$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/dfb09b85-cf08-36d7-b81f-0f42c2247693.roa File: dfb09b85-cf08-36d7-b81f-0f42c2247693.roa (raw, json) Hash identifier: pos87ioX37jeGSZpjQ83Isoo6dj6YxeSg51HAFF8efI= Subject key identifier: A1:CA:22:6A:E6:2B:16:F4:D9:5F:C8:1B:A2:51:44:77:17:8C:F6:03 Certificate issuer: /CN=14efeb6b-dc21-496a-a0be-e528a7d05944 Certificate serial: 010D0C9F4328584EA797B11C6E0DD90FE976D440 Authority key identifier: 96:F2:95:2A:C9:87:B7:10:2B:5B:63:CB:83:6A:BF:F8:5C:A4:5F:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/dfb09b85-cf08-36d7-b81f-0f42c2247693.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 30523 IP address blocks: 209.40.84.0/22 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/14efeb6b-dc21-496a-a0be-e528a7d05944.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/14efeb6b-dc21-496a-a0be-e528a7d05944.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:97:b1:1c:6e:0d:d9:0f:e9:76:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14efeb6b-dc21-496a-a0be-e528a7d05944 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f14a555d-d031-442e-814f-a537e297682e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0e:87:da:27:14:7d:36:c3:d8:9c:f1:c1:2d: 7e:87:c4:53:5f:65:d6:70:52:7a:0b:af:94:88:15: 7e:f1:d6:d8:76:fb:ae:da:57:00:7c:1d:17:62:dd: b8:e5:5a:68:3b:05:13:03:b6:00:21:7a:2a:9a:e2: 91:46:29:d6:3c:44:91:02:5a:a9:61:bd:62:9f:e3: c9:ac:78:3d:00:3c:8c:62:4a:a2:7a:59:db:fe:e0: ea:e8:d8:50:0a:65:05:ca:81:da:84:22:61:dd:26: 20:87:83:b3:d2:48:d5:69:c1:43:71:49:73:c5:b6: 83:93:5c:1b:ed:fe:d2:bf:59:fc:a0:e0:e7:0e:c2: cf:24:c1:e6:20:eb:df:b9:d0:b3:c7:1a:e9:36:e3: 95:3e:1c:a8:89:19:90:33:9c:5f:bb:41:ed:1e:47: 9a:de:3a:c9:9f:90:a6:56:09:db:5f:26:e4:97:11: 75:5f:c7:da:d6:05:f4:18:79:c5:90:41:73:d2:bb: 54:c1:1d:ab:19:60:d6:51:15:09:74:7e:e6:43:a3: 71:72:0e:b9:97:dd:a9:59:f1:c9:a6:c9:92:92:42: 6a:9b:45:ae:35:0d:61:26:45:cf:af:19:5b:6d:7d: cc:77:e8:fb:9d:30:70:04:17:b0:6c:7e:e1:1c:3b: 6d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CA:22:6A:E6:2B:16:F4:D9:5F:C8:1B:A2:51:44:77:17:8C:F6:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/dfb09b85-cf08-36d7-b81f-0f42c2247693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944/14efeb6b-dc21-496a-a0be-e528a7d05944.crl X509v3 Authority Key Identifier: keyid:96:F2:95:2A:C9:87:B7:10:2B:5B:63:CB:83:6A:BF:F8:5C:A4:5F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/14efeb6b-dc21-496a-a0be-e528a7d05944.cer sbgp-ipAddrBlock: critical IPv4: 209.40.