$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37/708bf452-f828-36b8-959b-ec6057715e5e.roa File: 708bf452-f828-36b8-959b-ec6057715e5e.roa (raw, json) Hash identifier: X2QOllj5+TiKXeoueqdW6rYG4wh2wQwRHdz4DFehUlQ= Subject key identifier: 92:AB:C9:FA:A3:66:4D:88:28:26:7E:7E:EE:AA:82:FD:BD:73:4A:73 Certificate issuer: /CN=80525d40-f18d-4db4-bef3-5e7fc4b7aa37 Certificate serial: 010D0C9F4328584F990309160F2654DECB775E00 Authority key identifier: 82:4D:4D:22:8F:F4:0E:8D:0A:FE:75:3C:02:B9:DF:AC:AF:67:FA:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37/708bf452-f828-36b8-959b-ec6057715e5e.roa Signing time: Fri 23 Oct 2026 13:00:12 +0000 ROA not before: Fri 23 Oct 2026 13:00:12 +0000 ROA not after: Thu 21 Jan 2027 14:00:12 +0000 asID: 396982 IP address blocks: 167.204.224.0/24 maxlen: 24 167.204.225.0/24 maxlen: 24 167.204.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37/80525d40-f18d-4db4-bef3-5e7fc4b7aa37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37/80525d40-f18d-4db4-bef3-5e7fc4b7aa37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:03:09:16:0f:26:54:de:cb:77:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80525d40-f18d-4db4-bef3-5e7fc4b7aa37 Validity Not Before: Oct 23 13:00:12 2026 GMT Not After : Jan 21 14:00:12 2027 GMT Subject: CN=cd28f00b-ee89-46f8-9556-4c989c1e0737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:30:24:e2:44:03:99:88:e3:54:6a:af:a9: fe:d0:0d:41:ed:b5:28:79:5e:67:07:61:9a:a2:b4: 0d:da:a8:68:1f:b7:86:29:0a:cc:d8:1e:5e:dc:e7: 09:b6:3a:f8:e4:05:f9:70:39:07:f1:9f:56:f9:e9: 54:03:0f:fd:ce:27:aa:f5:7e:06:a0:b3:ec:c3:96: 8b:a6:4b:92:51:94:09:34:1e:69:78:2c:60:e5:57: 34:d8:f0:9b:87:fe:dd:1d:53:df:64:2c:74:7c:91: fb:eb:31:0b:b6:bf:93:92:ed:59:89:df:69:4f:5e: 86:75:c5:03:63:5c:31:80:5e:63:1c:fe:b3:07:8d: 7e:3c:67:71:1b:77:b9:5e:4f:8f:85:a7:2c:a0:fe: 59:af:06:a5:b7:1b:b3:28:09:1a:07:46:de:c7:ae: 75:8d:a3:33:25:fe:f5:0a:35:3b:27:8f:fd:bd:35: ac:60:09:f4:e9:9e:fa:44:bb:c4:42:d3:d0:a1:e7: 92:92:c9:aa:a9:a3:61:ce:7e:d1:4b:24:f9:ef:41: 47:c2:77:8a:db:7d:1f:47:2d:d1:ac:26:98:23:13: 55:f4:00:2c:97:d4:34:e4:7d:c2:b0:7a:7c:b6:91: 03:3e:80:5a:dd:dd:3d:84:39:09:a8:80:ed:63:11: ed:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AB:C9:FA:A3:66:4D:88:28:26:7E:7E:EE:AA:82:FD:BD:73:4A:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37/708bf452-f828-36b8-959b-ec6057715e5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37/80525d40-f18d-4db4-bef3-5e7fc4b7aa37.crl X509v3 Authority Key Identifier: keyid:82:4D:4D:22:8F:F4:0E:8D:0A:FE:75:3C:02:B9:DF:AC:AF:67:FA:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/80525d40-f18d-4db4-bef3-5e7fc4b7aa37.cer sbgp-ipAddrBlock: critical IPv4: 167.204.224.0-167.204.226.