$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/a014d86b-be35-311f-9257-0350ae0b6b35.roa File: a014d86b-be35-311f-9257-0350ae0b6b35.roa (raw, json) Hash identifier: k8sIatHy+W2CaZrhRLb/xKPbFyBZAud2llcVWqcIark= Subject key identifier: BF:CF:C7:BF:2C:34:FA:66:20:B2:F6:5A:01:DC:97:E2:60:A1:67:0C Certificate issuer: /CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0 Certificate serial: 010D0C9F4328584EC7A1ED57D37875F1F46C8B00 Authority key identifier: B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/a014d86b-be35-311f-9257-0350ae0b6b35.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 26347 IP address blocks: 208.97.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:ed:57:d3:78:75:f1:f4:6c:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0 Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=b84faf54-f69e-4aa7-abca-1b07b7dba541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ca:cf:4d:1a:c2:75:de:e3:06:4f:68:20:ac: 4b:15:39:45:90:cc:4a:79:1b:43:38:05:e9:65:e0: 9d:5a:71:5f:3f:30:15:9d:40:18:6a:56:08:4d:72: 7b:e3:89:52:f1:a9:76:62:46:eb:27:a1:3a:c1:71: 8a:5b:23:2a:dd:75:06:66:ea:e9:43:aa:c0:57:5b: fd:f5:f8:10:b0:46:80:f1:54:c0:08:ed:a2:76:af: 88:52:30:c7:ba:17:f2:09:39:9d:65:23:77:3e:8f: 7b:e1:a7:27:fb:81:73:71:13:e9:ac:e2:22:91:68: 21:f9:73:d6:73:fd:13:db:21:23:f5:19:58:76:3c: da:2f:fd:d5:6e:86:8f:93:f2:da:e2:28:93:d0:df: 82:2f:1c:40:35:92:6d:87:12:9b:fd:b4:67:e3:5b: 44:93:da:f6:3d:36:97:64:bf:dd:a1:9e:5e:e6:4c: 7a:75:b8:dd:48:8a:e7:16:46:d6:13:6d:46:6b:b0: 6b:05:f7:b5:08:2d:59:4c:63:9d:a1:6a:54:ec:b5: ff:8e:ea:89:69:ae:00:f0:50:df:9c:f0:fd:0a:30: b4:72:26:80:18:d4:f3:ea:51:ff:62:b9:90:10:38: 4b:56:e3:2e:c1:cd:5e:9f:d6:13:6f:3e:16:64:5b: f1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CF:C7:BF:2C:34:FA:66:20:B2:F6:5A:01:DC:97:E2:60:A1:67:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/a014d86b-be35-311f-9257-0350ae0b6b35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.crl X509v3 Authority Key Identifier: keyid:B9:F5:A2:51:A2:3B:EA:C4:B0:0F:52:FC:86:69:BA:2E:34:51:E4:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fe3e104e-daef-4fdb-9d65-aa1ee6dc4be0.cer sbgp-ipAddrBlock: critical IPv4: 208.97.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7d:ea:79:32:63:07:a9:56:62:18:6a:aa:67:5f:de:ed:c3: 93:97:3c:d9:bb:8c:b0:97:18:47:74:74:fe:9f:aa:4d:6d:a0: e3:4c:34:55:50:3d:85:72:dc:1f:3f:ed:fb:38:e4:7a:44:30: b2:8d:02:db:de:8c:38:6e:60:68:68:75:aa:18:61:c4:d8:84: 45:63:2c:34:77:8d:f2:85:0a:cf:82:ee:42:a5:58:ad:b6:d4: 9c:be:df:b7:3e:95:7d:74:30:33:5f:4b:4f:31:3d:0b:4f:7a: be:00:69:6a:53:99:f4:80:50:3b:e5:f9:cb:a1:19:6b:28:d0: 95:c4:91:12:69:db:3c:7f:04:37:52:21:ed:5f:c1:79:14:50: 0b:11:34:43:9f:2c:95:d3:50:8b:30:40:9c:ee:33:63:29:99: 25:2e:e9:38:26:9c:15:c7:29:99:9c:ec:44:53:a0:8e:97:43: 1e:93:ac:11:98:5e:20:81:e6:06:28:38:ca:a1:62:2c:62:6e: 34:2c:8a:15:99:b4:20:c0:a7:8f:e5:83:71:86:b1:13:38:c2: 19:2a:58:01:9c:0b:84:20:85:7c:76:74:a0:86:73:b8:94:2a: 1c:45:ea:dd:23:ed:bd:e6:ff:32:51:ec:9a:11:b8:22:91:4d: c0:8e:f3:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Hoe1X03h18fRsiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmUzZTEwNGUtZGFlZi00ZmRiLTlkNjUtYWExZWU2ZGM0 YmUwMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk Yjg0ZmFmNTQtZjY5ZS00YWE3LWFiY2EtMWIwN2I3ZGJhNTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsrPTRrCdd7jBk9oIKxLFTlFkMxKeRtDOAXp ZeCdWnFfPzAVnUAYalYITXJ744lS8al2YkbrJ6E6wXGKWyMq3XUGZurpQ6rAV1v9 9fgQsEaA8VTACO2idq+IUjDHuhfyCTmdZSN3Po974acn+4FzcRPprOIikWgh+XPW c/0T2yEj9RlYdjzaL/3VboaPk/La4iiT0N+CLxxANZJthxKb/bRn41tEk9r2PTaX ZL/doZ5e5kx6dbjdSIrnFkbWE21Ga7BrBfe1CC1ZTGOdoWpU7LX/juqJaa4A8FDf nPD9CjC0ciaAGNTz6lH/YrmQEDhLVuMuwc1en9YTbz4WZFvxCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/Px78sNPpmILL2WgHcl+JgoWcMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNl MTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFlZTZkYzRiZTAvYTAxNGQ4NmItYmUzNS0z MTFmLTkyNTctMDM1MGFlMGI2YjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmUzZTEwNGUtZGFlZi00ZmRiLTlk NjUtYWExZWU2ZGM0YmUwL2ZlM2UxMDRlLWRhZWYtNGZkYi05ZDY1LWFhMWVlNmRj NGJlMC5jcmwwHwYDVR0jBBgwFoAUufWiUaI76sSwD1L8hmm6LjRR5AswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZTNlMTA0ZS1kYWVmLTRmZGItOWQ2NS1hYTFl ZTZkYzRiZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0GGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA596nkyYwepVmIYaqpnX97tw5OXPNm7jLCXGEd0dP6fqk1toONMNFVQ PYVy3B8/7fs45HpEMLKNAtvejDhuYGhodaoYYcTYhEVjLDR3jfKFCs+C7kKlWK22 1Jy+37c+lX10MDNfS08xPQtPer4AaWpTmfSAUDvl+cuhGWso0JXEkRJp2zx/BDdS Ie1fwXkUUAsRNEOfLJXTUIswQJzuM2MpmSUu6TgmnBXHKZmc7ERToI6XQx6TrBGY XiCB5gYoOMqhYixibjQsihWZtCDAp4/lg3GGsRM4whkqWAGcC4QghXx2dKCGc7iU KhxF6t0j7b3m/zJR7JoRuCKRTcCO878= -----END CERTIFICATE-----Generated at Sun Sep 13 18:07:35 2026 by rpki-client