$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa File: 868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa (raw, json) Hash identifier: Nz9aVCohu00AcT/h+j2R7A6gFQv5oTfcT2DF8HJJUvs= Subject key identifier: D7:C8:F2:B6:6C:19:B8:29:D5:CC:CA:7E:01:46:96:BF:5D:83:3C:14 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584F0D6CE04C85F08CE7C1AAAE40 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 16671 IP address blocks: 208.88.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e0:4c:85:f0:8c:e7:c1:aa:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=2d454548-a41e-4ba7-8b0a-d6ee0e1d4f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:01:38:50:31:2e:6a:02:b9:0f:dd:f9:33: 27:06:8d:f0:a1:95:ae:d6:6f:98:41:da:49:12:92: 30:39:79:50:7a:01:c7:38:a9:b1:cd:af:6c:b7:04: 0c:41:58:db:28:11:d3:e9:49:3c:df:38:f8:c7:22: 44:15:6e:52:03:bb:5e:d5:e6:3f:4b:46:dd:a5:72: 55:82:61:ee:0e:3c:2f:62:e2:43:ad:97:04:e1:f1: b7:62:4e:6e:c7:d1:83:67:a0:fc:90:6d:32:f1:5c: 30:29:67:8b:f8:09:a3:69:c2:01:24:d7:da:59:22: 7f:79:43:24:36:00:1f:9f:f2:c6:5f:f2:76:06:ce: d4:b2:64:80:0f:3b:be:9d:d0:f2:d6:79:e9:2e:7f: f7:2e:8c:f5:80:3d:c2:44:e9:eb:de:66:a9:39:6a: 75:c7:80:c9:33:1a:86:7e:f8:d2:a7:98:29:be:8f: df:c8:1a:69:6a:a8:c5:de:15:66:68:a8:e9:b7:d0: fb:17:fe:95:dd:6b:0a:15:b1:c0:74:fd:7b:00:11: 5e:05:65:52:0c:a8:24:06:27:2e:12:55:e2:f9:3d: c8:af:32:ee:61:a4:a7:5f:01:69:14:ec:5d:72:38: fb:74:4a:3b:26:62:20:52:c0:a9:20:49:61:93:24: dd:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C8:F2:B6:6C:19:B8:29:D5:CC:CA:7E:01:46:96:BF:5D:83:3C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e6:32:49:67:a2:01:5a:4c:78:01:06:f6:47:06:22:74:12: f9:91:09:f8:aa:f4:05:51:8a:ac:7d:42:28:34:6d:05:49:3b: 07:94:15:64:3b:44:49:ec:4e:95:78:bb:4d:5f:97:bc:bf:ab: 18:de:8b:fc:2e:3e:7a:5e:4a:bb:a8:dd:90:62:58:b5:c7:fc: c7:3c:01:e6:ae:58:e6:82:68:36:b6:c9:a9:24:b4:06:c7:90: 2c:1e:ca:57:93:a0:00:a9:2b:f6:81:41:ea:d9:a9:ca:02:7f: d0:aa:c7:21:5e:12:ec:3c:e2:5a:a9:d7:40:2c:e4:89:8e:14: d2:34:7d:b8:a1:d2:6c:cb:62:04:a5:b6:47:86:40:32:04:92: cb:7a:c7:b8:2b:41:a1:5f:b1:71:a6:43:1a:46:f6:af:dc:1e: f3:ed:3b:77:63:1b:ff:1c:d4:8d:42:cf:70:f7:00:f6:97:e7: 34:f9:e1:04:3d:70:ac:24:75:2f:b0:71:1d:7c:d4:89:7d:79: 38:53:71:ca:4b:14:52:46:0a:27:03:16:1f:57:41:0f:4d:29: 5e:8e:b0:59:d5:42:f0:78:86:bb:41:da:db:19:92:2b:4b:9d: af:dc:ab:35:0e:47:ad:1d:c0:97:d5:48:1f:87:62:21:fb:5a: 75:5c:0d:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOBMhfCM58GqrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MmQ0NTQ1NDgtYTQxZS00YmE3LThiMGEtZDZlZTBlMWQ0ZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSIBOFAxLmoCuQ/d+TMnBo3woZWu1m+YQdpJ EpIwOXlQegHHOKmxza9stwQMQVjbKBHT6Uk83zj4xyJEFW5SA7te1eY/S0bdpXJV gmHuDjwvYuJDrZcE4fG3Yk5ux9GDZ6D8kG0y8VwwKWeL+AmjacIBJNfaWSJ/eUMk NgAfn/LGX/J2Bs7UsmSADzu+ndDy1nnpLn/3Loz1gD3CROnr3mapOWp1x4DJMxqG fvjSp5gpvo/fyBppaqjF3hVmaKjpt9D7F/6V3WsKFbHAdP17ABFeBWVSDKgkBicu ElXi+T3IrzLuYaSnXwFpFOxdcjj7dEo7JmIgUsCpIElhkyTdxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfI8rZsGbgp1czKfgFGlr9dgzwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvODY4YWE1NDctY2M5My0z MjJmLTlmZDgtOGQ0NTlmMGE4YTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FgfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfmMklnogFaTHgBBvZHBiJ0EvmRCfiq9AVRiqx9Qig0bQVJOweUFWQ7 REnsTpV4u01fl7y/qxjei/wuPnpeSruo3ZBiWLXH/Mc8AeauWOaCaDa2yakktAbH kCweyleToACpK/aBQerZqcoCf9CqxyFeEuw84lqp10As5ImOFNI0fbih0mzLYgSl tkeGQDIEkst6x7grQaFfsXGmQxpG9q/cHvPtO3djG/8c1I1Cz3D3APaX5zT54QQ9 cKwkdS+wcR181Il9eThTccpLFFJGCicDFh9XQQ9NKV6OsFnVQvB4hrtB2tsZkitL na/cqzUOR60dwJfVSB+HYiH7WnVcDWA= -----END CERTIFICATE-----Generated at Thu Sep 10 17:41:45 2026 by rpki-client