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:7f:51:83:1b:04:ea:77:1e:a4:71:ce:43:ba:ef:4e:76:a3: 5d:51:53:98:84:48:30:09:54:8d:51:6e:6c:3c:1d:7d:2a:c4: 98:52:eb:14:eb:df:d3:25:d1:d4:5b:df:4f:b9:fe:e2:4b:ca: b2:5f:d7:f6:b7:8d:98:e5:dd:a4:7d:77:4f:2e:78:b9:a2:78: 2b:9d:e3:d8:0d:e1:2e:cf:8e:79:ed:3b:a3:ff:a3:56:f2:60: af:85:29:52:37:31:90:f4:6d:96:82:f4:b3:0f:68:88:b1:f3: 34:d4:02:a3:48:5f:d6:75:1b:07:7a:42:9a:64:f6:99:b7:8e: 8c:d4:36:da:b2:d9:7f:e6:f6:e4:d7:c3:a9:27:77:cc:e7:07: 54:44:a5:fc:fc:52:f0:d8:e8:5a:64:34:ce:44:06:5e:83:ec: 9e:a5:7c:b3:23:2a:bf:b1:d7:73:7b:fa:5e:39:ef:34:57:df: b9:95:d3:57:17:ad:97:bf:e2:24:28:1e:f6:71:8d:b4:c0:38: 78:96:31:fe:4c:26:94:89:ac:e5:f5:bc:80:e3:96:88:d9:db: 92:e8:e7:24:49:7a:bf:23:82:b4:a6:aa:c6:c6:17:e1:66:db: 12:b2:3d:db:fe:01:94:4e:67:45:fd:3c:d1:ec:99:b9:a7:76: 9a:36:c7:26 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE+ZAwkWDyZU3st3XgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA1MjVkNDAtZjE4ZC00ZGI0LWJlZjMtNWU3ZmM0Yjdh YTM3MB4XDTI2MTAyMzEzMDAxMloXDTI3MDEyMTE0MDAxMlowLzEtMCsGA1UEAxMk Y2QyOGYwMGItZWU4OS00NmY4LTk1NTYtNGM5ODljMWUwNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVEwJOJEA5mI41Rqr6n+0A1B7bUoeV5nB2Ga orQN2qhoH7eGKQrM2B5e3OcJtjr45AX5cDkH8Z9W+elUAw/9zieq9X4GoLPsw5aL pkuSUZQJNB5peCxg5Vc02PCbh/7dHVPfZCx0fJH76zELtr+Tku1Zid9pT16GdcUD Y1wxgF5jHP6zB41+PGdxG3e5Xk+PhacsoP5ZrwaltxuzKAkaB0bex651jaMzJf71 CjU7J4/9vTWsYAn06Z76RLvEQtPQoeeSksmqqaNhzn7RSyT570FHwneK230fRy3R rCaYIxNV9AAsl9Q05H3CsHp8tpEDPoBa3d09hDkJqIDtYxHtrwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJKryfqjZk2IKCZ+fu6qgv29c0pzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84MDUy NWQ0MC1mMThkLTRkYjQtYmVmMy01ZTdmYzRiN2FhMzcvNzA4YmY0NTItZjgyOC0z NmI4LTk1OWItZWM2MDU3NzE1ZTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODA1MjVkNDAtZjE4ZC00ZGI0LWJl ZjMtNWU3ZmM0YjdhYTM3LzgwNTI1ZDQwLWYxOGQtNGRiNC1iZWYzLTVlN2ZjNGI3 YWEzNy5jcmwwHwYDVR0jBBgwFoAUgk1NIo/0Do0K/nU8ArnfrK9n+kwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84MDUyNWQ0MC1mMThkLTRkYjQtYmVmMy01ZTdm YzRiN2FhMzcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWnzOAD BACnzOIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAg39RgxsE6ncepHHOQ7rvTnajXVFTmIRIMAlUjVFubDwd fSrEmFLrFOvf0yXR1FvfT7n+4kvKsl/X9reNmOXdpH13Ty54uaJ4K53j2A3hLs+O ee07o/+jVvJgr4UpUjcxkPRtloL0sw9oiLHzNNQCo0hf1nUbB3pCmmT2mbeOjNQ2 2rLZf+b25NfDqSd3zOcHVESl/PxS8NjoWmQ0zkQGXoPsnqV8syMqv7HXc3v6Xjnv NFffuZXTVxetl7/iJCge9nGNtMA4eJYx/kwmlIms5fW8gOOWiNnbkujnJEl6vyOC tKaqxsYX4WbbErI92/4BlE5nRf080eyZuad2mjbHJg== -----END CERTIFICATE-----Generated at Wed Oct 28 18:13:48 2026 by rpki-client