$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa File: 844a9f17-b00f-3490-8954-09544703c001.roa (raw, json) Hash identifier: FP2uLNmV6do2jH6cuNeYHMl07d6FlUPgAJ3NUZCvBVU= Subject key identifier: 24:39:1C:33:F1:B5:35:5C:E8:C1:77:C8:27:1E:75:80:A4:8A:25:E8 Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F4328584E9D4A66DC915C60A4559A2D00 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 13629 IP address blocks: 208.94.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:66:dc:91:5c:60:a4:55:9a:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=5dba04e1-2c40-471d-a510-c038630094dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:06:18:6a:c6:20:62:4a:10:56:32:1c:6e: ad:58:19:d1:49:10:3d:2f:af:26:3b:49:0f:7a:90: b6:f2:8b:bc:c8:2b:7d:a1:13:e6:6e:48:11:1a:be: 02:5d:5b:2c:b2:ed:0b:fe:77:c6:7b:10:3b:38:f5: 35:f5:95:57:7c:c7:b2:3f:0e:96:50:b0:ba:0e:5d: 9d:0b:58:31:60:0e:ac:4b:2b:40:93:66:3a:b1:a3: d2:76:99:73:ed:69:eb:dd:d0:8b:0e:0d:1a:52:bc: 98:e1:33:93:3f:54:bb:88:61:ef:5a:fa:00:5f:7a: f8:ef:d2:18:0d:e7:ee:3e:ba:31:f9:a7:0a:a3:61: c7:ca:e4:f5:5f:45:72:cd:97:d5:e8:cb:f5:9b:fb: b3:79:be:48:5d:6c:ed:dd:19:37:0e:84:7b:18:ba: 3b:e3:cc:4c:57:ca:36:4c:80:11:62:8f:04:60:28: 25:25:1e:2e:16:6e:9a:44:10:20:c8:d0:9e:55:fc: bc:c0:86:8b:03:cb:a0:19:55:a8:0c:92:a6:85:aa: 1e:a6:9e:fd:c0:9e:e5:92:58:4d:21:a3:7b:89:86: 50:e6:0d:77:31:dc:c5:9d:de:36:53:c3:45:84:20: 4b:f6:b6:61:34:51:e2:25:2e:35:6c:73:d9:79:5d: e5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:39:1C:33:F1:B5:35:5C:E8:C1:77:C8:27:1E:75:80:A4:8A:25:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:fb:81:88:27:94:94:ae:e3:72:a4:dc:7a:db:e6:96:67:8f: 39:cd:55:f7:9a:23:ca:fd:3d:49:75:21:6d:b7:a5:97:74:15: 40:7e:84:06:0e:1a:ab:c6:ce:57:b3:ab:a6:55:89:81:32:cd: f7:e4:ce:f5:75:9b:08:b9:80:4c:a9:ae:23:bc:65:cb:63:70: 33:31:3f:7c:5c:30:b8:fb:f1:5e:fb:28:20:59:22:d6:6e:7a: 10:61:93:de:c3:54:90:21:97:b4:90:60:13:bd:24:30:c4:a5: 89:52:93:f0:c2:56:cb:37:6c:44:e9:74:28:47:d0:a1:66:5d: c7:f9:92:3a:c2:29:d6:19:39:ef:58:ac:36:3f:ab:db:d8:12: 0c:5e:fd:a3:34:c3:11:31:ee:8d:df:c2:47:4d:a0:41:93:72: 9f:63:06:c4:0a:97:89:d0:63:c9:b2:41:e7:17:f4:61:27:23: 00:76:52:00:dd:c1:12:97:b5:cd:00:e8:60:53:78:62:77:fe: ba:81:f0:90:c0:8e:29:31:24:22:05:1f:08:37:a7:1a:14:b8: e1:85:bb:70:56:f7:d2:2a:30:5a:5e:82:9e:a3:f7:06:a6:a1: 97:ca:2c:3f:38:af:de:a7:10:27:df:e9:3c:19:bf:5a:4a:08: 8e:59:e2:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSmbckVxgpFWaLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk NWRiYTA0ZTEtMmM0MC00NzFkLWE1MTAtYzAzODYzMDA5NGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoEGGGrGIGJKEFYyHG6tWBnRSRA9L68mO0kP epC28ou8yCt9oRPmbkgRGr4CXVsssu0L/nfGexA7OPU19ZVXfMeyPw6WULC6Dl2d C1gxYA6sSytAk2Y6saPSdplz7Wnr3dCLDg0aUryY4TOTP1S7iGHvWvoAX3r479IY DefuProx+acKo2HHyuT1X0VyzZfV6Mv1m/uzeb5IXWzt3Rk3DoR7GLo748xMV8o2 TIARYo8EYCglJR4uFm6aRBAgyNCeVfy8wIaLA8ugGVWoDJKmhaoepp79wJ7lklhN IaN7iYZQ5g13MdzFnd42U8NFhCBL9rZhNFHiJS41bHPZeV3lEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQ5HDPxtTVc6MF3yCcedYCkiiXoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvODQ0YTlmMTctYjAwZi0z NDkwLTg5NTQtMDk1NDQ3MDNjMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALH7gYgnlJSu43Kk3Hrb5pZnjznNVfeaI8r9PUl1IW23pZd0FUB+hAYO GqvGzlezq6ZViYEyzffkzvV1mwi5gEypriO8ZctjcDMxP3xcMLj78V77KCBZItZu ehBhk97DVJAhl7SQYBO9JDDEpYlSk/DCVss3bETpdChH0KFmXcf5kjrCKdYZOe9Y rDY/q9vYEgxe/aM0wxEx7o3fwkdNoEGTcp9jBsQKl4nQY8myQecX9GEnIwB2UgDd wRKXtc0A6GBTeGJ3/rqB8JDAjikxJCIFHwg3pxoUuOGFu3BW99IqMFpegp6j9wam oZfKLD84r96nECff6TwZv1pKCI5Z4iw= -----END CERTIFICATE-----Generated at Sat Aug 22 21:10:22 2026 by rpki-client