$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/45a6752c-7032-3227-bbcc-7ec1be2c958b.roa File: 45a6752c-7032-3227-bbcc-7ec1be2c958b.roa (raw, json) Hash identifier: LYkeDtsQ5RC7wu9u3GxehLQLxm7vEjlAJpHFnpooVYM= Subject key identifier: A2:86:A5:82:5D:C0:8E:96:7A:AB:1F:E6:73:F2:BF:AC:52:02:5B:A1 Certificate issuer: /CN=b1420c0c-7e61-4b06-8745-33767980b83b Certificate serial: 010D0C9F4328584F8E8C6B5112D16D722D0C0A40 Authority key identifier: 23:D0:62:2D:0E:AE:86:6A:E3:C6:92:6A:2A:07:6A:AE:74:7F:1A:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/45a6752c-7032-3227-bbcc-7ec1be2c958b.roa Signing time: Mon 19 Oct 2026 19:03:10 +0000 ROA not before: Mon 19 Oct 2026 19:03:10 +0000 ROA not after: Sun 17 Jan 2027 20:03:10 +0000 asID: 8075 IP address blocks: 208.83.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/b1420c0c-7e61-4b06-8745-33767980b83b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/b1420c0c-7e61-4b06-8745-33767980b83b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8e:8c:6b:51:12:d1:6d:72:2d:0c:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1420c0c-7e61-4b06-8745-33767980b83b Validity Not Before: Oct 19 19:03:10 2026 GMT Not After : Jan 17 20:03:10 2027 GMT Subject: CN=7711f73d-0009-4f88-a9ac-e155d1f51f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:30:62:3f:6c:45:a2:37:e3:6c:7d:1f:7d:e3: 98:40:af:ef:89:b0:18:2a:c9:2f:86:8d:fc:5c:cc: 07:f8:a6:58:cb:3d:08:07:9e:b4:bc:11:0c:1e:8d: a7:cf:4e:f5:ca:43:d9:30:a9:e7:85:72:c4:67:5f: 54:f7:b7:89:c2:c9:f4:48:da:85:c5:4b:02:d3:fe: f6:33:27:dd:d8:af:f3:a4:e5:e7:b9:ac:cd:e9:02: c0:81:57:a6:52:8f:b7:b2:56:de:cd:4f:a9:14:2a: 70:9d:1d:11:91:dc:d8:a2:5b:3b:ad:6e:6b:dc:2d: 82:de:d9:7f:91:b5:9e:74:f3:7f:21:d7:45:c2:c7: 33:12:11:6f:ce:73:43:ba:72:0a:1a:0d:0b:90:6f: 17:75:a9:fd:fb:ef:4b:a9:db:5a:1c:e2:1a:48:c7: e3:4c:a3:f0:8e:7c:96:d6:8b:12:f9:f2:43:ef:e5: 26:52:b3:73:7b:2e:dc:f4:82:73:cc:8c:01:2f:c1: 4f:6c:09:b6:c2:fd:b0:01:a0:7c:d7:fd:12:39:c1: 84:0f:a2:3e:c1:2e:f5:91:87:7c:b4:6c:dc:3a:de: 2c:09:c8:75:7d:2e:a2:9d:fd:c1:7b:81:38:23:a4: ee:50:70:b9:10:6a:88:bc:be:25:83:57:78:11:1d: 25:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:86:A5:82:5D:C0:8E:96:7A:AB:1F:E6:73:F2:BF:AC:52:02:5B:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/45a6752c-7032-3227-bbcc-7ec1be2c958b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b/b1420c0c-7e61-4b06-8745-33767980b83b.crl X509v3 Authority Key Identifier: keyid:23:D0:62:2D:0E:AE:86:6A:E3:C6:92:6A:2A:07:6A:AE:74:7F:1A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b1420c0c-7e61-4b06-8745-33767980b83b.cer sbgp-ipAddrBlock: critical IPv4: 208.83.