$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/3cf5cfed-5bf1-3d6e-b0a0-259321f7cb27.roa File: 3cf5cfed-5bf1-3d6e-b0a0-259321f7cb27.roa (raw, json) Hash identifier: ic/dLZmyixehDNufYPI9qHgE1ArUxheQKoa/WvNwjD8= Subject key identifier: 96:31:D5:86:9E:EE:5C:74:07:A6:6D:12:47:87:83:56:A5:33:E6:9F Certificate issuer: /CN=b1420c0c-7e61-4b06-8745-33767980b83b Certificate serial: 010D0C9F4328584F89C828EDA4539205B9745E00 Authority key identifier: 23:D0:62:2D:0E:AE:86:6A:E3:C6:92:6A:2A:07:6A:AE:74:7F:1A:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/3cf5cfed-5bf1-3d6e-b0a0-259321f7cb27.roa Signing time: Sun 18 Oct 2026 02:04:29 +0000 ROA not before: Sun 18 Oct 2026 02:04:29 +0000 ROA not after: Sat 16 Jan 2027 03:04:29 +0000 asID: 23082 IP address blocks: 208.83.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/b1420c0c-7e61-4b06-8745-33767980b83b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/b1420c0c-7e61-4b06-8745-33767980b83b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:c8:28:ed:a4:53:92:05:b9:74:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1420c0c-7e61-4b06-8745-33767980b83b Validity Not Before: Oct 18 02:04:29 2026 GMT Not After : Jan 16 03:04:29 2027 GMT Subject: CN=c19d4b0d-5e00-4c86-8d21-077c91373214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3f:0e:8a:11:19:b3:3b:b0:08:83:4e:ad:c1: a4:81:cb:2c:c3:77:6b:9f:9b:13:37:15:07:f8:50: cb:97:79:67:06:c0:87:96:0d:f0:79:39:09:1e:4d: 3e:7e:a6:a1:11:23:92:ae:ce:a1:96:d8:dc:dd:d0: 3c:3f:53:e2:61:cf:72:05:c8:f1:8a:7c:9b:1f:7b: 17:79:89:3f:58:57:a1:88:15:ef:bf:1f:08:86:39: 4a:30:43:f1:5f:ea:ee:8d:52:d4:de:00:74:d0:51: e4:2b:a3:c8:57:cf:73:3e:96:95:ac:2b:f5:eb:7b: f9:74:97:82:62:d1:f7:b4:14:82:39:d8:88:9f:81: d4:41:0a:51:45:cc:cf:3a:0a:04:19:b5:69:c3:3f: cc:56:f5:be:03:b8:76:93:1c:ed:38:7a:79:52:66: bb:72:be:cb:76:49:a5:77:41:8c:b9:e4:47:08:5d: 74:bb:8d:e3:32:fb:4e:65:ce:b0:cd:58:97:d3:2c: 01:08:e7:28:00:f7:2d:0e:3c:4a:ee:18:74:9f:16: b7:f2:42:db:58:8a:94:9e:5f:57:a0:95:c5:bf:25: a5:8b:10:91:2d:dc:83:3d:51:cb:0a:12:cc:94:4e: 7d:0c:52:22:71:db:45:7b:c4:86:25:ae:6d:44:07: 0b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:31:D5:86:9E:EE:5C:74:07:A6:6D:12:47:87:83:56:A5:33:E6:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/3cf5cfed-5bf1-3d6e-b0a0-259321f7cb27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/b1420c0c-7e61-4b06-8745-33767980b83b.crl X509v3 Authority Key Identifier: keyid:23:D0:62:2D:0E:AE:86:6A:E3:C6:92:6A:2A:07:6A:AE:74:7F:1A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b.cer sbgp-ipAddrBlock: critical IPv4: 208.83.