$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/957d5689-ef37-31ee-822d-306a6c399dfe.roa File: 957d5689-ef37-31ee-822d-306a6c399dfe.roa (raw, json) Hash identifier: TwpTtFVtnF8Rl/r5Iw5/go6k2jky/Wgh9mO1Zk21zhs= Subject key identifier: D6:63:AB:C1:F8:F1:F4:E1:93:F3:E0:B0:87:AE:00:66:7A:3D:A5:11 Certificate issuer: /CN=8d59c36c-1718-4a42-a5c1-e3e6274d943a Certificate serial: 010D0C9F4328584F9D33146F3BB73DCE2901F780 Authority key identifier: 0D:E2:9E:64:27:D2:B0:67:38:D1:20:0D:79:A5:67:9E:AD:D0:A2:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/957d5689-ef37-31ee-822d-306a6c399dfe.roa Signing time: Sun 25 Oct 2026 01:00:13 +0000 ROA not before: Sun 25 Oct 2026 01:00:13 +0000 ROA not after: Sat 23 Jan 2027 02:00:13 +0000 asID: 25653 IP address blocks: 208.116.0.0/23 maxlen: 23 208.116.2.0/24 maxlen: 24 208.116.5.0/24 maxlen: 24 208.116.6.0/23 maxlen: 23 208.116.8.0/21 maxlen: 21 208.116.16.0/24 maxlen: 24 208.116.18.0/24 maxlen: 24 208.116.20.0/22 maxlen: 22 208.116.24.0/21 maxlen: 21 208.116.32.0/20 maxlen: 20 208.116.48.0/21 maxlen: 21 208.116.58.0/23 maxlen: 23 208.116.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9d:33:14:6f:3b:b7:3d:ce:29:01:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c36c-1718-4a42-a5c1-e3e6274d943a Validity Not Before: Oct 25 01:00:13 2026 GMT Not After : Jan 23 02:00:13 2027 GMT Subject: CN=a4f16f88-23bd-48cb-836e-dbe23e941394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:09:6d:43:83:b8:c8:53:07:37:4c:a1:45:d2: e7:d1:41:05:cc:3c:24:55:56:2b:53:a3:18:50:1b: 2e:ca:c2:25:46:ce:33:1b:25:91:58:b1:90:eb:69: 65:fa:2b:85:6d:bc:87:67:be:73:52:0c:1d:79:dd: d2:2a:8f:cd:07:33:43:a4:9b:70:d8:c6:41:7f:89: 44:32:51:83:97:3f:2d:d6:df:32:c5:56:48:e1:b9: b6:b1:92:58:79:60:82:c7:53:c0:f3:f0:79:4f:6f: 59:8c:98:09:ff:a6:b4:c7:02:27:24:4b:59:09:4c: 62:52:76:dc:8c:3a:14:6e:60:b8:f8:eb:aa:16:99: 33:7a:a7:fb:88:0c:97:53:e7:7d:b0:03:99:4a:6f: 8c:5f:79:b6:5c:5b:a7:ff:75:b3:00:5e:14:f7:5e: c4:68:b6:b5:9e:80:ca:75:70:aa:aa:ed:03:dc:e0: 4a:85:84:83:f3:d1:68:de:b2:0e:18:9b:d5:56:51: 08:0f:02:d2:48:cb:af:fb:94:6e:02:c8:e3:17:be: 7f:2f:5f:b2:c1:7f:b5:b7:03:cd:6a:f7:f8:29:3c: 40:88:ea:f5:02:97:bb:85:54:09:52:de:08:d1:e2: 95:eb:39:30:40:98:07:2b:14:aa:96:d3:23:85:67: 3d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:63:AB:C1:F8:F1:F4:E1:93:F3:E0:B0:87:AE:00:66:7A:3D:A5:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/957d5689-ef37-31ee-822d-306a6c399dfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.crl X509v3 Authority Key Identifier: keyid:0D:E2:9E:64:27:D2:B0:67:38:D1:20:0D:79:A5:67:9E:AD:D0:A2:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer sbgp-ipAddrBlock: critical IPv4: 208.116.0.0-208.116.2.255 208.116.5.0-208.116.16.255 208.116.18.0/24 208.116.20.0-208.116.55.255 208.116.58.0-208.116.63.