$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa File: 408e275f-c077-3b66-9a3f-a4e43e87657a.roa (raw, json) Hash identifier: rAFPHkpts9dgPLAR0Ovtc+CJVbsAo04krOr+SOYDmAY= Subject key identifier: E4:29:F5:CF:F5:52:5D:AE:25:3E:F3:D1:E6:94:29:39:A3:0B:4C:92 Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F4328584F655D7DB9E6380C42F88E1700 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 22418 IP address blocks: 208.96.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 31 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:7d:b9:e6:38:0c:42:f8:8e:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=3c0b10ca-1260-48c6-a60b-5519fd1da26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ff:45:18:11:fd:fe:e7:d5:d6:ee:4e:57:11: e0:76:26:08:0d:ac:b3:8e:ef:1c:96:82:99:60:00: f2:ef:cc:e4:6e:bc:a2:ef:81:0d:ad:1a:04:9d:b4: 38:4a:e6:f1:a2:32:09:44:19:e1:0b:43:be:36:16: e6:07:2d:34:52:4c:95:06:df:9d:72:39:c4:39:f8: f3:ff:7f:0e:5f:2f:ad:d2:e0:5a:2d:16:8e:af:2d: ff:b9:0b:95:ee:5e:92:ae:d7:34:6a:15:a3:19:94: 96:3e:28:ed:29:25:ea:ba:50:a3:7f:dc:d3:3b:3d: f6:62:98:ae:aa:40:cd:26:3d:66:2c:06:42:c8:41: 63:53:1a:fd:20:57:00:44:30:f1:f8:4a:11:3e:2d: c2:d2:41:bc:fd:1f:48:a2:bf:8c:c7:f0:35:e0:e8: 7c:f1:ba:8f:5d:ee:81:7f:82:3d:23:11:74:ed:5a: 4b:43:51:8c:00:da:66:c0:8a:71:ce:a0:0b:ed:fe: 96:5c:a6:d9:b7:3f:1e:ee:6b:b4:89:07:7e:b3:5c: 47:6c:29:78:4f:b5:dd:85:11:fe:31:18:d3:5a:e1: a8:08:60:d1:10:2c:9a:63:72:5d:05:eb:4e:bf:16: 24:d8:4d:88:02:8a:b3:08:da:be:1d:43:26:c3:22: 02:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:29:F5:CF:F5:52:5D:AE:25:3E:F3:D1:E6:94:29:39:A3:0B:4C:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 208.96.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e4:01:92:0b:9e:98:5e:c5:75:6d:e7:57:b8:26:86:fe:e5:a1: e2:4e:74:df:cd:c4:7e:72:fe:2a:98:3a:2f:db:23:91:dd:1a: 91:8d:59:52:38:3c:92:3e:c9:34:d1:8d:62:37:90:e2:a8:a8: a0:e5:ab:9f:94:90:3d:1b:79:53:7e:5f:53:d9:57:4d:a0:d0: 0f:85:9e:9c:8e:d6:3d:29:44:6e:0a:9c:5c:44:11:e4:c3:b3: 89:b8:9b:48:2f:fe:19:b9:71:03:b9:a6:17:79:1b:83:f4:ce: 6b:38:61:49:c3:13:11:c6:7d:98:40:90:7c:6c:15:8c:29:b6: 59:cd:10:5c:e7:b1:50:4c:dc:68:4d:71:d5:6d:38:99:56:be: 4f:23:52:36:1f:57:46:c2:27:c5:3f:44:4e:92:76:22:52:d8: 29:c1:3e:1b:9b:76:70:32:67:f7:a4:df:e5:80:7a:80:8a:fd: 32:1f:ba:19:5f:b0:73:3f:78:70:4c:13:20:87:b2:ac:c0:26: 72:fa:64:35:0f:e5:f0:03:04:33:de:66:f4:6c:4a:02:29:2b: 5d:f2:a6:0f:d9:7c:9e:c4:69:21:14:23:f8:fd:79:15:8e:29: 62:39:90:9f:23:65:c7:a3:17:dc:06:71:05:ee:53:62:54:e5: e5:dd:95:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXX255jgMQviOFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk M2MwYjEwY2EtMTI2MC00OGM2LWE2MGItNTUxOWZkMWRhMjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf9FGBH9/ufV1u5OVxHgdiYIDayzju8cloKZ YADy78zkbryi74ENrRoEnbQ4SubxojIJRBnhC0O+NhbmBy00UkyVBt+dcjnEOfjz /38OXy+t0uBaLRaOry3/uQuV7l6Srtc0ahWjGZSWPijtKSXqulCjf9zTOz32Ypiu qkDNJj1mLAZCyEFjUxr9IFcARDDx+EoRPi3C0kG8/R9Ior+Mx/A14Oh88bqPXe6B f4I9IxF07VpLQ1GMANpmwIpxzqAL7f6WXKbZtz8e7mu0iQd+s1xHbCl4T7XdhRH+ MRjTWuGoCGDRECyaY3JdBetOvxYk2E2IAoqzCNq+HUMmwyICUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQp9c/1Ul2uJT7z0eaUKTmjC0ySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvNDA4ZTI3NWYtYzA3Ny0z YjY2LTlhM2YtYTRlNDNlODc2NTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOQBkguemF7FdW3nV7gmhv7loeJOdN/NxH5y/iqYOi/bI5HdGpGNWVI4 PJI+yTTRjWI3kOKoqKDlq5+UkD0beVN+X1PZV02g0A+FnpyO1j0pRG4KnFxEEeTD s4m4m0gv/hm5cQO5phd5G4P0zms4YUnDExHGfZhAkHxsFYwptlnNEFznsVBM3GhN cdVtOJlWvk8jUjYfV0bCJ8U/RE6SdiJS2CnBPhubdnAyZ/ek3+WAeoCK/TIfuhlf sHM/eHBMEyCHsqzAJnL6ZDUP5fADBDPeZvRsSgIpK13ypg/ZfJ7EaSEUI/j9eRWO KWI5kJ8jZcejF9wGcQXuU2JU5eXdlVE= -----END CERTIFICATE-----Generated at Fri Oct 30 04:10:31 2026 by rpki-client