$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c83879d1-eba1-3fa6-9b8f-d0478990bfaf.roa File: c83879d1-eba1-3fa6-9b8f-d0478990bfaf.roa (raw, json) Hash identifier: 8rhEuAT3zybDW8EHGfoI8hPRi3QVd4E9ZYx80O22wqU= Subject key identifier: 60:5C:8E:F3:D8:9D:21:F0:60:E8:81:E4:3C:1F:8E:16:AE:D0:5E:8F Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584F9BCE01F0686634AAFA398380 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c83879d1-eba1-3fa6-9b8f-d0478990bfaf.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 3561 IP address blocks: 208.138.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:ce:01:f0:68:66:34:aa:fa:39:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=ba04a921-3a38-4c68-b8d1-479f9966ac76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:5d:82:a7:6b:26:71:22:00:75:85:11:18: 9f:ae:42:65:9d:af:00:26:e1:e6:ac:38:f2:a4:d3: 38:54:f3:ea:56:6f:5b:8c:be:4c:cb:8c:5f:da:14: 9a:64:e6:74:6d:66:48:ee:11:9f:87:26:49:1b:fa: 88:15:2b:6e:14:c3:cf:8d:3e:08:65:eb:ce:30:df: 72:d8:a5:bc:4a:4c:65:02:88:4a:2e:a7:de:4d:ce: 10:18:c8:4c:89:ee:3e:d4:bd:0b:89:2d:25:c3:eb: 79:23:9a:34:de:73:bf:60:50:bf:68:2c:e5:9a:e1: 51:83:ec:2a:45:5d:33:de:3f:47:cf:83:60:a6:1f: 3b:cd:4a:21:f3:75:73:b3:15:a6:6a:6c:69:81:37: 20:f2:9f:a5:fe:bc:86:99:64:15:e2:06:d0:70:93: 0f:da:96:b1:0f:c2:7e:44:76:59:1f:c0:59:25:20: e5:18:02:36:b4:51:92:79:c2:c6:ba:53:7e:d5:14: 61:65:6c:ca:16:96:19:7c:77:cf:11:ae:d5:28:11: a7:86:9e:bd:3c:8b:a2:7c:36:c3:e1:54:4d:2e:ec: f3:8e:f4:81:72:2d:9f:2d:82:b4:17:fb:d8:05:bb: 9d:78:75:c3:f6:bb:10:be:b2:37:67:bc:7b:d7:bb: 5f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5C:8E:F3:D8:9D:21:F0:60:E8:81:E4:3C:1F:8E:16:AE:D0:5E:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c83879d1-eba1-3fa6-9b8f-d0478990bfaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.138.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:35:e6:b9:f6:eb:f3:be:64:8c:5a:3d:5c:27:51:f6:77:f0: 7b:29:9a:b2:09:b9:63:fd:2b:38:b5:67:d2:3f:ac:f0:88:e3: 45:33:a3:97:9f:43:5e:3c:55:e0:2b:ec:1a:e2:1d:e8:67:71: 51:5c:0d:5e:d0:f1:83:98:fa:5b:0a:1b:f5:ba:08:63:e5:66: 4c:93:33:70:a0:f9:6f:c0:69:44:1f:cd:e1:98:b5:2d:b7:29: f4:ad:bc:50:94:83:e5:6a:8c:c2:e1:c2:e8:2d:13:40:76:6d: 0c:53:1d:6e:50:c6:5c:90:56:00:1b:43:a3:35:a2:8d:e7:2e: 85:c2:28:5a:8a:f7:e7:99:37:ab:ff:6b:87:39:06:e7:f8:16: 5a:4c:07:b2:42:e8:2e:e7:9f:ce:cc:aa:39:a9:e1:84:5b:1c: b3:bb:11:2f:4a:20:74:41:c2:03:f8:ff:7b:1b:75:9b:00:54: d0:89:32:3a:81:eb:a8:08:ca:54:b6:77:93:1b:68:1b:d8:88: 83:fa:52:6b:11:6b:54:40:97:aa:82:48:aa:21:23:3f:63:60: 26:95:9b:1b:e5:5b:82:ba:6a:c5:38:73:07:b5:98:ee:4b:30: eb:fd:ed:7b:dd:a5:a1:2d:06:f3:9b:a9:ef:e8:0f:ea:46:37: 7b:19:21:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzgHwaGY0qvo5g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk YmEwNGE5MjEtM2EzOC00YzY4LWI4ZDEtNDc5Zjk5NjZhYzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogBdgqdrJnEiAHWFERifrkJlna8AJuHmrDjy pNM4VPPqVm9bjL5My4xf2hSaZOZ0bWZI7hGfhyZJG/qIFStuFMPPjT4IZevOMN9y 2KW8SkxlAohKLqfeTc4QGMhMie4+1L0LiS0lw+t5I5o03nO/YFC/aCzlmuFRg+wq RV0z3j9Hz4Ngph87zUoh83VzsxWmamxpgTcg8p+l/ryGmWQV4gbQcJMP2paxD8J+ RHZZH8BZJSDlGAI2tFGSecLGulN+1RRhZWzKFpYZfHfPEa7VKBGnhp69PIuifDbD 4VRNLuzzjvSBci2fLYK0F/vYBbudeHXD9rsQvrI3Z7x717tfpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBcjvPYnSHwYOiB5Dwfjhau0F6PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYzgzODc5ZDEtZWJhMS0z ZmE2LTliOGYtZDA0Nzg5OTBiZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0IoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ15rn26/O+ZIxaPVwnUfZ38HspmrIJuWP9Kzi1Z9I/rPCI40Uzo5ef Q148VeAr7BriHehncVFcDV7Q8YOY+lsKG/W6CGPlZkyTM3Cg+W/AaUQfzeGYtS23 KfStvFCUg+VqjMLhwugtE0B2bQxTHW5QxlyQVgAbQ6M1oo3nLoXCKFqK9+eZN6v/ a4c5Buf4FlpMB7JC6C7nn87Mqjmp4YRbHLO7ES9KIHRBwgP4/3sbdZsAVNCJMjqB 66gIylS2d5MbaBvYiIP6UmsRa1RAl6qCSKohIz9jYCaVmxvlW4K6asU4cwe1mO5L MOv97XvdpaEtBvObqe/oD+pGN3sZId0= -----END CERTIFICATE-----Generated at Wed Oct 28 14:20:26 2026 by rpki-client