$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/9b5457b1-29c3-3f72-99e8-95d53c89e687.roa File: 9b5457b1-29c3-3f72-99e8-95d53c89e687.roa (raw, json) Hash identifier: wFi1te64mBDIbyuo5QiNKMSBam7FWyYr2YHpnadLXT0= Subject key identifier: C4:79:C9:AA:74:13:87:26:D4:D1:A1:15:02:77:0E:3A:8D:3E:78:8C Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584F06E614F4AB7F647F97A6A200 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/9b5457b1-29c3-3f72-99e8-95d53c89e687.roa Signing time: Tue 01 Sep 2026 04:53:53 +0000 ROA not before: Tue 01 Sep 2026 04:53:53 +0000 ROA not after: Mon 30 Nov 2026 05:52:32 +0000 asID: 16509 IP address blocks: 208.95.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:e6:14:f4:ab:7f:64:7f:97:a6:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Sep 1 04:53:53 2026 GMT Not After : Nov 30 05:52:32 2026 GMT Subject: CN=63e9e4eb-e529-4230-a59f-ce66ac51818b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:fd:e5:13:21:82:9e:60:71:7f:84:34:04:92: cb:2c:ef:e2:e3:62:8a:e8:0a:0c:98:5b:ca:90:73: d7:98:cc:0b:f4:fd:97:8b:44:dd:7c:7a:36:d3:07: aa:20:f5:fb:76:de:00:ee:a8:9e:c6:0a:e7:ec:4e: 90:f0:c0:44:6a:d6:e9:82:1a:a4:57:51:a5:2e:39: 13:04:4b:c1:17:40:31:1a:36:df:19:d2:2d:a1:3f: 0d:6a:9b:26:ce:07:0c:1a:40:b0:18:e5:53:cc:3e: 95:25:e3:ff:54:9e:94:36:9a:26:c9:80:24:53:c6: 37:f3:13:a7:2e:a0:e4:22:1b:ac:ce:d0:19:bb:a9: cd:a1:d0:10:38:11:52:5b:6d:60:d8:bf:73:6b:50: 20:e8:79:ac:f9:83:31:72:67:f0:e2:f9:30:ec:e9: b5:b2:c9:62:ef:b1:21:c2:7e:58:91:9c:12:a5:ac: b4:f4:1e:9b:1d:94:e8:e2:ce:f4:0d:9b:e8:77:59: e1:70:cf:54:57:36:f6:6e:af:5f:d3:8d:23:09:92: f4:0a:7f:e7:ea:14:04:c6:6a:fd:92:37:e3:4e:2c: 80:3d:30:2e:c4:de:27:cb:4c:14:79:99:33:14:09: 3f:e3:74:2c:8e:0e:db:e9:a8:84:03:cb:d2:8a:c8: d0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:79:C9:AA:74:13:87:26:D4:D1:A1:15:02:77:0E:3A:8D:3E:78:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/9b5457b1-29c3-3f72-99e8-95d53c89e687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv4: 208.95.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:da:48:8c:dc:cc:da:0c:a0:cc:6e:45:f3:21:61:10:91:6a: 11:b3:ca:89:98:2c:ca:b3:54:bf:c0:55:56:d3:ac:d1:5c:09: 96:7b:95:98:e3:ed:99:99:06:85:c6:5a:41:ab:41:6d:90:f0: a5:a1:ac:48:e1:33:d7:4b:56:f5:f8:cb:3b:62:78:6b:c7:06: ae:bc:7a:be:f3:7f:6c:81:bb:6b:99:04:3e:c9:46:84:ef:2b: 74:43:9a:88:28:22:75:90:da:eb:fb:a7:ab:c3:f1:c6:19:17: c4:ac:52:c5:ae:bb:75:12:f3:16:b7:7a:32:16:ee:62:18:40: 86:92:28:7f:af:68:94:32:e8:86:03:87:af:c8:cc:72:59:ed: 43:07:b6:3c:e0:3e:d9:9e:8d:fb:dd:69:40:70:2b:57:54:a5: e0:cd:da:28:91:32:ae:40:76:72:e9:f9:99:1b:59:47:fc:3a: 20:75:bf:07:0f:b7:55:63:d9:17:cd:b9:4d:ac:ef:0f:73:fa: 9b:69:b0:5e:9f:68:f9:ac:9b:29:8b:6e:bd:94:14:fa:96:85: 11:78:1a:80:74:64:08:ed:2b:31:ba:28:31:55:78:28:7b:65: c7:75:11:ea:7b:8e:7b:27:4f:9e:20:f4:e0:aa:62:f0:3a:3e: 57:9e:eb:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8G5hT0q39kf5emogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI2MDkwMTA0NTM1M1oXDTI2MTEzMDA1NTIzMlowLzEtMCsGA1UEAxMk NjNlOWU0ZWItZTUyOS00MjMwLWE1OWYtY2U2NmFjNTE4MThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv3lEyGCnmBxf4Q0BJLLLO/i42KK6AoMmFvK kHPXmMwL9P2Xi0TdfHo20weqIPX7dt4A7qiexgrn7E6Q8MBEatbpghqkV1GlLjkT BEvBF0AxGjbfGdItoT8NapsmzgcMGkCwGOVTzD6VJeP/VJ6UNpomyYAkU8Y38xOn LqDkIhusztAZu6nNodAQOBFSW21g2L9za1Ag6Hms+YMxcmfw4vkw7Om1ssli77Eh wn5YkZwSpay09B6bHZTo4s70DZvod1nhcM9UVzb2bq9f040jCZL0Cn/n6hQExmr9 kjfjTiyAPTAuxN4ny0wUeZkzFAk/43Qsjg7b6aiEA8vSisjQ+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR5yap0E4cm1NGhFQJ3DjqNPniMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvOWI1NDU3YjEtMjljMy0z ZjcyLTk5ZTgtOTVkNTNjODllNjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F80MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvaSIzczNoMoMxuRfMhYRCRahGzyomYLMqzVL/AVVbTrNFcCZZ7lZjj 7ZmZBoXGWkGrQW2Q8KWhrEjhM9dLVvX4yztieGvHBq68er7zf2yBu2uZBD7JRoTv K3RDmogoInWQ2uv7p6vD8cYZF8SsUsWuu3US8xa3ejIW7mIYQIaSKH+vaJQy6IYD h6/IzHJZ7UMHtjzgPtmejfvdaUBwK1dUpeDN2iiRMq5AdnLp+ZkbWUf8OiB1vwcP t1Vj2RfNuU2s7w9z+ptpsF6faPmsmymLbr2UFPqWhRF4GoB0ZAjtKzG6KDFVeCh7 Zcd1Eep7jnsnT54g9OCqYvA6Plee69A= -----END CERTIFICATE-----Generated at Sat Sep 19 08:41:30 2026 by rpki-client