$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c0f6a990-051a-3f6a-a434-bceef7e6d26c.roa File: c0f6a990-051a-3f6a-a434-bceef7e6d26c.roa (raw, json) Hash identifier: lUO05xfbKhvaz5Dxrn4VkshJu7KM5yM+Czezajt4y/Q= Subject key identifier: A1:73:61:D2:7A:84:9C:6E:67:A8:78:79:CB:05:A9:84:59:82:63:6D Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584EFCACEB61953AEFCB8AC2C160 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c0f6a990-051a-3f6a-a434-bceef7e6d26c.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 14524 IP address blocks: 208.156.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:eb:61:95:3a:ef:cb:8a:c2:c1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=3d9aea7d-aa0a-463e-a0d9-2f6e48cb08e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d5:67:1e:d5:f0:01:a2:ec:51:bb:72:e5:28: aa:10:0b:82:ef:95:9f:46:b5:a6:55:fd:73:f5:f0: 19:a5:ed:0b:6c:15:85:f5:b9:63:40:fa:1a:7b:bd: 8c:c5:a8:76:92:02:20:11:59:4a:e7:81:5c:88:9c: 85:d9:21:47:0c:94:71:24:39:60:73:1e:ab:0e:fd: 10:54:eb:66:5b:59:99:61:e2:24:0e:65:f9:c6:13: d2:f3:e2:04:43:95:cf:db:d6:44:bf:9b:a4:f0:56: 65:16:64:e2:21:9a:f3:55:89:d0:7d:a4:31:37:be: f1:94:e1:6c:5b:81:09:fe:12:53:ea:e0:9a:e6:3e: 6c:cd:7b:ab:68:3f:0b:11:27:d4:ca:e6:bd:44:7a: 1d:6e:35:9d:f1:14:54:c9:0f:50:71:82:73:30:e1: 92:54:b7:52:ef:ed:54:4a:07:3a:e8:13:ce:4d:69: fc:07:a6:84:bf:c9:05:3a:3b:69:36:a9:0d:a1:b2: e1:89:3f:7e:95:58:17:af:9e:eb:0e:eb:6d:74:ff: d3:19:9d:24:94:e0:05:37:52:c3:33:f2:99:51:e4: 24:63:36:5a:b4:4a:de:2a:9e:85:fd:76:91:f6:5a: 05:ca:2a:1f:82:4e:f6:e1:f4:40:5e:8a:19:c2:03: 2d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:73:61:D2:7A:84:9C:6E:67:A8:78:79:CB:05:A9:84:59:82:63:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c0f6a990-051a-3f6a-a434-bceef7e6d26c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.156.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:24:f3:e0:72:28:b4:99:63:37:7d:44:bd:4c:61:ed:1d:4c: 8e:01:26:0e:f4:b2:a0:4b:01:e8:de:a0:62:c3:06:37:cc:96: 55:ad:db:82:cb:29:6e:1d:46:4b:67:c2:c0:a6:0f:e0:44:48: 4b:50:5d:0c:48:14:fc:b6:e3:c3:25:9e:3c:8b:3b:9c:88:46: a0:fb:49:4a:78:76:61:f7:61:f6:dc:97:19:1e:4b:6d:f1:77: 1f:eb:9a:5c:40:c8:51:40:53:3c:df:80:71:09:a9:70:07:20: 08:bc:24:cf:47:ae:2a:65:e3:bc:77:02:f1:a1:ca:a5:11:77: 01:88:21:fb:b8:31:63:53:36:1b:3a:93:9a:ba:17:73:11:9b: e0:c6:44:36:0a:a7:4e:b3:31:10:9c:fc:ad:cf:9a:17:6e:80: 5b:d2:21:95:f9:0b:24:29:1b:cd:46:6d:27:10:35:b5:88:dd: 94:f2:b8:27:2d:cb:fc:24:0d:95:dc:6f:e7:80:94:9c:9e:39: a8:bd:52:02:d5:9f:74:e1:c8:6b:d7:55:28:d8:5b:37:cd:2e: 62:1f:d3:19:3b:90:40:cb:5f:9e:80:2e:19:25:10:b7:90:ae: e6:6b:a1:6b:9e:3d:d2:8b:0a:85:43:8b:47:77:19:c5:9c:40: 6f:1c:ea:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rOthlTrvy4rCwWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk M2Q5YWVhN2QtYWEwYS00NjNlLWEwZDktMmY2ZTQ4Y2IwOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndVnHtXwAaLsUbty5SiqEAuC75WfRrWmVf1z 9fAZpe0LbBWF9bljQPoae72Mxah2kgIgEVlK54FciJyF2SFHDJRxJDlgcx6rDv0Q VOtmW1mZYeIkDmX5xhPS8+IEQ5XP29ZEv5uk8FZlFmTiIZrzVYnQfaQxN77xlOFs W4EJ/hJT6uCa5j5szXuraD8LESfUyua9RHodbjWd8RRUyQ9QcYJzMOGSVLdS7+1U Sgc66BPOTWn8B6aEv8kFOjtpNqkNobLhiT9+lVgXr57rDuttdP/TGZ0klOAFN1LD M/KZUeQkYzZatEreKp6F/XaR9loFyiofgk724fRAXooZwgMtoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFzYdJ6hJxuZ6h4ecsFqYRZgmNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYzBmNmE5OTAtMDUxYS0z ZjZhLWE0MzQtYmNlZWY3ZTZkMjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0JxCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUk8+ByKLSZYzd9RL1MYe0dTI4BJg70sqBLAejeoGLDBjfMllWt24LL KW4dRktnwsCmD+BESEtQXQxIFPy248MlnjyLO5yIRqD7SUp4dmH3YfbclxkeS23x dx/rmlxAyFFAUzzfgHEJqXAHIAi8JM9Hripl47x3AvGhyqURdwGIIfu4MWNTNhs6 k5q6F3MRm+DGRDYKp06zMRCc/K3PmhdugFvSIZX5CyQpG81GbScQNbWI3ZTyuCct y/wkDZXcb+eAlJyeOai9UgLVn3ThyGvXVSjYWzfNLmIf0xk7kEDLX56ALhklELeQ ruZroWuePdKLCoVDi0d3GcWcQG8c6uk= -----END CERTIFICATE-----Generated at Sat Sep 5 02:14:35 2026 by rpki-client