$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/594b22dc-8cbb-3e61-a8cb-494350bd1e0f.roa File: 594b22dc-8cbb-3e61-a8cb-494350bd1e0f.roa (raw, json) Hash identifier: 2hI3Fx/+7Ro+uxudBlS+pHI07ZPUOmxvcaiC6bqn/PY= Subject key identifier: 5D:67:E1:91:AB:0F:69:9A:70:CF:A9:6C:2D:D1:0E:12:2D:BD:3E:73 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584EAA51A0F27B8A538343644780 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/594b22dc-8cbb-3e61-a8cb-494350bd1e0f.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 33322 IP address blocks: 208.82.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:a0:f2:7b:8a:53:83:43:64:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=848a27b7-8e6f-442f-9901-b572f174f841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:29:c6:e4:2f:2a:0f:77:68:0d:b7:e0:21: 76:72:6f:62:1b:c7:30:77:2c:4a:22:ff:54:7f:80: 9a:cf:ca:7c:0e:5d:c7:7c:51:a0:f9:46:76:74:c3: 13:10:c2:eb:ac:f0:eb:de:61:97:eb:43:61:93:83: 5b:31:a6:0f:6c:20:27:a1:47:5f:9a:90:c7:96:61: 23:cb:45:eb:4c:98:aa:06:36:80:72:17:9a:17:f1: 3c:06:e3:e4:0f:7e:d6:f6:f4:26:b9:bb:14:74:10: 19:7b:11:54:07:06:53:0d:aa:04:09:e9:c8:a2:1f: 2b:5d:b8:64:7f:06:02:20:46:8a:95:5b:48:d7:c9: 23:38:81:27:0b:85:d4:55:35:4d:f9:7d:f2:65:6d: d2:5c:ac:2d:5f:5a:34:fa:70:c8:a7:97:3b:9a:21: a4:c0:88:87:4f:7a:7e:5f:55:a2:ae:3d:9e:c0:3b: bc:dc:37:3a:be:ff:88:ec:30:cc:97:cd:97:a5:25: 66:07:83:db:49:4f:37:e3:43:66:75:6b:84:c0:5b: 5a:a2:ef:2b:db:17:62:5e:44:c4:d6:6a:97:b3:58: a4:1d:23:43:b0:94:d7:4e:8e:84:8e:b6:35:f4:e1: 4a:63:a8:13:58:b3:ae:79:c8:45:40:9f:6f:43:66: e5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:67:E1:91:AB:0F:69:9A:70:CF:A9:6C:2D:D1:0E:12:2D:BD:3E:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/594b22dc-8cbb-3e61-a8cb-494350bd1e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 208.82.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:57:e4:16:65:e6:1d:36:d3:e3:4a:a5:7c:71:55:8a:c2:b9: 9f:39:58:8d:82:00:c9:77:89:41:be:f2:6f:bd:09:25:2f:ba: 5f:cf:86:5d:25:0b:ff:79:20:89:87:35:06:eb:f6:c0:cb:84: fe:74:30:50:a7:24:b3:aa:24:fe:36:20:6e:0d:a2:2f:0d:86: a8:7a:bd:bd:b6:fd:1c:20:b8:58:ee:7b:4a:1a:f4:0d:00:0e: ee:59:6b:cd:60:21:95:51:cb:5b:67:5a:9e:8a:1d:73:2e:bb: 26:c9:26:10:18:81:1a:9d:c9:4d:76:a4:fa:0d:08:f8:09:09: a0:d3:8a:dc:fe:b4:05:45:e6:bc:ef:1b:cf:b2:ce:a7:b7:46: 30:85:48:89:84:b2:ad:f5:f0:b4:7b:21:e3:8b:1f:e9:34:ec: bd:cf:92:7a:0d:f9:21:3c:dd:ec:97:c0:a7:b5:aa:5f:77:05: 8e:3e:35:4c:b3:81:35:b0:93:5a:47:1b:e0:80:34:8e:b5:0f: ea:f3:6d:f7:ed:4f:33:f8:c0:6e:19:dc:18:71:c0:94:89:d8: 19:e6:3a:3b:28:98:10:de:20:10:ac:48:ec:ec:be:43:61:6e: a5:c6:f8:bd:53:92:57:81:42:6f:f7:73:f4:b0:c4:0e:f1:61: 97:d2:67:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUaDye4pTg0NkR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk ODQ4YTI3YjctOGU2Zi00NDJmLTk5MDEtYjU3MmYxNzRmODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaYpxuQvKg93aA234CF2cm9iG8cwdyxKIv9U f4Caz8p8Dl3HfFGg+UZ2dMMTEMLrrPDr3mGX60Nhk4NbMaYPbCAnoUdfmpDHlmEj y0XrTJiqBjaAcheaF/E8BuPkD37W9vQmubsUdBAZexFUBwZTDaoECenIoh8rXbhk fwYCIEaKlVtI18kjOIEnC4XUVTVN+X3yZW3SXKwtX1o0+nDIp5c7miGkwIiHT3p+ X1Wirj2ewDu83Dc6vv+I7DDMl82XpSVmB4PbSU8340NmdWuEwFtaou8r2xdiXkTE 1mqXs1ikHSNDsJTXTo6EjrY19OFKY6gTWLOuechFQJ9vQ2blmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1n4ZGrD2macM+pbC3RDhItvT5zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvNTk0YjIyZGMtOGNiYi0z ZTYxLWE4Y2ItNDk0MzUwYmQxZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1X5BZl5h020+NKpXxxVYrCuZ85WI2CAMl3iUG+8m+9CSUvul/Phl0l C/95IImHNQbr9sDLhP50MFCnJLOqJP42IG4Noi8Nhqh6vb22/RwguFjue0oa9A0A Du5Za81gIZVRy1tnWp6KHXMuuybJJhAYgRqdyU12pPoNCPgJCaDTitz+tAVF5rzv G8+yzqe3RjCFSImEsq318LR7IeOLH+k07L3PknoN+SE83eyXwKe1ql93BY4+NUyz gTWwk1pHG+CANI61D+rzbfftTzP4wG4Z3BhxwJSJ2BnmOjsomBDeIBCsSOzsvkNh bqXG+L1TkleBQm/3c/SwxA7xYZfSZ5E= -----END CERTIFICATE-----Generated at Wed Aug 26 08:08:56 2026 by rpki-client