$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/2a3871dd-5224-3aba-89af-880506c8bbf0.roa File: 2a3871dd-5224-3aba-89af-880506c8bbf0.roa (raw, json) Hash identifier: PNeh38DNhL1RiikW8v6Y9p6YUArJw7METofKr+zy9eo= Subject key identifier: B3:68:07:8F:A5:07:23:F2:D1:F3:1B:07:CA:56:A6:72:27:F4:3A:32 Certificate issuer: /CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Certificate serial: 010D0C9F4328584F698D7E572C4DD15D11FF9100 Authority key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/2a3871dd-5224-3aba-89af-880506c8bbf0.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 6169 IP address blocks: 209.50.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:7e:57:2c:4d:d1:5d:11:ff:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=c43cf76d-66d0-4420-9d10-bb1b693eec30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ea:5f:cf:53:6e:3c:ba:af:8a:49:b9:ae:d3: 53:9f:4b:34:93:c7:c0:31:8e:be:ff:13:d9:aa:9a: eb:59:30:d5:b9:2d:d1:66:83:0d:7d:f5:d4:ea:68: 90:c1:2f:cc:3d:9d:72:d0:27:8c:44:52:87:58:b7: af:63:8c:57:02:de:29:2d:2c:12:d8:aa:b5:20:ae: 79:2a:ba:3d:59:5b:3e:21:56:03:15:36:2f:78:20: b8:3c:a6:5a:3b:ee:04:d6:28:62:8a:fb:22:0a:2c: 6b:22:ea:fe:55:42:c5:cb:43:f2:68:34:ae:10:48: 69:ee:1b:2c:76:a9:f9:80:e9:01:97:2e:47:31:1d: 8b:6d:5c:c7:71:5a:a0:a7:0f:49:41:43:41:76:82: fa:ab:99:25:ee:c7:27:ac:0f:e0:28:44:fc:66:49: 4d:39:07:34:66:14:89:65:6d:d2:e8:4a:fa:a5:1c: c5:e1:fa:dd:3d:6d:48:d9:2d:8e:27:53:7d:c7:45: 5e:00:41:30:b0:25:c5:91:48:5f:49:c6:04:99:7b: 66:f7:bc:e0:8d:69:cd:cf:4c:96:1c:10:45:82:df: d9:64:5d:42:38:30:0d:67:35:90:c4:fd:b0:45:4a: b0:bf:f9:78:cb:06:ed:f7:e0:d5:e9:dc:a8:0a:c2: e6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:68:07:8F:A5:07:23:F2:D1:F3:1B:07:CA:56:A6:72:27:F4:3A:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/2a3871dd-5224-3aba-89af-880506c8bbf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.crl X509v3 Authority Key Identifier: keyid:D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer sbgp-ipAddrBlock: critical IPv4: 209.50.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f2:de:e8:79:4a:f9:f0:da:4c:ee:99:d8:08:d0:43:51:b5: a9:c8:e7:d4:a7:55:5d:35:04:93:d4:ca:10:a9:67:7f:4e:e6: 14:00:1c:a4:ea:15:dc:29:0d:52:db:07:aa:a7:ed:84:7b:d0: b8:55:c8:4b:a6:6a:04:5e:f8:3e:60:1b:54:70:f5:84:3b:0c: d8:f9:1b:90:df:b9:99:42:f2:5a:db:69:a4:18:01:3f:d0:ef: 01:52:59:95:0e:79:be:c4:45:27:b3:5c:95:3b:9d:23:ab:8d: 0f:54:db:34:1f:68:48:97:c0:49:c1:76:04:26:08:d5:c2:57: 4d:d6:96:30:c4:92:50:1b:27:3e:55:93:27:4d:42:d4:d9:a9: 01:ca:ca:de:dd:99:84:6f:db:3f:48:6b:ab:29:f5:d2:a2:20: 74:55:c4:88:03:b9:6d:ca:c8:20:19:40:e4:cc:24:d7:32:e3: 5a:34:c9:81:e8:7f:df:ec:38:e4:99:01:f5:74:64:31:82:d3: d5:0d:0a:6d:45:db:c8:13:8d:8c:c9:b5:d0:31:c7:21:8d:7f: 17:fc:b1:ef:8d:83:43:ea:cf:84:56:3e:4c:cb:d7:9b:34:99: 37:58:4f:2c:d4:85:1f:ee:64:c2:51:1a:52:ae:7f:f0:f6:c6: 4e:7c:c4:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjX5XLE3RXRH/kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTVi YWZmMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk YzQzY2Y3NmQtNjZkMC00NDIwLTlkMTAtYmIxYjY5M2VlYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1epfz1NuPLqvikm5rtNTn0s0k8fAMY6+/xPZ qprrWTDVuS3RZoMNffXU6miQwS/MPZ1y0CeMRFKHWLevY4xXAt4pLSwS2Kq1IK55 Kro9WVs+IVYDFTYveCC4PKZaO+4E1ihiivsiCixrIur+VULFy0PyaDSuEEhp7hss dqn5gOkBly5HMR2LbVzHcVqgpw9JQUNBdoL6q5kl7scnrA/gKET8ZklNOQc0ZhSJ ZW3S6Er6pRzF4frdPW1I2S2OJ1N9x0VeAEEwsCXFkUhfScYEmXtm97zgjWnNz0yW HBBFgt/ZZF1CODANZzWQxP2wRUqwv/l4ywbt9+DV6dyoCsLm9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNoB4+lByPy0fMbB8pWpnIn9DoyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NWRm ZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvMmEzODcxZGQtNTIyNC0z YWJhLTg5YWYtODgwNTA2YzhiYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDVkZmZjZWYtZDdkOC00YjU4LWI0 ZjUtYmJlY2M2OTViYWZmLzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1iNGY1LWJiZWNjNjk1 YmFmZi5jcmwwHwYDVR0jBBgwFoAU2Ian5EHiWu1c+gv6GSKHe+hhYv4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVj YzY5NWJhZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHy3uh5Svnw2kzumdgI0ENRtanI59SnVV01BJPUyhCpZ39O5hQAHKTq FdwpDVLbB6qn7YR70LhVyEumagRe+D5gG1Rw9YQ7DNj5G5DfuZlC8lrbaaQYAT/Q 7wFSWZUOeb7ERSezXJU7nSOrjQ9U2zQfaEiXwEnBdgQmCNXCV03WljDEklAbJz5V kydNQtTZqQHKyt7dmYRv2z9Ia6sp9dKiIHRVxIgDuW3KyCAZQOTMJNcy41o0yYHo f9/sOOSZAfV0ZDGC09UNCm1F28gTjYzJtdAxxyGNfxf8se+Ng0Pqz4RWPkzL15s0 mTdYTyzUhR/uZMJRGlKuf/D2xk58xLU= -----END CERTIFICATE-----Generated at Sun Oct 11 06:52:29 2026 by rpki-client