$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cf6255c1-6799-425a-9934-b8377d695f10/a798d5b6-6314-3058-b6c3-34b59a36b010.roa File: a798d5b6-6314-3058-b6c3-34b59a36b010.roa (raw, json) Hash identifier: I7qvynpk0fQ4UF+Poxnc01oVmOhH1whVFl41GP7gNt8= Subject key identifier: 10:A1:89:EF:0C:E4:A4:DC:F1:7C:1B:40:87:FB:8B:42:87:7B:5A:99 Certificate issuer: /CN=cf6255c1-6799-425a-9934-b8377d695f10 Certificate serial: 010D0C9F4328584F490A7CF1BC9A983C5F245DB0 Authority key identifier: 2E:39:83:39:CB:6D:68:A1:6D:BC:FB:05:81:12:E3:62:DF:8B:C4:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cf6255c1-6799-425a-9934-b8377d695f10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cf6255c1-6799-425a-9934-b8377d695f10/a798d5b6-6314-3058-b6c3-34b59a36b010.roa Signing time: Thu 24 Sep 2026 21:30:35 +0000 ROA not before: Thu 24 Sep 2026 21:30:35 +0000 ROA not after: Wed 23 Dec 2026 22:17:25 +0000 asID: 18793 IP address blocks: 208.74.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cf6255c1-6799-425a-9934-b8377d695f10/cf6255c1-6799-425a-9934-b8377d695f10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cf6255c1-6799-425a-9934-b8377d695f10/cf6255c1-6799-425a-9934-b8377d695f10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cf6255c1-6799-425a-9934-b8377d695f10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:0a:7c:f1:bc:9a:98:3c:5f:24:5d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf6255c1-6799-425a-9934-b8377d695f10 Validity Not Before: Sep 24 21:30:35 2026 GMT Not After : Dec 23 22:17:25 2026 GMT Subject: CN=657c2961-27db-4a5f-abcc-7b30af488723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:24:50:42:65:9b:82:e0:8e:cf:e2:cd:17:b5: 5e:58:3d:7d:d6:08:bf:e1:33:6f:2f:f9:c6:76:9b: 69:2d:46:8c:56:b9:f8:22:81:d8:70:50:02:00:9e: 8f:30:a9:00:5c:63:be:0e:c5:29:15:e9:e4:bd:a3: 63:8c:bb:75:0a:4c:51:55:f3:08:c2:14:22:54:35: c6:c2:f2:ab:0f:8c:d0:1a:58:a3:c5:14:d3:f3:c1: 3d:22:4d:a0:d0:78:4c:b7:d1:40:f6:01:ec:c3:19: 07:ae:df:38:8f:45:e2:ce:4c:05:e5:75:03:4b:74: a0:09:ea:14:07:e2:10:07:bc:5a:c4:73:75:51:83: 43:39:2f:73:e5:c6:7e:e9:be:f0:c4:74:3c:bb:63: 20:a1:1d:55:9b:45:b6:ef:04:31:34:eb:46:3e:95: 29:25:32:2d:90:f1:19:16:eb:96:4b:c0:03:67:ec: 2c:04:55:23:99:65:22:5d:60:0f:76:6f:48:ec:6d: 82:b8:7b:9e:93:cb:c0:ed:36:8f:fe:59:a5:3f:b9: cd:9b:b5:7d:fe:8c:ff:9f:71:3c:76:7c:ee:d2:89: 3c:0a:1e:1e:62:63:95:f0:3b:e7:76:e4:dc:0f:ce: 7a:f8:e9:d5:78:f6:7d:ef:5d:85:dc:dd:03:90:c8: 72:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A1:89:EF:0C:E4:A4:DC:F1:7C:1B:40:87:FB:8B:42:87:7B:5A:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cf6255c1-6799-425a-9934-b8377d695f10/a798d5b6-6314-3058-b6c3-34b59a36b010.