$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/f0ab9e2f-db14-39d5-9498-ae5db0f96696.roa File: f0ab9e2f-db14-39d5-9498-ae5db0f96696.roa (raw, json) Hash identifier: 9iFOf+DcglODhOwDF/vwYcJDQ71eqxj4nM50Gjdg0Zo= Subject key identifier: 27:AE:85:BF:F3:33:B4:D5:64:3B:FD:8D:73:1C:DA:7D:F0:F5:C9:25 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584F9BCDC115FE40A60D271D0FC8 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/f0ab9e2f-db14-39d5-9498-ae5db0f96696.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 14618 IP address blocks: 208.56.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:c1:15:fe:40:a6:0d:27:1d:0f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=eedc7afc-2461-4b30-8908-fcb489342b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:91:34:79:87:af:c7:ce:38:ee:e0:bd:0a:20: e5:ed:d2:55:c5:9a:ff:c3:75:ba:b6:e4:72:67:f1: cf:01:7c:d6:8a:c4:21:8e:53:b1:99:2b:f9:fb:22: 22:82:74:32:27:da:b2:ac:91:47:54:80:66:84:78: 6a:0e:4b:b7:00:b9:ad:23:3a:31:b3:48:7b:07:5b: 40:fa:e4:1a:01:d4:cd:99:c7:49:b8:ba:9c:2c:64: 0a:2c:65:18:3b:ab:8d:25:b1:ca:29:a7:56:11:29: db:50:e9:ba:7f:5b:7e:58:82:7d:cf:a2:15:63:92: 8b:28:ce:ce:48:cb:61:dc:38:0d:e4:4b:50:2c:1f: b0:36:97:31:10:fd:91:97:7c:7b:14:45:16:0d:d8: a8:3b:22:aa:de:c8:1e:6d:76:8b:0d:dd:ac:a8:9f: 81:38:03:3d:38:d0:e9:38:62:3e:be:09:16:28:53: b7:cd:ea:d0:f5:41:0f:87:6c:eb:21:b9:4f:44:a2: fe:1d:87:2f:f8:8f:73:1a:a4:a8:d9:bc:f8:fd:c6: ce:a7:30:80:00:75:b4:fb:45:c1:2b:51:f7:54:66: a1:49:f4:af:c7:8c:61:8c:f9:c7:1f:06:f2:ae:4c: b1:de:e6:65:cc:3a:88:28:de:35:89:a5:3c:a7:52: 1d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AE:85:BF:F3:33:B4:D5:64:3B:FD:8D:73:1C:DA:7D:F0:F5:C9:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/f0ab9e2f-db14-39d5-9498-ae5db0f96696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv4: 208.56.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:6f:db:f9:fe:8b:c2:7a:c8:db:1f:47:aa:f7:59:c2:8a:4b: 9a:5b:d2:26:8a:cf:ad:1f:6b:29:3c:cd:b3:40:df:ed:f1:e1: b3:e9:00:db:90:e2:4d:a5:bf:74:01:cb:6d:59:60:70:c5:36: 47:a8:8f:e2:00:13:60:d3:f3:b1:69:be:b8:cb:a8:a9:10:ab: a4:ed:f7:c5:9d:17:03:02:ca:7f:f3:56:eb:b5:01:ae:f9:a8: d9:0d:e8:f5:1b:ab:6d:e5:1e:45:c9:8c:c7:19:2e:c4:b7:ed: a1:42:a3:7e:e6:7f:b4:57:1b:e6:7e:a9:52:8d:46:7f:9f:05: c1:3a:e3:75:7a:d7:da:7a:f5:e4:8a:5b:ac:8f:b8:ed:8a:b7: d3:84:40:9a:24:85:7a:50:ec:f8:30:e1:73:2c:ad:4b:b4:31: 01:0c:d1:9b:98:a6:69:01:20:d1:31:13:68:30:b6:34:72:38: 8a:c0:89:da:0c:38:cf:12:6f:66:d9:0e:52:4e:32:d5:3c:1b: 80:0b:81:4a:26:a2:b2:c7:b7:71:6e:74:4d:7a:55:b3:43:31: 4c:cc:d1:25:72:dc:70:98:77:1f:78:8a:77:48:1b:4e:04:be: 6e:fa:83:d3:4b:a3:3a:ca:e3:54:fc:4f:97:27:05:de:8d:b7: 4c:fb:aa:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzcEV/kCmDScdD8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZWVkYzdhZmMtMjQ2MS00YjMwLTg5MDgtZmNiNDg5MzQyYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipE0eYevx8447uC9CiDl7dJVxZr/w3W6tuRy Z/HPAXzWisQhjlOxmSv5+yIignQyJ9qyrJFHVIBmhHhqDku3ALmtIzoxs0h7B1tA +uQaAdTNmcdJuLqcLGQKLGUYO6uNJbHKKadWESnbUOm6f1t+WIJ9z6IVY5KLKM7O SMth3DgN5EtQLB+wNpcxEP2Rl3x7FEUWDdioOyKq3sgebXaLDd2sqJ+BOAM9ONDp OGI+vgkWKFO3zerQ9UEPh2zrIblPRKL+HYcv+I9zGqSo2bz4/cbOpzCAAHW0+0XB K1H3VGahSfSvx4xhjPnHHwbyrkyx3uZlzDqIKN41iaU8p1IdKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeuhb/zM7TVZDv9jXMc2n3w9cklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvZjBhYjllMmYtZGIxNC0z OWQ1LTk0OTgtYWU1ZGIwZjk2Njk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0DgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVv2/n+i8J6yNsfR6r3WcKKS5pb0iaKz60fayk8zbNA3+3x4bPpANuQ 4k2lv3QBy21ZYHDFNkeoj+IAE2DT87FpvrjLqKkQq6Tt98WdFwMCyn/zVuu1Aa75 qNkN6PUbq23lHkXJjMcZLsS37aFCo37mf7RXG+Z+qVKNRn+fBcE643V619p69eSK W6yPuO2Kt9OEQJokhXpQ7Pgw4XMsrUu0MQEM0ZuYpmkBINExE2gwtjRyOIrAidoM OM8Sb2bZDlJOMtU8G4ALgUomorLHt3FudE16VbNDMUzM0SVy3HCYdx94indIG04E vm76g9NLozrK41T8T5cnBd6Nt0z7qkc= -----END CERTIFICATE-----Generated at Tue Oct 27 22:14:25 2026 by rpki-client