$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/957d5689-ef37-31ee-822d-306a6c399dfe.roa File: 957d5689-ef37-31ee-822d-306a6c399dfe.roa (raw, json) Hash identifier: CjcXU0Y4yj5zJ26q50xIBCgBtYwfsKrPDikCGGEZ+2Q= Subject key identifier: AF:80:4B:F6:67:B1:B1:7A:F8:D9:B7:C4:DD:8A:58:BF:09:EF:7E:2E Certificate issuer: /CN=8d59c36c-1718-4a42-a5c1-e3e6274d943a Certificate serial: 010D0C9F4328584EFAC6E892235AFB16927A5B40 Authority key identifier: 0D:E2:9E:64:27:D2:B0:67:38:D1:20:0D:79:A5:67:9E:AD:D0:A2:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/957d5689-ef37-31ee-822d-306a6c399dfe.roa Signing time: Thu 27 Aug 2026 20:41:23 +0000 ROA not before: Thu 27 Aug 2026 20:41:23 +0000 ROA not after: Wed 25 Nov 2026 21:41:23 +0000 asID: 25653 IP address blocks: 208.116.0.0/23 maxlen: 23 208.116.2.0/24 maxlen: 24 208.116.5.0/24 maxlen: 24 208.116.6.0/23 maxlen: 23 208.116.8.0/21 maxlen: 21 208.116.16.0/24 maxlen: 24 208.116.18.0/24 maxlen: 24 208.116.20.0/22 maxlen: 22 208.116.24.0/21 maxlen: 21 208.116.32.0/20 maxlen: 20 208.116.48.0/21 maxlen: 21 208.116.58.0/23 maxlen: 23 208.116.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fa:c6:e8:92:23:5a:fb:16:92:7a:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c36c-1718-4a42-a5c1-e3e6274d943a Validity Not Before: Aug 27 20:41:23 2026 GMT Not After : Nov 25 21:41:23 2026 GMT Subject: CN=554f3fef-876b-494e-8742-96bb9dfdca53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:15:34:00:79:01:23:0e:b2:a4:15:fb:4a: 85:20:d7:83:35:96:ba:ec:18:7d:f8:b0:28:cd:a4: 40:fa:59:c6:2a:78:41:22:96:4f:cc:31:d5:82:e8: 1d:96:bd:ab:47:e6:a0:4a:30:ee:7f:30:11:82:4d: c7:26:31:cd:d3:70:c6:3d:94:65:db:12:f3:ee:3e: 53:44:a0:36:b2:fc:75:aa:2c:39:3e:ce:c7:b2:b8: 83:d5:a2:66:7d:96:3d:94:e3:2a:f8:1f:cb:31:c2: ed:99:83:e4:16:bb:1b:33:47:5d:3c:0d:74:6f:8c: 59:42:24:56:f5:16:84:b3:9a:1f:f3:37:c2:ab:a0: 35:4e:a5:a9:1f:32:b3:f5:4f:ea:64:15:96:4f:82: cc:5c:0a:26:ae:aa:41:34:c3:1e:2f:5d:0d:3c:84: 30:e9:0b:ac:14:32:4e:d5:65:ec:24:9c:57:89:ca: c2:ea:4f:5d:64:31:0b:8c:8b:89:8c:fc:0c:09:bb: 88:b2:ef:1f:41:ab:c2:0e:23:a5:5d:fd:72:2c:a7: d3:d6:4f:55:3c:2b:b2:0c:41:5a:f2:2d:17:de:42: b6:13:88:ee:98:a7:60:3e:3e:53:34:4a:90:fb:ec: 82:f5:1f:4e:5f:59:e5:67:83:a7:c9:e2:7e:6c:01: de:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:80:4B:F6:67:B1:B1:7A:F8:D9:B7:C4:DD:8A:58:BF:09:EF:7E:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/957d5689-ef37-31ee-822d-306a6c399dfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a/8d59c36c-1718-4a42-a5c1-e3e6274d943a.crl X509v3 Authority Key Identifier: keyid:0D:E2:9E:64:27:D2:B0:67:38:D1:20:0D:79:A5:67:9E:AD:D0:A2:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8d59c36c-1718-4a42-a5c1-e3e6274d943a.cer sbgp-ipAddrBlock: critical IPv4: 208.116.0.0-208.116.2.255 208.116.5.0-208.116.16.255 208.116.18.0/24 208.116.20.0-208.116.55.255 208.116.58.0-208.116.63.