$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e1a24306-5aad-3b58-aa6a-8501df64a677.roa File: e1a24306-5aad-3b58-aa6a-8501df64a677.roa (raw, json) Hash identifier: bC89703bLaXNUp1DyQYdxBCE4tdHWSVT5xec2sgiGqU= Subject key identifier: E9:F0:74:0B:EA:2E:54:80:DF:50:13:E0:B0:5B:CB:52:09:DB:46:54 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584FA1633A107A9D6E035EB8C800 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e1a24306-5aad-3b58-aa6a-8501df64a677.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 3561 IP address blocks: 208.138.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:3a:10:7a:9d:6e:03:5e:b8:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=71f86c38-aa80-4f25-b6ae-f5ac5577b141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f5:77:4a:85:38:a0:87:7e:c8:66:6a:7a:bb: 8a:42:1d:e1:31:9f:c0:1b:27:e6:e1:7e:b7:61:af: 5b:19:40:8c:07:db:cd:e3:4d:e2:66:da:0c:a7:69: 6f:de:b4:51:72:58:6b:0d:4c:f4:8a:75:cd:d4:a0: bf:14:b1:01:a0:34:c3:25:f2:18:fc:ba:75:4c:83: 08:49:af:d2:a9:3a:dd:0c:04:8d:06:e7:bf:db:86: 7f:06:e7:d4:aa:9b:1e:ce:4e:1b:ed:1e:a9:85:10: 93:4f:39:ce:1d:5a:2c:58:eb:94:d3:a8:a4:ed:30: b1:46:a4:33:20:54:be:17:e1:00:39:39:c1:6a:aa: 8e:cc:08:ce:db:2d:46:29:a1:f9:05:7c:8d:dc:e4: 5e:b3:bf:fb:48:a4:a1:d6:4e:97:1b:bd:ed:57:c1: 8a:2d:5c:85:05:0c:45:47:c2:ad:32:d6:57:5f:83: 28:15:63:7c:a8:24:39:bf:6d:15:c4:f3:44:dc:43: 37:00:39:31:1d:f2:b4:84:b1:87:df:3c:42:70:a4: 34:05:d9:3b:b1:aa:22:1f:91:60:14:ea:6f:92:5d: ce:07:39:77:92:ad:c1:a1:45:c9:0f:07:e1:51:9b: c4:4c:64:ab:ec:aa:01:13:ad:c9:87:09:7c:6d:d0: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F0:74:0B:EA:2E:54:80:DF:50:13:E0:B0:5B:CB:52:09:DB:46:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e1a24306-5aad-3b58-aa6a-8501df64a677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.138.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:f3:ff:01:1a:d9:55:0b:51:53:e0:5e:86:90:32:60:b5:0d: b7:39:b2:f0:dd:de:2b:6f:87:b2:d1:46:fe:29:95:f2:ec:de: 60:ee:42:17:54:c5:82:2c:1b:a2:fd:b7:85:ce:03:4e:a8:0c: ba:de:bd:0d:7f:32:ba:90:e9:2e:1f:ca:19:af:98:b7:89:09: 87:e5:7c:dd:18:e8:8e:f1:f4:89:db:d9:eb:a4:62:6d:f1:75: fa:9d:4e:4c:0d:74:8e:04:f0:d6:92:27:dc:6a:0a:bb:0a:4a: e9:d6:ab:51:a3:a6:bb:61:2b:28:cf:97:2f:2f:b9:b8:57:6c: d4:ef:cd:d2:e5:2b:3d:4e:34:0e:2b:32:a8:48:4f:6d:55:c1: 37:d1:2d:3d:c5:f9:53:05:86:95:03:65:a0:3e:8f:1d:c5:39: a0:5c:5d:b2:55:8f:93:33:34:37:bd:42:e6:54:63:ba:44:86: 3f:6d:ce:6f:3d:f2:6d:c3:e8:c7:2e:82:a2:68:73:5b:96:02: 45:14:3b:e8:fd:f6:62:9f:e9:61:f7:14:eb:b4:46:8b:c7:dd: bb:c9:71:03:1b:86:ab:65:dd:69:71:bb:ea:6f:84:7f:49:22: 5b:1f:b7:48:94:b6:70:b7:ea:15:14:d0:20:86:de:6f:fa:0f: 11:78:cf:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYzoQep1uA164yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk NzFmODZjMzgtYWE4MC00ZjI1LWI2YWUtZjVhYzU1NzdiMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvV3SoU4oId+yGZqeruKQh3hMZ/AGyfm4X63 Ya9bGUCMB9vN403iZtoMp2lv3rRRclhrDUz0inXN1KC/FLEBoDTDJfIY/Lp1TIMI Sa/SqTrdDASNBue/24Z/BufUqpsezk4b7R6phRCTTznOHVosWOuU06ik7TCxRqQz IFS+F+EAOTnBaqqOzAjO2y1GKaH5BXyN3ORes7/7SKSh1k6XG73tV8GKLVyFBQxF R8KtMtZXX4MoFWN8qCQ5v20VxPNE3EM3ADkxHfK0hLGH3zxCcKQ0Bdk7saoiH5Fg FOpvkl3OBzl3kq3BoUXJDwfhUZvETGSr7KoBE63Jhwl8bdD/+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnwdAvqLlSA31AT4LBby1IJ20ZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZTFhMjQzMDYtNWFhZC0z YjU4LWFhNmEtODUwMWRmNjRhNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0IqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3z/wEa2VULUVPgXoaQMmC1Dbc5svDd3itvh7LRRv4plfLs3mDuQhdU xYIsG6L9t4XOA06oDLrevQ1/MrqQ6S4fyhmvmLeJCYflfN0Y6I7x9Inb2eukYm3x dfqdTkwNdI4E8NaSJ9xqCrsKSunWq1GjprthKyjPly8vubhXbNTvzdLlKz1ONA4r MqhIT21VwTfRLT3F+VMFhpUDZaA+jx3FOaBcXbJVj5MzNDe9QuZUY7pEhj9tzm89 8m3D6McugqJoc1uWAkUUO+j99mKf6WH3FOu0RovH3bvJcQMbhqtl3Wlxu+pvhH9J Ilsft0iUtnC36hUU0CCG3m/6DxF4z30= -----END CERTIFICATE-----Generated at Wed Oct 28 23:25:32 2026 by rpki-client