d:13:f5:df:29:99: f9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C0:09:E1:FE:DE:F8:D5:07:46:29:BB:E3:D0:81:28:B2:25:6C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/2ac3854a-5d25-386e-8196-925be0d57ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl X509v3 Authority Key Identifier: keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer sbgp-ipAddrBlock: critical IPv4: 209.212.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:07:57:05:32:44:2e:7a:fc:1a:9d:2f:6b:61:0b:9e:c9:93: 21:27:83:f8:98:d8:76:32:e5:bb:1a:4a:0a:65:44:0f:ba:c7: 6f:17:32:d5:6f:29:ac:a1:71:e3:a2:4d:b1:1f:83:20:f5:80: 74:7b:bc:47:19:80:a4:31:d7:da:fd:05:a5:8f:f8:bd:93:90: 66:21:f5:09:c1:37:fc:f0:e6:64:7b:5a:3d:03:33:c4:15:c6: c7:f3:fa:20:73:8d:0b:4c:d5:a9:44:9d:ee:50:b5:69:72:8c: f3:1e:f5:01:84:34:ff:cd:2e:b7:94:58:5c:61:1c:d2:0a:42: 3e:32:16:c1:14:c2:d8:36:b4:ee:74:14:d8:dc:66:e6:18:a0: 40:fd:bc:af:d4:e5:35:cc:b0:e4:6c:8c:dd:9a:a3:24:7c:00: bb:6d:f5:92:71:c3:81:48:41:c4:c2:8c:97:e5:e0:bd:4f:52: 84:26:24:dc:b3:ba:49:e5:43:af:a6:d4:27:3f:0a:be:e2:b7: f3:45:2c:37:54:4a:71:79:fb:9e:91:da:ce:b1:34:a6:c7:d9: b8:22:fc:ab:c5:ac:a8:f3:01:e2:d7:df:b9:9f:c4:79:5e:56: 1e:91:3d:24:a4:0e:73:d3:1c:46:be:47:23:9e:f4:fe:fa:9a: ae:3b:4e:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh5ktP91z27kMgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5Njk3ODMtM2UzNS00NzlkLWIwZTctZTNkYWMwY2Fm OWY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGUyNDI2M2YtN2NlMC00NGI2LWE1ZjctZTY4YWY1ZGMxMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1D8FwtFk4LDpvHluexubNuQZ1h1uT56hgnJ Ag61lm/usqpSK84L+aBiv4vInGaErUB8N4+gk6wFWWWD2qVA6945+QHXD/e+CdGq Gr56gePUDIhuWfR5ByFWEvtO9Igf98xJXgUgXOOTc8vGgQX3aOtg7c0UUQ+Sj4iN 3EjAg7y+ds1I1Usb9mxnB8qjTTYy7OzejB+IQRC5goDWGNzP2KYXLNBCs4MZ31D6 Mt514Iy3GPimC/6wzIhj4AbFtlHV/sxB7mvGMGXSSFDRWZhi1y8ugGjGxJWp2SoN Jj82W8YsdxBgjeeDP/bxTynlIuBj/lf14dPgFGpdE/XfKZn5kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATACeH+3vjVB0Ypu+PQgSiyJWwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2 OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2RhYzBjYWY5ZjkvMmFjMzg1NGEtNWQyNS0z ODZlLTgxOTYtOTI1YmUwZDU3YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGY5Njk3ODMtM2UzNS00NzlkLWIw ZTctZTNkYWMwY2FmOWY5LzRmOTY5NzgzLTNlMzUtNDc5ZC1iMGU3LWUzZGFjMGNh ZjlmOS5jcmwwHwYDVR0jBBgwFoAUb5LJGnW0bOelHqUkIxZjVQ0DQIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2Rh YzBjYWY5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dQKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoHVwUyRC56/BqdL2thC57JkyEng/iY2HYy5bsaSgplRA+6x28XMtVv KayhceOiTbEfgyD1gHR7vEcZgKQx19r9BaWP+L2TkGYh9QnBN/zw5mR7Wj0DM8QV xsfz+iBzjQtM1alEne5QtWlyjPMe9QGENP/NLreUWFxhHNIKQj4yFsEUwtg2tO50 FNjcZuYYoED9vK/U5TXMsORsjN2aoyR8ALtt9ZJxw4FIQcTCjJfl4L1PUoQmJNyz uknlQ6+m1Cc/Cr7it/NFLDdUSnF5+56R2s6xNKbH2bgi/KvFrKjzAeLX37mfxHle Vh6RPSSkDnPTHEa+RyOe9P76mq47Tj4= -----END CERTIFICATE-----Generated at Mon Aug 31 10:25:04 2026 by rpki-client