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:90:72:47:3f:66:15:01:c4:66:1a:6b:ca:28:5a:c5:b6:ca: 5f:09:c2:eb:30:ee:54:49:78:a6:f9:bc:b2:65:2b:02:8b:58: 4a:75:d8:ff:92:c9:22:cd:e6:76:db:44:cc:91:b4:17:53:44: 00:68:90:cd:77:c9:50:da:13:e0:95:c8:95:94:30:3a:87:7e: bc:3e:b7:7b:5a:12:71:39:71:9c:5e:34:6e:b2:ec:e9:05:8d: 20:2c:48:a5:ec:89:4a:83:ec:a2:57:38:d7:73:8c:80:3f:b5: e0:67:f8:b5:4e:01:da:6b:fb:b8:d5:c4:d5:e7:97:64:f5:2f: ca:65:4f:14:cd:08:ca:bc:09:4f:2b:06:55:85:02:63:ba:1a: 12:9c:80:94:2b:28:76:2e:3f:08:ad:00:b7:dc:26:f5:f7:ad: c3:3d:06:41:f2:6d:c8:3c:9f:ba:07:69:c4:57:49:74:a1:f5: ad:2b:a9:20:bd:17:ec:13:7c:d5:a7:56:97:05:77:7b:ed:c4: 70:2e:be:88:90:80:1c:79:34:ab:c7:0e:2b:36:d7:a3:c2:1c: 5f:97:c3:2f:23:e6:29:47:9b:29:a3:64:1c:6c:2f:27:9a:d9: 61:4a:05:41:11:52:58:ca:be:30:25:5d:d6:e8:66:fe:82:83: cc:9f:22:cd -----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgIUAQ0Mn0MoWE76xuiSI1r7FpJ6W0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ1OWMzNmMtMTcxOC00YTQyLWE1YzEtZTNlNjI3NGQ5 NDNhMB4XDTI2MDgyNzIwNDEyM1oXDTI2MTEyNTIxNDEyM1owLzEtMCsGA1UEAxMk NTU0ZjNmZWYtODc2Yi00OTRlLTg3NDItOTZiYjlkZmRjYTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS4VNAB5ASMOsqQV+0qFINeDNZa67Bh9+LAo zaRA+lnGKnhBIpZPzDHVgugdlr2rR+agSjDufzARgk3HJjHN03DGPZRl2xLz7j5T RKA2svx1qiw5Ps7HsriD1aJmfZY9lOMq+B/LMcLtmYPkFrsbM0ddPA10b4xZQiRW 9RaEs5of8zfCq6A1TqWpHzKz9U/qZBWWT4LMXAomrqpBNMMeL10NPIQw6QusFDJO 1WXsJJxXicrC6k9dZDELjIuJjPwMCbuIsu8fQavCDiOlXf1yLKfT1k9VPCuyDEFa 8i0X3kK2E4jumKdgPj5TNEqQ++yC9R9OX1nlZ4OnyeJ+bAHeVQIDAQABo4IDjDCC A4gwHQYDVR0OBBYEFK+AS/ZnsbF6+Nm3xN2KWL8J734uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU5 YzM2Yy0xNzE4LTRhNDItYTVjMS1lM2U2Mjc0ZDk0M2EvOTU3ZDU2ODktZWYzNy0z MWVlLTgyMmQtMzA2YTZjMzk5ZGZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGQ1OWMzNmMtMTcxOC00YTQyLWE1 YzEtZTNlNjI3NGQ5NDNhLzhkNTljMzZjLTE3MTgtNGE0Mi1hNWMxLWUzZTYyNzRk OTQzYS5jcmwwHwYDVR0jBBgwFoAUDeKeZCfSsGc40SANeaVnnq3QosQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84ZDU5YzM2Yy0xNzE4LTRhNDItYTVjMS1lM2U2 Mjc0ZDk0M2EuY2VyMFYGCCsGAQUFBwEHAQH/BEcwRTBDBAIAATA9MAsDAwLQdAME ANB0AjAMAwQA0HQFAwQA0HQQAwQA0HQSMAwDBALQdBQDBAPQdDAwDAMEAdB0OgME BtB0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCNkHJHP2YVAcRmGmvKKFrFtspfCcLrMO5USXim+byyZSsC i1hKddj/kskizeZ220TMkbQXU0QAaJDNd8lQ2hPglciVlDA6h368Prd7WhJxOXGc XjRusuzpBY0gLEil7IlKg+yiVzjXc4yAP7XgZ/i1TgHaa/u41cTV55dk9S/KZU8U zQjKvAlPKwZVhQJjuhoSnICUKyh2Lj8IrQC33Cb1963DPQZB8m3IPJ+6B2nEV0l0 ofWtK6kgvRfsE3zVp1aXBXd77cRwLr6IkIAceTSrxw4rNtejwhxfl8MvI+YpR5sp o2QcbC8nmtlhSgVBEVJYyr4wJV3W6Gb+goPMnyLN -----END CERTIFICATE-----Generated at Sat Sep 5 07:27:15 2026 by rpki-client