$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a1bfb361-9899-3482-a213-5e754c1091f7.roa File: a1bfb361-9899-3482-a213-5e754c1091f7.roa (raw, json) Hash identifier: mI4qhlX9vi5IZTG2HWknq/YBvgPCDT1h3jWX0mkpz/k= Subject key identifier: CF:E7:38:14:9F:5C:7A:E3:1B:48:CE:F0:79:F8:0C:FD:0C:21:20:83 Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624 Certificate serial: 010D0C9F4328584EF71778A8823DA234CCC73780 Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a1bfb361-9899-3482-a213-5e754c1091f7.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3565 IP address blocks: 208.68.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:78:a8:82:3d:a2:34:cc:c7:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=c0c42d89-8905-4a03-8cd4-12d2888d2d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:68:63:61:8e:6b:18:f5:fd:59:ce:0e:37:db: 9c:f0:a2:36:f9:0a:c1:90:25:ad:2d:aa:30:01:80: bd:b6:c7:8f:94:7f:53:c0:5b:e9:fa:d7:d3:f6:89: d6:16:ab:98:0e:0c:02:0f:bb:ce:6d:fb:63:09:7e: 62:c1:1d:be:ca:9b:96:12:5f:94:a4:c0:c1:af:9e: 6d:58:a8:49:63:7e:11:09:40:1b:f9:01:7e:9b:fa: 4a:14:51:de:87:77:59:22:75:78:81:b2:11:7c:64: 94:c5:d0:4e:3d:1b:ed:1e:eb:d1:78:60:94:ff:3e: 3a:33:d6:d3:cb:58:a7:3d:28:3a:1e:95:90:32:92: 0f:60:0f:11:18:07:ce:2b:18:06:a1:b2:06:23:bd: ed:88:c7:61:55:ef:a7:d5:d4:6d:ce:57:a6:62:48: 66:27:e7:e0:ee:17:f4:57:83:c9:8a:6c:62:88:3e: a0:ab:74:e7:9e:a5:75:9d:56:98:d6:4f:52:b5:fd: 3e:33:63:da:53:82:1a:ce:d2:1f:ed:e3:85:f9:c8: 6f:91:b1:80:dc:c5:66:83:87:25:af:28:cb:8e:a2: df:42:e1:a2:f9:68:2e:67:a2:46:8d:24:2b:3e:be: 7e:4b:a6:ff:a5:05:78:22:3c:55:6f:c3:f9:a3:2b: c5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E7:38:14:9F:5C:7A:E3:1B:48:CE:F0:79:F8:0C:FD:0C:21:20:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a1bfb361-9899-3482-a213-5e754c1091f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl X509v3 Authority Key Identifier: keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer sbgp-ipAddrBlock: critical IPv4: 208.68.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:07:f1:2a:4f:c2:e3:4f:30:68:81:09:1b:d3:72:f7:e9:44: 0a:0c:1e:83:61:bd:2e:e2:ac:64:eb:df:98:8a:33:6c:dc:73: e6:89:e3:87:71:c3:66:ef:ac:3b:65:99:35:ec:d9:83:11:d2: c8:92:82:71:aa:2a:4f:27:0b:07:92:b4:6c:cd:0a:ff:6e:cf: f9:b6:b8:ca:cf:5d:20:7e:c4:e1:e9:5b:8d:fe:8c:21:c8:a6: b2:84:e9:18:8e:ee:42:4d:00:c1:f7:00:02:f1:67:bb:ae:83: 81:c9:b4:b0:c6:f6:bf:40:f5:1c:71:8e:12:97:bd:76:cc:97: ee:50:56:55:5c:67:15:fc:83:3d:ee:21:9a:79:95:b4:34:64: c9:c8:a5:11:41:c0:70:de:95:42:58:53:12:c5:61:79:95:d6: a0:0f:59:9c:65:70:53:73:c4:e4:1b:bc:30:94:a0:36:01:ce: fd:f8:b8:0e:d1:64:57:39:7b:0b:4e:ac:95:7a:61:f8:2a:d3: fd:bb:6e:98:25:3a:50:f6:79:d3:2b:bc:3b:5b:06:33:4f:14: 92:9c:e4:fc:c2:44:90:0e:6d:bf:d2:2d:d9:43:d2:11:66:5c: eb:1b:0a:1a:f6:63:c4:06:d9:67:e8:c4:37:f2:b0:40:27:42: ad:fa:9c:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3iogj2iNMzHN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzNjc1NmUtZTQzMy00NzMyLWE3MDctYTlmYTEzOTY1 NjI0MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk YzBjNDJkODktODkwNS00YTAzLThjZDQtMTJkMjg4OGQyZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGhjYY5rGPX9Wc4ON9uc8KI2+QrBkCWtLaow AYC9tsePlH9TwFvp+tfT9onWFquYDgwCD7vObftjCX5iwR2+ypuWEl+UpMDBr55t WKhJY34RCUAb+QF+m/pKFFHeh3dZInV4gbIRfGSUxdBOPRvtHuvReGCU/z46M9bT y1inPSg6HpWQMpIPYA8RGAfOKxgGobIGI73tiMdhVe+n1dRtzlemYkhmJ+fg7hf0 V4PJimxiiD6gq3TnnqV1nVaY1k9Stf0+M2PaU4IaztIf7eOF+chvkbGA3MVmg4cl ryjLjqLfQuGi+WguZ6JGjSQrPr5+S6b/pQV4IjxVb8P5oyvFlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/nOBSfXHrjG0jO8Hn4DP0MISCDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjM2 NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZhMTM5NjU2MjQvYTFiZmIzNjEtOTg5OS0z NDgyLWEyMTMtNWU3NTRjMTA5MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWIzNjc1NmUtZTQzMy00NzMyLWE3 MDctYTlmYTEzOTY1NjI0L2ViMzY3NTZlLWU0MzMtNDczMi1hNzA3LWE5ZmExMzk2 NTYyNC5jcmwwHwYDVR0jBBgwFoAUiA349Y8cCk5qFJhNT4/nj8QP0TIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYjM2NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZh MTM5NjU2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ETfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMH8SpPwuNPMGiBCRvTcvfpRAoMHoNhvS7irGTr35iKM2zcc+aJ44dx w2bvrDtlmTXs2YMR0siSgnGqKk8nCweStGzNCv9uz/m2uMrPXSB+xOHpW43+jCHI prKE6RiO7kJNAMH3AALxZ7uug4HJtLDG9r9A9RxxjhKXvXbMl+5QVlVcZxX8gz3u IZp5lbQ0ZMnIpRFBwHDelUJYUxLFYXmV1qAPWZxlcFNzxOQbvDCUoDYBzv34uA7R ZFc5ewtOrJV6Yfgq0/27bpglOlD2edMrvDtbBjNPFJKc5PzCRJAObb/SLdlD0hFm XOsbChr2Y8QG2WfoxDfysEAnQq36nJA= -----END CERTIFICATE-----Generated at Sat Sep 26 06:43:11 2026 by rpki-client