$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa File: 2d29c9cc-f352-359a-a680-78348c95a6e1.roa (raw, json) Hash identifier: bIQyDz5V0r5I3m3a7XItAgmHHju0bkuQoEEMw47Himk= Subject key identifier: C0:D1:6A:E6:AB:5C:3A:55:0F:0C:A4:4D:CC:8D:1D:3F:29:D0:B1:53 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584F0D6CDDA31E0460D8F48F92C0 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 32788 IP address blocks: 208.88.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:dd:a3:1e:04:60:d8:f4:8f:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=cfcfbb55-97a8-4b08-b26a-5329dc86c79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0b:ec:2e:36:85:9e:6f:11:43:ff:86:6b:40: c3:18:0e:8a:29:32:20:4b:81:6e:e0:51:d0:5d:f5: f3:89:a3:02:78:ab:15:fd:f5:9a:05:dd:a9:26:0c: fa:d3:0e:01:8d:5c:ef:d3:dd:e2:84:46:21:03:13: 08:b4:6f:4e:3a:85:c0:bd:bd:5a:25:50:e3:d1:73: 9e:f1:b1:b4:e3:24:fd:61:38:e2:af:2f:e5:25:15: 22:07:e4:47:7c:93:3b:73:8a:7d:9f:0f:b8:2e:83: a3:83:b0:8d:5f:39:13:80:d6:15:ec:55:de:7f:56: 2e:a7:6c:6b:f0:e5:03:7c:b5:7d:e0:99:51:9e:33: 4b:1f:87:46:bf:7d:7d:7a:f9:26:0e:13:5f:68:3b: c5:4f:7a:ad:d1:46:3d:77:88:64:ac:b2:52:12:5d: eb:fe:57:d9:fb:11:05:bd:19:cc:70:d0:de:b2:e4: ce:e1:2d:b2:11:5c:ab:d5:6d:98:53:b8:1b:26:8f: fa:56:73:42:fc:a2:ed:75:85:56:62:15:92:26:81: cb:40:9e:e9:ae:79:c1:78:e6:10:b5:01:d7:b7:44: e0:d3:33:e0:fa:83:11:6d:2e:83:fc:51:59:1d:81: 54:b5:08:32:8b:31:fa:6a:eb:cf:70:14:9b:e9:1e: 9a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D1:6A:E6:AB:5C:3A:55:0F:0C:A4:4D:CC:8D:1D:3F:29:D0:B1:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b1:dc:a2:af:5a:8a:26:08:5d:51:8d:51:4c:e6:38:bc:6d: 93:cf:84:44:16:1d:7c:9d:ad:68:bf:1b:cb:ed:9b:b3:02:c3: ac:c0:42:8b:71:fe:f9:9f:25:65:8d:e5:f0:44:39:d8:2b:c0: a2:c9:ed:ad:3f:01:00:93:2f:7f:e1:2f:17:25:6c:6a:db:56: e3:b9:b6:9e:7e:4c:95:ac:45:70:2d:10:af:a3:c9:43:29:0d: e2:28:47:5e:c4:52:11:d9:c7:71:e3:08:1c:6e:8b:d0:ae:b2: 1e:1f:62:19:82:d5:a1:fa:70:bd:3c:c2:89:f1:d1:2a:39:43: b3:8e:cd:88:d4:c3:87:4c:42:74:60:7d:25:25:76:c2:43:a4: cd:38:88:f6:82:61:c9:2f:aa:06:b8:f5:79:1c:26:fe:32:97: 16:ba:4c:d6:88:85:bc:19:93:39:cf:e3:f8:20:55:ff:43:27: 3b:30:78:69:f3:53:c5:d8:a6:d2:d9:df:57:f1:43:f5:cd:3c: 0f:e7:71:20:c6:b5:e8:e4:64:18:c4:7a:5e:f8:29:20:34:d8: e9:04:de:25:f5:7b:e2:99:d3:74:f0:f5:9a:35:2c:2c:ae:0b: 38:00:91:1e:f0:79:ad:26:29:7f:d8:47:69:ac:f2:40:e4:fd: 98:cb:d2:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbN2jHgRg2PSPksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk Y2ZjZmJiNTUtOTdhOC00YjA4LWIyNmEtNTMyOWRjODZjNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wvsLjaFnm8RQ/+Ga0DDGA6KKTIgS4Fu4FHQ XfXziaMCeKsV/fWaBd2pJgz60w4BjVzv093ihEYhAxMItG9OOoXAvb1aJVDj0XOe 8bG04yT9YTjiry/lJRUiB+RHfJM7c4p9nw+4LoOjg7CNXzkTgNYV7FXef1Yup2xr 8OUDfLV94JlRnjNLH4dGv319evkmDhNfaDvFT3qt0UY9d4hkrLJSEl3r/lfZ+xEF vRnMcNDesuTO4S2yEVyr1W2YU7gbJo/6VnNC/KLtdYVWYhWSJoHLQJ7prnnBeOYQ tQHXt0Tg0zPg+oMRbS6D/FFZHYFUtQgyizH6auvPcBSb6R6adwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDRauarXDpVDwykTcyNHT8p0LFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMmQyOWM5Y2MtZjM1Mi0z NTlhLWE2ODAtNzgzNDhjOTVhNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FgeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIux3KKvWoomCF1RjVFM5ji8bZPPhEQWHXydrWi/G8vtm7MCw6zAQotx /vmfJWWN5fBEOdgrwKLJ7a0/AQCTL3/hLxclbGrbVuO5tp5+TJWsRXAtEK+jyUMp DeIoR17EUhHZx3HjCBxui9Cush4fYhmC1aH6cL08wonx0So5Q7OOzYjUw4dMQnRg fSUldsJDpM04iPaCYckvqga49XkcJv4ylxa6TNaIhbwZkznP4/ggVf9DJzsweGnz U8XYptLZ31fxQ/XNPA/ncSDGtejkZBjEel74KSA02OkE3iX1e+KZ03Tw9Zo1LCyu CzgAkR7wea0mKX/YR2ms8kDk/ZjL0rA= -----END CERTIFICATE-----Generated at Thu Sep 10 17:42:44 2026 by rpki-client