$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fcb8aa8-9ca5-3a3c-935b-e1bddfd706b1.roa File: 8fcb8aa8-9ca5-3a3c-935b-e1bddfd706b1.roa (raw, json) Hash identifier: kIPFHkOIS1sLzMOFDtMq2S8/0aTxyt9KRrbOwcNGho8= Subject key identifier: 17:2B:F5:AB:F9:91:48:A3:63:C6:5F:F8:94:4D:1B:2F:A5:B3:CB:07 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ECBD1C633B42F6047C4194AC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fcb8aa8-9ca5-3a3c-935b-e1bddfd706b1.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 396605 IP address blocks: 198.17.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:c6:33:b4:2f:60:47:c4:19:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=3f2658d3-58b7-40ac-b279-22577bda2559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:78:b5:a2:a6:67:59:aa:53:0d:76:5d:1e:bc: 54:7b:c5:30:d7:f9:38:37:1f:e1:df:9b:47:ee:50: 0c:b3:8d:a0:a7:c4:62:f9:f8:f4:38:f9:ab:33:bd: 54:59:5e:ac:aa:86:7f:81:92:5c:b2:3b:ea:49:fb: f0:e8:d2:d3:b1:e9:02:5d:ea:02:b2:e5:a5:37:3e: 9d:f4:99:f1:c3:d6:20:ac:a3:3e:80:e4:c3:10:08: e9:8f:96:a5:fe:d9:e9:d9:56:20:78:42:6b:7d:22: 93:01:32:c7:9e:7c:3b:d3:7a:83:73:46:30:a9:0d: 2f:fc:b0:2e:e8:2f:31:a8:b3:4d:04:31:6d:0d:fc: 52:a5:54:15:ff:e3:1c:d0:ca:1e:e1:36:57:36:14: 5f:8c:3c:d2:15:75:49:03:17:9f:42:f2:b8:fe:ce: b2:2f:ac:cf:85:68:6d:4d:78:7a:15:b0:2f:9e:0c: e3:a3:9a:c2:c1:61:27:13:8f:00:31:6a:d1:44:c6: b6:60:f1:3c:a5:0a:3a:88:fe:33:62:46:c7:a8:71: 4a:de:64:e0:b9:77:27:3e:4c:dc:f2:be:94:f8:03: 22:85:04:ec:95:3f:f5:73:86:7b:da:47:d1:9c:43: 00:d4:cf:c3:68:46:e6:05:fc:97:2c:24:fb:d8:da: d3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2B:F5:AB:F9:91:48:A3:63:C6:5F:F8:94:4D:1B:2F:A5:B3:CB:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fcb8aa8-9ca5-3a3c-935b-e1bddfd706b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:3a:27:44:45:92:14:fb:6d:69:4d:92:05:80:5d:ad:d9:e8: 30:b8:20:67:5f:0d:9b:57:e5:99:42:97:23:a2:1f:9f:eb:86: 92:00:20:26:1b:17:58:f2:cd:28:44:73:c3:f6:79:91:73:7d: ae:e3:5d:e8:9b:b1:20:05:2f:f9:c3:69:e5:37:17:ec:33:92: da:fc:52:6c:f0:40:89:f2:13:10:e2:3d:e0:20:79:ef:ae:11: 1a:65:e2:a3:ef:70:7a:2c:b5:2c:23:ea:35:22:41:41:98:e1: b3:4f:05:53:d6:63:6d:7f:59:37:af:e1:ef:20:94:39:98:99: b3:bf:cf:71:27:05:84:07:c3:23:8c:27:9f:ad:53:8d:5b:ad: 31:2a:b0:5f:fc:97:d5:93:0e:4c:26:2d:cc:fa:4d:95:08:3e: e8:0d:35:2d:9d:92:f3:b6:23:3b:4e:27:d7:ba:95:d4:a5:7e: 22:84:a4:d8:a0:a2:86:aa:4f:09:8c:29:9d:77:6e:0d:a7:8f: b2:91:eb:99:54:75:f5:76:01:74:0b:9d:72:5d:85:3d:ca:37: 47:09:b4:46:45:cb:be:70:7e:37:49:94:e9:1a:9a:c7:df:0b: 95:3c:e8:65:a7:92:ec:83:b7:62:0f:f1:87:51:5a:d7:cf:21: e7:07:9b:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0cYztC9gR8QZSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk M2YyNjU4ZDMtNThiNy00MGFjLWIyNzktMjI1NzdiZGEyNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkni1oqZnWapTDXZdHrxUe8Uw1/k4Nx/h35tH 7lAMs42gp8Ri+fj0OPmrM71UWV6sqoZ/gZJcsjvqSfvw6NLTsekCXeoCsuWlNz6d 9Jnxw9YgrKM+gOTDEAjpj5al/tnp2VYgeEJrfSKTATLHnnw703qDc0YwqQ0v/LAu 6C8xqLNNBDFtDfxSpVQV/+Mc0Moe4TZXNhRfjDzSFXVJAxefQvK4/s6yL6zPhWht TXh6FbAvngzjo5rCwWEnE48AMWrRRMa2YPE8pQo6iP4zYkbHqHFK3mTguXcnPkzc 8r6U+AMihQTslT/1c4Z72kfRnEMA1M/DaEbmBfyXLCT72NrTgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcr9av5kUijY8Zf+JRNGy+ls8sHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGZjYjhhYTgtOWNhNS0z YTNjLTkzNWItZTFiZGRmZDcwNmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALM6J0RFkhT7bWlNkgWAXa3Z6DC4IGdfDZtX5ZlClyOiH5/rhpIAICYb F1jyzShEc8P2eZFzfa7jXeibsSAFL/nDaeU3F+wzktr8UmzwQInyExDiPeAgee+u ERpl4qPvcHostSwj6jUiQUGY4bNPBVPWY21/WTev4e8glDmYmbO/z3EnBYQHwyOM J5+tU41brTEqsF/8l9WTDkwmLcz6TZUIPugNNS2dkvO2IztOJ9e6ldSlfiKEpNig ooaqTwmMKZ13bg2nj7KR65lUdfV2AXQLnXJdhT3KN0cJtEZFy75wfjdJlOkamsff C5U86GWnkuyDt2IP8YdRWtfPIecHm5Y= -----END CERTIFICATE-----Generated at Wed Aug 19 18:42:50 2026 by rpki-client