$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa File: d8995625-d95c-32f8-bd79-899a5fc78f47.roa (raw, json) Hash identifier: WDQz/wnDi3txM4DyB2kX8vUBxNRgcSkwBA26j/sxzi4= Subject key identifier: 3B:2C:21:54:93:90:6C:E3:01:72:C2:62:6E:BF:DF:07:EF:EA:6F:5A Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584EB6E1A1884E5741A3665BED40 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa Signing time: Mon 03 Aug 2026 13:00:12 +0000 ROA not before: Mon 03 Aug 2026 13:00:12 +0000 ROA not after: Sun 01 Nov 2026 14:00:12 +0000 asID: 21519 IP address blocks: 208.73.28.0/22 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:e1:a1:88:4e:57:41:a3:66:5b:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Aug 3 13:00:12 2026 GMT Not After : Nov 1 14:00:12 2026 GMT Subject: CN=56e60cd0-076e-45fc-a45d-7fb3973d0c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e1:b4:98:04:b4:32:fc:65:89:b4:7c:e4:aa: 2e:1d:aa:29:17:17:76:49:aa:89:58:82:c4:5c:05: 93:55:46:63:af:f0:f9:f0:c7:7a:c3:ac:70:40:2a: 41:4f:83:89:67:2e:d6:12:74:10:25:1c:00:31:d0: ae:c8:81:7f:31:5d:44:46:87:04:81:10:49:7e:11: 67:93:9c:c9:7c:e4:85:a2:56:66:a9:8e:8f:78:95: 92:4a:01:35:ef:1e:a4:2a:ea:39:56:43:63:c3:d1: 6d:a0:4f:d0:d1:8c:39:a4:93:41:2d:d5:7d:42:77: 0e:42:58:f2:1b:19:7a:6a:e1:f4:81:2f:20:39:a3: 45:df:58:8f:84:5f:58:a0:52:df:94:96:36:55:a2: b5:f9:b5:05:8e:2b:f0:83:0b:1f:bb:01:27:28:6c: 20:24:5b:7b:14:cb:b1:a1:fa:7e:64:1f:be:91:b4: 8c:1b:77:ae:53:bd:2d:59:ca:56:03:4d:29:4b:c8: 77:d6:30:2e:97:53:9f:ee:78:26:c3:62:14:03:8f: 2e:a5:dc:01:fb:f6:74:9d:5f:d4:d5:c2:3f:a9:22: af:3a:95:7f:b5:fb:1f:95:a8:2d:c1:68:86:db:06: 65:83:ca:43:73:2b:57:5c:68:e8:f9:e7:00:b8:a7: 8f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2C:21:54:93:90:6C:E3:01:72:C2:62:6E:BF:DF:07:EF:EA:6F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv4: 208.73.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:89:7e:70:bf:25:fe:ac:a9:2d:be:f4:2e:2e:63:60:fd:25: 5e:77:69:30:62:07:75:62:d4:22:dc:e7:54:04:a5:7d:f6:9d: d1:f1:ab:b3:a4:7b:55:3a:f1:9c:fb:1e:29:75:6f:a7:e2:19: b4:a8:50:a4:c4:66:94:e5:11:a0:30:35:65:e1:73:72:c1:b1: 86:98:6c:fc:0a:8c:dc:de:e2:4f:32:7c:6b:49:91:f8:e1:99: 39:1f:dc:77:c9:eb:7a:42:33:3d:33:ae:7b:76:d5:6a:3a:f0: e2:96:60:e5:3b:ee:c9:f7:82:92:dc:e7:41:28:18:b9:89:b2: 35:32:21:5b:a3:1a:c4:27:a8:b3:05:06:2f:1c:f1:7c:75:10: e5:b6:66:7c:a9:9b:49:3c:6d:2a:bd:dc:17:ec:6f:ac:75:49: fb:ff:20:f7:80:b9:f7:c0:a7:30:d2:a1:d5:f4:0a:03:08:c2: 5b:7e:e7:a1:17:d7:33:c2:c2:1e:65:0f:82:11:de:7e:ce:1e: 3d:b2:fd:d3:3e:a6:95:1c:10:8e:93:6e:d5:b3:8a:cf:d3:c4: 52:ab:1b:b6:c0:60:48:ce:41:6f:c1:0a:c5:b0:b9:dd:89:b7: 95:00:5d:37:df:13:07:88:31:de:2b:00:99:bc:a9:10:85:fa: 7e:d4:78:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624aGITldBo2Zb7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk NTZlNjBjZDAtMDc2ZS00NWZjLWE0NWQtN2ZiMzk3M2QwYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuG0mAS0MvxlibR85KouHaopFxd2SaqJWILE XAWTVUZjr/D58Md6w6xwQCpBT4OJZy7WEnQQJRwAMdCuyIF/MV1ERocEgRBJfhFn k5zJfOSFolZmqY6PeJWSSgE17x6kKuo5VkNjw9FtoE/Q0Yw5pJNBLdV9QncOQljy Gxl6auH0gS8gOaNF31iPhF9YoFLflJY2VaK1+bUFjivwgwsfuwEnKGwgJFt7FMux ofp+ZB++kbSMG3euU70tWcpWA00pS8h31jAul1Of7ngmw2IUA48updwB+/Z0nV/U 1cI/qSKvOpV/tfsflagtwWiG2wZlg8pDcytXXGjo+ecAuKeP+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDssIVSTkGzjAXLCYm6/3wfv6m9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvZDg5OTU2MjUtZDk1Yy0z MmY4LWJkNzktODk5YTVmYzc4ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmJfnC/Jf6sqS2+9C4uY2D9JV53aTBiB3Vi1CLc51QEpX32ndHxq7Ok e1U68Zz7Hil1b6fiGbSoUKTEZpTlEaAwNWXhc3LBsYaYbPwKjNze4k8yfGtJkfjh mTkf3HfJ63pCMz0zrnt21Wo68OKWYOU77sn3gpLc50EoGLmJsjUyIVujGsQnqLMF Bi8c8Xx1EOW2Znypm0k8bSq93Bfsb6x1Sfv/IPeAuffApzDSodX0CgMIwlt+56EX 1zPCwh5lD4IR3n7OHj2y/dM+ppUcEI6TbtWzis/TxFKrG7bAYEjOQW/BCsWwud2J t5UAXTffEweIMd4rAJm8qRCF+n7UeEA= -----END CERTIFICATE-----Generated at Wed Aug 26 15:13:46 2026 by rpki-client