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:16:28:0f:c9:dc:2c:be:d7:13:c0:d0:5c:5d:91:28:42:fc: 5d:da:de:a2:31:97:d9:81:8e:4d:8c:08:a3:e4:bd:01:99:5a: e4:d4:69:b7:be:9a:09:c5:3b:d4:19:d6:1e:6c:a5:69:39:20: 8a:fd:83:42:c2:a2:a9:0b:80:ee:f1:37:08:7e:21:44:4f:26: c4:ee:a1:1e:9e:d3:da:be:4d:ae:f7:39:dc:44:3c:fd:d5:cb: 59:07:78:0d:fd:07:27:19:6e:f5:16:bd:42:78:ed:8b:7a:92: 63:58:9a:7b:f4:98:8e:7b:5b:67:36:7e:89:55:ea:24:51:8f: 70:9f:b7:8a:91:1f:8b:2a:3c:e0:c3:79:1a:e5:1a:df:5f:80: 50:72:fd:07:04:1d:87:4d:8e:4c:61:85:53:85:a2:a7:ad:a1: d8:ce:44:b0:a7:4c:f3:70:93:8b:8c:d3:6b:85:83:82:86:a8: e6:2c:ec:c3:ac:e0:32:1a:9d:6f:66:71:26:ae:88:40:d4:bb: 75:22:35:21:90:b4:20:99:68:43:20:98:e0:97:e7:cb:a6:2a: be:42:b8:c2:d0:3a:a4:c8:02:f8:7e:dd:9c:cc:09:44:69:21: df:39:79:b2:31:0e:bb:de:cc:34:2c:d8:e9:42:f4:31:2c:0a: 91:2a:68:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl7Ecbg3ZD+l21EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRlZmViNmItZGMyMS00OTZhLWEwYmUtZTUyOGE3ZDA1 OTQ0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjE0YTU1NWQtZDAzMS00NDJlLTgxNGYtYTUzN2UyOTc2ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA6H2icUfTbD2JzxwS1+h8RTX2XWcFJ6C6+U iBV+8dbYdvuu2lcAfB0XYt245VpoOwUTA7YAIXoqmuKRRinWPESRAlqpYb1in+PJ rHg9ADyMYkqielnb/uDq6NhQCmUFyoHahCJh3SYgh4Oz0kjVacFDcUlzxbaDk1wb 7f7Sv1n8oODnDsLPJMHmIOvfudCzxxrpNuOVPhyoiRmQM5xfu0HtHkea3jrJn5Cm VgnbXybklxF1X8fa1gX0GHnFkEFz0rtUwR2rGWDWURUJdH7mQ6Nxcg65l92pWfHJ psmSkkJqm0WuNQ1hJkXPrxlbbX3Md+j7nTBwBBewbH7hHDttFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHKImrmKxb02V/IG6JRRHcXjPYDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xNGVm ZWI2Yi1kYzIxLTQ5NmEtYTBiZS1lNTI4YTdkMDU5NDQvZGZiMDliODUtY2YwOC0z NmQ3LWI4MWYtMGY0MmMyMjQ3NjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTRlZmViNmItZGMyMS00OTZhLWEw YmUtZTUyOGE3ZDA1OTQ0LzE0ZWZlYjZiLWRjMjEtNDk2YS1hMGJlLWU1MjhhN2Qw NTk0NC5jcmwwHwYDVR0jBBgwFoAUlvKVKsmHtxArW2PLg2q/+FykXyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xNGVmZWI2Yi1kYzIxLTQ5NmEtYTBiZS1lNTI4 YTdkMDU5NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ShUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEWKA/J3Cy+1xPA0FxdkShC/F3a3qIxl9mBjk2MCKPkvQGZWuTUabe+ mgnFO9QZ1h5spWk5IIr9g0LCoqkLgO7xNwh+IURPJsTuoR6e09q+Ta73OdxEPP3V y1kHeA39BycZbvUWvUJ47Yt6kmNYmnv0mI57W2c2folV6iRRj3Cft4qRH4sqPODD eRrlGt9fgFBy/QcEHYdNjkxhhVOFoqetodjORLCnTPNwk4uM02uFg4KGqOYs7MOs 4DIanW9mcSauiEDUu3UiNSGQtCCZaEMgmOCX58umKr5CuMLQOqTIAvh+3ZzMCURp Id85ebIxDrvezDQs2OlC9DEsCpEqaIc= -----END CERTIFICATE-----Generated at Thu Aug 27 01:33:14 2026 by rpki-client