$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa File: 02d4c8c1-811c-301f-ae47-61c6c62035fe.roa (raw, json) Hash identifier: zoROxUIkOhtgGwCVMWNScJUx+uhcWZ87xLbCDOUhnDM= Subject key identifier: 8C:67:D2:FF:97:A6:B7:37:D0:63:16:91:D3:CF:61:82:70:E6:92:CE Certificate issuer: /CN=b0217be3-0b99-45d9-9156-e23551753455 Certificate serial: 010D0C9F4328584F03A77ECB341DCDF692D8B8A0 Authority key identifier: 61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 395019 IP address blocks: 208.76.208.0/22 maxlen: 22 2602:fbfd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:7e:cb:34:1d:cd:f6:92:d8:b8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0217be3-0b99-45d9-9156-e23551753455 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=47fe2793-7812-47ae-b072-e3991458c049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d5:45:6c:83:82:8e:14:1a:24:b2:92:75:2b: 42:02:e1:18:6c:2c:17:7f:03:13:7c:15:04:ed:17: 26:80:15:7b:7c:78:88:c7:df:41:0e:af:61:c3:b8: b0:e0:4d:cb:6b:f2:0d:fe:f0:a4:3d:15:ab:d0:cc: 4f:ab:eb:a8:52:e8:84:c6:f8:d8:55:ed:ef:a5:0e: 7b:8d:f3:78:21:b9:d3:33:3f:a1:10:51:c9:aa:24: 3f:a4:e1:2b:c1:74:9e:54:db:48:a0:a2:4f:d0:ff: 68:a8:f9:c3:34:30:d9:7c:0e:36:00:3f:34:c9:5c: 47:63:29:ab:28:f1:0c:b7:ce:1b:d9:d6:c3:58:1e: d5:71:5f:e0:3a:fd:40:2e:06:c7:04:5f:f8:10:6d: 2a:5e:78:f3:0c:a0:e4:04:03:a6:aa:bd:48:d1:6a: ca:89:b6:95:8e:46:7c:e2:55:b7:e9:79:c8:29:92: 01:57:e4:a4:1e:cb:db:5f:66:65:44:eb:2d:66:2e: 0b:2c:b8:90:34:83:7d:76:0e:14:cd:59:26:ed:18: 5f:7d:52:47:aa:47:ba:82:58:a4:e7:85:95:49:f7: 3d:93:83:26:91:a9:df:67:ab:63:35:a8:6b:00:dd: 4e:05:a6:1d:e7:aa:6a:d7:f9:b9:27:28:2d:d1:60: 92:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:67:D2:FF:97:A6:B7:37:D0:63:16:91:D3:CF:61:82:70:E6:92:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl X509v3 Authority Key Identifier: keyid:61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer sbgp-ipAddrBlock: critical IPv4: 208.76.208.0/22 IPv6: 2602:fbfd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a3:ef:3f:f7:c9:52:88:17:0a:d9:79:80:52:79:a3:bf:5d: d4:0c:bd:d6:19:84:b7:08:e0:ac:2f:99:62:a3:aa:2c:10:d8: 7f:d6:22:ef:cc:82:0c:71:da:ec:f9:8f:a0:b6:92:22:d2:10: 48:54:d4:be:a0:1e:47:5b:75:39:70:4e:cc:9f:c3:d1:8d:72: 1d:cd:01:c7:24:c2:31:06:15:10:4c:d1:9e:7f:2b:f8:dd:1c: 13:8c:b8:ae:00:3f:6e:e2:53:67:32:56:0e:8e:d4:6d:35:3e: 33:cc:43:9e:de:a9:cd:92:a4:5e:bc:fe:4a:67:4a:e1:6c:ec: cc:8d:5a:45:30:a3:be:4b:6a:cf:1e:24:3a:71:7d:b7:92:ae: 0b:68:54:84:5d:43:cc:a4:0d:77:1e:1b:9a:75:59:b4:b4:12: 3e:c8:b0:e8:e0:86:20:71:ac:51:21:f2:c9:24:86:7b:c7:3f: 82:f8:cd:96:17:60:62:f7:97:16:df:2e:d4:97:86:38:16:1c: 97:e8:38:e8:d5:e2:ac:7a:7f:af:a5:b7:f7:b9:e5:b0:06:6d: db:30:ce:e6:ec:a9:7f:ce:25:a5:a6:3c:08:19:43:dc:9d:d4: 8f:b1:6c:55:f0:36:ba:ff:87:3d:14:c3:69:26:6e:80:99:67: bc:b1:18:47 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8Dp37LNB3N9pLYuKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyMTdiZTMtMGI5OS00NWQ5LTkxNTYtZTIzNTUxNzUz NDU1MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk NDdmZTI3OTMtNzgxMi00N2FlLWIwNzItZTM5OTE0NThjMDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdVFbIOCjhQaJLKSdStCAuEYbCwXfwMTfBUE 7RcmgBV7fHiIx99BDq9hw7iw4E3La/IN/vCkPRWr0MxPq+uoUuiExvjYVe3vpQ57 jfN4IbnTMz+hEFHJqiQ/pOErwXSeVNtIoKJP0P9oqPnDNDDZfA42AD80yVxHYymr KPEMt84b2dbDWB7VcV/gOv1ALgbHBF/4EG0qXnjzDKDkBAOmqr1I0WrKibaVjkZ8 4lW36XnIKZIBV+SkHsvbX2ZlROstZi4LLLiQNIN9dg4UzVkm7RhffVJHqke6glik 54WVSfc9k4MmkanfZ6tjNahrAN1OBaYd56pq1/m5Jygt0WCSpQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIxn0v+Xprc30GMWkdPPYYJw5pLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIx N2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1NTE3NTM0NTUvMDJkNGM4YzEtODExYy0z MDFmLWFlNDctNjFjNmM2MjAzNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjAyMTdiZTMtMGI5OS00NWQ5LTkx NTYtZTIzNTUxNzUzNDU1L2IwMjE3YmUzLTBiOTktNDVkOS05MTU2LWUyMzU1MTc1 MzQ1NS5jcmwwHwYDVR0jBBgwFoAUYfKSn65vBg21wZxQhXAYY0ne2zYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIxN2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1 NTE3NTM0NTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC0EzQMA4E AgACMAgDBgQmAvv9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjo+8/98lSiBcK2XmAUnmjv13UDL3WGYS3 COCsL5lio6osENh/1iLvzIIMcdrs+Y+gtpIi0hBIVNS+oB5HW3U5cE7Mn8PRjXId zQHHJMIxBhUQTNGefyv43RwTjLiuAD9u4lNnMlYOjtRtNT4zzEOe3qnNkqRevP5K Z0rhbOzMjVpFMKO+S2rPHiQ6cX23kq4LaFSEXUPMpA13HhuadVm0tBI+yLDo4IYg caxRIfLJJIZ7xz+C+M2WF2Bi95cW3y7Ul4Y4FhyX6Djo1eKsen+vpbf3ueWwBm3b MM7m7Kl/ziWlpjwIGUPcndSPsWxV8Da6/4c9FMNpJm6AmWe8sRhH -----END CERTIFICATE-----Generated at Sat Sep 26 21:33:56 2026 by rpki-client