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:8e:f2:a0:e4:93:74:3d:b0:2b:e7:08:12:31:14:c7:8f:e4: de:8c:1f:5a:b5:e4:d2:63:f8:e7:17:cb:5b:16:cc:60:07:a0: 96:2f:f5:20:fe:e5:bb:3c:a8:01:04:e9:7d:fc:aa:f9:d8:90: 04:03:7c:fe:55:9e:a7:da:66:90:17:83:c9:57:0a:e0:91:ec: 23:0f:62:5d:f3:42:0b:1e:1d:61:a9:d2:00:8e:10:91:82:79: e6:eb:63:92:fa:65:94:1d:3a:3a:52:17:5b:d5:c7:7a:92:c3: 34:78:61:13:31:41:f4:62:4d:46:ad:c7:ce:31:ae:18:ba:8a: 55:a9:3a:1a:87:55:2f:fb:3f:f9:7c:e5:d2:9a:3f:ed:be:96: 64:27:46:1b:4e:80:33:c9:05:b0:61:0b:7e:5c:81:9c:29:5c: 79:84:7b:83:e5:71:68:8c:1c:48:9d:9d:67:bb:99:d7:46:4d: f4:18:dc:f1:1c:59:d6:9a:ee:79:62:57:f0:68:f5:08:03:14: 5c:93:c9:9b:a7:31:7d:c3:4e:35:88:b0:9d:6a:95:d3:76:a9: aa:fa:79:f8:49:8c:7c:64:f1:c2:e8:7d:88:99:66:55:ca:a5: 7a:f9:92:99:ca:a9:86:f2:16:cb:0d:14:f7:39:a7:8b:bd:f1: 41:fc:75:8c -----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgIUAQ0Mn0MoWE+dMxRvO7c9zikB94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ1OWMzNmMtMTcxOC00YTQyLWE1YzEtZTNlNjI3NGQ5 NDNhMB4XDTI2MTAyNTAxMDAxM1oXDTI3MDEyMzAyMDAxM1owLzEtMCsGA1UEAxMk YTRmMTZmODgtMjNiZC00OGNiLTgzNmUtZGJlMjNlOTQxMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAltQ4O4yFMHN0yhRdLn0UEFzDwkVVYrU6MY UBsuysIlRs4zGyWRWLGQ62ll+iuFbbyHZ75zUgwded3SKo/NBzNDpJtw2MZBf4lE MlGDlz8t1t8yxVZI4bm2sZJYeWCCx1PA8/B5T29ZjJgJ/6a0xwInJEtZCUxiUnbc jDoUbmC4+OuqFpkzeqf7iAyXU+d9sAOZSm+MX3m2XFun/3WzAF4U917EaLa1noDK dXCqqu0D3OBKhYSD89Fo3rIOGJvVVlEIDwLSSMuv+5RuAsjjF75/L1+ywX+1twPN avf4KTxAiOr1Ape7hVQJUt4I0eKV6zkwQJgHKxSqltMjhWc9kwIDAQABo4IDjDCC A4gwHQYDVR0OBBYEFNZjq8H48fThk/PgsIeuAGZ6PaURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU5 YzM2Yy0xNzE4LTRhNDItYTVjMS1lM2U2Mjc0ZDk0M2EvOTU3ZDU2ODktZWYzNy0z MWVlLTgyMmQtMzA2YTZjMzk5ZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ1OWMzNmMtMTcxOC00YTQyLWE1 YzEtZTNlNjI3NGQ5NDNhLzhkNTljMzZjLTE3MTgtNGE0Mi1hNWMxLWUzZTYyNzRk OTQzYS5jcmwwHwYDVR0jBBgwFoAUDeKeZCfSsGc40SANeaVnnq3QosQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU5YzM2Yy0xNzE4LTRhNDItYTVjMS1lM2U2 Mjc0ZDk0M2EuY2VyMFYGCCsGAQUFBwEHAQH/BEcwRTBDBAIAATA9MAsDAwLQdAME ANB0AjAMAwQA0HQFAwQA0HQQAwQA0HQSMAwDBALQdBQDBAPQdDAwDAMEAdB0OgME BtB0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQBujvKg5JN0PbAr5wgSMRTHj+TejB9ateTSY/jnF8tbFsxg B6CWL/Ug/uW7PKgBBOl9/Kr52JAEA3z+VZ6n2maQF4PJVwrgkewjD2Jd80ILHh1h qdIAjhCRgnnm62OS+mWUHTo6Uhdb1cd6ksM0eGETMUH0Yk1GrcfOMa4YuopVqToa h1Uv+z/5fOXSmj/tvpZkJ0YbToAzyQWwYQt+XIGcKVx5hHuD5XFojBxInZ1nu5nX Rk30GNzxHFnWmu55YlfwaPUIAxRck8mbpzF9w041iLCdapXTdqmq+nn4SYx8ZPHC 6H2ImWZVyqV6+ZKZyqmG8hbLDRT3OaeLvfFB/HWM -----END CERTIFICATE-----Generated at Mon Oct 26 11:25:56 2026 by rpki-client