$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/d15b0b00-81cb-347c-9b22-b95dea30c982.roa File: d15b0b00-81cb-347c-9b22-b95dea30c982.roa (raw, json) Hash identifier: GBsgbHivj7rEuWMuh11SJvWt4zou+JUNbDIsB7x7ghU= Subject key identifier: 2F:5A:8C:22:FB:09:7A:23:68:BE:FA:30:4E:2F:4B:66:E9:D1:04:AB Certificate issuer: /CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Certificate serial: 010D0C9F4328584EE10AEDCFCEFCE86E65DD0EC0 Authority key identifier: 6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/d15b0b00-81cb-347c-9b22-b95dea30c982.roa Signing time: Tue 18 Aug 2026 15:27:25 +0000 ROA not before: Tue 18 Aug 2026 15:27:25 +0000 ROA not after: Mon 16 Nov 2026 16:27:25 +0000 asID: 21669 IP address blocks: 209.212.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e1:0a:ed:cf:ce:fc:e8:6e:65:dd:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f969783-3e35-479d-b0e7-e3dac0caf9f9 Validity Not Before: Aug 18 15:27:25 2026 GMT Not After : Nov 16 16:27:25 2026 GMT Subject: CN=97a08b26-686d-480f-b5a9-4ed10c6b79f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fa:ee:64:78:f7:03:20:de:e3:2b:4e:22:ae: 88:57:ec:12:89:2a:45:67:e4:e1:b8:6e:d7:90:fa: f0:69:55:e9:b0:93:88:3f:c6:3b:72:8a:8d:32:46: 0c:8c:b5:d1:9c:18:20:dd:c7:73:dd:e5:6b:7c:6d: 9a:a7:00:95:57:f4:e8:d2:a2:9c:7e:25:f2:f2:11: 40:24:42:b4:d1:0a:7a:75:21:84:10:b5:bf:cd:61: 9d:a8:a0:e3:4b:83:91:ce:26:12:b5:5e:1c:32:ad: 88:9e:ca:04:fb:9f:60:b7:8e:64:8f:f7:0e:ae:f7: 6e:5a:60:32:52:21:cb:9b:12:f9:03:de:c0:5d:9b: 94:79:4d:cc:09:40:96:4c:14:6e:fb:bd:e7:63:c4: 2d:79:ef:57:5f:56:88:a6:84:d7:d8:73:9d:9d:9b: 17:c4:2e:da:55:7b:03:66:8d:3b:20:bc:26:76:70: ac:cd:e7:09:ea:05:fa:d7:46:b0:5a:1e:c2:4a:b2: ce:b4:a4:a5:94:ed:fb:1b:e2:69:a8:d9:b8:f9:56: a3:55:3e:76:f7:7f:4d:61:5f:73:f6:ce:09:53:00: 8a:4e:2b:78:33:8e:06:e0:18:21:cc:aa:4b:c2:71: 0d:c1:9d:33:a9:4e:a8:cf:1c:9a:b2:c3:3e:b2:97: e6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5A:8C:22:FB:09:7A:23:68:BE:FA:30:4E:2F:4B:66:E9:D1:04:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/d15b0b00-81cb-347c-9b22-b95dea30c982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9/4f969783-3e35-479d-b0e7-e3dac0caf9f9.crl X509v3 Authority Key Identifier: keyid:6F:92:C9:1A:75:B4:6C:E7:A5:1E:A5:24:23:16:63:55:0D:03:40:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4f969783-3e35-479d-b0e7-e3dac0caf9f9.cer sbgp-ipAddrBlock: critical IPv4: 209.212.