$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f9a966a1-7be2-40d9-b735-b385a2b37e37/78124eb0-171b-3487-8080-819def394e94.roa File: 78124eb0-171b-3487-8080-819def394e94.roa (raw, json) Hash identifier: Q1CqQuVjf5JP9Mujs+WLi5vbOl3ndCbVLrfWE8I6Xhk= Subject key identifier: 49:8C:B8:24:09:DA:B9:3E:FE:C6:6B:D6:9A:F7:60:6F:DA:82:51:B7 Certificate issuer: /CN=f9a966a1-7be2-40d9-b735-b385a2b37e37 Certificate serial: 010D0C9F4328584FA4AD224A498F30CC1DBC0D80 Authority key identifier: 16:EC:6C:42:66:F0:7D:D7:C4:3D:E3:5A:3E:9C:DF:AD:6E:31:61:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f9a966a1-7be2-40d9-b735-b385a2b37e37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f9a966a1-7be2-40d9-b735-b385a2b37e37/78124eb0-171b-3487-8080-819def394e94.roa Signing time: Tue 27 Oct 2026 17:16:52 +0000 ROA not before: Tue 27 Oct 2026 17:16:52 +0000 ROA not after: Mon 25 Jan 2027 18:16:52 +0000 asID: 46263 IP address blocks: 208.94.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f9a966a1-7be2-40d9-b735-b385a2b37e37/f9a966a1-7be2-40d9-b735-b385a2b37e37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f9a966a1-7be2-40d9-b735-b385a2b37e37/f9a966a1-7be2-40d9-b735-b385a2b37e37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f9a966a1-7be2-40d9-b735-b385a2b37e37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a4:ad:22:4a:49:8f:30:cc:1d:bc:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9a966a1-7be2-40d9-b735-b385a2b37e37 Validity Not Before: Oct 27 17:16:52 2026 GMT Not After : Jan 25 18:16:52 2027 GMT Subject: CN=8c20bb0a-6ad7-4b0a-860b-e58597382aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:9b:ea:b0:89:90:fd:eb:59:5d:2a:15:28: e2:75:97:ea:e6:73:c7:f9:26:20:9a:3a:ce:45:94: 10:e7:33:48:43:01:f3:e4:fb:8e:c7:a7:51:e4:2b: 01:8f:64:23:fe:f6:5f:64:c1:18:8c:43:0c:8a:20: 0a:b4:24:01:72:30:23:34:37:fd:ee:58:46:a8:86: 0c:19:35:52:ff:94:2f:a4:b1:ea:6a:d1:e8:b9:b8: 61:80:c1:bf:0a:d7:76:16:1e:6d:76:b4:9f:ca:5d: 94:ab:b9:a8:4b:92:0a:ef:87:ba:6f:ba:97:c2:6d: d4:d2:a8:36:c8:22:03:cc:43:d4:45:bf:39:c8:6d: 0e:87:f3:b1:69:9d:49:9b:8e:8c:ab:3b:b6:96:c2: e7:6d:74:65:0c:9e:a2:cb:6c:d1:e3:28:4a:92:d5: d1:1f:c7:c4:6c:e2:a9:37:d4:9b:a5:a0:6d:e3:9e: c5:e4:4b:59:f1:ec:e4:42:35:6b:c6:20:2b:94:39: b7:9e:64:98:9b:e8:75:ff:0e:c9:3e:4a:5a:cf:22: 23:3e:80:f3:a2:48:f2:a4:58:40:65:0a:d6:a1:a5: 57:07:4b:32:62:25:09:98:ca:f2:01:a8:b6:21:80: 51:80:b0:b5:ba:27:06:f1:d3:4e:1e:ab:ef:da:df: 42:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8C:B8:24:09:DA:B9:3E:FE:C6:6B:D6:9A:F7:60:6F:DA:82:51:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f9a966a1-7be2-40d9-b735-b385a2b37e37/78124eb0-171b-3487-8080-819def394e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f9a966a1-7be2-40d9-b735-b385a2b37e37/f9a966a1-7be2-40d9-b735-b385a2b37e37.crl X509v3 Authority Key Identifier: keyid:16:EC:6C:42:66:F0:7D:D7:C4:3D:E3:5A:3E:9C:DF:AD:6E:31:61:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f9a966a1-7be2-40d9-b735-b385a2b37e37.cer sbgp-ipAddrBlock: critical IPv4: 208.94.