$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/e860c320-fbd6-3362-8198-d35cd75bcd53.roa File: e860c320-fbd6-3362-8198-d35cd75bcd53.roa (raw, json) Hash identifier: 0p4AD4LrBSLP88WjFvNfJxBHog7VC7pXQPdE8Zl36X8= Subject key identifier: 1A:35:A0:43:67:6F:B2:9D:C7:B6:F7:FB:CA:C3:32:AF:F0:EE:B4:74 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584F3E47DFAE7A9CE5A5358FD980 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/e860c320-fbd6-3362-8198-d35cd75bcd53.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 23465 IP address blocks: 208.187.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:df:ae:7a:9c:e5:a5:35:8f:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=089ef713-1dfc-4b1a-a339-928f61f7544f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:2f:d7:24:ed:94:fd:9d:f4:b2:01:e7:ab: 49:98:0f:76:76:59:81:8c:0f:c0:76:ff:5f:fb:bb: 1a:27:eb:65:2e:da:36:f5:5e:48:09:ba:40:46:ea: b6:93:fe:58:bc:dc:58:86:aa:55:b4:ca:37:de:0e: 5c:1e:d7:b6:a1:ed:58:b1:de:33:cb:f5:1b:b5:1b: 79:b0:a3:7a:17:c8:fe:5d:cd:25:52:1e:86:41:a7: 14:bb:cb:a0:ae:9b:16:3c:fa:0d:c6:7b:a6:ad:21: d5:83:36:5e:5f:29:27:1c:70:c5:c2:f4:45:3d:96: 01:4a:9d:fc:7f:91:42:52:34:1b:52:f1:8d:39:6c: 34:81:28:52:d1:95:2c:5f:09:95:d8:ae:21:90:37: 99:3c:17:1d:6f:3b:42:60:f7:46:f1:75:9f:5e:dc: 06:fe:e4:00:5f:d4:f0:d3:36:8e:6c:2d:9d:9f:19: 18:6a:19:f2:07:98:c8:33:d7:da:e8:1c:ba:ef:c5: 98:ad:0e:f8:df:50:e1:c1:17:aa:7c:27:56:a9:73: 79:9f:57:f5:89:a2:a7:80:6b:cf:b5:fd:0d:1b:a1: d9:d4:91:6f:1a:0b:34:01:c0:bc:fe:33:bf:9a:4c: 7a:a0:66:0e:c3:f4:56:d9:6e:c9:91:a7:aa:05:6b: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:35:A0:43:67:6F:B2:9D:C7:B6:F7:FB:CA:C3:32:AF:F0:EE:B4:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/e860c320-fbd6-3362-8198-d35cd75bcd53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 208.187.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:aa:93:dd:1c:c3:34:df:0f:0f:94:81:c5:0a:3d:7a:10:a7: 20:06:78:07:af:7d:1d:4d:b4:7d:6c:0c:9e:00:6e:1c:5b:f4: b9:d1:72:af:78:79:2b:79:4f:a2:b9:14:de:c5:55:f9:48:31: 3f:ce:a8:ce:a6:75:68:46:d8:2d:21:85:eb:60:2c:5a:42:1d: 0b:c7:c2:c0:cd:ed:b2:3d:20:0f:1e:2e:02:2c:d9:9a:5c:51: e8:43:ca:6a:0d:24:75:0f:73:26:9b:28:a4:16:b9:cc:27:aa: 4d:e6:bf:a3:84:a9:4b:09:4e:d9:1e:64:13:07:7e:12:20:3c: ed:ff:80:23:df:9a:ad:2b:53:c2:2e:e5:ea:77:96:93:26:7c: 28:b3:e5:7d:0b:73:d4:0b:85:cb:b4:85:fe:0d:c4:f3:ad:c2: 4c:37:8f:76:c2:8a:ac:1b:6d:ab:50:97:2a:90:eb:dd:a7:6c: 07:42:c4:a5:2f:7d:ff:a1:4f:ac:f7:3e:cc:8c:aa:29:11:96: 99:96:61:1c:93:54:0c:55:80:50:ee:02:4d:65:d5:21:5a:b2: 7d:de:09:0d:2b:a4:b0:de:b4:9a:cd:bc:f7:7d:60:59:50:a7: 58:39:cf:34:48:66:e4:fc:ac:77:3f:83:68:5d:51:a1:4d:9b: 54:f2:31:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9+uepzlpTWP2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MDg5ZWY3MTMtMWRmYy00YjFhLWEzMzktOTI4ZjYxZjc1NDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnsv1yTtlP2d9LIB56tJmA92dlmBjA/Adv9f +7saJ+tlLto29V5ICbpARuq2k/5YvNxYhqpVtMo33g5cHte2oe1Ysd4zy/UbtRt5 sKN6F8j+Xc0lUh6GQacUu8ugrpsWPPoNxnumrSHVgzZeXyknHHDFwvRFPZYBSp38 f5FCUjQbUvGNOWw0gShS0ZUsXwmV2K4hkDeZPBcdbztCYPdG8XWfXtwG/uQAX9Tw 0zaObC2dnxkYahnyB5jIM9fa6By678WYrQ7431DhwReqfCdWqXN5n1f1iaKngGvP tf0NG6HZ1JFvGgs0AcC8/jO/mkx6oGYOw/RW2W7JkaeqBWtV+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo1oENnb7Kdx7b3+8rDMq/w7rR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvZTg2MGMzMjAtZmJkNi0z MzYyLTgxOTgtZDM1Y2Q3NWJjZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0LssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCqk90cwzTfDw+UgcUKPXoQpyAGeAevfR1NtH1sDJ4Abhxb9LnRcq94 eSt5T6K5FN7FVflIMT/OqM6mdWhG2C0hhetgLFpCHQvHwsDN7bI9IA8eLgIs2Zpc UehDymoNJHUPcyabKKQWucwnqk3mv6OEqUsJTtkeZBMHfhIgPO3/gCPfmq0rU8Iu 5ep3lpMmfCiz5X0Lc9QLhcu0hf4NxPOtwkw3j3bCiqwbbatQlyqQ692nbAdCxKUv ff+hT6z3PsyMqikRlpmWYRyTVAxVgFDuAk1l1SFasn3eCQ0rpLDetJrNvPd9YFlQ p1g5zzRIZuT8rHc/g2hdUaFNm1TyMfM= -----END CERTIFICATE-----Generated at Tue Oct 13 22:57:43 2026 by rpki-client