$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/89bdd6d3-2f08-3833-852b-2137080307ad.roa File: 89bdd6d3-2f08-3833-852b-2137080307ad.roa (raw, json) Hash identifier: YGiNnqO8JoZ7EmgHHjV0aB74OZlNBRGitNkmDY/WwKA= Subject key identifier: 7D:46:0D:02:D5:47:33:9A:51:17:9A:EE:86:4C:15:39:2E:E5:3A:EE Certificate issuer: /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Certificate serial: 010D0C9F4328584F6F23117D787D6B864AB0B180 Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/89bdd6d3-2f08-3833-852b-2137080307ad.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 14618 IP address blocks: 209.169.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:11:7d:78:7d:6b:86:4a:b0:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=84f6cec2-8f19-41d5-973a-dfa57dc21fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e1:5d:5c:d3:c6:77:76:82:7e:88:e3:0a:b0: 1e:e1:ce:43:47:e0:5f:d5:5e:5f:2e:ee:cb:e6:e2: 3f:05:e9:94:53:44:1e:92:bc:22:21:45:83:08:e7: 43:58:e4:08:0a:ec:08:ac:6f:29:a0:af:cf:37:fc: f5:3d:97:cd:d0:24:f4:73:25:63:b0:98:5a:97:68: fb:0c:16:57:0d:9d:b9:12:de:e7:41:49:22:6c:6d: 1b:28:90:b6:25:a8:10:71:8c:c6:6a:2e:92:d8:b1: 33:1b:23:f0:57:2b:02:3e:1f:ca:6d:c9:61:78:c1: 68:d8:ed:fd:7b:2c:d6:b5:bc:8b:71:e7:c6:42:1e: d9:84:4c:4e:f0:0d:30:5f:83:5b:ba:90:28:0e:30: e0:b4:10:44:e2:53:21:36:32:15:39:b5:f8:c6:f3: d3:47:42:dc:23:43:7f:48:9d:86:1a:ce:d2:28:19: 38:cf:b0:df:a9:20:23:6c:fa:a7:d4:9a:4b:9f:71: 3d:21:e5:0c:2d:a7:b8:a1:13:3c:81:7b:c4:06:1e: 03:73:17:ff:0e:6b:bb:1d:71:84:9d:5e:fa:68:e7: 74:bb:6d:a8:98:0b:4f:f1:79:b2:c1:67:1e:7f:0b: b7:d5:52:c8:85:b2:e7:d0:25:b2:91:19:bd:74:79: b6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:46:0D:02:D5:47:33:9A:51:17:9A:EE:86:4C:15:39:2E:E5:3A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/89bdd6d3-2f08-3833-852b-2137080307ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl X509v3 Authority Key Identifier: keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer sbgp-ipAddrBlock: critical IPv4: 209.169.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:87:6d:01:f1:8f:95:e4:8d:0f:6c:b7:a0:2f:08:e3:42:23: 71:c1:f4:5a:fe:09:bc:39:6f:b4:a7:46:20:8f:30:0f:d8:ef: 6c:7e:de:dc:92:15:4e:6e:28:d0:14:0b:fc:ba:99:c0:8a:37: fc:ad:6b:a1:6d:9b:6a:0c:99:c8:44:be:e6:3f:a6:72:07:5e: 29:19:8e:40:e4:50:9d:15:33:79:97:6f:f1:35:71:c3:a5:d6: 49:74:53:e7:94:ac:19:ff:45:6d:f4:15:b4:62:fb:20:d6:4e: 84:1f:c9:82:d2:c3:47:32:b2:73:95:3e:2e:14:f5:4f:f4:be: 13:7a:71:bb:19:ea:fa:14:02:9d:02:f2:9b:e9:17:98:d7:b2: ca:a5:e4:75:c3:87:6d:c2:9c:1d:21:1a:d3:1d:40:0b:aa:99: 14:d9:14:bc:2d:0f:99:bb:9f:46:b8:0e:4b:29:f2:ba:3b:49: d3:a0:82:5e:3e:a5:84:d1:0b:55:12:fa:31:3e:af:07:ac:e8: ac:68:c5:42:ff:8f:29:7f:f3:20:f2:0f:d8:d8:64:d9:5e:27: f4:ba:e4:75:16:73:03:2e:9d:89:aa:5a:21:85:de:da:ba:96: 10:d2:0a:7b:73:18:45:ed:73:f1:0d:3d:26:a7:ad:8b:34:c1: fa:ac:34:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIxF9eH1rhkqwsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw MjhiMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ODRmNmNlYzItOGYxOS00MWQ1LTk3M2EtZGZhNTdkYzIxZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeFdXNPGd3aCfojjCrAe4c5DR+Bf1V5fLu7L 5uI/BemUU0QekrwiIUWDCOdDWOQICuwIrG8poK/PN/z1PZfN0CT0cyVjsJhal2j7 DBZXDZ25Et7nQUkibG0bKJC2JagQcYzGai6S2LEzGyPwVysCPh/KbclheMFo2O39 eyzWtbyLcefGQh7ZhExO8A0wX4NbupAoDjDgtBBE4lMhNjIVObX4xvPTR0LcI0N/ SJ2GGs7SKBk4z7DfqSAjbPqn1JpLn3E9IeUMLae4oRM8gXvEBh4Dcxf/Dmu7HXGE nV76aOd0u22omAtP8XmywWcefwu31VLIhbLn0CWykRm9dHm27QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1GDQLVRzOaURea7oZMFTku5TruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvODliZGQ2ZDMtMmYwOC0z ODMzLTg1MmItMjEzNzA4MDMwN2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3 MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0 NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0an5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuHbQHxj5XkjQ9st6AvCONCI3HB9Fr+Cbw5b7SnRiCPMA/Y72x+3tyS FU5uKNAUC/y6mcCKN/yta6Ftm2oMmchEvuY/pnIHXikZjkDkUJ0VM3mXb/E1ccOl 1kl0U+eUrBn/RW30FbRi+yDWToQfyYLSw0cysnOVPi4U9U/0vhN6cbsZ6voUAp0C 8pvpF5jXssql5HXDh23CnB0hGtMdQAuqmRTZFLwtD5m7n0a4Dksp8ro7SdOggl4+ pYTRC1US+jE+rwes6KxoxUL/jyl/8yDyD9jYZNleJ/S65HUWcwMunYmqWiGF3tq6 lhDSCntzGEXtc/ENPSanrYs0wfqsNBQ= -----END CERTIFICATE-----Generated at Sat Oct 10 11:03:02 2026 by rpki-client