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a5:ab:db:f2:a9:8b:7c:7a:0a:a6:5a:18:17:2b:74:52:54: c1:d7:b8:79:f1:35:54:8b:05:0f:d0:e8:70:3d:1d:77:27:9c: 01:01:4a:fd:fb:5d:94:fc:d0:59:f6:07:47:18:e4:61:23:c9: 53:37:b5:8a:7d:74:dd:b9:a9:93:22:53:d3:7c:d9:56:cb:af: 48:6e:5e:e3:f0:72:41:47:34:1c:18:43:12:81:0b:50:a7:12: fa:2c:61:dc:15:bf:66:bb:40:60:af:e1:3f:32:08:ed:1d:52: a7:85:a4:d0:91:55:e5:c8:be:a9:0a:57:c7:9b:63:82:b3:3e: a8:99:c0:61:41:7e:60:c0:66:75:49:40:3b:89:d5:f5:01:ba: 69:48:57:4f:69:e5:79:08:af:0e:83:ac:9e:09:6d:46:5d:40: d6:2b:03:5f:78:27:bc:49:94:fa:7a:ff:24:82:cf:38:2c:b4: 4a:09:6d:e9:64:65:39:74:76:9d:76:62:41:78:c3:a1:75:aa: b8:87:2a:b3:a0:0e:f6:6b:6e:cc:f8:46:7f:08:52:b9:70:e6: 6a:ca:1a:f2:30:d5:5c:ed:e1:67:33:2f:d5:f5:57:95:1c:51: 5e:20:a8:1f:7e:b3:82:70:95:ef:58:91:c5:6d:b2:bd:a8:1f: 04:5f:d3:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7hCu3PzvzobmXdDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5Njk3ODMtM2UzNS00NzlkLWIwZTctZTNkYWMwY2Fm OWY5MB4XDTI2MDgxODE1MjcyNVoXDTI2MTExNjE2MjcyNVowLzEtMCsGA1UEAxMk OTdhMDhiMjYtNjg2ZC00ODBmLWI1YTktNGVkMTBjNmI3OWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPruZHj3AyDe4ytOIq6IV+wSiSpFZ+ThuG7X kPrwaVXpsJOIP8Y7coqNMkYMjLXRnBgg3cdz3eVrfG2apwCVV/To0qKcfiXy8hFA JEK00Qp6dSGEELW/zWGdqKDjS4ORziYStV4cMq2InsoE+59gt45kj/cOrvduWmAy UiHLmxL5A97AXZuUeU3MCUCWTBRu+73nY8Qtee9XX1aIpoTX2HOdnZsXxC7aVXsD Zo07ILwmdnCszecJ6gX610awWh7CSrLOtKSllO37G+JpqNm4+VajVT52939NYV9z 9s4JUwCKTit4M44G4BghzKpLwnENwZ0zqU6ozxyassM+spfmSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9ajCL7CXojaL76ME4vS2bp0QSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2 OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2RhYzBjYWY5ZjkvZDE1YjBiMDAtODFjYi0z NDdjLTliMjItYjk1ZGVhMzBjOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGY5Njk3ODMtM2UzNS00NzlkLWIw ZTctZTNkYWMwY2FmOWY5LzRmOTY5NzgzLTNlMzUtNDc5ZC1iMGU3LWUzZGFjMGNh ZjlmOS5jcmwwHwYDVR0jBBgwFoAUb5LJGnW0bOelHqUkIxZjVQ0DQIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Zjk2OTc4My0zZTM1LTQ3OWQtYjBlNy1lM2Rh YzBjYWY5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACulq9vyqYt8egqmWhgXK3RSVMHXuHnxNVSLBQ/Q6HA9HXcnnAEBSv37 XZT80Fn2B0cY5GEjyVM3tYp9dN25qZMiU9N82VbLr0huXuPwckFHNBwYQxKBC1Cn EvosYdwVv2a7QGCv4T8yCO0dUqeFpNCRVeXIvqkKV8ebY4KzPqiZwGFBfmDAZnVJ QDuJ1fUBumlIV09p5XkIrw6DrJ4JbUZdQNYrA194J7xJlPp6/ySCzzgstEoJbelk ZTl0dp12YkF4w6F1qriHKrOgDvZrbsz4Rn8IUrlw5mrKGvIw1Vzt4WczL9X1V5Uc UV4gqB9+s4Jwle9YkcVtsr2oHwRf0wY= -----END CERTIFICATE-----Generated at Mon Aug 31 10:23:14 2026 by rpki-client