$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/7656e318-92cb-3478-a76e-d1b3398e9a1e.roa File: 7656e318-92cb-3478-a76e-d1b3398e9a1e.roa (raw, json) Hash identifier: wFv5uqODF44bOY6ApLpTHhRIALiNJ7cMQUh6NHZHm7E= Subject key identifier: F0:5B:F9:43:63:E6:EE:F5:BD:B7:D6:7C:69:3C:96:88:75:08:73:62 Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F4328584F1F4E89E2603A076DF4F12600 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/7656e318-92cb-3478-a76e-d1b3398e9a1e.roa Signing time: Wed 09 Sep 2026 22:43:45 +0000 ROA not before: Wed 09 Sep 2026 22:43:45 +0000 ROA not after: Tue 08 Dec 2026 23:43:45 +0000 asID: 214054 IP address blocks: 208.68.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:4e:89:e2:60:3a:07:6d:f4:f1:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Sep 9 22:43:45 2026 GMT Not After : Dec 8 23:43:45 2026 GMT Subject: CN=f2c70adf-f706-4992-b0f1-4c48001627da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:e1:ef:ad:85:fa:f9:52:97:5d:75:90:08: fe:78:09:ff:63:21:d9:43:26:b9:8d:63:6b:14:6d: 9f:dd:d3:d7:4c:ac:de:ac:e2:84:b5:c2:cc:a2:2e: e9:ff:b3:c6:0f:e3:6a:7a:59:7a:f7:17:e6:57:f5: 36:01:6e:9e:85:65:b4:31:03:04:cd:74:d6:a1:ca: 05:1f:54:ab:f8:c3:40:18:20:25:4a:c1:8a:16:8f: 83:a0:3c:b6:cd:d8:a1:97:75:d1:5f:92:47:07:0e: fa:27:75:ea:66:3f:b7:ce:a2:0e:a6:d5:a1:dc:42: 2e:08:f9:74:7f:17:70:0e:41:28:b2:fe:77:c7:ce: 40:a2:40:1f:95:09:42:1e:7d:e3:9e:4a:9d:e2:8d: c8:e9:26:67:b8:b9:fd:05:e3:3a:d8:02:b1:5a:ac: 1f:a0:b9:07:a0:ac:91:55:09:76:15:1a:a4:47:9f: 0d:88:1d:4b:a9:ef:25:a6:b2:de:a8:d8:52:b6:2a: 71:43:f6:9d:6d:b2:52:43:36:45:f9:7a:8d:cb:02: a5:ff:ee:1f:46:55:fa:ca:06:16:2a:77:a4:d3:75: ad:ea:7e:cc:71:2e:85:48:82:0f:58:b0:dd:98:8e: 3d:df:b6:ff:76:7c:68:e3:01:43:01:9b:98:e3:7e: a9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:5B:F9:43:63:E6:EE:F5:BD:B7:D6:7C:69:3C:96:88:75:08:73:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/7656e318-92cb-3478-a76e-d1b3398e9a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ec:56:53:f4:a5:98:e7:bd:80:77:fc:51:85:27:4c:c1:3a: ec:ca:c7:c8:54:50:c3:8c:ea:e8:a2:75:5e:35:d0:c3:1f:bb: ba:14:ac:84:40:a9:40:09:76:3d:4f:b2:10:1c:a5:94:72:bf: 0d:d8:a8:91:1c:76:e2:1a:13:6d:c4:d8:fc:e7:fb:d9:be:3b: c7:7b:33:f9:e6:32:d9:fc:91:35:64:68:59:d9:ae:a6:25:67: 2c:33:b3:6e:43:d4:a5:e0:68:c7:1a:c7:7c:c3:3e:00:5b:bb: 22:39:03:a3:86:a0:5e:05:d1:36:42:51:0b:71:d8:19:5a:d4: 12:48:b0:a3:0e:08:40:a1:43:ec:b4:ff:a6:9c:02:7a:fb:c0: e2:55:c5:16:b1:45:b1:09:87:27:f2:9a:e7:0c:6c:1d:7b:14: 66:b3:45:a7:be:eb:51:35:5c:50:41:e4:2c:b5:c6:2d:c2:11: 77:23:1b:50:49:5a:bd:50:2c:7a:72:f9:d7:3a:dd:5b:8a:79: 12:35:d1:a1:71:a7:b9:85:ab:61:17:25:58:7c:96:9b:1b:d7: 6d:ea:2f:47:43:e6:0a:76:be:51:fc:76:75:55:9f:0f:b7:20: 4a:80:3b:da:21:16:44:95:47:14:21:10:ab:03:9a:c2:fd:ba: a7:52:72:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fToniYDoHbfTxJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI2MDkwOTIyNDM0NVoXDTI2MTIwODIzNDM0NVowLzEtMCsGA1UEAxMk ZjJjNzBhZGYtZjcwNi00OTkyLWIwZjEtNGM0ODAwMTYyN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/7h762F+vlSl111kAj+eAn/YyHZQya5jWNr FG2f3dPXTKzerOKEtcLMoi7p/7PGD+Nqell69xfmV/U2AW6ehWW0MQMEzXTWocoF H1Sr+MNAGCAlSsGKFo+DoDy2zdihl3XRX5JHBw76J3XqZj+3zqIOptWh3EIuCPl0 fxdwDkEosv53x85AokAflQlCHn3jnkqd4o3I6SZnuLn9BeM62AKxWqwfoLkHoKyR VQl2FRqkR58NiB1Lqe8lprLeqNhStipxQ/adbbJSQzZF+XqNywKl/+4fRlX6ygYW Knek03Wt6n7McS6FSIIPWLDdmI4937b/dnxo4wFDAZuY436plwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBb+UNj5u71vbfWfGk8loh1CHNiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvNzY1NmUzMTgtOTJjYi0z NDc4LWE3NmUtZDFiMzM5OGU5YTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ET5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPsVlP0pZjnvYB3/FGFJ0zBOuzKx8hUUMOM6uiidV410MMfu7oUrIRA qUAJdj1PshAcpZRyvw3YqJEcduIaE23E2Pzn+9m+O8d7M/nmMtn8kTVkaFnZrqYl Zywzs25D1KXgaMcax3zDPgBbuyI5A6OGoF4F0TZCUQtx2Bla1BJIsKMOCEChQ+y0 /6acAnr7wOJVxRaxRbEJhyfymucMbB17FGazRae+61E1XFBB5Cy1xi3CEXcjG1BJ Wr1QLHpy+dc63VuKeRI10aFxp7mFq2EXJVh8lpsb123qL0dD5gp2vlH8dnVVnw+3 IEqAO9ohFkSVRxQhEKsDmsL9uqdSctA= -----END CERTIFICATE-----Generated at Sun Sep 27 00:23:38 2026 by rpki-client