$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/22869569-a3ac-38c0-91f6-394b81eb04c1.roa File: 22869569-a3ac-38c0-91f6-394b81eb04c1.roa (raw, json) Hash identifier: 3HJKLMtqUdXp8LirFTvGjdDW8aRyHcM1wtmhsfQ+8Jw= Subject key identifier: ED:85:26:36:73:00:5A:FB:85:5E:5D:C3:DE:28:DA:F0:9E:74:24:6C Certificate issuer: /CN=239e2a72-9347-4316-9be7-20bdf6512711 Certificate serial: 010D0C9F4328584F0ED242B1F5F834BBC0F27880 Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/22869569-a3ac-38c0-91f6-394b81eb04c1.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 395954 IP address blocks: 208.70.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:42:b1:f5:f8:34:bb:c0:f2:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=a563db18-35ef-4bd9-a45f-e36512658750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:92:55:53:54:3a:90:ca:ea:8a:e8:22:bd:80: ca:ec:cc:f5:5a:18:3f:d4:b9:40:0c:2f:6d:83:df: 9b:36:a3:04:52:40:ee:73:65:b1:ba:1e:a5:3d:1b: b9:07:69:a9:df:a3:91:ac:fc:72:f3:3b:86:67:be: b1:7d:e6:1d:55:01:7d:0f:6e:7e:3b:1a:ac:42:02: 60:94:62:f9:59:c8:50:78:95:10:c9:4f:30:36:5e: fd:c4:dc:92:74:b8:92:67:c7:c7:b1:ee:47:4f:71: c1:d3:3b:27:06:d3:d1:2c:24:31:3d:19:8b:20:75: 9e:5d:21:a9:c5:0d:e3:2a:c0:d3:a6:11:e4:28:e1: 9f:0e:52:b5:7c:d6:6d:93:64:18:26:92:5d:2d:19: 54:c6:e9:34:22:43:25:a8:60:23:0f:9a:0e:46:7f: 78:1f:68:5d:1e:cf:ee:48:eb:ab:d8:09:74:b2:15: 56:de:c8:ef:7a:1d:e5:92:8a:3d:af:5d:c3:02:8b: f4:30:69:49:93:e1:63:87:2c:0a:48:da:85:c1:5a: 62:42:02:cf:8c:85:cf:39:f4:1d:df:1a:86:b1:e2: d7:bd:72:de:b2:a6:0c:28:56:73:45:48:c2:46:65: e7:72:44:61:98:25:06:c3:bb:bb:6e:da:b5:23:77: 3b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:85:26:36:73:00:5A:FB:85:5E:5D:C3:DE:28:DA:F0:9E:74:24:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/22869569-a3ac-38c0-91f6-394b81eb04c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl X509v3 Authority Key Identifier: keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer sbgp-ipAddrBlock: critical IPv4: 208.70.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a3:07:f3:a9:10:b7:d6:07:ce:0b:1c:60:c5:7b:d3:75:c8: 9c:1b:92:bb:aa:ba:8f:de:e0:f9:47:f9:a6:ba:42:18:be:3d: f4:32:ec:60:94:43:3f:0a:f6:48:a7:88:e5:c8:83:d2:2f:8d: 15:5e:36:af:ce:1d:77:34:8d:ef:ec:d9:04:60:e9:e8:c8:b1: 1a:db:cb:b8:53:1b:b4:3e:1e:a8:f2:f8:c1:92:86:70:70:b3: 82:26:66:9a:78:00:aa:d9:02:92:51:31:75:41:bc:30:32:21: 0f:91:ff:cf:a2:6e:c1:f1:2a:70:90:e1:e4:85:18:86:17:5d: 16:46:14:c8:b4:62:29:85:14:65:94:07:b2:f3:b1:7e:77:1f: da:81:eb:e1:1b:67:b5:4c:94:33:7c:01:08:00:9b:db:7d:aa: 63:8f:b0:c3:f3:31:82:18:04:31:73:f7:2a:13:f7:36:9b:c9: a6:f2:85:7f:b3:05:21:0e:ac:91:62:bc:b0:ce:c9:c5:74:4b: 69:b3:23:c5:d5:87:a0:a8:4d:66:38:7e:4d:d8:15:91:09:4e: 54:e3:af:22:87:39:89:1c:d3:24:6b:6d:03:8b:62:a6:b7:7a: 13:8d:40:cf:b8:d4:20:03:33:c6:0e:8d:a7:f3:de:34:68:0e: cd:b6:8e:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0kKx9fg0u8DyeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy NzExMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk YTU2M2RiMTgtMzVlZi00YmQ5LWE0NWYtZTM2NTEyNjU4NzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJJVU1Q6kMrqiugivYDK7Mz1Whg/1LlADC9t g9+bNqMEUkDuc2Wxuh6lPRu5B2mp36ORrPxy8zuGZ76xfeYdVQF9D25+OxqsQgJg lGL5WchQeJUQyU8wNl79xNySdLiSZ8fHse5HT3HB0zsnBtPRLCQxPRmLIHWeXSGp xQ3jKsDTphHkKOGfDlK1fNZtk2QYJpJdLRlUxuk0IkMlqGAjD5oORn94H2hdHs/u SOur2Al0shVW3sjveh3lkoo9r13DAov0MGlJk+FjhywKSNqFwVpiQgLPjIXPOfQd 3xqGseLXvXLesqYMKFZzRUjCRmXnckRhmCUGw7u7btq1I3c7XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2FJjZzAFr7hV5dw94o2vCedCRsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvMjI4Njk1NjktYTNhYy0z OGMwLTkxZjYtMzk0YjgxZWIwNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk ZjY1MTI3MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICjB/OpELfWB84LHGDFe9N1yJwbkruquo/e4PlH+aa6Qhi+PfQy7GCU Qz8K9kiniOXIg9IvjRVeNq/OHXc0je/s2QRg6ejIsRrby7hTG7Q+Hqjy+MGShnBw s4ImZpp4AKrZApJRMXVBvDAyIQ+R/8+ibsHxKnCQ4eSFGIYXXRZGFMi0YimFFGWU B7LzsX53H9qB6+EbZ7VMlDN8AQgAm9t9qmOPsMPzMYIYBDFz9yoT9zabyabyhX+z BSEOrJFivLDOycV0S2mzI8XVh6CoTWY4fk3YFZEJTlTjryKHOYkc0yRrbQOLYqa3 ehONQM+41CADM8YOjafz3jRoDs22jis= -----END CERTIFICATE-----Generated at Sat Sep 5 02:46:16 2026 by rpki-client