$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa File: d99b52cf-3f59-3923-9d2f-f64a1233a235.roa (raw, json) Hash identifier: 1yeUGz4ZJLXCQ6L1hXnCsblMwObwg2sFWCK1do7J3Kw= Subject key identifier: C8:05:55:1A:F0:D3:B0:0F:7C:84:C9:00:22:D8:38:98:3E:51:FD:71 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584F4984F196DED982F29DBE9800 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 208.117.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:f1:96:de:d9:82:f2:9d:be:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=15d566e0-ddfc-473c-b685-3af9b8079a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d2:78:60:e1:8d:c2:bb:25:12:04:3a:61:db: 81:83:91:9f:52:cb:02:e2:41:58:f9:23:d4:e1:f7: de:07:c7:38:d7:71:f1:c0:51:2b:05:95:9a:0a:32: 17:42:ac:9c:fd:b5:d3:38:d5:58:6e:5e:46:4b:48: f2:75:79:e0:a9:75:ea:2d:71:f5:31:5a:58:1f:e6: 35:a2:a1:27:c8:f1:ba:24:d5:30:94:d6:5a:79:ed: eb:ac:93:cc:6e:a4:95:ad:04:d6:bd:02:ae:22:d1: 34:75:2a:0a:21:fd:93:82:89:99:b9:04:50:f2:93: db:03:6f:d7:3e:f2:65:f0:f2:61:90:fd:e7:5a:30: eb:94:99:74:ac:da:92:44:ff:63:d0:6b:12:6f:b0: f9:fe:c2:d1:4e:21:5b:dd:be:64:a7:54:9d:bd:e5: a8:df:dc:c4:a3:4a:e7:ec:5f:32:ba:76:b6:aa:07: 58:81:66:64:21:fd:a1:ea:59:7f:7d:bc:23:ea:b5: 85:7b:c8:1e:68:fb:b0:8a:81:6e:cf:87:8d:e0:de: 46:68:22:be:b5:ee:d2:4c:88:84:4b:f6:9a:d4:53: 9c:ce:b7:9b:6c:78:db:e8:95:51:4a:e2:e9:1c:ea: d6:fe:ed:5f:6e:6e:24:e2:9c:2b:7a:47:69:62:e4: c9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:05:55:1A:F0:D3:B0:0F:7C:84:C9:00:22:D8:38:98:3E:51:FD:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:a6:f1:68:8f:7d:e1:b7:74:3a:8f:b8:88:b1:e9:ad:04:be: 25:4c:6d:a7:96:b2:13:1e:ba:19:06:d9:50:3e:ba:f6:7d:94: b7:39:39:32:22:20:68:b0:0c:f5:bb:1f:f9:05:5f:67:6e:56: 0e:0a:c5:2b:ff:9e:66:84:6e:5e:a5:d1:41:4b:ec:5c:23:f7: 9e:21:46:36:8b:db:9e:7f:2b:32:21:7e:da:4a:ff:1d:ea:2d: ab:d6:44:17:14:c0:f3:1c:a8:83:a7:ed:9c:c8:17:55:ac:11: 66:96:e5:7d:b1:e8:d5:ac:f7:d4:47:49:93:a9:49:15:ec:b4: a6:23:94:16:22:73:49:9c:b7:ae:b2:9c:66:18:2a:b6:6a:b7: 35:27:d3:dc:a1:64:34:14:08:32:d6:52:63:b9:cd:d1:8e:65: 45:2c:70:e0:08:88:f1:1a:7b:10:eb:0e:bd:56:61:f8:c6:6e: c6:e7:79:be:52:68:d9:c3:d2:fd:97:c0:31:2e:76:87:bb:41: 43:c3:41:0e:e8:18:4f:69:e5:9a:30:52:f3:e7:94:76:54:1f: 4d:ec:f5:33:77:8a:89:0a:22:f1:09:91:2b:fe:b3:0b:c2:05: b8:fc:03:6c:27:5d:ab:47:30:c1:3f:33:11:2f:a2:e6:96:a1: 03:60:84:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPGW3tmC8p2+mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTVkNTY2ZTAtZGRmYy00NzNjLWI2ODUtM2FmOWI4MDc5YTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9J4YOGNwrslEgQ6YduBg5GfUssC4kFY+SPU 4ffeB8c413HxwFErBZWaCjIXQqyc/bXTONVYbl5GS0jydXngqXXqLXH1MVpYH+Y1 oqEnyPG6JNUwlNZaee3rrJPMbqSVrQTWvQKuItE0dSoKIf2TgomZuQRQ8pPbA2/X PvJl8PJhkP3nWjDrlJl0rNqSRP9j0GsSb7D5/sLRTiFb3b5kp1SdveWo39zEo0rn 7F8yuna2qgdYgWZkIf2h6ll/fbwj6rWFe8geaPuwioFuz4eN4N5GaCK+te7STIiE S/aa1FOczrebbHjb6JVRSuLpHOrW/u1fbm4k4pwrekdpYuTJ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgFVRrw07APfITJACLYOJg+Uf1xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZDk5YjUyY2YtM2Y1OS0z OTIzLTlkMmYtZjY0YTEyMzNhMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0HXuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCm8WiPfeG3dDqPuIix6a0EviVMbaeWshMeuhkG2VA+uvZ9lLc5OTIi IGiwDPW7H/kFX2duVg4KxSv/nmaEbl6l0UFL7Fwj954hRjaL255/KzIhftpK/x3q LavWRBcUwPMcqIOn7ZzIF1WsEWaW5X2x6NWs99RHSZOpSRXstKYjlBYic0mct66y nGYYKrZqtzUn09yhZDQUCDLWUmO5zdGOZUUscOAIiPEaexDrDr1WYfjGbsbneb5S aNnD0v2XwDEudoe7QUPDQQ7oGE9p5ZowUvPnlHZUH03s9TN3iokKIvEJkSv+swvC Bbj8A2wnXatHMME/MxEvouaWoQNghLo= -----END CERTIFICATE-----Generated at Tue Oct 13 10:16:08 2026 by rpki-client