$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa File: 912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa (raw, json) Hash identifier: kAQCEDeN0SCo+ynJWAFtc5rXsc3KVn4CVaYk97qF73I= Subject key identifier: EC:64:22:2F:B9:17:CB:B8:76:30:6C:6A:40:15:B9:BD:9C:79:C1:C0 Certificate issuer: /CN=0e002701-2485-4643-ba40-3ea23fa41085 Certificate serial: 010D0C9F4328584EFCACD1001760CEBC4321FD20 Authority key identifier: 89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 16563 IP address blocks: 208.86.96.0/23 maxlen: 23 208.86.96.0/24 maxlen: 24 208.86.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:d1:00:17:60:ce:bc:43:21:fd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e002701-2485-4643-ba40-3ea23fa41085 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=161b6013-bf9e-46d0-9f31-2d947a80ca7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:39:1a:78:a9:05:69:b7:90:44:6d:d0:bd: ee:5f:f5:54:d8:6d:62:b2:7f:f8:bb:8d:91:95:b3: 61:60:8c:2f:51:55:53:ee:27:23:d9:05:35:d2:cb: a2:aa:3c:ec:c4:32:e7:65:d1:e1:e5:61:aa:81:ee: ec:8b:d6:03:66:ff:38:40:c2:24:49:a9:44:d9:72: 31:95:41:00:3f:9d:89:47:84:86:96:ae:bc:45:c7: d0:8b:5e:00:4a:8e:81:4a:3e:89:c1:c1:b7:5f:da: 8d:86:99:b8:78:36:cc:1c:be:e6:19:fe:e8:d0:9f: ed:de:aa:1d:d2:07:7e:e3:62:72:3f:0d:7f:f8:68: 79:51:5d:c5:99:7e:cc:ff:4e:23:2f:9e:17:89:00: b5:ec:91:61:fe:71:f1:60:37:7f:09:95:e8:84:b8: 54:65:eb:db:7c:2c:57:50:a8:f7:1b:8c:8d:b4:04: 2a:ce:a5:ca:36:1e:db:96:5f:b2:d7:44:fc:ed:df: c2:dd:e3:e9:a6:5f:37:44:ae:f7:b2:59:4a:64:f4: 81:6b:7c:b7:46:0e:ed:a2:ce:27:e3:da:55:63:be: dc:5a:0f:bb:be:bd:e3:b9:57:a1:49:5a:a9:7c:58: 09:12:6b:30:ad:89:42:57:94:16:35:87:63:14:74: 83:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:64:22:2F:B9:17:CB:B8:76:30:6C:6A:40:15:B9:BD:9C:79:C1:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl X509v3 Authority Key Identifier: keyid:89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer sbgp-ipAddrBlock: critical IPv4: 208.86.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:30:f5:2d:d0:0f:b6:1a:15:7b:32:a7:7f:4f:e8:3b:a9:1a: e9:c7:57:50:91:86:e8:87:ce:c8:7b:e9:12:f9:1b:57:f6:81: 52:1c:9f:80:20:da:af:e2:d5:2d:a6:40:ea:a0:68:22:c8:16: ec:ef:81:af:43:69:45:ba:aa:f9:f8:18:41:fe:1e:a9:1a:c5: ce:43:74:f7:c8:44:65:80:f7:9b:cf:25:75:41:84:78:4c:c5: 8d:de:99:70:2d:52:f6:a5:5a:43:5e:8b:00:3a:14:7b:c2:2a: d4:db:02:5a:49:35:c4:a5:c6:bd:14:1f:ba:c4:93:53:6e:21: 0f:26:44:7a:94:5f:fa:dc:86:3e:0a:94:a8:48:ba:ed:36:fb: 29:35:01:2a:8a:b9:b1:43:95:92:99:c1:96:00:ec:ac:ae:d9: 6b:d3:f4:c7:58:ab:71:bb:e7:73:60:39:a6:90:64:c8:e7:cf: 51:5b:97:db:bb:6d:bc:dc:3c:d0:f1:95:0f:59:1c:cf:ea:57: b6:66:49:3b:20:3a:e4:d5:68:09:f4:5f:a7:a9:5c:b8:d2:bd: ef:04:1c:1e:8d:95:63:a8:be:13:e3:55:e2:e6:2b:2f:e8:b1: 8d:cc:f9:78:c4:28:c3:65:3c:f0:ce:cf:22:37:8c:9d:16:46: 93:d5:b9:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rNEAF2DOvEMh/SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwMDI3MDEtMjQ4NS00NjQzLWJhNDAtM2VhMjNmYTQx MDg1MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MTYxYjYwMTMtYmY5ZS00NmQwLTlmMzEtMmQ5NDdhODBjYTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTY5GnipBWm3kERt0L3uX/VU2G1isn/4u42R lbNhYIwvUVVT7icj2QU10suiqjzsxDLnZdHh5WGqge7si9YDZv84QMIkSalE2XIx lUEAP52JR4SGlq68RcfQi14ASo6BSj6JwcG3X9qNhpm4eDbMHL7mGf7o0J/t3qod 0gd+42JyPw1/+Gh5UV3FmX7M/04jL54XiQC17JFh/nHxYDd/CZXohLhUZevbfCxX UKj3G4yNtAQqzqXKNh7bll+y10T87d/C3ePppl83RK73sllKZPSBa3y3Rg7tos4n 49pVY77cWg+7vr3juVehSVqpfFgJEmswrYlCV5QWNYdjFHSDnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxkIi+5F8u4djBsakAVub2cecHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wZTAw MjcwMS0yNDg1LTQ2NDMtYmE0MC0zZWEyM2ZhNDEwODUvOTEyZjVlYWEtOWE5ZC0z ZDhiLTgwMTItMTA2OTBjOWU1MTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGUwMDI3MDEtMjQ4NS00NjQzLWJh NDAtM2VhMjNmYTQxMDg1LzBlMDAyNzAxLTI0ODUtNDY0My1iYTQwLTNlYTIzZmE0 MTA4NS5jcmwwHwYDVR0jBBgwFoAUiSRXgYKbGGNF7kCuaVirmjXlYqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wZTAwMjcwMS0yNDg1LTQ2NDMtYmE0MC0zZWEy M2ZhNDEwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUw9S3QD7YaFXsyp39P6DupGunHV1CRhuiHzsh76RL5G1f2gVIcn4Ag 2q/i1S2mQOqgaCLIFuzvga9DaUW6qvn4GEH+Hqkaxc5DdPfIRGWA95vPJXVBhHhM xY3emXAtUvalWkNeiwA6FHvCKtTbAlpJNcSlxr0UH7rEk1NuIQ8mRHqUX/rchj4K lKhIuu02+yk1ASqKubFDlZKZwZYA7Kyu2WvT9MdYq3G753NgOaaQZMjnz1Fbl9u7 bbzcPNDxlQ9ZHM/qV7ZmSTsgOuTVaAn0X6epXLjSve8EHB6NlWOovhPjVeLmKy/o sY3M+XjEKMNlPPDOzyI3jJ0WRpPVueo= -----END CERTIFICATE-----Generated at Sun Sep 13 10:23:25 2026 by rpki-client