$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/a5fe454b-deb7-37cf-bd66-6552718aa14d.roa File: a5fe454b-deb7-37cf-bd66-6552718aa14d.roa (raw, json) Hash identifier: 7CnV3p6IX0M5nCaE32+p2k6ba7Ri/K5e0fdFVlM7ga4= Subject key identifier: 32:B4:A4:AC:18:30:E4:14:B6:62:CE:D1:75:A1:77:D3:92:04:74:93 Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584ED8648678711E2E8412742B60 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/a5fe454b-deb7-37cf-bd66-6552718aa14d.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 399244 IP address blocks: 208.92.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:86:78:71:1e:2e:84:12:74:2b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=8fc61f59-dbc2-4f13-8c7d-1e5c405bd923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:4c:61:27:2b:3c:f2:59:9e:d2:d7:ce:9d: 6b:5c:d6:0f:54:cc:7d:e5:25:6a:07:d8:bb:00:c5: e4:d0:97:49:9f:d5:37:d7:4d:5e:7d:ba:2d:37:44: cb:27:b5:7f:dc:3e:da:5f:12:30:43:82:83:a8:80: b3:81:46:7a:69:54:e7:06:4b:e2:d3:e8:d1:0d:e7: 45:e2:c0:c2:6d:d9:0a:26:63:7c:a2:95:1a:bc:a0: 13:f9:74:80:c4:84:74:98:4e:66:f8:1d:25:54:5e: 75:03:86:95:92:3a:32:cc:04:de:f6:58:9d:50:1d: ac:c5:71:1b:1d:a5:73:dd:69:39:5b:27:87:88:56: f3:75:ab:6d:c2:e9:cf:ca:c8:15:79:33:11:25:7e: 55:5f:f6:73:4c:ef:a3:9d:30:c6:32:22:7d:d0:20: a8:6e:d1:78:7e:ef:57:0d:f5:c5:ee:6f:00:ec:a9: c5:65:29:49:8b:c7:12:e9:d6:da:19:f9:9f:2c:4a: 67:6e:97:30:17:0d:05:ce:db:d4:0b:ea:68:38:c5: 94:0b:4c:68:f4:93:81:d3:e7:ac:de:5e:95:75:62: 80:a7:26:a9:05:c5:9c:a2:a9:75:a1:3d:e1:62:df: 2b:db:b8:dd:6d:bc:3d:a7:2c:dc:c1:dc:7d:c0:5d: 2c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B4:A4:AC:18:30:E4:14:B6:62:CE:D1:75:A1:77:D3:92:04:74:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/a5fe454b-deb7-37cf-bd66-6552718aa14d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 208.92.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:19:86:7f:ce:eb:25:87:ad:39:4d:30:4e:6b:d8:74:e8:a0: 58:b5:af:dc:a0:c4:ae:3a:8e:51:22:95:45:a8:3e:ed:c0:cd: 90:44:0a:c6:11:6b:39:b1:3d:aa:5e:ff:04:07:1c:e0:12:a3: 56:64:38:88:f1:6f:38:e5:43:c3:a0:c1:9b:34:9c:ad:c8:ff: 6c:8c:dc:58:4f:9b:d9:f8:4d:5f:79:65:3f:61:a2:e9:86:67: 7a:b8:c0:27:4a:1f:a4:ab:74:58:d8:0e:4e:1a:8f:5d:e3:cc: 01:1c:f7:8c:7c:80:0b:05:a1:50:45:36:df:fb:7a:6c:32:b4: 60:df:8a:e6:ca:cf:56:f7:b2:1e:39:e7:c0:93:bc:a5:61:75: 08:af:dc:95:0c:92:d4:e5:a4:08:92:ca:0d:88:95:b8:9d:7a: c7:75:2f:c9:b0:58:7b:b6:e3:51:67:94:c7:3a:c9:29:4e:b1: e6:26:85:9a:a1:bf:bb:d8:ff:c5:4c:50:4e:6f:98:c8:4b:d1: 57:ae:bf:9f:55:87:c3:15:6f:81:32:1f:e3:d6:79:99:c6:1b: 23:0c:cf:a3:eb:db:ce:2b:26:97:a0:2f:95:09:f4:ae:2a:43: e8:31:e0:c0:3b:0d:02:a3:bd:27:3e:15:f8:df:29:e2:e8:b3: bb:12:72:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZIZ4cR4uhBJ0K2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk OGZjNjFmNTktZGJjMi00ZjEzLThjN2QtMWU1YzQwNWJkOTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd5MYScrPPJZntLXzp1rXNYPVMx95SVqB9i7 AMXk0JdJn9U3101efbotN0TLJ7V/3D7aXxIwQ4KDqICzgUZ6aVTnBkvi0+jRDedF 4sDCbdkKJmN8opUavKAT+XSAxIR0mE5m+B0lVF51A4aVkjoyzATe9lidUB2sxXEb HaVz3Wk5WyeHiFbzdattwunPysgVeTMRJX5VX/ZzTO+jnTDGMiJ90CCobtF4fu9X DfXF7m8A7KnFZSlJi8cS6dbaGfmfLEpnbpcwFw0FztvUC+poOMWUC0xo9JOB0+es 3l6VdWKApyapBcWcoql1oT3hYt8r27jdbbw9pyzcwdx9wF0sQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK0pKwYMOQUtmLO0XWhd9OSBHSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvYTVmZTQ1NGItZGViNy0z N2NmLWJkNjYtNjU1MjcxOGFhMTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEZhn/O6yWHrTlNME5r2HTooFi1r9ygxK46jlEilUWoPu3AzZBECsYR azmxPape/wQHHOASo1ZkOIjxbzjlQ8OgwZs0nK3I/2yM3FhPm9n4TV95ZT9houmG Z3q4wCdKH6SrdFjYDk4aj13jzAEc94x8gAsFoVBFNt/7emwytGDfiubKz1b3sh45 58CTvKVhdQiv3JUMktTlpAiSyg2Ilbidesd1L8mwWHu241FnlMc6ySlOseYmhZqh v7vY/8VMUE5vmMhL0Veuv59Vh8MVb4EyH+PWeZnGGyMMz6Pr284rJpegL5UJ9K4q Q+gx4MA7DQKjvSc+FfjfKeLos7sScqg= -----END CERTIFICATE-----Generated at Sat Sep 5 06:11:57 2026 by rpki-client