$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8a3f049a-082e-37d8-a095-87f3ea292ab9.roa File: 8a3f049a-082e-37d8-a095-87f3ea292ab9.roa (raw, json) Hash identifier: LXxnX+fPmc0VTVDsycu4VjU65Bp4Dk9r3rpYwhPH3vA= Subject key identifier: 9B:52:A5:A0:52:5A:56:9B:9B:87:DF:4D:1F:FC:08:C8:6D:19:61:E0 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584F6F22ECFBA017290AB0C53B80 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8a3f049a-082e-37d8-a095-87f3ea292ab9.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 401783 IP address blocks: 70.39.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:ec:fb:a0:17:29:0a:b0:c5:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=d3054ed0-8403-47d5-b617-1763bc71a7ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:8f:e0:4a:50:e5:de:e5:aa:62:f8:50:f4: 43:5b:9a:12:98:33:e1:38:83:14:c8:c3:28:e7:56: 33:72:28:15:81:71:28:1e:a6:49:2c:0c:4e:dd:3e: 43:5b:21:fc:88:51:d6:32:27:86:a2:c0:b6:0d:46: e3:ef:a6:ba:47:c6:55:70:12:1a:e1:89:73:df:9f: 45:98:49:f7:5d:26:6b:fa:fd:07:bc:b0:29:27:f7: 4f:09:e8:94:63:b6:6b:8c:0e:c2:56:a5:04:fd:5f: 31:65:f3:75:c6:76:7a:5b:83:3d:73:4d:33:ba:6a: 30:72:e3:40:38:33:5c:9a:61:6d:6d:ef:4c:64:17: b7:44:95:01:63:51:c0:0d:f8:72:28:e6:1a:dc:59: 4b:83:3f:1d:a4:ff:36:eb:23:90:36:5b:ef:3e:3e: c6:71:dc:13:15:81:0b:bb:fb:3d:ff:bd:d7:5c:10: 2d:f8:26:db:5f:52:e4:0d:2c:c8:63:d9:0b:ba:2e: 5f:39:a2:8f:f7:97:98:3a:05:a7:9f:fe:02:70:1b: a4:0d:e6:32:3e:56:fc:2e:75:1a:24:04:85:d7:29: f7:ce:08:30:8d:a7:fc:b6:69:4c:c6:1e:30:95:05: a7:e5:6a:b4:a4:b9:b8:33:4f:6f:c9:c9:ab:ff:26: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:52:A5:A0:52:5A:56:9B:9B:87:DF:4D:1F:FC:08:C8:6D:19:61:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8a3f049a-082e-37d8-a095-87f3ea292ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 70.39.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ba:24:32:b7:59:c2:88:ae:56:8f:83:a4:08:29:09:26:c0: df:93:c3:65:1e:df:44:0f:63:fe:a7:fc:dc:43:10:c6:c5:76: bc:cb:f7:2b:ed:20:63:e4:15:75:8e:23:e5:22:ef:8a:21:05: 46:21:97:ca:53:9a:ca:8f:50:57:4d:4f:c2:0b:6f:e8:ab:c9: 94:c9:60:f7:0e:7d:22:6f:40:38:3c:03:77:35:d8:39:f2:45: e4:cc:60:a5:ff:fb:86:b3:f3:3d:0f:16:9e:52:b4:e3:45:c9: 80:12:11:3a:7e:23:20:84:64:b3:d9:f7:bb:f0:95:ef:ee:9b: fe:c0:af:c5:34:41:c4:0d:e7:42:5b:74:a1:83:1c:10:14:4a: c3:4d:9e:96:8f:32:cd:1f:bf:ff:85:c9:21:3f:c2:73:4e:53: eb:4c:7c:a4:8d:1d:03:41:74:e9:6e:14:e7:b6:a7:5e:36:47: 17:42:eb:4e:be:d7:8d:1c:a8:41:0b:72:51:89:ac:50:b6:24: 8c:15:99:cf:c8:cd:bd:ee:91:60:d5:ca:07:b6:65:08:9f:b0: 63:08:27:dd:b0:f2:b4:97:67:43:ac:c6:73:c3:4e:c6:8b:93: a4:ec:66:13:7b:60:40:43:69:fd:93:a8:bc:52:f3:36:ca:32: e2:15:40:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIuz7oBcpCrDFO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDMwNTRlZDAtODQwMy00N2Q1LWI2MTctMTc2M2JjNzFhN2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkqP4EpQ5d7lqmL4UPRDW5oSmDPhOIMUyMMo 51YzcigVgXEoHqZJLAxO3T5DWyH8iFHWMieGosC2DUbj76a6R8ZVcBIa4Ylz359F mEn3XSZr+v0HvLApJ/dPCeiUY7ZrjA7CVqUE/V8xZfN1xnZ6W4M9c00zumowcuNA ODNcmmFtbe9MZBe3RJUBY1HADfhyKOYa3FlLgz8dpP826yOQNlvvPj7GcdwTFYEL u/s9/73XXBAt+CbbX1LkDSzIY9kLui5fOaKP95eYOgWnn/4CcBukDeYyPlb8LnUa JASF1yn3zggwjaf8tmlMxh4wlQWn5Wq0pLm4M09vycmr/ya+6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtSpaBSWlabm4ffTR/8CMhtGWHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvOGEzZjA0OWEtMDgyZS0z N2Q4LWEwOTUtODdmM2VhMjkyYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARifzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA26JDK3WcKIrlaPg6QIKQkmwN+Tw2Ue30QPY/6n/NxDEMbFdrzL9yvt IGPkFXWOI+Ui74ohBUYhl8pTmsqPUFdNT8ILb+iryZTJYPcOfSJvQDg8A3c12Dny ReTMYKX/+4az8z0PFp5StONFyYASETp+IyCEZLPZ97vwle/um/7Ar8U0QcQN50Jb dKGDHBAUSsNNnpaPMs0fv/+FySE/wnNOU+tMfKSNHQNBdOluFOe2p142RxdC606+ 140cqEELclGJrFC2JIwVmc/Izb3ukWDVyge2ZQifsGMIJ92w8rSXZ0OsxnPDTsaL k6TsZhN7YEBDaf2TqLxS8zbKMuIVQOE= -----END CERTIFICATE-----Generated at Sun Oct 25 10:26:05 2026 by rpki-client