$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/a8ca5d2d-27f4-3285-892f-a366214e0fa4.roa File: a8ca5d2d-27f4-3285-892f-a366214e0fa4.roa (raw, json) Hash identifier: P7ea3vSDMrfouZdE4q1hTozixgSAQ6dMQ2GKcMwvDGM= Subject key identifier: 26:35:9E:EE:0D:1D:C2:75:01:DC:27:67:0C:DA:49:02:50:B8:06:F4 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584F9BCDC108FC5C3CDFD7E8DB00 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/a8ca5d2d-27f4-3285-892f-a366214e0fa4.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 16509 IP address blocks: 208.56.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:c1:08:fc:5c:3c:df:d7:e8:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=45a31595-ca6d-4f0e-8373-93e0b0967965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0e:56:c9:ff:25:60:76:b4:7b:98:09:e5:d9: ed:92:36:15:a2:ce:f2:7c:a0:e9:97:ec:fd:ed:bb: 35:a3:e8:25:9a:18:15:e3:74:47:8d:bc:e9:28:43: 14:14:9d:a6:c6:e8:d3:0d:8a:10:04:69:ee:f9:a4: dc:86:36:02:15:29:9d:2a:05:32:7e:1b:ae:b6:5b: 8e:e9:9f:92:50:35:5d:2d:f5:ea:64:09:1f:cc:4e: d1:09:6a:03:18:c6:78:48:5a:15:cc:c3:bc:8e:e5: 88:fe:46:90:de:25:3a:e2:21:8a:f8:e7:39:bf:2a: c2:53:a7:9e:07:40:7e:34:06:36:a6:13:00:f5:04: 72:e7:d1:a9:eb:88:53:a2:0c:e6:7c:84:d0:c0:bd: 35:f4:a3:0f:4c:c7:ef:24:76:94:6e:2b:85:f4:49: fd:61:33:9a:d2:74:c0:4f:5b:2e:82:bc:43:1e:26: 6e:d5:f4:45:21:4b:ad:0b:60:a9:4d:61:9f:5c:59: 66:00:3f:f6:c1:46:f1:a1:4f:b3:1f:85:f2:2f:99: c2:b7:14:ab:19:eb:1e:d6:6d:14:e3:b5:60:89:7e: c4:53:35:fa:7a:dc:be:68:22:99:28:ed:cb:62:6f: 93:d2:66:90:ff:65:90:f2:c9:12:3d:85:4b:da:a2: d1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:35:9E:EE:0D:1D:C2:75:01:DC:27:67:0C:DA:49:02:50:B8:06:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/a8ca5d2d-27f4-3285-892f-a366214e0fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv4: 208.56.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:2e:77:08:59:8b:e3:f5:51:b3:26:34:b5:3a:d2:d7:fd:90: 95:78:18:30:54:cd:46:a0:d2:c7:57:85:26:9b:42:3c:36:a1: f2:dc:73:ca:9e:45:9c:ed:da:5c:f4:18:6c:9d:a5:17:a6:ad: a5:f7:1a:4c:5d:eb:22:20:a5:f6:67:88:aa:54:6f:86:30:8b: 5e:4d:49:08:c5:b7:04:82:bf:61:22:a4:85:98:be:c5:7d:f0: ca:4e:33:a4:54:36:9d:fa:42:49:ce:f7:da:7d:97:f7:b4:2c: 19:13:da:b0:f0:7f:70:70:9d:7e:fd:c0:e5:2c:34:29:4c:79: c7:b3:77:78:2c:2e:b1:79:3a:ba:81:fa:fe:ef:56:c2:04:0a: fb:19:40:26:ca:46:04:13:0f:53:3a:c8:bf:4c:c1:12:d9:6f: 8a:a7:5d:66:70:0b:96:da:b3:91:24:60:dd:eb:b5:54:e1:e0: 8f:62:0b:bd:6b:11:78:88:51:a3:cb:92:86:f3:f9:9f:8c:83: 88:aa:7e:20:4a:7f:0f:46:23:2e:d7:6e:3b:84:f0:10:31:13: 84:b9:3a:01:9b:36:fe:f1:52:b2:24:fc:05:ca:2d:30:ce:0a: 53:df:98:1a:7a:d6:3e:ac:13:c7:3d:90:28:75:72:a8:bb:d3: 69:9c:cd:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzcEI/Fw839fo2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NDVhMzE1OTUtY2E2ZC00ZjBlLTgzNzMtOTNlMGIwOTY3OTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA5Wyf8lYHa0e5gJ5dntkjYVos7yfKDpl+z9 7bs1o+glmhgV43RHjbzpKEMUFJ2mxujTDYoQBGnu+aTchjYCFSmdKgUyfhuutluO 6Z+SUDVdLfXqZAkfzE7RCWoDGMZ4SFoVzMO8juWI/kaQ3iU64iGK+Oc5vyrCU6ee B0B+NAY2phMA9QRy59Gp64hTogzmfITQwL019KMPTMfvJHaUbiuF9En9YTOa0nTA T1sugrxDHiZu1fRFIUutC2CpTWGfXFlmAD/2wUbxoU+zH4XyL5nCtxSrGese1m0U 47VgiX7EUzX6ety+aCKZKO3LYm+T0maQ/2WQ8skSPYVL2qLRgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCY1nu4NHcJ1AdwnZwzaSQJQuAb0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvYThjYTVkMmQtMjdmNC0z Mjg1LTg5MmYtYTM2NjIxNGUwZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0DgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcudwhZi+P1UbMmNLU60tf9kJV4GDBUzUag0sdXhSabQjw2ofLcc8qe RZzt2lz0GGydpRemraX3Gkxd6yIgpfZniKpUb4Ywi15NSQjFtwSCv2EipIWYvsV9 8MpOM6RUNp36QknO99p9l/e0LBkT2rDwf3BwnX79wOUsNClMecezd3gsLrF5OrqB +v7vVsIECvsZQCbKRgQTD1M6yL9MwRLZb4qnXWZwC5bas5EkYN3rtVTh4I9iC71r EXiIUaPLkobz+Z+Mg4iqfiBKfw9GIy7XbjuE8BAxE4S5OgGbNv7xUrIk/AXKLTDO ClPfmBp61j6sE8c9kCh1cqi702mczU0= -----END CERTIFICATE-----Generated at Tue Oct 27 20:49:56 2026 by rpki-client