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4f:86:92:01:cd:76:8c:2b:04:c8:10:13:a1:4b:89:a2:c9: a3:41:4b:d9:b9:1c:89:b2:fe:4d:44:8e:48:b3:0d:ae:2d:58: 33:8c:a1:26:77:22:5a:74:9a:3b:38:9b:26:7c:db:ce:c1:c3: e4:e4:71:8d:be:be:9c:da:63:2c:7f:29:1f:fd:e4:ba:32:6f: b3:84:ef:8a:08:aa:c6:b5:b2:99:2d:da:38:86:a9:67:67:50: d2:a0:4f:27:84:23:0f:a0:bc:f9:60:b7:22:a5:b3:e8:75:d1: a0:10:75:3c:43:93:93:f1:56:79:71:b8:29:13:c1:a7:f4:b3: 65:70:fb:31:9f:67:61:f8:11:0c:23:c4:2e:69:e3:e7:d6:51: 3d:f8:9e:4a:4b:ae:57:a6:95:cc:3f:a8:bd:46:c6:24:b2:95: 6a:14:9b:a9:7b:f5:48:38:47:55:98:75:e8:45:78:db:52:9c: e0:4e:95:be:4c:81:0d:fe:0b:ff:fa:a2:8a:b0:e8:62:53:84: e7:35:17:44:70:ef:e8:e6:85:02:e1:9b:e8:6a:a3:64:c4:b8: f6:75:2c:d2:54:55:ad:26:aa:3b:89:8d:b8:f3:d4:be:3b:c2: fa:10:ff:dd:41:ef:58:0c:3b:eb:09:90:d7:19:cd:da:a7:a7: 68:30:d4:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+krSJKSY8wzB28DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjlhOTY2YTEtN2JlMi00MGQ5LWI3MzUtYjM4NWEyYjM3 ZTM3MB4XDTI2MTAyNzE3MTY1MloXDTI3MDEyNTE4MTY1MlowLzEtMCsGA1UEAxMk OGMyMGJiMGEtNmFkNy00YjBhLTg2MGItZTU4NTk3MzgyYWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEWb6rCJkP3rWV0qFSjidZfq5nPH+SYgmjrO RZQQ5zNIQwHz5PuOx6dR5CsBj2Qj/vZfZMEYjEMMiiAKtCQBcjAjNDf97lhGqIYM GTVS/5QvpLHqatHoubhhgMG/Ctd2Fh5tdrSfyl2Uq7moS5IK74e6b7qXwm3U0qg2 yCIDzEPURb85yG0Oh/OxaZ1Jm46Mqzu2lsLnbXRlDJ6iy2zR4yhKktXRH8fEbOKp N9SbpaBt457F5EtZ8ezkQjVrxiArlDm3nmSYm+h1/w7JPkpazyIjPoDzokjypFhA ZQrWoaVXB0syYiUJmMryAai2IYBRgLC1uicG8dNOHqvv2t9CQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmMuCQJ2rk+/sZr1pr3YG/aglG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9mOWE5 NjZhMS03YmUyLTQwZDktYjczNS1iMzg1YTJiMzdlMzcvNzgxMjRlYjAtMTcxYi0z NDg3LTgwODAtODE5ZGVmMzk0ZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZjlhOTY2YTEtN2JlMi00MGQ5LWI3 MzUtYjM4NWEyYjM3ZTM3L2Y5YTk2NmExLTdiZTItNDBkOS1iNzM1LWIzODVhMmIz N2UzNy5jcmwwHwYDVR0jBBgwFoAUFuxsQmbwfdfEPeNaPpzfrW4xYRwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9mOWE5NjZhMS03YmUyLTQwZDktYjczNS1iMzg1 YTJiMzdlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNPhpIBzXaMKwTIEBOhS4miyaNBS9m5HImy/k1EjkizDa4tWDOMoSZ3 Ilp0mjs4myZ8287Bw+TkcY2+vpzaYyx/KR/95Loyb7OE74oIqsa1spkt2jiGqWdn UNKgTyeEIw+gvPlgtyKls+h10aAQdTxDk5PxVnlxuCkTwaf0s2Vw+zGfZ2H4EQwj xC5p4+fWUT34nkpLrlemlcw/qL1GxiSylWoUm6l79Ug4R1WYdehFeNtSnOBOlb5M gQ3+C//6ooqw6GJThOc1F0Rw7+jmhQLhm+hqo2TEuPZ1LNJUVa0mqjuJjbjz1L47 wvoQ/91B71gMO+sJkNcZzdqnp2gw1MU= -----END CERTIFICATE-----Generated at Sat Oct 31 05:41:26 2026 by rpki-client