$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/f320fd1c-e993-3ba9-88cc-8ecb0a72c9a7.roa File: f320fd1c-e993-3ba9-88cc-8ecb0a72c9a7.roa (raw, json) Hash identifier: LOlfhTpifDeJwk5+MZE+VQ05JNQbBrSz+BPKFc7eqjc= Subject key identifier: 3B:B0:88:DC:F0:04:9D:FB:89:6C:76:27:D4:5D:1C:77:E4:4F:DC:53 Certificate issuer: /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Certificate serial: 010D0C9F4328584F4C3D44AA8DC666413A7ADF00 Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/f320fd1c-e993-3ba9-88cc-8ecb0a72c9a7.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 272106 IP address blocks: 8.243.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:44:aa:8d:c6:66:41:3a:7a:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=f3b2785c-4c97-4209-b130-e3e086136e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:35:2b:20:2f:70:3a:aa:b4:ed:e4:6a:68: 24:b9:9d:88:4b:aa:8a:a0:f8:ec:cd:2f:ed:1e:6a: 72:93:34:ee:40:17:bd:da:fa:f2:56:14:78:b2:0b: 24:f2:09:f9:51:ba:0d:6f:92:98:9a:48:9b:fd:af: 9e:5e:4d:1f:b9:26:9f:1a:81:37:d3:df:1f:a3:2f: 08:5a:72:09:41:b2:39:e5:ed:34:67:ba:14:be:f7: 62:1c:84:55:69:2b:37:f4:e1:63:2a:7a:9c:4a:30: d9:52:9c:9a:1c:d4:ff:db:44:9d:56:3c:09:b7:12: 60:c4:0b:fa:d9:d8:be:ef:c3:07:2e:20:1f:e9:d5: 11:82:90:2d:73:b5:97:70:a2:44:28:9c:54:3a:6b: c4:07:e8:92:cc:b7:8e:bf:22:b1:bd:fb:7a:e6:35: 17:b3:8c:8e:23:aa:d9:bb:48:7b:dc:47:d4:f6:bf: 53:a8:43:2e:43:f3:24:d3:b3:3c:66:a4:02:a5:9d: 98:be:cb:a1:c6:7e:05:c8:d2:8e:df:7b:6d:34:85: 61:82:a3:b5:54:85:42:01:b3:18:2c:81:4b:f2:0a: 57:de:ba:02:aa:57:2e:35:35:0d:f1:0d:f6:c6:4a: f8:54:fb:0f:83:af:d3:12:ae:3f:2f:c5:35:0f:ca: 82:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B0:88:DC:F0:04:9D:FB:89:6C:76:27:D4:5D:1C:77:E4:4F:DC:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/f320fd1c-e993-3ba9-88cc-8ecb0a72c9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl X509v3 Authority Key Identifier: keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer sbgp-ipAddrBlock: critical IPv4: 8.243.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:c6:23:81:f2:21:fc:1d:3f:72:25:45:54:d6:5a:f2:c9:89: 86:27:21:24:86:ed:10:f8:e7:46:34:72:af:06:72:0b:57:9a: e3:66:f1:82:be:40:16:5a:be:a8:84:c3:a0:c5:d3:59:d1:7a: 82:19:ed:f5:fb:1c:a3:7b:30:c7:36:9b:be:60:73:c3:47:1b: 38:75:e0:3a:b8:2c:4e:da:b7:de:13:b3:29:83:de:5c:a3:11: a1:e7:60:31:cd:87:56:ae:b6:95:46:cc:0d:37:99:fa:c3:c9: 89:bc:4c:ea:b6:72:8f:3d:1a:a9:c6:49:1c:62:37:88:8b:30: 0d:92:2f:c7:06:1b:11:82:e8:ba:e0:df:46:04:c3:6c:3e:63: 24:dc:9b:ee:b1:2d:dd:88:f5:a9:02:44:34:84:cc:1e:84:cf: 7b:a5:6e:e7:c4:a2:d3:d9:ad:21:63:d7:dc:ed:66:de:46:01: 51:8a:7d:32:4f:ea:b2:de:b6:3c:9e:b6:c2:18:93:ab:1a:29: aa:f4:5d:7a:3c:44:9e:d6:3c:0f:28:15:bf:7e:45:60:95:95: b9:25:e3:ac:29:4c:64:57:91:23:14:9e:ba:8b:be:8e:ad:9b: 2a:83:26:01:ef:54:04:f0:66:3c:fb:27:a3:14:05:ea:ec:97: 07:3a:06:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUSqjcZmQTp63wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFkYjQ3OGUtMGFlMi00NmZjLTg0NWUtN2ZlMTM0NzVj OTBlMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZjNiMjc4NWMtNGM5Ny00MjA5LWIxMzAtZTNlMDg2MTM2ZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHw1KyAvcDqqtO3kamgkuZ2IS6qKoPjszS/t HmpykzTuQBe92vryVhR4sgsk8gn5UboNb5KYmkib/a+eXk0fuSafGoE3098foy8I WnIJQbI55e00Z7oUvvdiHIRVaSs39OFjKnqcSjDZUpyaHNT/20SdVjwJtxJgxAv6 2di+78MHLiAf6dURgpAtc7WXcKJEKJxUOmvEB+iSzLeOvyKxvft65jUXs4yOI6rZ u0h73EfU9r9TqEMuQ/Mk07M8ZqQCpZ2Yvsuhxn4FyNKO33ttNIVhgqO1VIVCAbMY LIFL8gpX3roCqlcuNTUN8Q32xkr4VPsPg6/TEq4/L8U1D8qCVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuwiNzwBJ37iWx2J9RdHHfkT9xTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YWRi NDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUxMzQ3NWM5MGUvZjMyMGZkMWMtZTk5My0z YmE5LTg4Y2MtOGVjYjBhNzJjOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWFkYjQ3OGUtMGFlMi00NmZjLTg0 NWUtN2ZlMTM0NzVjOTBlLzlhZGI0NzhlLTBhZTItNDZmYy04NDVlLTdmZTEzNDc1 YzkwZS5jcmwwHwYDVR0jBBgwFoAUe7P5DSYjVjJ7pO6JA5UDtPfW0iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YWRiNDc4ZS0wYWUyLTQ2ZmMtODQ1ZS03ZmUx MzQ3NWM5MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACPN+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnGI4HyIfwdP3IlRVTWWvLJiYYnISSG7RD450Y0cq8GcgtXmuNm8YK+ QBZavqiEw6DF01nReoIZ7fX7HKN7MMc2m75gc8NHGzh14Dq4LE7at94TsymD3lyj EaHnYDHNh1autpVGzA03mfrDyYm8TOq2co89GqnGSRxiN4iLMA2SL8cGGxGC6Lrg 30YEw2w+YyTcm+6xLd2I9akCRDSEzB6Ez3ulbufEotPZrSFj19ztZt5GAVGKfTJP 6rLetjyetsIYk6saKar0XXo8RJ7WPA8oFb9+RWCVlbkl46wpTGRXkSMUnrqLvo6t myqDJgHvVATwZjz7J6MUBerslwc6BrI= -----END CERTIFICATE-----Generated at Wed Oct 28 05:26:43 2026 by rpki-client