$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/dd8d1673-3853-3ac6-8b5a-648454432ae7.roa File: dd8d1673-3853-3ac6-8b5a-648454432ae7.roa (raw, json) Hash identifier: AWnZOVIeuY6mlZCVoxb4AE8VyMQsFxrgojg4cWu3l1o= Subject key identifier: DF:C6:37:04:71:D6:D8:49:81:C6:24:4C:27:B3:EE:42:72:EF:37:6A Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Certificate serial: 010D0C9F4328584F0C0784A055779E53878DE100 Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/dd8d1673-3853-3ac6-8b5a-648454432ae7.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 3209 IP address blocks: 208.138.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:84:a0:55:77:9e:53:87:8d:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=183a3e11-3a6c-41e1-a930-da8badba80af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:02:3a:6c:1e:18:c3:e4:c1:a1:fc:2a:81:39: 87:93:81:61:ee:cf:87:39:6e:d8:23:81:96:ef:eb: b4:7d:05:35:63:64:81:2b:ff:8b:57:7c:6a:93:b1: 02:e2:05:8c:e3:1e:29:f6:de:4f:3f:53:4d:f8:fa: ff:ec:a3:42:f9:b0:fc:00:6e:05:f6:d8:17:7e:da: ad:2f:e7:85:73:a2:55:8c:9b:19:99:21:b2:ec:49: a4:5a:28:d7:b1:66:e0:0f:25:8c:46:8e:ba:e4:88: 41:6d:fc:5a:59:04:e0:e6:65:dd:76:33:05:c7:c5: 71:03:a6:c6:4a:4b:8d:6f:3c:2a:f5:31:16:0b:36: 8d:75:75:76:b6:11:3e:5c:75:1a:de:05:77:06:fd: 22:5a:db:6c:96:1f:81:69:de:cf:d1:33:9a:29:0f: c1:35:45:58:b3:2c:c3:0f:10:46:6a:fa:13:1a:cf: 59:a6:be:e0:96:c3:d3:8f:f8:f3:63:63:78:fa:37: 2a:97:c1:53:d3:80:13:6a:ce:f6:2e:9a:3c:a2:25: e9:a3:a4:0f:f6:c6:3e:23:63:f7:0f:8b:86:17:d2: 12:52:91:fb:90:6b:5f:b2:57:26:39:0c:86:bc:e5: c1:9d:b9:25:b4:14:2d:1a:28:13:93:9e:d3:02:57: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C6:37:04:71:D6:D8:49:81:C6:24:4C:27:B3:EE:42:72:EF:37:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/dd8d1673-3853-3ac6-8b5a-648454432ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl X509v3 Authority Key Identifier: keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer sbgp-ipAddrBlock: critical IPv4: 208.138.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:7a:f1:5d:1d:e5:35:27:51:86:a8:e5:62:23:df:87:70:ef: 01:36:b5:98:fa:6c:f6:b7:a4:7b:62:3e:83:b8:cc:a0:ff:9f: 71:c5:04:22:44:55:80:68:8b:f0:8e:4a:e2:1b:5a:73:e4:b9: 5f:cd:4a:c3:a3:7f:4c:aa:ff:b2:34:af:19:58:1a:57:a8:0d: bf:20:ce:fb:76:84:4b:7c:25:33:2b:57:d6:c7:f8:5d:c7:89: 77:0f:1f:67:fb:49:b2:71:d0:de:42:dc:d7:50:c2:58:a7:cd: 8f:74:d4:00:c6:f2:e3:7d:e4:fa:27:b7:83:ba:23:e8:b1:33: 71:4e:58:33:0e:24:34:cb:6b:2b:43:eb:c6:10:6d:92:9a:0a: fa:b2:7b:a1:ff:c0:6d:94:5a:07:39:3d:de:cd:d4:50:b3:55: 48:e4:78:ac:eb:2c:56:3b:24:b9:51:11:15:2b:22:1b:b2:95: 3b:f7:0d:89:55:55:dc:b7:dc:42:80:c8:90:07:78:f7:e5:ff: 5b:0d:b5:83:96:b9:79:8b:c5:04:09:27:76:66:ea:dd:09:94: 91:93:60:f0:82:60:cd:ff:13:1f:37:79:44:2e:71:a6:d6:a7: a3:65:20:d9:8e:82:6a:2f:f0:2c:66:32:cb:51:b1:de:b2:57: a3:e7:78:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB4SgVXeeU4eN4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4 NTgyMB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk MTgzYTNlMTEtM2E2Yy00MWUxLWE5MzAtZGE4YmFkYmE4MGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAI6bB4Yw+TBofwqgTmHk4Fh7s+HOW7YI4GW 7+u0fQU1Y2SBK/+LV3xqk7EC4gWM4x4p9t5PP1NN+Pr/7KNC+bD8AG4F9tgXftqt L+eFc6JVjJsZmSGy7EmkWijXsWbgDyWMRo665IhBbfxaWQTg5mXddjMFx8VxA6bG SkuNbzwq9TEWCzaNdXV2thE+XHUa3gV3Bv0iWttslh+Bad7P0TOaKQ/BNUVYsyzD DxBGavoTGs9Zpr7glsPTj/jzY2N4+jcql8FT04ATas72Lpo8oiXpo6QP9sY+I2P3 D4uGF9ISUpH7kGtfslcmOQyGvOXBnbkltBQtGigTk57TAldoYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/GNwRx1thJgcYkTCez7kJy7zdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvZGQ4ZDE2NzMtMzg1My0z YWM2LThiNWEtNjQ4NDU0NDMyYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3 NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0IqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB68V0d5TUnUYao5WIj34dw7wE2tZj6bPa3pHtiPoO4zKD/n3HFBCJE VYBoi/COSuIbWnPkuV/NSsOjf0yq/7I0rxlYGleoDb8gzvt2hEt8JTMrV9bH+F3H iXcPH2f7SbJx0N5C3NdQwlinzY901ADG8uN95Pont4O6I+ixM3FOWDMOJDTLaytD 68YQbZKaCvqye6H/wG2UWgc5Pd7N1FCzVUjkeKzrLFY7JLlRERUrIhuylTv3DYlV Vdy33EKAyJAHePfl/1sNtYOWuXmLxQQJJ3Zm6t0JlJGTYPCCYM3/Ex83eUQucabW p6NlINmOgmov8CxmMstRsd6yV6PneC4= -----END CERTIFICATE-----Generated at Thu Sep 10 20:35:49 2026 by rpki-client