$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa File: 05224f4f-29f9-328d-ad4a-db204fafa300.roa (raw, json) Hash identifier: zmEVj7Pi5NXD9Bd1qhfWaV1Du5DFtUgPa8QDK/Rb5+E= Subject key identifier: 71:1D:57:01:C5:DD:B6:0F:53:11:8D:E9:C0:0E:84:09:56:9E:77:0B Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584ED001E5ECFD0DC4C74E925D00 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 7782 IP address blocks: 209.112.128.0/18 maxlen: 18 209.112.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:e5:ec:fd:0d:c4:c7:4e:92:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=d4ce51b4-f44f-41d1-9877-5c7cec7c1dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f2:ce:90:00:19:79:41:3e:2c:97:3c:cc:ee: 74:02:90:f1:eb:c6:57:e9:05:14:c8:10:f2:e5:dd: 44:6e:af:15:34:f2:70:3c:ec:ee:7e:83:67:8d:b3: 6f:fd:7f:99:a6:08:e2:b2:af:24:77:f2:0d:15:60: c9:b0:36:54:37:6b:25:ba:69:27:91:0d:26:56:a0: 9b:8b:37:d2:c2:8e:9e:04:87:74:f8:8c:3b:cd:5b: 16:6e:21:71:a5:bb:c4:6d:ee:68:9d:6b:7c:f3:f0: 04:58:11:e6:19:87:f2:81:97:f5:2d:fc:f3:69:53: e8:d4:c8:d2:be:41:48:f3:16:12:f0:18:33:69:3d: be:fb:d3:e8:29:91:22:cd:96:a3:bb:20:8a:6a:12: 5d:e3:dd:38:4a:77:a7:c6:3b:3e:15:84:77:fe:2a: dc:0b:68:ea:d5:eb:07:df:44:0b:73:8b:5f:77:c6: f5:1b:90:cd:54:a3:7b:4e:7b:7b:da:2f:4b:94:a4: 77:17:33:55:b1:ec:d9:92:a2:17:1f:d8:87:e8:fb: b8:44:02:24:3d:2b:ee:a9:92:58:a5:d9:5c:be:91: 2e:25:15:32:fb:ed:24:18:6f:d2:2d:e8:82:61:1b: ed:5b:d4:4c:96:15:3a:ac:60:db:8d:9b:b4:43:06: 0d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1D:57:01:C5:DD:B6:0F:53:11:8D:E9:C0:0E:84:09:56:9E:77:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/05224f4f-29f9-328d-ad4a-db204fafa300.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 209.112.128.0-209.112.223.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:15:bf:fe:db:42:e9:72:0f:4f:68:f9:f8:5d:a5:8e:c5:c6: f8:ad:95:d8:88:8d:db:d4:0b:bc:08:e9:bd:0b:89:80:03:0c: 3d:f3:07:66:02:a1:68:e3:6b:97:37:65:2a:84:b7:ee:1a:f4: b7:7a:d4:54:57:bf:3a:c5:3d:3a:d9:fa:6c:6d:19:f9:6a:12: 6f:42:d1:d3:83:9a:7d:6d:ea:f0:e2:6d:5e:a3:25:18:c5:3b: 89:d8:ee:4b:d7:14:40:2b:41:bf:9a:cd:a9:5b:20:ca:04:68: d7:76:0d:0f:24:22:c5:63:0e:82:7e:a9:62:ad:7c:1f:71:32: 4b:30:3e:de:f7:e1:44:1d:04:0a:27:d9:5b:f9:fc:c2:e8:d3: 7e:b2:11:21:f2:db:54:2f:73:30:34:84:09:28:9f:f9:cf:21: 82:9a:62:18:ec:54:ee:4d:f3:28:49:91:c7:fc:40:40:a3:c0: 98:c1:93:ce:a2:93:99:f1:85:16:8e:99:36:0b:c6:7c:f2:20: df:22:d9:e6:09:0d:f3:e7:2a:87:88:85:8f:a1:00:12:d5:a4: d2:52:b7:93:d4:bc:f4:b9:df:94:7b:43:d0:c2:7e:b5:59:2a: 6b:c1:62:4d:bb:65:b5:e2:c3:47:26:6a:37:62:d8:04:9c:6e: c9:ac:de:88 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7QAeXs/Q3Ex06SXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDRjZTUxYjQtZjQ0Zi00MWQxLTk4NzctNWM3Y2VjN2MxZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfLOkAAZeUE+LJc8zO50ApDx68ZX6QUUyBDy 5d1Ebq8VNPJwPOzufoNnjbNv/X+Zpgjisq8kd/INFWDJsDZUN2slumknkQ0mVqCb izfSwo6eBId0+Iw7zVsWbiFxpbvEbe5onWt88/AEWBHmGYfygZf1LfzzaVPo1MjS vkFI8xYS8BgzaT2++9PoKZEizZajuyCKahJd4904Snenxjs+FYR3/ircC2jq1esH 30QLc4tfd8b1G5DNVKN7Tnt72i9LlKR3FzNVsezZkqIXH9iH6Pu4RAIkPSvuqZJY pdlcvpEuJRUy++0kGG/SLeiCYRvtW9RMlhU6rGDbjZu0QwYN4QIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHEdVwHF3bYPUxGN6cAOhAlWnncLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvMDUyMjRmNGYtMjlmOS0z MjhkLWFkNGEtZGIyMDRmYWZhMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAfRcIAD BAXRcMAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAVBW//ttC6XIPT2j5+F2ljsXG+K2V2IiN29QLvAjpvQuJ gAMMPfMHZgKhaONrlzdlKoS37hr0t3rUVFe/OsU9Otn6bG0Z+WoSb0LR04OafW3q 8OJtXqMlGMU7idjuS9cUQCtBv5rNqVsgygRo13YNDyQixWMOgn6pYq18H3EySzA+ 3vfhRB0ECifZW/n8wujTfrIRIfLbVC9zMDSECSif+c8hgppiGOxU7k3zKEmRx/xA QKPAmMGTzqKTmfGFFo6ZNgvGfPIg3yLZ5gkN8+cqh4iFj6EAEtWk0lK3k9S89Lnf lHtD0MJ+tVkqa8FiTbtlteLDRyZqN2LYBJxuyazeiA== -----END CERTIFICATE-----Generated at Sat Sep 19 11:48:50 2026 by rpki-client