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:65:5e:94:9f:26:11:9b:2a:f5:01:f7:17:2a:6a:8c:f8:a3: 7d:d6:18:02:5d:19:43:f4:3d:c8:27:aa:a3:3a:31:05:42:e3: bb:3f:da:28:3e:d5:b3:cc:20:a3:d3:f4:6c:db:ef:29:3a:e9: 50:46:f7:b1:3a:2d:f1:6a:53:a0:39:d4:1d:17:f3:9a:59:89: e8:2a:88:8c:ad:16:b6:05:8a:a4:a1:bd:ad:18:80:84:ce:e6: 49:28:68:4a:2e:87:87:68:62:2b:cf:c4:d5:22:77:0c:ad:6d: c2:f9:de:bc:a7:a7:d1:fc:06:f9:ce:84:3b:56:6b:25:68:d3: 9f:b1:b7:ef:7f:12:8a:eb:d1:35:a4:56:70:15:5b:0b:dd:81: 50:eb:24:34:e1:47:f8:ce:f8:43:ce:33:53:9e:84:49:d3:01: 98:0a:40:17:5e:af:83:0f:1b:4f:03:06:32:6f:80:cb:e6:04: 44:b4:c8:8a:3a:c3:2f:15:78:20:29:cd:1d:95:e9:28:d2:b4: f2:a6:18:5a:ac:50:0f:ad:f4:a1:a3:21:05:e4:43:93:41:9c: 01:24:4c:56:9b:4f:22:53:df:2f:5a:a7:90:63:65:0b:73:b0: 30:76:09:14:9a:02:8a:7c:85:f5:dc:d8:07:1c:a7:da:38:2c: 4f:c5:a7:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JyCjtpFOSBbl0XgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE0MjBjMGMtN2U2MS00YjA2LTg3NDUtMzM3Njc5ODBi ODNiMB4XDTI2MTAxODAyMDQyOVoXDTI3MDExNjAzMDQyOVowLzEtMCsGA1UEAxMk YzE5ZDRiMGQtNWUwMC00Yzg2LThkMjEtMDc3YzkxMzczMjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij8OihEZszuwCINOrcGkgcssw3drn5sTNxUH +FDLl3lnBsCHlg3weTkJHk0+fqahESOSrs6hltjc3dA8P1PiYc9yBcjxinybH3sX eYk/WFehiBXvvx8IhjlKMEPxX+rujVLU3gB00FHkK6PIV89zPpaVrCv163v5dJeC YtH3tBSCOdiIn4HUQQpRRczPOgoEGbVpwz/MVvW+A7h2kxztOHp5Uma7cr7Ldkml d0GMueRHCF10u43jMvtOZc6wzViX0ywBCOcoAPctDjxK7hh0nxa38kLbWIqUnl9X oJXFvyWlixCRLdyDPVHLChLMlE59DFIicdtFe8SGJa5tRAcL0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYx1Yae7lx0B6ZtEkeHg1alM+afMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iMTQy MGMwYy03ZTYxLTRiMDYtODc0NS0zMzc2Nzk4MGI4M2IvM2NmNWNmZWQtNWJmMS0z ZDZlLWIwYTAtMjU5MzIxZjdjYjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYjE0MjBjMGMtN2U2MS00YjA2LTg3 NDUtMzM3Njc5ODBiODNiL2IxNDIwYzBjLTdlNjEtNGIwNi04NzQ1LTMzNzY3OTgw YjgzYi5jcmwwHwYDVR0jBBgwFoAUI9BiLQ6uhmrjxpJqKgdqrnR/GiAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iMTQyMGMwYy03ZTYxLTRiMDYtODc0NS0zMzc2 Nzk4MGI4M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FN2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNlXpSfJhGbKvUB9xcqaoz4o33WGAJdGUP0PcgnqqM6MQVC47s/2ig+ 1bPMIKPT9Gzb7yk66VBG97E6LfFqU6A51B0X85pZiegqiIytFrYFiqShva0YgITO 5kkoaEouh4doYivPxNUidwytbcL53rynp9H8BvnOhDtWayVo05+xt+9/Eorr0TWk VnAVWwvdgVDrJDThR/jO+EPOM1OehEnTAZgKQBder4MPG08DBjJvgMvmBES0yIo6 wy8VeCApzR2V6SjStPKmGFqsUA+t9KGjIQXkQ5NBnAEkTFabTyJT3y9ap5BjZQtz sDB2CRSaAop8hfXc2Accp9o4LE/Fp2M= -----END CERTIFICATE-----Generated at Sun Oct 25 06:47:36 2026 by rpki-client