$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/f666512f-be5f-3abc-95ac-f35622b56179.roa File: f666512f-be5f-3abc-95ac-f35622b56179.roa (raw, json) Hash identifier: pi3hBwfin1reifXaRQ0YRBKfqibCb3WjZCyG7p294Jo= Subject key identifier: 99:AE:42:2D:48:F0:84:AC:DF:ED:2E:4C:7A:E1:4E:66:0F:FE:7E:9D Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548 Certificate serial: 010D0C9F4328584F23C2602F0B6582FB604C6E78 Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/f666512f-be5f-3abc-95ac-f35622b56179.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 2152 IP address blocks: 209.129.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:60:2f:0b:65:82:fb:60:4c:6e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=6dc268f3-9b77-4ee4-aff0-f95fcc00e122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:cf:8b:d1:91:e6:c2:86:4f:cb:58:88:48: 2e:7c:75:db:a0:b2:de:98:d6:3e:ca:d8:e7:21:f2: d9:a0:0f:98:53:31:77:19:d4:6b:8b:9e:9b:4a:95: d0:ef:2e:db:10:63:3a:de:6f:95:e7:6a:a8:79:9c: 81:df:85:a0:bb:3e:33:b1:ef:5b:63:48:a4:7d:0b: 42:8b:10:85:16:50:d9:8c:0d:14:48:4e:99:bd:38: d2:78:46:b6:1f:18:d1:41:50:82:55:1b:de:48:fa: ec:72:6c:da:bb:b3:15:ac:a2:c2:70:c5:4b:aa:45: ce:b1:3f:54:f5:b2:00:83:52:07:ee:98:7f:b2:44: 13:62:96:15:3b:ab:ee:d7:d5:04:bb:8c:c3:e7:15: b3:2f:dc:8e:a4:ce:53:e6:09:3a:2a:83:7f:23:19: be:15:ed:4e:e1:e5:a6:ae:cc:97:2c:75:2e:d9:70: d3:3a:fa:b1:8b:f7:02:0a:71:47:8d:90:66:43:08: 95:28:7f:83:fb:3b:74:3a:e9:8c:1e:c0:d7:63:9d: 74:d0:1d:51:8d:da:2e:fc:eb:39:39:84:9c:cf:f3: f9:55:ab:8c:d4:ac:3a:27:45:d4:3f:8b:a5:02:aa: 8d:d2:bb:e7:23:c2:b7:39:78:6e:a3:fb:dc:c2:c5: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AE:42:2D:48:F0:84:AC:DF:ED:2E:4C:7A:E1:4E:66:0F:FE:7E:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/f666512f-be5f-3abc-95ac-f35622b56179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl X509v3 Authority Key Identifier: keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer sbgp-ipAddrBlock: critical IPv4: 209.129.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:70:e1:8c:9c:5f:92:7a:33:92:dd:f0:71:ba:a7:b0:e8:e2: 81:98:39:3d:e4:51:a9:92:e0:25:da:40:38:9f:d1:58:2f:bf: 71:1a:c6:ab:3e:19:b3:91:4b:0e:98:e2:8d:79:85:21:a0:1f: 6f:5e:1d:0b:b7:fe:f4:32:3f:59:ac:2b:fc:82:64:20:ce:99: e7:f6:52:8d:63:66:41:38:a6:ef:4c:c5:df:ec:07:93:d1:d1: c8:4d:eb:c5:aa:96:68:a9:11:39:a8:8e:1b:cc:0a:90:44:fe: 86:0f:0a:cf:5d:41:b1:ff:01:da:8d:5a:9a:55:07:2c:36:42: 60:1c:68:69:b9:fd:71:4a:c1:a8:30:93:e9:46:fc:b3:cf:73: c3:91:22:18:78:50:4c:a9:2b:b1:e2:e1:28:2b:18:a9:11:21: ff:a6:a0:73:e3:fa:11:d3:62:95:40:c2:29:9f:fd:58:39:02: 56:c7:95:52:7f:cf:e0:69:4e:d4:20:b8:fd:2e:79:7c:b1:ec: f6:6b:f2:fd:a4:88:27:34:0f:6f:95:8e:96:31:9b:06:92:87: 80:ef:bd:51:d0:84:3f:a9:3f:bb:81:e1:2e:d0:e3:5b:5d:61: 96:e2:ea:22:61:61:08:27:7d:0e:4f:68:26:11:18:e9:10:10: 3f:32:bd:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwmAvC2WC+2BMbngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4 NTQ4MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NmRjMjY4ZjMtOWI3Ny00ZWU0LWFmZjAtZjk1ZmNjMDBlMTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkbPi9GR5sKGT8tYiEgufHXboLLemNY+ytjn IfLZoA+YUzF3GdRri56bSpXQ7y7bEGM63m+V52qoeZyB34Wguz4zse9bY0ikfQtC ixCFFlDZjA0USE6ZvTjSeEa2HxjRQVCCVRveSPrscmzau7MVrKLCcMVLqkXOsT9U 9bIAg1IH7ph/skQTYpYVO6vu19UEu4zD5xWzL9yOpM5T5gk6KoN/Ixm+Fe1O4eWm rsyXLHUu2XDTOvqxi/cCCnFHjZBmQwiVKH+D+zt0OumMHsDXY5100B1Rjdou/Os5 OYScz/P5VauM1Kw6J0XUP4ulAqqN0rvnI8K3OXhuo/vcwsW5NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmuQi1I8ISs3+0uTHrhTmYP/n6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvZjY2NjUxMmYtYmU1Zi0z YWJjLTk1YWMtZjM1NjIyYjU2MTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4 MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2 ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZw4YycX5J6M5Ld8HG6p7Do4oGYOT3kUamS4CXaQDif0Vgvv3Eaxqs+ GbORSw6Y4o15hSGgH29eHQu3/vQyP1msK/yCZCDOmef2Uo1jZkE4pu9Mxd/sB5PR 0chN68WqlmipETmojhvMCpBE/oYPCs9dQbH/AdqNWppVByw2QmAcaGm5/XFKwagw k+lG/LPPc8ORIhh4UEypK7Hi4SgrGKkRIf+moHPj+hHTYpVAwimf/Vg5AlbHlVJ/ z+BpTtQguP0ueXyx7PZr8v2kiCc0D2+VjpYxmwaSh4DvvVHQhD+pP7uB4S7Q41td YZbi6iJhYQgnfQ5PaCYRGOkQED8yvfA= -----END CERTIFICATE-----Generated at Sat Oct 10 07:09:03 2026 by rpki-client