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:4e:42:b2:23:de:1f:0b:f8:2d:5c:a9:0c:b5:91:ed:72:2e: ab:56:80:52:8d:17:e2:e7:95:86:08:13:29:11:81:48:f7:da: 4c:94:b8:5d:72:2c:c0:6c:01:98:d7:d6:37:26:0c:e0:3a:89: c6:3d:38:d8:ab:c2:a7:6a:47:3d:d7:66:e1:86:51:ec:5b:3a: 70:f5:3d:6d:dd:0d:a9:1d:f4:1b:75:2e:2a:29:b4:24:2c:bb: f9:de:15:3e:44:1b:57:08:a0:f3:55:6d:f5:ad:a8:74:19:2a: 7f:58:a4:49:1a:41:b2:17:87:b7:55:ae:08:83:24:72:ae:de: 50:b1:5d:f8:aa:31:e2:3a:ba:d7:c5:a5:3c:66:5b:17:a4:ea: 41:67:c8:58:18:1c:36:61:1e:a4:6f:6b:57:67:fd:53:99:b1: 51:a9:3e:f6:0e:4c:1a:72:36:79:c5:fe:cf:5e:12:2e:dc:45: 3e:2b:3c:b5:54:5d:bf:6c:4f:8d:22:b6:23:b2:ea:41:e7:8e: 45:ce:e9:78:5c:4d:9c:6c:ba:f4:e6:bc:de:fe:85:de:01:55: b2:39:2d:f7:0d:d7:5e:59:78:03:23:04:cb:dc:4d:14:50:9d: 53:06:2d:05:54:00:1c:7c:ab:9a:9c:78:ff:c5:0f:2b:0e:95: 97:73:4d:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+OjGtREtFtci0MCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE0MjBjMGMtN2U2MS00YjA2LTg3NDUtMzM3Njc5ODBi ODNiMB4XDTI2MTAxOTE5MDMxMFoXDTI3MDExNzIwMDMxMFowLzEtMCsGA1UEAxMk NzcxMWY3M2QtMDAwOS00Zjg4LWE5YWMtZTE1NWQxZjUxZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDBiP2xFojfjbH0ffeOYQK/vibAYKskvho38 XMwH+KZYyz0IB560vBEMHo2nz071ykPZMKnnhXLEZ19U97eJwsn0SNqFxUsC0/72 Myfd2K/zpOXnuazN6QLAgVemUo+3slbezU+pFCpwnR0RkdzYols7rW5r3C2C3tl/ kbWedPN/IddFwsczEhFvznNDunIKGg0LkG8Xdan9++9LqdtaHOIaSMfjTKPwjnyW 1osS+fJD7+UmUrNzey7c9IJzzIwBL8FPbAm2wv2wAaB81/0SOcGED6I+wS71kYd8 tGzcOt4sCch1fS6inf3Be4E4I6TuUHC5EGqIvL4lg1d4ER0lsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKGpYJdwI6Weqsf5nPyv6xSAluhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iMTQy MGMwYy03ZTYxLTRiMDYtODc0NS0zMzc2Nzk4MGI4M2IvNDVhNjc1MmMtNzAzMi0z MjI3LWJiY2MtN2VjMWJlMmM5NThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYjE0MjBjMGMtN2U2MS00YjA2LTg3 NDUtMzM3Njc5ODBiODNiL2IxNDIwYzBjLTdlNjEtNGIwNi04NzQ1LTMzNzY3OTgw YjgzYi5jcmwwHwYDVR0jBBgwFoAUI9BiLQ6uhmrjxpJqKgdqrnR/GiAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iMTQyMGMwYy03ZTYxLTRiMDYtODc0NS0zMzc2 Nzk4MGI4M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FN0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExOQrIj3h8L+C1cqQy1ke1yLqtWgFKNF+LnlYYIEykRgUj32kyUuF1y LMBsAZjX1jcmDOA6icY9ONirwqdqRz3XZuGGUexbOnD1PW3dDakd9Bt1LioptCQs u/neFT5EG1cIoPNVbfWtqHQZKn9YpEkaQbIXh7dVrgiDJHKu3lCxXfiqMeI6utfF pTxmWxek6kFnyFgYHDZhHqRva1dn/VOZsVGpPvYOTBpyNnnF/s9eEi7cRT4rPLVU Xb9sT40itiOy6kHnjkXO6XhcTZxsuvTmvN7+hd4BVbI5LfcN115ZeAMjBMvcTRRQ nVMGLQVUABx8q5qceP/FDysOlZdzTXc= -----END CERTIFICATE-----Generated at Sat Oct 24 07:10:11 2026 by rpki-client