$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa File: 93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa (raw, json) Hash identifier: 1b3EAoTCRWZPD5qMjbXu+/GrsshZkmq92CmYcD0txhI= Subject key identifier: EB:BB:0D:A2:A5:4E:DD:24:7D:03:5C:6B:CD:12:B3:2C:58:9C:23:F9 Certificate issuer: /CN=1bf8301d-e669-4ad3-ae5b-565b863bc9d6 Certificate serial: 010D0C9F4328584ECD372A03CA8D9BC052145800 Authority key identifier: 5F:D7:B8:9F:80:49:3F:1D:3F:01:8C:20:A8:B8:6B:E8:94:96:23:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 8075 IP address blocks: 209.251.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:2a:03:ca:8d:9b:c0:52:14:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bf8301d-e669-4ad3-ae5b-565b863bc9d6 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=abf7eaad-60fa-4eb8-a8de-2b578398ecbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:39:bc:59:3c:5a:31:31:e5:28:f3:2f:8e: 14:b6:c8:55:43:b6:44:6c:dc:94:0d:35:78:b4:73: c7:16:ab:a6:27:e5:8d:fb:d2:9a:06:38:d7:be:c6: ca:06:e5:61:0a:ba:eb:0d:ac:bc:b0:f2:d6:6c:62: 47:6f:36:db:6b:d8:6a:1b:31:e6:66:ac:56:dc:59: 02:63:0f:3f:aa:58:7d:30:5a:eb:10:17:03:a4:8b: 9e:14:ad:30:0b:aa:fc:ad:07:fd:20:5d:40:f8:77: 69:bf:b6:d1:6a:a9:87:fc:53:31:39:47:c3:de:fa: b9:bb:fc:03:dc:04:b0:d3:64:f7:34:fb:16:fc:b2: fd:e4:3a:ed:4d:01:36:ef:c1:ee:de:98:af:a8:cf: 5a:13:11:d3:5e:83:29:db:cd:62:84:71:9a:05:ad: 7c:a4:8f:3d:83:f2:e4:54:25:8c:1e:6b:6b:dc:d0: b8:b6:a7:be:65:06:af:f2:df:dc:62:9e:15:2c:57: 77:94:59:f7:dd:86:02:9c:9b:b3:35:fb:66:67:a9: a2:93:0e:93:8b:a2:fd:c7:9f:16:f9:ce:01:f2:c1: 58:82:9f:39:70:0a:2d:f6:0a:5e:9d:21:80:09:db: f5:48:8b:c0:03:13:72:f8:58:99:99:2c:99:de:b1: 0a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BB:0D:A2:A5:4E:DD:24:7D:03:5C:6B:CD:12:B3:2C:58:9C:23:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.crl X509v3 Authority Key Identifier: keyid:5F:D7:B8:9F:80:49:3F:1D:3F:01:8C:20:A8:B8:6B:E8:94:96:23:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.cer sbgp-ipAddrBlock: critical IPv4: 209.251.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:92:a5:fa:2d:39:12:d4:fc:d3:64:62:2d:57:e9:fc:47:db: 15:b5:19:a7:ed:f5:46:c0:7b:db:f2:8c:54:bb:f6:d5:3f:5d: 8d:8b:7e:24:c1:11:2e:57:9c:fa:9b:a0:21:5d:5e:85:42:a3: 27:c7:7f:57:2a:fe:8f:cd:40:a1:4d:20:0c:e7:08:dc:2c:f8: 21:48:5d:e6:97:d7:3c:e4:97:32:2a:79:32:f4:b1:74:b7:c8: 1d:3d:4b:54:72:ff:9f:b4:17:7b:cf:b7:5e:ba:8e:f7:c0:7c: 79:8c:17:6f:c2:80:f7:04:7d:f6:01:d9:9a:1c:c6:d4:3f:f4: 6a:05:23:eb:66:fc:48:ac:3d:8f:9b:6d:a7:7b:bf:eb:3c:44: c3:34:97:2c:b6:b3:99:73:aa:ca:3d:62:42:3e:67:65:d2:64: ac:bd:ee:79:7b:51:ca:d5:46:b9:4c:ef:12:a8:44:f2:70:0a: 20:a6:73:c0:f2:ca:e7:7f:3f:05:2d:4c:a9:11:c1:19:7b:03: dd:aa:39:46:82:03:bc:f6:b6:c5:79:e6:c1:40:da:b1:e9:d3: 74:9d:7a:b8:d5:53:50:ad:fa:79:2c:76:2c:d9:4e:7d:a5:93: b9:ce:1a:f2:91:56:99:cb:fa:54:60:0b:1c:ad:0e:98:b8:91: f1:b5:50:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyoDyo2bwFIUWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJmODMwMWQtZTY2OS00YWQzLWFlNWItNTY1Yjg2M2Jj OWQ2MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk YWJmN2VhYWQtNjBmYS00ZWI4LWE4ZGUtMmI1NzgzOThlY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4c5vFk8WjEx5SjzL44UtshVQ7ZEbNyUDTV4 tHPHFqumJ+WN+9KaBjjXvsbKBuVhCrrrDay8sPLWbGJHbzbba9hqGzHmZqxW3FkC Yw8/qlh9MFrrEBcDpIueFK0wC6r8rQf9IF1A+Hdpv7bRaqmH/FMxOUfD3vq5u/wD 3ASw02T3NPsW/LL95DrtTQE278Hu3pivqM9aExHTXoMp281ihHGaBa18pI89g/Lk VCWMHmtr3NC4tqe+ZQav8t/cYp4VLFd3lFn33YYCnJuzNftmZ6mikw6Ti6L9x58W +c4B8sFYgp85cAot9gpenSGACdv1SIvAAxNy+FiZmSyZ3rEKKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOu7DaKlTt0kfQNca80SsyxYnCP5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYmY4 MzAxZC1lNjY5LTRhZDMtYWU1Yi01NjViODYzYmM5ZDYvOTNkNGU0MDYtYjdjMi0z ZWNjLWIyZGMtYTE2MWNlYzJjNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWJmODMwMWQtZTY2OS00YWQzLWFl NWItNTY1Yjg2M2JjOWQ2LzFiZjgzMDFkLWU2NjktNGFkMy1hZTViLTU2NWI4NjNi YzlkNi5jcmwwHwYDVR0jBBgwFoAUX9e4n4BJPx0/AYwgqLhr6JSWI1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xYmY4MzAxZC1lNjY5LTRhZDMtYWU1Yi01NjVi ODYzYmM5ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeSpfotORLU/NNkYi1X6fxH2xW1Gaft9UbAe9vyjFS79tU/XY2LfiTB ES5XnPqboCFdXoVCoyfHf1cq/o/NQKFNIAznCNws+CFIXeaX1zzklzIqeTL0sXS3 yB09S1Ry/5+0F3vPt166jvfAfHmMF2/CgPcEffYB2ZocxtQ/9GoFI+tm/EisPY+b bad7v+s8RMM0lyy2s5lzqso9YkI+Z2XSZKy97nl7UcrVRrlM7xKoRPJwCiCmc8Dy yud/PwUtTKkRwRl7A92qOUaCA7z2tsV55sFA2rHp03SderjVU1Ct+nksdizZTn2l k7nOGvKRVpnL+lRgCxytDpi4kfG1UPU= -----END CERTIFICATE-----Generated at Fri Sep 4 23:21:36 2026 by rpki-client