$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b0529399-21c5-3acd-9a30-f83cd6214fd1.roa File: b0529399-21c5-3acd-9a30-f83cd6214fd1.roa (raw, json) Hash identifier: 24eHVqDuFc7k8UfAmO5fnaZoXNdIZ7A20qNAJEx5Kys= Subject key identifier: BE:E7:30:AB:E8:C9:C4:3C:D2:56:BF:E2:F6:95:43:C6:6E:0F:6F:6F Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F4112B4FE325DE5D30A26FC00 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b0529399-21c5-3acd-9a30-f83cd6214fd1.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 29931 IP address blocks: 208.88.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b4:fe:32:5d:e5:d3:0a:26:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=aa15a5d1-1028-4747-b950-271ce12d441b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d7:05:b9:8a:fb:14:72:7b:3f:d0:75:ce:e5: bd:1a:eb:9b:e1:a8:68:cd:56:32:e6:db:50:30:11: 7a:78:87:45:4f:4f:5e:0b:fa:dd:0b:dd:c4:82:f5: 02:ba:1a:62:a9:20:ca:ba:de:fe:31:80:10:13:a0: 55:61:5a:2c:8c:42:85:7a:49:68:fa:cf:fa:fe:da: c6:9c:bc:c8:f0:b6:2d:26:84:51:0f:62:07:f2:81: fd:f1:ad:14:8d:db:71:85:4c:ac:8f:12:ba:55:40: 1b:d3:bd:6b:53:cf:62:61:6d:c6:f8:b5:fe:a9:7e: 5b:67:b0:c5:f0:27:df:da:01:a9:34:a4:72:55:ea: 2d:57:de:b2:24:0c:d9:53:27:ec:73:0a:6d:f8:d4: 00:89:b6:43:38:a7:7d:31:fa:ce:40:c6:85:bb:63: 49:a4:91:95:8e:ed:96:fb:43:0f:ba:00:aa:e7:f9: fb:d5:13:99:96:d3:ab:2a:c5:7b:84:a9:5d:c2:34: 84:d3:e8:1b:6d:24:6b:ec:e9:47:6a:45:f6:3b:3f: c6:b0:50:f9:21:25:5e:fe:d1:48:14:92:9e:d3:09: 58:45:85:ab:86:63:74:ca:15:8a:d6:cb:79:77:bf: d7:2e:4b:9d:32:4d:29:ad:f2:32:7b:85:0d:7b:4c: 2b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E7:30:AB:E8:C9:C4:3C:D2:56:BF:E2:F6:95:43:C6:6E:0F:6F:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/b0529399-21c5-3acd-9a30-f83cd6214fd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 208.88.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f4:2c:19:01:38:77:0c:88:54:d7:00:3a:63:3e:e1:2d:84: d5:92:5a:74:4b:1b:89:ed:9e:a1:b6:88:ea:e4:1c:75:30:6b: c7:df:83:7c:87:00:1d:0c:4f:a7:40:b4:3d:5e:67:b9:29:bf: 86:f5:f7:c0:c8:7b:78:00:83:4e:6b:37:a4:df:50:23:de:72: 67:21:63:e1:85:e9:55:be:18:9b:bf:07:24:44:22:0b:4d:29: 5c:50:af:28:11:09:06:39:42:ee:06:d4:ed:bf:93:ec:49:8b: 0d:bd:4e:19:0c:63:29:ba:88:52:b7:d1:b5:5b:19:3b:2b:94: 42:ba:f7:1f:8f:98:3b:86:cd:85:3f:06:6f:a1:ec:0a:ef:75: 2e:3e:c2:d0:56:4b:f2:e0:4f:87:05:d2:c2:52:19:19:0b:f9: 8f:39:e1:33:68:9a:63:ee:a0:fe:db:ca:d9:c2:6e:77:c7:d2: 45:87:dd:f2:b2:a9:2e:40:fd:6d:c3:52:b0:31:f9:e2:1c:7a: 71:e0:34:25:51:11:83:4c:fe:ec:ec:06:f2:ac:93:fe:7a:d9: e6:ca:18:f5:82:98:de:0a:e4:1e:3c:cf:96:3d:1c:8e:e7:87: fc:3f:f6:e2:19:6f:56:2b:41:7b:7e:b4:46:c3:ba:40:cb:84: 5b:7b:5b:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErT+Ml3l0wom/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YWExNWE1ZDEtMTAyOC00NzQ3LWI5NTAtMjcxY2UxMmQ0NDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNcFuYr7FHJ7P9B1zuW9Guub4ahozVYy5ttQ MBF6eIdFT09eC/rdC93EgvUCuhpiqSDKut7+MYAQE6BVYVosjEKFeklo+s/6/trG nLzI8LYtJoRRD2IH8oH98a0UjdtxhUysjxK6VUAb071rU89iYW3G+LX+qX5bZ7DF 8Cff2gGpNKRyVeotV96yJAzZUyfscwpt+NQAibZDOKd9MfrOQMaFu2NJpJGVju2W +0MPugCq5/n71ROZltOrKsV7hKldwjSE0+gbbSRr7OlHakX2Oz/GsFD5ISVe/tFI FJKe0wlYRYWrhmN0yhWK1st5d7/XLkudMk0prfIye4UNe0wrdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7nMKvoycQ80la/4vaVQ8ZuD29vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYjA1MjkzOTktMjFjNS0z YWNkLTlhMzAtZjgzY2Q2MjE0ZmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FhtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHL0LBkBOHcMiFTXADpjPuEthNWSWnRLG4ntnqG2iOrkHHUwa8ffg3yH AB0MT6dAtD1eZ7kpv4b198DIe3gAg05rN6TfUCPecmchY+GF6VW+GJu/ByREIgtN KVxQrygRCQY5Qu4G1O2/k+xJiw29ThkMYym6iFK30bVbGTsrlEK69x+PmDuGzYU/ Bm+h7ArvdS4+wtBWS/LgT4cF0sJSGRkL+Y854TNommPuoP7bytnCbnfH0kWH3fKy qS5A/W3DUrAx+eIcenHgNCVREYNM/uzsBvKsk/562ebKGPWCmN4K5B48z5Y9HI7n h/w/9uIZb1YrQXt+tEbDukDLhFt7W8Q= -----END CERTIFICATE-----Generated at Wed Sep 23 14:03:57 2026 by rpki-client