$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa File: a98302e0-6fdd-34c6-ae18-5ecfece042af.roa (raw, json) Hash identifier: txAlwUPnAfF1Y00f1E5ieFVgfvQG6DwYKF8LWhbFCAg= Subject key identifier: 70:DA:F8:CC:79:A3:5F:BA:17:5E:50:D9:23:A4:AB:EE:00:F6:B4:E3 Certificate issuer: /CN=209f0328-0af3-4de3-a043-8072346acdf7 Certificate serial: 010D0C9F4328584ED001DE0E90DA9BF1C84DE380 Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 7782 IP address blocks: 204.17.139.0/24 maxlen: 24 204.17.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:de:0e:90:da:9b:f1:c8:4d:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=fc543006-ef06-4d79-9a15-dfd0f5520a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:03:07:b7:06:57:db:bb:ce:a0:e5:fb:6e:cd: 59:1c:a4:18:43:cf:5c:a5:d8:50:2c:ae:8f:a5:b9: 81:80:fc:80:56:f0:ff:a3:47:59:39:7f:2d:83:91: a5:7b:cb:20:94:62:72:7b:23:12:db:f3:e1:38:bf: 1b:5a:ec:7e:32:03:af:eb:74:4f:bd:43:47:3c:c1: 61:8a:e3:8c:39:6e:70:d8:03:48:9d:cc:c0:1e:73: cb:bf:89:e7:6c:ad:f4:16:8d:3c:21:d6:3b:bb:9b: 01:16:b2:5b:97:8a:1d:0b:67:f0:68:1e:5d:ee:6c: 7a:7b:01:55:8d:4e:bb:5a:7e:16:41:8b:4a:ee:ec: bd:59:88:64:4a:16:1f:c2:e7:c2:7f:3a:c1:96:36: 0f:19:55:3e:91:05:01:d6:63:7f:c3:96:2a:66:40: 30:da:8e:55:a9:59:d1:ba:6c:2e:ce:57:bd:02:75: cb:22:eb:30:d8:9c:90:cf:6d:34:8b:e0:33:3e:db: ea:d3:f7:89:d5:29:5d:40:d0:53:33:5c:7b:3d:74: 4e:39:5f:d5:c4:c9:46:57:e0:8c:53:22:46:0a:80: 59:03:8c:8b:3a:f6:36:0a:88:ae:40:39:c3:e9:bd: d8:54:55:35:27:c6:2b:44:5c:49:19:a3:82:2b:28: d2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DA:F8:CC:79:A3:5F:BA:17:5E:50:D9:23:A4:AB:EE:00:F6:B4:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/a98302e0-6fdd-34c6-ae18-5ecfece042af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl X509v3 Authority Key Identifier: keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer sbgp-ipAddrBlock: critical IPv4: 204.17.139.0-204.17.140.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:15:8c:64:38:c5:51:7b:c0:8d:94:36:40:42:67:e3:ef:d5: ff:04:49:23:31:db:ff:78:2e:87:d6:83:d5:ab:60:d4:08:4e: 44:e6:49:42:45:85:03:51:8c:9a:f0:a5:26:07:a6:0a:56:13: 7a:ac:fe:16:d4:5d:62:0e:3c:2d:d2:40:10:c6:09:a6:4c:52: 3c:5b:a1:31:c1:af:91:7b:f2:a6:2b:10:fa:13:34:36:0f:03: e0:62:0c:2f:a7:3c:9c:39:bc:c6:44:50:07:f0:44:cd:e4:c1: c7:96:d7:56:17:ee:43:4d:b1:34:fd:65:e6:cf:20:a1:29:e6: f2:6b:81:04:b2:c2:5b:dd:a3:14:a9:3c:6c:1c:18:f5:ff:2a: fd:4f:2d:97:e8:d1:40:b9:f6:2c:c8:14:6b:58:58:60:79:21: f6:6f:c4:8e:4e:09:96:18:80:d6:92:6d:9b:95:3c:a5:7e:01: 03:1c:9f:50:2b:45:76:19:4b:0e:47:4e:62:7f:35:cc:23:3c: cf:46:10:c5:c8:d4:ec:90:b3:82:83:f9:a5:0f:58:90:46:19: e1:1f:f4:71:1e:38:86:d4:e5:6f:00:1a:ab:87:24:58:28:74: 60:b0:eb:e9:58:6b:f1:7e:2e:a4:16:09:06:64:02:5f:f1:0c: b3:9a:e5:fd -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7QAd4OkNqb8chN44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA5ZjAzMjgtMGFmMy00ZGUzLWEwNDMtODA3MjM0NmFj ZGY3MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZmM1NDMwMDYtZWYwNi00ZDc5LTlhMTUtZGZkMGY1NTIwYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAMHtwZX27vOoOX7bs1ZHKQYQ89cpdhQLK6P pbmBgPyAVvD/o0dZOX8tg5Gle8sglGJyeyMS2/PhOL8bWux+MgOv63RPvUNHPMFh iuOMOW5w2ANInczAHnPLv4nnbK30Fo08IdY7u5sBFrJbl4odC2fwaB5d7mx6ewFV jU67Wn4WQYtK7uy9WYhkShYfwufCfzrBljYPGVU+kQUB1mN/w5YqZkAw2o5VqVnR umwuzle9AnXLIusw2JyQz200i+AzPtvq0/eJ1SldQNBTM1x7PXROOV/VxMlGV+CM UyJGCoBZA4yLOvY2CoiuQDnD6b3YVFU1J8YrRFxJGaOCKyjSLQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHDa+Mx5o1+6F15Q2SOkq+4A9rTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlm MDMyOC0wYWYzLTRkZTMtYTA0My04MDcyMzQ2YWNkZjcvYTk4MzAyZTAtNmZkZC0z NGM2LWFlMTgtNWVjZmVjZTA0MmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZjAzMjgtMGFmMy00ZGUzLWEw NDMtODA3MjM0NmFjZGY3LzIwOWYwMzI4LTBhZjMtNGRlMy1hMDQzLTgwNzIzNDZh Y2RmNy5jcmwwHwYDVR0jBBgwFoAUsoIq0bI2KU20SE/OQcx6IpRLZAcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDlmMDMyOC0wYWYzLTRkZTMtYTA0My04MDcy MzQ2YWNkZjcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADMEYsD BADMEYwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAHxWMZDjFUXvAjZQ2QEJn4+/V/wRJIzHb/3guh9aD1atg 1AhOROZJQkWFA1GMmvClJgemClYTeqz+FtRdYg48LdJAEMYJpkxSPFuhMcGvkXvy pisQ+hM0Ng8D4GIML6c8nDm8xkRQB/BEzeTBx5bXVhfuQ02xNP1l5s8goSnm8muB BLLCW92jFKk8bBwY9f8q/U8tl+jRQLn2LMgUa1hYYHkh9m/Ejk4JlhiA1pJtm5U8 pX4BAxyfUCtFdhlLDkdOYn81zCM8z0YQxcjU7JCzgoP5pQ9YkEYZ4R/0cR44htTl bwAaq4ckWCh0YLDr6Vhr8X4upBYJBmQCX/EMs5rl/Q== -----END CERTIFICATE-----Generated at Sat Sep 19 11:48:54 2026 by rpki-client