$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa File: 0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa (raw, json) Hash identifier: mUE5XNGOmRIsLYDZ27fvGHU+P4uaL1vSQjhiVO17sJ4= Subject key identifier: 8F:51:CF:6C:E5:8B:E6:3C:33:90:C3:7F:54:97:F5:5E:1B:D1:9F:62 Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F4328584F71EDA3DC4A6D1CD5A533F680 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 174 IP address blocks: 208.94.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:a3:dc:4a:6d:1c:d5:a5:33:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=d9bc846f-3007-4e5c-8707-1f146c06b14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:e0:5b:c4:ef:1c:21:99:d5:22:26:74:fd: 30:c4:20:b3:95:65:44:ca:72:09:94:a9:9f:7d:46: 72:8b:84:98:3d:16:03:78:d1:7d:2d:0c:a6:50:b3: 3a:93:87:a2:87:1c:9c:6f:be:72:c3:be:7e:8f:5b: c5:ad:d3:0b:71:41:b5:29:51:38:41:52:3c:b2:08: 6f:6e:7a:2f:64:fb:57:66:cf:d6:4f:35:85:b5:0d: 5d:39:ee:71:9f:00:41:f8:4f:a6:ac:6e:54:31:5c: d5:03:95:26:2f:d1:46:24:e9:2c:e6:3e:30:ff:01: bd:30:3d:58:f6:48:03:05:c0:af:98:76:ef:e7:7d: d7:98:ec:71:df:e8:6d:4c:c0:8d:7c:03:7e:df:47: 3b:15:a8:b4:c0:e5:30:dd:cd:79:f8:07:a3:90:5d: 66:0c:1a:cb:2f:4b:61:01:82:4c:54:72:26:e4:a5: 0b:2c:ee:83:f7:84:05:cb:2c:56:ef:78:6a:88:e8: 5c:3c:c5:11:43:94:65:db:80:f5:09:d5:8a:f0:56: ea:1b:28:6f:fa:cf:b7:63:ab:a3:98:da:67:83:02: 50:6c:c6:1b:1c:27:31:ce:82:f0:fe:9e:4f:c5:e3: f0:b6:5a:03:cc:5e:ba:9e:a5:54:df:e7:56:12:fd: e5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:51:CF:6C:E5:8B:E6:3C:33:90:C3:7F:54:97:F5:5E:1B:D1:9F:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/0f7a5bcf-cdc3-3c83-8554-12e3d51e36ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 208.94.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:42:66:8e:bf:42:d6:99:66:c7:83:e7:3b:e5:60:f1:22:72: 8e:06:49:c5:4c:35:1a:cd:9b:6d:45:31:72:31:00:12:3a:af: 9a:82:aa:d8:ea:ee:37:d8:32:86:5f:c6:3f:49:d5:cd:ec:d3: fa:3d:ba:91:5c:a2:a5:4a:f7:62:fb:05:fc:57:ee:24:bd:1d: 71:ec:18:ed:bd:36:83:9b:02:ef:95:3a:f8:f4:c3:82:33:71: 1c:63:7c:e7:c9:62:55:13:6f:6c:77:f9:f2:b8:80:40:35:bb: 3a:71:6d:d6:30:09:ef:d7:84:50:aa:c3:e5:d3:94:18:a6:95: 82:16:77:d3:64:d9:54:3c:e9:ae:e7:65:30:77:93:6f:30:6c: 49:45:ac:af:67:41:79:0a:1f:05:bb:9e:db:af:d1:a7:9f:17: 1a:44:99:72:98:93:76:df:30:10:c5:f9:59:ad:be:41:6f:6e: 34:de:0b:f2:87:ff:7c:5b:14:07:1a:f6:c3:d0:64:70:ff:bf: 24:36:58:30:79:09:2f:43:d5:98:3e:cb:ee:cd:39:c1:45:32: 4d:60:4c:19:62:c4:db:ff:63:7d:bc:5f:b7:49:0e:0d:16:b7: df:47:05:5b:f6:c8:87:44:3a:56:8a:99:de:d5:49:32:b8:e5: 77:90:03:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7aPcSm0c1aUz9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ZDliYzg0NmYtMzAwNy00ZTVjLTg3MDctMWYxNDZjMDZiMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJXgW8TvHCGZ1SImdP0wxCCzlWVEynIJlKmf fUZyi4SYPRYDeNF9LQymULM6k4eihxycb75yw75+j1vFrdMLcUG1KVE4QVI8sghv bnovZPtXZs/WTzWFtQ1dOe5xnwBB+E+mrG5UMVzVA5UmL9FGJOks5j4w/wG9MD1Y 9kgDBcCvmHbv533XmOxx3+htTMCNfAN+30c7Fai0wOUw3c15+AejkF1mDBrLL0th AYJMVHIm5KULLO6D94QFyyxW73hqiOhcPMURQ5Rl24D1CdWK8FbqGyhv+s+3Y6uj mNpngwJQbMYbHCcxzoLw/p5PxePwtloDzF66nqVU3+dWEv3lYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9Rz2zli+Y8M5DDf1SX9V4b0Z9iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvMGY3YTViY2YtY2RjMy0z YzgzLTg1NTQtMTJlM2Q1MWUzNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdCZo6/QtaZZseD5zvlYPEico4GScVMNRrNm21FMXIxABI6r5qCqtjq 7jfYMoZfxj9J1c3s0/o9upFcoqVK92L7BfxX7iS9HXHsGO29NoObAu+VOvj0w4Iz cRxjfOfJYlUTb2x3+fK4gEA1uzpxbdYwCe/XhFCqw+XTlBimlYIWd9Nk2VQ86a7n ZTB3k28wbElFrK9nQXkKHwW7ntuv0aefFxpEmXKYk3bfMBDF+VmtvkFvbjTeC/KH /3xbFAca9sPQZHD/vyQ2WDB5CS9D1Zg+y+7NOcFFMk1gTBlixNv/Y328X7dJDg0W t99HBVv2yIdEOlaKmd7VSTK45XeQA/o= -----END CERTIFICATE-----Generated at Fri Oct 9 17:40:14 2026 by rpki-client