$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279/2683ed1f-7062-3837-989a-88297c2e4ce3.roa File: 2683ed1f-7062-3837-989a-88297c2e4ce3.roa (raw, json) Hash identifier: BVrqapCsuXTRrgvgf7nC6IZTooPdJBjTtIDZuZJqf3Y= Subject key identifier: 91:9F:C2:48:2E:2A:C3:93:35:BA:8F:EA:3F:58:CC:F8:6B:07:D0:12 Certificate issuer: /CN=64017149-c00e-41fb-8705-6c098e85b279 Certificate serial: 010D0C9F4328584EEA878D252739840FCB2BE600 Authority key identifier: E1:58:AB:1C:8B:3E:71:F6:A9:AA:2D:F0:7B:CF:B8:C7:2C:75:D6:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279/2683ed1f-7062-3837-989a-88297c2e4ce3.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 36290 IP address blocks: 208.72.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279/64017149-c00e-41fb-8705-6c098e85b279.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279/64017149-c00e-41fb-8705-6c098e85b279.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:8d:25:27:39:84:0f:cb:2b:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64017149-c00e-41fb-8705-6c098e85b279 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=9cf938fe-a5da-4e4b-ace5-93036fefdc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9e:6c:af:39:81:ad:5b:ad:7b:b4:f2:67:bd: 8e:88:5a:2d:2c:3b:0c:98:d8:7b:a0:be:21:db:7d: 13:ae:90:da:32:e1:63:f3:46:50:41:cb:93:41:23: ae:bd:c6:6c:f8:36:80:35:ca:a2:74:be:ef:96:c4: ad:6a:37:5b:d4:0d:2d:37:5f:c4:6b:89:b3:17:09: 88:f7:fe:8f:8b:34:72:c5:02:33:45:26:d6:02:ea: 36:bf:48:3f:d8:02:f6:ee:4c:b0:39:07:40:11:92: 90:0f:1e:16:a0:f8:49:37:ce:d0:86:95:64:c0:c6: b7:65:e8:14:05:c3:fa:ca:a4:84:19:29:6b:1a:fc: c2:4d:9f:58:f8:13:2e:28:c9:8e:0e:d1:23:c8:ea: a9:6b:2f:f9:86:26:8c:f0:4c:9c:d5:68:cc:cc:af: ac:1f:70:28:34:e0:30:f9:0c:79:a0:2c:1b:27:4c: 59:aa:1e:9b:02:4a:d4:e0:15:d9:59:e9:a3:d1:d4: 77:e2:6a:e0:56:98:c5:e2:b7:fd:12:c8:33:9c:91: 25:b1:12:2e:5d:3c:40:30:8d:22:72:3c:ae:fa:96: 53:05:d3:fd:cf:24:b0:4d:57:92:ac:49:16:52:0d: df:38:30:bc:d0:53:6d:ac:d7:b4:58:b0:8b:b1:79: ea:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9F:C2:48:2E:2A:C3:93:35:BA:8F:EA:3F:58:CC:F8:6B:07:D0:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279/2683ed1f-7062-3837-989a-88297c2e4ce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279/64017149-c00e-41fb-8705-6c098e85b279.crl X509v3 Authority Key Identifier: keyid:E1:58:AB:1C:8B:3E:71:F6:A9:AA:2D:F0:7B:CF:B8:C7:2C:75:D6:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64017149-c00e-41fb-8705-6c098e85b279.cer sbgp-ipAddrBlock: critical IPv4: 208.72.