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cf6255c1-6799-425a-9934-b8377d695f10/cf6255c1-6799-425a-9934-b8377d695f10.crl X509v3 Authority Key Identifier: keyid:2E:39:83:39:CB:6D:68:A1:6D:BC:FB:05:81:12:E3:62:DF:8B:C4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/cf6255c1-6799-425a-9934-b8377d695f10.cer sbgp-ipAddrBlock: critical IPv4: 208.74.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:7f:82:01:cb:8d:15:d7:a7:51:2c:4b:a1:2d:3b:f9:39:9c: 27:7f:07:68:e5:ac:fa:ae:d9:0a:00:6b:9b:53:7e:9f:58:19: b8:e3:84:e4:25:a8:4d:e9:a5:f6:7a:f8:9a:27:68:0c:42:a2: 37:f8:00:b8:5b:3a:24:14:b3:f5:43:74:4e:2d:59:1f:d0:11: 73:0e:8f:22:3a:c0:0d:be:2a:00:73:d7:aa:15:6a:72:e2:92: 81:5e:3c:44:07:26:de:27:85:c2:4a:a7:a9:59:bc:66:fb:00: 84:f2:8e:5a:0b:a3:ed:df:67:00:74:e8:00:6e:ce:5e:8e:bc: 39:b1:0f:dd:75:c6:df:dc:cc:21:fd:09:b8:68:85:3f:c4:47: 70:c4:4a:c2:42:19:88:25:7a:09:22:89:c3:42:ed:83:81:24: cb:7d:bc:ca:86:aa:39:de:16:c1:da:3a:8d:63:43:05:5e:a6: b7:01:73:03:59:d2:ca:6e:6a:d4:45:3f:fb:53:3a:b2:d6:0f: 4d:0b:0e:c6:85:b4:17:56:16:33:87:b8:db:8d:40:a0:7e:47: c9:6a:b8:45:33:ae:a4:96:dd:bc:cf:62:38:e3:0a:5f:43:95: 31:ad:25:99:ee:41:2c:e9:85:d1:e0:7e:7a:8a:d6:4b:37:9d: 7e:f3:fb:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JCnzxvJqYPF8kXbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y2MjU1YzEtNjc5OS00MjVhLTk5MzQtYjgzNzdkNjk1 ZjEwMB4XDTI2MDkyNDIxMzAzNVoXDTI2MTIyMzIyMTcyNVowLzEtMCsGA1UEAxMk NjU3YzI5NjEtMjdkYi00YTVmLWFiY2MtN2IzMGFmNDg4NzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiRQQmWbguCOz+LNF7VeWD191gi/4TNvL/nG dptpLUaMVrn4IoHYcFACAJ6PMKkAXGO+DsUpFenkvaNjjLt1CkxRVfMIwhQiVDXG wvKrD4zQGlijxRTT88E9Ik2g0HhMt9FA9gHswxkHrt84j0XizkwF5XUDS3SgCeoU B+IQB7xaxHN1UYNDOS9z5cZ+6b7wxHQ8u2MgoR1Vm0W27wQxNOtGPpUpJTItkPEZ FuuWS8ADZ+wsBFUjmWUiXWAPdm9I7G2CuHuek8vA7TaP/lmlP7nNm7V9/oz/n3E8 dnzu0ok8Ch4eYmOV8DvnduTcD856+OnVePZ9712F3N0DkMhyZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBChie8M5KTc8XwbQIf7i0KHe1qZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9jZjYy NTVjMS02Nzk5LTQyNWEtOTkzNC1iODM3N2Q2OTVmMTAvYTc5OGQ1YjYtNjMxNC0z MDU4LWI2YzMtMzRiNTlhMzZiMDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvY2Y2MjU1YzEtNjc5OS00MjVhLTk5 MzQtYjgzNzdkNjk1ZjEwL2NmNjI1NWMxLTY3OTktNDI1YS05OTM0LWI4Mzc3ZDY5 NWYxMC5jcmwwHwYDVR0jBBgwFoAULjmDOcttaKFtvPsFgRLjYt+LxDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9jZjYyNTVjMS02Nzk5LTQyNWEtOTkzNC1iODM3 N2Q2OTVmMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EpoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd/ggHLjRXXp1EsS6EtO/k5nCd/B2jlrPqu2QoAa5tTfp9YGbjjhOQl qE3ppfZ6+JonaAxCojf4ALhbOiQUs/VDdE4tWR/QEXMOjyI6wA2+KgBz16oVanLi koFePEQHJt4nhcJKp6lZvGb7AITyjloLo+3fZwB06ABuzl6OvDmxD911xt/czCH9 CbhohT/ER3DESsJCGYglegkiicNC7YOBJMt9vMqGqjneFsHaOo1jQwVeprcBcwNZ 0spuatRFP/tTOrLWD00LDsaFtBdWFjOHuNuNQKB+R8lquEUzrqSW3bzPYjjjCl9D lTGtJZnuQSzphdHgfnqK1ks3nX7z+8w= -----END CERTIFICATE-----Generated at Wed Nov 4 04:16:22 2026 by rpki-client