$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/01e6b558-9e58-3706-b36b-de6fe40b0080.roa File: 01e6b558-9e58-3706-b36b-de6fe40b0080.roa (raw, json) Hash identifier: k2XBFpIzBrEbA7Mh5ynXXv46W+8EwgGW0xHvZgHS0TY= Subject key identifier: 5C:E8:D9:B1:E0:2C:83:A6:AE:28:3F:08:76:30:63:36:D1:DE:1C:94 Certificate issuer: /CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e Certificate serial: 010D0C9F4328584F4972D4EA000B3A03431C1D00 Authority key identifier: 55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/01e6b558-9e58-3706-b36b-de6fe40b0080.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 208.80.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:d4:ea:00:0b:3a:03:43:1c:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0e185c23-24fb-4b17-b9bc-e7bc1c2ecc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c6:ac:7c:d7:d1:8a:4f:2f:72:92:7b:bd:c2: f2:99:a1:cb:62:54:7b:a8:df:d8:37:0c:ec:64:aa: 57:20:86:d8:9c:02:78:67:10:60:21:31:04:d9:0c: 7b:90:5e:0f:da:4b:b0:6d:e7:5d:b2:e4:4e:3c:4b: 61:e8:f5:45:b7:4b:76:93:8c:8e:6c:92:3c:38:a7: f3:dc:35:c0:12:2f:57:e3:41:7e:21:29:d6:96:57: 81:a2:c8:aa:0b:3f:d7:a8:21:fc:1d:59:1e:0a:d4: b7:6b:31:ea:77:f9:de:bd:f1:af:9e:b4:4f:9a:09: a6:8d:b6:0c:d6:7c:f9:53:72:75:56:9b:d2:81:67: 5c:8f:6b:3e:38:31:17:4a:61:52:8b:51:fd:2f:f4: a7:fe:47:85:7f:0c:2d:44:86:aa:6f:02:69:ee:17: aa:cc:4b:df:15:4b:0d:42:f6:37:5f:a8:ae:de:26: de:37:2b:83:f8:26:3f:a0:b8:3d:c5:58:be:09:3a: 12:18:b1:09:19:49:de:42:db:69:71:b5:1f:85:31: 2a:cc:cf:f2:04:27:09:1c:ef:d9:25:a1:a0:ec:5d: 68:43:b4:a9:21:d3:15:4c:f8:99:e9:b8:31:9e:d3: 6f:39:15:27:76:9d:94:be:ad:90:1e:c0:33:39:eb: c1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E8:D9:B1:E0:2C:83:A6:AE:28:3F:08:76:30:63:36:D1:DE:1C:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/01e6b558-9e58-3706-b36b-de6fe40b0080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl X509v3 Authority Key Identifier: keyid:55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer sbgp-ipAddrBlock: critical IPv4: 208.80.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:0d:10:00:b3:65:f0:a8:8b:2d:18:cd:6d:14:3b:1a:5c:b8: 33:b6:94:43:2c:ea:7d:8f:5c:40:d9:b4:0b:63:29:db:7e:5d: 1f:df:21:1e:0e:22:ec:98:c6:61:90:1f:e4:a5:ab:09:07:b4: aa:97:97:99:73:dc:87:3d:04:e4:48:97:84:6a:d8:d8:16:ce: de:e0:ec:64:f5:30:a0:ee:f2:80:a3:93:64:10:4b:8e:f9:e2: 6c:ae:6b:cf:4b:02:1b:ae:3f:2c:ed:51:54:7e:15:a6:0f:b1: d1:5e:45:89:5e:1a:ac:5e:bc:8a:f9:7b:3c:dc:eb:54:b4:28: c9:ae:10:ab:9c:fd:3f:75:13:ae:69:c3:b0:26:9e:ce:76:01: 0e:e4:91:66:40:9c:f7:ef:ff:9c:13:94:95:c7:ba:de:89:58: c4:a9:97:51:de:5d:2f:96:22:57:d6:06:1b:58:9f:3e:09:e8: 37:35:cd:07:23:5a:1c:62:4c:07:29:c8:76:20:f8:3b:cd:ac: 6b:9c:b8:ca:4c:66:62:73:76:bc:9d:37:ce:b9:7e:a8:f1:36: cd:bf:cf:08:3c:02:a2:40:b5:69:c3:f9:26:cb:5e:ab:c7:4b: 2d:6c:dc:7c:e0:aa:ea:14:e0:94:09:59:93:2f:ae:17:f8:fb: 55:45:32:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JctTqAAs6A0McHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA0YjFlNGItODlkMy00NzY5LWJhYjEtMzhkZjFkOWJi NzJlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGUxODVjMjMtMjRmYi00YjE3LWI5YmMtZTdiYzFjMmVjYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8asfNfRik8vcpJ7vcLymaHLYlR7qN/YNwzs ZKpXIIbYnAJ4ZxBgITEE2Qx7kF4P2kuwbeddsuROPEth6PVFt0t2k4yObJI8OKfz 3DXAEi9X40F+ISnWlleBosiqCz/XqCH8HVkeCtS3azHqd/nevfGvnrRPmgmmjbYM 1nz5U3J1VpvSgWdcj2s+ODEXSmFSi1H9L/Sn/keFfwwtRIaqbwJp7heqzEvfFUsN QvY3X6iu3ibeNyuD+CY/oLg9xVi+CToSGLEJGUneQttpcbUfhTEqzM/yBCcJHO/Z JaGg7F1oQ7SpIdMVTPiZ6bgxntNvORUndp2Uvq2QHsAzOevBKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzo2bHgLIOmrig/CHYwYzbR3hyUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MDRi MWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRmMWQ5YmI3MmUvMDFlNmI1NTgtOWU1OC0z NzA2LWIzNmItZGU2ZmU0MGIwMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODA0YjFlNGItODlkMy00NzY5LWJh YjEtMzhkZjFkOWJiNzJlLzgwNGIxZTRiLTg5ZDMtNDc2OS1iYWIxLTM4ZGYxZDli YjcyZS5jcmwwHwYDVR0jBBgwFoAUVQNlKvd/DK9QUvrJh8lPYgQvuDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MDRiMWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRm MWQ5YmI3MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FCHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4NEACzZfCoiy0YzW0UOxpcuDO2lEMs6n2PXEDZtAtjKdt+XR/fIR4O IuyYxmGQH+SlqwkHtKqXl5lz3Ic9BORIl4Rq2NgWzt7g7GT1MKDu8oCjk2QQS475 4myua89LAhuuPyztUVR+FaYPsdFeRYleGqxevIr5ezzc61S0KMmuEKuc/T91E65p w7Amns52AQ7kkWZAnPfv/5wTlJXHut6JWMSpl1HeXS+WIlfWBhtYnz4J6Dc1zQcj WhxiTAcpyHYg+DvNrGucuMpMZmJzdrydN865fqjxNs2/zwg8AqJAtWnD+SbLXqvH Sy1s3HzgquoU4JQJWZMvrhf4+1VFMsU= -----END CERTIFICATE-----Generated at Wed Oct 21 09:32:03 2026 by rpki-client