$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0e6be976-2616-3403-a642-c983ce1864f2.roa File: 0e6be976-2616-3403-a642-c983ce1864f2.roa (raw, json) Hash identifier: Ed7PR9NG3Lrg/RbjHewueDF5djDxiZfOK3DD2fnDcu4= Subject key identifier: 8E:C4:3D:29:42:93:5B:15:C7:FF:AD:75:0F:8C:10:26:AA:A0:16:CF Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584FA9C321E26021E14EF3081E00 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0e6be976-2616-3403-a642-c983ce1864f2.roa Signing time: Thu 29 Oct 2026 13:00:12 +0000 ROA not before: Thu 29 Oct 2026 13:00:12 +0000 ROA not after: Wed 27 Jan 2027 14:00:12 +0000 asID: 14618 IP address blocks: 208.95.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a9:c3:21:e2:60:21:e1:4e:f3:08:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Oct 29 13:00:12 2026 GMT Not After : Jan 27 14:00:12 2027 GMT Subject: CN=bf8788d4-409b-4bbc-81b1-fcd88d8ec3a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1a:0b:14:76:c7:a7:bf:1c:a5:5d:d3:ab:04: 23:94:13:40:8e:51:11:33:78:eb:32:6e:89:31:43: ee:1c:52:18:bf:66:ed:85:64:46:e7:6c:f7:dd:c3: b3:90:de:54:55:0e:6e:0c:5b:57:9d:d0:99:7c:a9: 41:da:7d:c6:aa:3d:ce:cd:61:c5:59:25:00:3f:47: 81:f7:39:3b:04:b5:6d:ac:50:df:6a:7e:54:fa:bd: c0:52:4e:33:71:9d:db:e6:5a:ea:ae:d2:a3:21:26: 91:ac:6a:3d:0b:6d:f4:31:11:e5:2c:52:bb:1d:7f: c9:d3:e4:2d:44:1b:58:22:e5:51:e3:bc:4b:e5:ed: 38:b4:4c:21:6f:8b:9d:61:35:6b:34:f3:dd:89:19: 41:5b:79:a0:e7:4e:d1:14:01:bc:47:4d:c7:25:44: 5f:78:a9:02:ae:23:9c:ad:52:57:42:f4:5d:97:a4: 79:e5:63:91:c9:0e:67:b0:96:5d:92:2e:6e:2d:48: ba:d2:30:15:fd:82:6c:42:5d:22:ef:ab:79:a1:28: 04:09:0c:e0:a1:cf:c1:ee:8b:44:dc:14:fb:5a:73: f4:48:c7:7e:77:43:0a:de:82:d7:a2:39:bf:1d:2e: 89:55:2a:00:3e:e6:55:07:c6:c4:1b:15:44:45:51: 64:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C4:3D:29:42:93:5B:15:C7:FF:AD:75:0F:8C:10:26:AA:A0:16:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0e6be976-2616-3403-a642-c983ce1864f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv4: 208.95.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0c:54:08:b0:de:fc:f3:69:44:e0:68:b8:1b:a1:bd:fe:08: 92:a0:29:41:c9:8c:f6:bc:db:c9:3a:af:60:67:d4:99:f5:7f: 08:f7:27:8f:b7:88:d9:4d:8b:b7:53:4a:90:27:d9:a9:81:4f: 48:83:29:f7:1d:90:c2:dd:ce:05:9b:9c:86:48:2a:28:59:a2: d9:de:43:5a:e0:b5:e5:60:30:17:4a:b3:4b:27:7d:7c:d7:1a: 9a:96:52:23:a3:16:80:bb:71:65:77:2b:93:54:d3:d0:fc:8a: 7b:0b:5a:aa:63:40:bc:66:20:50:c3:5c:54:ca:9e:63:19:a9: 11:91:68:ae:d5:76:26:b8:91:50:63:2b:fa:15:d7:24:ea:a1: 6a:fc:d3:c3:5c:42:84:51:c5:81:00:cc:3a:03:08:ba:08:00: 6d:26:21:05:6b:44:e3:20:0e:d0:5c:c6:38:ae:cb:8e:75:81: 01:71:d7:76:91:06:5b:16:fd:d8:e3:d0:d8:a2:05:35:56:f7: dd:2c:63:7c:99:e4:61:ca:94:ba:03:c5:ce:ed:30:e6:81:41: 23:b2:db:40:78:23:64:8e:fa:93:78:75:47:09:9b:a3:84:fe: c0:0a:26:4b:e3:4c:00:87:d9:8f:ec:20:ae:63:82:10:27:31: 6d:8c:a7:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+pwyHiYCHhTvMIHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI2MTAyOTEzMDAxMloXDTI3MDEyNzE0MDAxMlowLzEtMCsGA1UEAxMk YmY4Nzg4ZDQtNDA5Yi00YmJjLTgxYjEtZmNkODhkOGVjM2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhoLFHbHp78cpV3TqwQjlBNAjlERM3jrMm6J MUPuHFIYv2bthWRG52z33cOzkN5UVQ5uDFtXndCZfKlB2n3Gqj3OzWHFWSUAP0eB 9zk7BLVtrFDfan5U+r3AUk4zcZ3b5lrqrtKjISaRrGo9C230MRHlLFK7HX/J0+Qt RBtYIuVR47xL5e04tEwhb4udYTVrNPPdiRlBW3mg507RFAG8R03HJURfeKkCriOc rVJXQvRdl6R55WORyQ5nsJZdki5uLUi60jAV/YJsQl0i76t5oSgECQzgoc/B7otE 3BT7WnP0SMd+d0MK3oLXojm/HS6JVSoAPuZVB8bEGxVERVFkBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7EPSlCk1sVx/+tdQ+MECaqoBbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvMGU2YmU5NzYtMjYxNi0z NDAzLWE2NDItYzk4M2NlMTg2NGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F80MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEMVAiw3vzzaUTgaLgbob3+CJKgKUHJjPa828k6r2Bn1Jn1fwj3J4+3 iNlNi7dTSpAn2amBT0iDKfcdkMLdzgWbnIZIKihZotneQ1rgteVgMBdKs0snfXzX GpqWUiOjFoC7cWV3K5NU09D8insLWqpjQLxmIFDDXFTKnmMZqRGRaK7Vdia4kVBj K/oV1yTqoWr808NcQoRRxYEAzDoDCLoIAG0mIQVrROMgDtBcxjiuy451gQFx13aR BlsW/djj0NiiBTVW990sY3yZ5GHKlLoDxc7tMOaBQSOy20B4I2SO+pN4dUcJm6OE /sAKJkvjTACH2Y/sIK5jghAnMW2Mp8c= -----END CERTIFICATE-----Generated at Thu Nov 5 17:10:56 2026 by rpki-client