$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa File: 0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa (raw, json) Hash identifier: vVAY0kS/mOe8ZoOYq8ejTMFjf3JcBvVAtOkwZMxernI= Subject key identifier: 73:B5:16:0A:6A:F1:F0:8D:F3:3D:29:E7:05:08:62:FE:38:89:99:5C Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584ED861DFEC4950791437DCF5C0 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 16509 IP address blocks: 208.95.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:df:ec:49:50:79:14:37:dc:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=fb08d8fe-4c14-490a-98a5-6a07800af897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f1:e4:f9:55:bd:f4:df:29:aa:f5:dc:58:47: 77:9a:d3:05:52:67:b7:5c:e3:da:4f:ce:e4:ff:5e: c5:a8:b3:a5:b2:d3:9f:b8:b6:d9:10:37:4e:06:ee: d5:0a:b0:b4:d6:86:cc:6d:2c:7f:8f:37:78:dd:be: 58:a3:2f:11:fa:c4:9d:68:68:6e:c0:4d:1a:31:a4: c4:d3:b0:e1:c5:f0:ea:82:fb:26:93:8c:f5:01:68: 5e:7b:98:d7:77:d0:b2:24:33:9c:40:d9:98:81:4f: 3a:b6:23:c3:f1:6a:f9:9a:19:21:17:8f:50:3d:83: f0:c0:ce:aa:32:1e:13:e3:1c:d3:80:2d:e2:e9:91: eb:a9:31:9f:96:b7:f5:6e:96:44:dd:5b:3c:e8:ab: f5:d8:14:55:c5:92:58:de:c7:dd:99:95:86:42:41: cd:8d:38:8f:b4:67:39:ea:e5:10:46:ac:cd:e6:ee: 88:14:e6:8e:3d:89:33:9e:59:4b:2b:fe:db:3b:3a: 34:20:af:3a:0e:c6:f4:42:ff:a1:20:45:51:91:22: 57:e7:56:26:cd:30:7a:3f:43:86:31:ec:0a:97:db: 0e:68:b7:3b:8c:20:bc:64:6a:90:bb:26:ef:59:96: d6:25:e5:8d:51:f0:76:c9:ce:7a:82:8b:65:73:8c: 9c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B5:16:0A:6A:F1:F0:8D:F3:3D:29:E7:05:08:62:FE:38:89:99:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv4: 208.95.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:03:66:fc:50:70:9c:1c:7e:88:c5:fd:ae:84:4f:cb:bb:f4: d6:3b:3f:53:46:a0:da:0f:83:40:eb:28:51:b7:e5:4a:4a:d9: ef:aa:8a:11:27:6c:26:00:a9:e8:30:dd:fc:f3:bf:7c:93:34: 3f:75:76:84:95:ff:72:1e:e7:1b:41:b4:30:cf:b3:7d:12:10: 36:61:88:a6:4d:d6:26:25:f3:d2:3b:3f:a1:e8:55:69:e7:65: 50:38:08:1a:22:73:c2:5e:68:9c:d6:b4:76:b1:e7:c8:c8:42: 52:80:30:b2:ad:76:ac:5f:18:0f:6a:39:ed:81:6e:d4:cc:16: 28:aa:f3:2b:b3:39:b6:1a:e9:c1:9b:49:d4:26:21:ea:46:84: 39:6c:6e:cf:e7:6c:0a:60:78:46:58:d3:90:5d:ca:cf:e3:74: a5:fe:c0:6e:47:68:5f:45:56:45:12:ff:13:a9:e8:11:ef:41: 2c:b8:ba:3e:b0:a7:f9:0c:3c:43:c3:4a:7d:a8:ca:21:cf:37: 87:4d:88:f6:e4:20:e6:ad:c0:27:91:5b:65:19:49:a3:ab:1d: 2a:0f:82:27:49:be:13:30:90:7e:aa:8b:44:f5:75:b4:87:39: ca:19:16:34:cf:24:8a:5d:c1:0f:71:ff:27:95:5c:43:b4:3a: 41:40:65:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYd/sSVB5FDfc9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZmIwOGQ4ZmUtNGMxNC00OTBhLTk4YTUtNmEwNzgwMGFmODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivHk+VW99N8pqvXcWEd3mtMFUme3XOPaT87k /17FqLOlstOfuLbZEDdOBu7VCrC01obMbSx/jzd43b5Yoy8R+sSdaGhuwE0aMaTE 07DhxfDqgvsmk4z1AWhee5jXd9CyJDOcQNmYgU86tiPD8Wr5mhkhF49QPYPwwM6q Mh4T4xzTgC3i6ZHrqTGflrf1bpZE3Vs86Kv12BRVxZJY3sfdmZWGQkHNjTiPtGc5 6uUQRqzN5u6IFOaOPYkznllLK/7bOzo0IK86Dsb0Qv+hIEVRkSJX51YmzTB6P0OG MewKl9sOaLc7jCC8ZGqQuybvWZbWJeWNUfB2yc56gotlc4ycSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHO1Fgpq8fCN8z0p5wUIYv44iZlcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvMGNlYTVmNDEtOWNmYi0z MjZlLWI1N2ItZmE0MzRkOGI2NTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F82MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgDZvxQcJwcfojF/a6ET8u79NY7P1NGoNoPg0DrKFG35UpK2e+qihEn bCYAqegw3fzzv3yTND91doSV/3Ie5xtBtDDPs30SEDZhiKZN1iYl89I7P6HoVWnn ZVA4CBoic8JeaJzWtHax58jIQlKAMLKtdqxfGA9qOe2BbtTMFiiq8yuzObYa6cGb SdQmIepGhDlsbs/nbApgeEZY05Bdys/jdKX+wG5HaF9FVkUS/xOp6BHvQSy4uj6w p/kMPEPDSn2oyiHPN4dNiPbkIOatwCeRW2UZSaOrHSoPgidJvhMwkH6qi0T1dbSH OcoZFjTPJIpdwQ9x/yeVXEO0OkFAZQ0= -----END CERTIFICATE-----Generated at Sat Sep 19 08:45:30 2026 by rpki-client