$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa File: 0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa (raw, json) Hash identifier: 83X3qnzn50hkDEALIo1cAQAA5cR2UYvb85JBCR2eNO4= Subject key identifier: CF:48:61:F3:E0:0D:24:5A:90:59:59:35:93:B5:33:C4:85:6E:7B:20 Certificate issuer: /CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d Certificate serial: 010D0C9F4328584EFCACD235145140B5DE770F00 Authority key identifier: 64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 40100 IP address blocks: 208.68.156.0/24 maxlen: 24 208.68.157.0/24 maxlen: 24 208.68.158.0/24 maxlen: 24 208.68.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:d2:35:14:51:40:b5:de:77:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=14e3913d-3558-401c-911e-2d4bd3d11cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:69:3d:6c:8d:b5:98:89:92:28:1a:ce:e2:be: 93:6a:9c:50:92:0a:65:cc:c1:35:83:60:bd:e9:ce: 71:ce:78:8d:d9:1f:1f:af:c8:96:c5:c1:9c:c4:b2: 57:96:83:34:d5:b9:8b:61:7d:5c:94:00:07:80:df: e4:6c:f9:31:53:21:40:7f:81:35:ef:3d:34:9f:62: ac:51:6c:34:aa:7d:5e:46:93:bc:e7:21:d7:d7:b1: 4f:cc:a9:1e:bb:69:bb:83:bb:7d:0e:9f:dc:bd:c7: 4f:5f:11:e6:71:fe:09:a3:5e:f0:e7:70:f5:2c:99: 48:fb:2b:41:31:9b:8c:91:84:51:ca:3b:70:08:30: cf:04:e7:e1:d5:d2:a7:8f:ce:e5:f3:28:92:f5:2e: 89:16:f9:83:f0:94:1d:1a:71:bb:ef:ea:41:73:31: 83:cb:57:ef:cf:c3:3b:55:5f:c4:ef:c9:d8:1d:94: 8c:e4:9a:86:50:bc:76:0e:ab:a6:ff:2a:8e:9c:2d: 48:16:c5:ed:3e:de:fe:54:2b:a2:fb:44:c2:a1:4b: 77:2a:16:d1:fb:75:45:9b:66:ce:de:82:ae:50:89: b4:93:06:ca:b2:fa:89:1f:78:b1:55:59:51:d1:a4: 51:7d:06:f0:58:25:00:4c:22:2d:a8:4c:14:3a:08: 4a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:48:61:F3:E0:0D:24:5A:90:59:59:35:93:B5:33:C4:85:6E:7B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl X509v3 Authority Key Identifier: keyid:64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer sbgp-ipAddrBlock: critical IPv4: 208.68.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a3:42:a6:61:d5:9b:fd:54:02:e5:79:2f:2e:41:44:54:1f: 91:b6:22:7c:be:49:95:98:97:09:df:3f:88:7d:36:9c:cb:b3: af:e3:21:0f:cb:d9:83:90:0b:a4:a4:17:56:c6:e8:e1:53:33: 39:9c:7b:28:ce:7c:fc:af:2a:3b:2b:b9:c8:f4:df:63:03:c9: d7:bd:77:83:c7:bd:4f:f6:b4:77:3b:2c:b1:6b:23:03:8a:2c: f3:cd:31:b1:8a:bd:37:85:0a:f6:85:9e:06:87:b2:8e:73:4e: af:9c:19:72:9f:c6:1f:ec:68:f0:4f:45:d0:ce:e2:31:bb:94: 98:bb:1f:4d:86:4f:a7:f5:19:47:67:55:3d:f5:93:b8:d5:67: e2:86:65:1f:04:fa:13:98:ba:79:24:a7:43:9a:28:4e:15:49: a2:10:eb:9c:42:e2:10:7b:4c:5d:86:c3:e4:eb:32:e9:1f:bc: ad:9f:35:03:1b:89:8c:77:4b:e6:e6:3f:a2:4d:63:70:4e:31: 61:3c:ca:ec:01:2a:ba:cf:9f:81:1f:05:5c:83:a4:d9:3c:31: 63:4a:fd:4a:37:de:74:60:c9:0e:e9:ad:d4:7f:67:4b:0c:d1: ee:63:57:4d:1a:b5:77:75:7b:04:db:d6:a8:d0:cf:06:58:20: 23:51:9f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rNI1FFFAtd53DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDVhNGVmNjctM2VkMC00ZGU5LWFmYWItYWIxZWI0ZGMz YjBkMB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk MTRlMzkxM2QtMzU1OC00MDFjLTkxMWUtMmQ0YmQzZDExY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGk9bI21mImSKBrO4r6TapxQkgplzME1g2C9 6c5xzniN2R8fr8iWxcGcxLJXloM01bmLYX1clAAHgN/kbPkxUyFAf4E17z00n2Ks UWw0qn1eRpO85yHX17FPzKkeu2m7g7t9Dp/cvcdPXxHmcf4Jo17w53D1LJlI+ytB MZuMkYRRyjtwCDDPBOfh1dKnj87l8yiS9S6JFvmD8JQdGnG77+pBczGDy1fvz8M7 VV/E78nYHZSM5JqGULx2Dqum/yqOnC1IFsXtPt7+VCui+0TCoUt3KhbR+3VFm2bO 3oKuUIm0kwbKsvqJH3ixVVlR0aRRfQbwWCUATCItqEwUOghK0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9IYfPgDSRakFlZNZO1M8SFbnsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80NWE0 ZWY2Ny0zZWQwLTRkZTktYWZhYi1hYjFlYjRkYzNiMGQvMGYwZWFkZjAtN2FjZi0z Y2U3LTk5ZjgtODgzZTc2NGZhOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDVhNGVmNjctM2VkMC00ZGU5LWFm YWItYWIxZWI0ZGMzYjBkLzQ1YTRlZjY3LTNlZDAtNGRlOS1hZmFiLWFiMWViNGRj M2IwZC5jcmwwHwYDVR0jBBgwFoAUZHP0/sCp2Tpv5nmwPPeHGId5EX0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS80NWE0ZWY2Ny0zZWQwLTRkZTktYWZhYi1hYjFl YjRkYzNiMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EScMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWjQqZh1Zv9VALleS8uQURUH5G2Iny+SZWYlwnfP4h9NpzLs6/jIQ/L 2YOQC6SkF1bG6OFTMzmceyjOfPyvKjsrucj032MDyde9d4PHvU/2tHc7LLFrIwOK LPPNMbGKvTeFCvaFngaHso5zTq+cGXKfxh/saPBPRdDO4jG7lJi7H02GT6f1GUdn VT31k7jVZ+KGZR8E+hOYunkkp0OaKE4VSaIQ65xC4hB7TF2Gw+TrMukfvK2fNQMb iYx3S+bmP6JNY3BOMWE8yuwBKrrPn4EfBVyDpNk8MWNK/Uo33nRgyQ7prdR/Z0sM 0e5jV00atXd1ewTb1qjQzwZYICNRn5c= -----END CERTIFICATE-----Generated at Mon Sep 14 11:48:33 2026 by rpki-client