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:1a:17:bf:0f:7e:9e:4b:4e:11:0f:17:05:1f:5a:aa:13:e2: 68:bf:69:ed:2a:ec:1d:d9:c6:99:a1:ee:4c:57:a9:68:80:a5: 60:76:6a:3f:f2:2d:61:5b:de:02:a6:74:a3:59:01:25:76:0a: 25:44:d8:5b:23:19:4e:3a:08:ce:3b:c3:64:b8:25:8f:57:a3: 26:6c:40:06:cd:75:ba:36:46:75:be:bf:eb:08:b5:d4:02:12: 3e:9e:0b:31:7f:9e:b0:22:c8:63:b5:0c:c9:e1:64:17:78:b5: f6:39:fe:07:cd:ff:f8:d4:e9:f3:84:9c:c1:c8:48:67:ab:d1: 3c:f6:46:c4:96:18:ff:38:63:40:e5:ba:63:1e:b4:8c:82:c6: 0c:7c:b2:ee:19:22:f1:72:3b:37:9c:71:94:eb:c1:03:90:79: f4:e7:15:84:1b:a3:48:f2:4f:39:c3:d6:07:68:26:a1:9d:f5: 6c:20:63:cd:5e:10:3a:9f:ad:72:ff:3d:26:2e:c9:98:4c:e9: 8a:d6:7d:06:ed:26:47:20:fb:95:f2:6c:05:a6:8a:ea:59:04: 01:2c:80:08:22:c5:3c:a3:4f:f1:7a:e6:be:c6:b8:65:5c:1f: 59:2e:91:ca:14:66:1a:f2:51:33:52:e7:51:64:bb:6c:06:19: 0e:88:ce:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh40lJzmED8sr5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQwMTcxNDktYzAwZS00MWZiLTg3MDUtNmMwOThlODVi Mjc5MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk OWNmOTM4ZmUtYTVkYS00ZTRiLWFjZTUtOTMwMzZmZWZkYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ5srzmBrVute7TyZ72OiFotLDsMmNh7oL4h 230TrpDaMuFj80ZQQcuTQSOuvcZs+DaANcqidL7vlsStajdb1A0tN1/Ea4mzFwmI 9/6PizRyxQIzRSbWAuo2v0g/2AL27kywOQdAEZKQDx4WoPhJN87QhpVkwMa3ZegU BcP6yqSEGSlrGvzCTZ9Y+BMuKMmODtEjyOqpay/5hiaM8Eyc1WjMzK+sH3AoNOAw +Qx5oCwbJ0xZqh6bAkrU4BXZWemj0dR34mrgVpjF4rf9EsgznJElsRIuXTxAMI0i cjyu+pZTBdP9zySwTVeSrEkWUg3fODC80FNtrNe0WLCLsXnqFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGfwkguKsOTNbqP6j9YzPhrB9ASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NDAx NzE0OS1jMDBlLTQxZmItODcwNS02YzA5OGU4NWIyNzkvMjY4M2VkMWYtNzA2Mi0z ODM3LTk4OWEtODgyOTdjMmU0Y2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjQwMTcxNDktYzAwZS00MWZiLTg3 MDUtNmMwOThlODViMjc5LzY0MDE3MTQ5LWMwMGUtNDFmYi04NzA1LTZjMDk4ZTg1 YjI3OS5jcmwwHwYDVR0jBBgwFoAU4VirHIs+cfapqi3we8+4xyx11uswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NDAxNzE0OS1jMDBlLTQxZmItODcwNS02YzA5 OGU4NWIyNzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EjmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8aF78Pfp5LThEPFwUfWqoT4mi/ae0q7B3Zxpmh7kxXqWiApWB2aj/y LWFb3gKmdKNZASV2CiVE2FsjGU46CM47w2S4JY9XoyZsQAbNdbo2RnW+v+sItdQC Ej6eCzF/nrAiyGO1DMnhZBd4tfY5/gfN//jU6fOEnMHISGer0Tz2RsSWGP84Y0Dl umMetIyCxgx8su4ZIvFyOzeccZTrwQOQefTnFYQbo0jyTznD1gdoJqGd9WwgY81e EDqfrXL/PSYuyZhM6YrWfQbtJkcg+5XybAWmiupZBAEsgAgixTyjT/F65r7GuGVc H1kukcoUZhryUTNS51Fku2wGGQ6Izuc= -----END CERTIFICATE-----Generated at Wed Aug 26 12:41:05 2026 by rpki-client