$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/c424ffca-8608-3f6f-8ce3-25f13376cd72.roa File: c424ffca-8608-3f6f-8ce3-25f13376cd72.roa (raw, json) Hash identifier: CiXJvvWqcKZwrqWKAclzD6ss6lBsqvonwaFeqI6TRfw= Subject key identifier: CC:54:1B:F3:FC:CD:83:C3:AB:19:41:B6:DA:80:0A:F4:0D:4D:98:B8 Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Certificate serial: 010D0C9F4328584F89A85AE6830D117DBD78A700 Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/c424ffca-8608-3f6f-8ce3-25f13376cd72.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 1273 IP address blocks: 208.175.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:5a:e6:83:0d:11:7d:bd:78:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=3397e5e0-eb12-4c1e-83ad-50b30e8ef7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7b:3d:a9:2d:6c:d0:74:c3:92:4c:fc:da:ea: 16:96:7b:1c:82:bf:5f:02:31:ba:8d:53:e0:50:f0: 16:69:91:df:6f:1a:98:1a:dd:24:9e:b5:96:34:bc: 9f:2b:09:7d:19:4e:ea:fc:3e:86:dc:1a:67:a7:4b: 34:3d:3a:c8:f8:e2:c7:7f:a3:ea:5d:b8:ef:4d:bf: 12:f6:82:2c:f7:f7:67:7e:d5:08:5c:17:3b:45:ac: 8e:e2:c9:f3:4a:5a:8f:20:cc:b9:4d:25:47:a0:af: ca:89:ca:f5:54:47:71:40:9c:7c:35:6b:28:5c:7a: e4:f0:d1:7f:f7:c0:06:81:49:82:da:79:38:44:58: 63:80:ec:27:c7:78:6e:58:fc:a6:b2:93:a1:7f:07: 07:0b:22:6b:f0:fd:f2:d8:30:8d:27:9c:17:bd:f9: 2e:64:30:77:fc:7e:23:fa:fb:96:87:6e:c5:3f:12: 16:8d:f8:94:e4:bc:24:8e:a3:48:50:fb:98:1b:2c: 81:96:ca:6c:77:41:34:b4:54:88:5e:6e:85:a3:ca: 2f:92:0e:96:6f:28:e5:bf:6b:8e:07:ab:e8:4d:6f: 77:19:ee:da:c8:c7:6e:45:52:a5:37:65:5f:04:16: 77:45:29:f7:69:02:b5:ac:be:f3:e3:dc:ea:f7:88: b3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:54:1B:F3:FC:CD:83:C3:AB:19:41:B6:DA:80:0A:F4:0D:4D:98:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/c424ffca-8608-3f6f-8ce3-25f13376cd72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl X509v3 Authority Key Identifier: keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer sbgp-ipAddrBlock: critical IPv4: 208.175.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:67:49:26:45:c8:45:e9:e7:84:5c:d2:47:5e:ca:e9:8e:f4: ca:fb:1e:ae:00:51:5f:74:94:bd:40:d9:cb:df:ad:d3:db:8c: 07:a8:c1:10:42:5d:81:f5:e6:ba:5b:34:be:7b:49:ea:5a:f7: 17:43:a4:82:f5:f7:5a:51:79:ea:b0:83:5d:df:46:94:d5:6f: 35:3a:ca:b9:16:53:59:cd:08:3d:5a:11:c1:a8:a9:c1:9f:e1: 4b:9b:7c:67:d7:ad:ac:cb:9b:0c:60:9b:c8:f4:2b:75:57:4c: 7d:28:47:2d:73:31:15:38:60:61:69:0b:3c:40:68:b1:ea:b9: de:19:a1:c2:ed:35:42:47:35:51:bb:48:25:e9:45:61:87:1f: 3e:6b:8a:03:a4:6a:15:7c:98:5e:35:42:15:87:b2:fa:b6:92: c5:f6:f2:14:f8:2c:27:c7:98:66:45:3d:02:24:c9:ee:3e:3e: 27:e0:f4:62:a4:04:e2:42:1a:f9:de:34:91:72:6d:cf:f7:2a: 78:59:0f:ee:81:24:e6:73:07:e6:ac:51:b6:8c:5b:1c:e8:7b: 29:0b:81:23:a4:9d:9b:a7:9d:95:5e:f6:2e:33:6e:05:3f:9f: c6:38:9c:08:7a:47:6d:5b:6f:58:d7:68:9d:34:5c:a5:96:dd: 91:28:16:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqFrmgw0Rfb14pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4 NTgyMB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MzM5N2U1ZTAtZWIxMi00YzFlLTgzYWQtNTBiMzBlOGVmN2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXs9qS1s0HTDkkz82uoWlnscgr9fAjG6jVPg UPAWaZHfbxqYGt0knrWWNLyfKwl9GU7q/D6G3Bpnp0s0PTrI+OLHf6PqXbjvTb8S 9oIs9/dnftUIXBc7RayO4snzSlqPIMy5TSVHoK/Kicr1VEdxQJx8NWsoXHrk8NF/ 98AGgUmC2nk4RFhjgOwnx3huWPymspOhfwcHCyJr8P3y2DCNJ5wXvfkuZDB3/H4j +vuWh27FPxIWjfiU5LwkjqNIUPuYGyyBlspsd0E0tFSIXm6Fo8ovkg6Wbyjlv2uO B6voTW93Ge7ayMduRVKlN2VfBBZ3RSn3aQK1rL7z49zq94izSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxUG/P8zYPDqxlBttqACvQNTZi4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvYzQyNGZmY2EtODYwOC0z ZjZmLThjZTMtMjVmMTMzNzZjZDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3 NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0K+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhnSSZFyEXp54Rc0kdeyumO9Mr7Hq4AUV90lL1A2cvfrdPbjAeowRBC XYH15rpbNL57Sepa9xdDpIL191pReeqwg13fRpTVbzU6yrkWU1nNCD1aEcGoqcGf 4UubfGfXrazLmwxgm8j0K3VXTH0oRy1zMRU4YGFpCzxAaLHqud4ZocLtNUJHNVG7 SCXpRWGHHz5rigOkahV8mF41QhWHsvq2ksX28hT4LCfHmGZFPQIkye4+Pifg9GKk BOJCGvneNJFybc/3KnhZD+6BJOZzB+asUbaMWxzoeykLgSOknZunnZVe9i4zbgU/ n8Y4nAh6R21bb1jXaJ00XKWW3ZEoFg8= -----END CERTIFICATE-----Generated at Tue Oct 27 12:26:23 2026 by rpki-client