$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c66b80e6-d338-33b9-8280-2772e7bf145d.roa File: c66b80e6-d338-33b9-8280-2772e7bf145d.roa (raw, json) Hash identifier: p8mhlsTEQWIwabNl15rG4uxkzU0UBAxb3vXddfyXcKU= Subject key identifier: B2:CE:6F:83:59:94:81:9D:2D:4F:3E:FD:42:1F:5E:EB:E3:BA:00:B0 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584F10378FF86B2C0E22475A1E40 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c66b80e6-d338-33b9-8280-2772e7bf145d.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 53356 IP address blocks: 209.178.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:8f:f8:6b:2c:0e:22:47:5a:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=1b230432-e07c-4c08-afd7-242d41c27218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6c:c5:f7:6c:6e:47:cb:36:6e:66:d8:5f:57: 74:33:a5:72:f6:85:37:68:40:fc:e9:f7:a5:95:9b: e9:cc:03:fd:ad:26:ef:dc:9d:44:e5:82:c4:dd:d9: aa:da:f3:a2:42:db:29:c4:04:36:54:2b:ea:2e:a2: b0:11:e9:91:a9:1f:2c:5e:74:30:ff:f0:54:3e:58: f1:84:d8:84:8d:07:dc:cf:55:25:e1:ab:18:24:7d: 60:77:f8:f6:5a:8e:b2:c2:be:4e:02:c7:8a:e8:f7: e2:29:58:b1:7f:35:79:b1:50:d8:5b:09:76:d5:01: 08:a8:cd:e9:c4:49:08:28:b6:a7:58:a6:59:92:70: 72:76:f9:06:0e:c9:77:f3:d2:82:38:a9:84:82:66: 10:d1:70:93:d8:43:40:ae:a9:49:38:ab:29:73:00: 1c:a0:a5:ff:ac:f6:11:96:4c:f3:b0:93:ef:3a:ca: ce:6b:04:7d:75:2b:0c:63:68:f0:36:8f:c3:41:0f: a0:9f:67:1b:29:eb:11:e1:18:d0:a6:e1:74:32:f6: 3e:b6:41:b3:82:28:c9:b4:11:52:42:77:0a:0a:b4: a3:d8:06:9a:86:a8:0b:47:0c:c9:15:32:e7:3b:0d: 71:d5:c8:34:5b:3c:2d:bb:71:86:de:12:f1:33:bf: 02:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:CE:6F:83:59:94:81:9D:2D:4F:3E:FD:42:1F:5E:EB:E3:BA:00:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/c66b80e6-d338-33b9-8280-2772e7bf145d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 209.178.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:de:ba:fb:ae:03:4a:83:3b:7c:3b:ec:3a:10:87:fd:dc:94: 74:21:9c:6d:2d:f6:58:0f:a0:fb:aa:b4:05:06:2b:11:2a:a7: 3a:6d:13:62:3a:76:16:34:85:17:43:e4:0e:e7:42:cc:9d:51: da:78:90:f4:36:18:74:93:f5:f8:53:6f:bc:47:22:94:75:03: be:30:c1:1c:9b:cc:b4:82:8f:8f:f6:47:9f:f7:6b:e7:ab:74: a1:b5:d8:e2:3b:d2:76:39:33:bf:9b:e6:a0:44:b9:cd:ae:4a: b3:97:83:7c:1b:70:d3:d8:77:92:2c:9f:8a:71:41:10:5e:4f: a0:2b:be:16:77:b3:24:35:78:66:d6:d2:4b:52:28:01:c1:2c: d4:84:ca:f5:34:3f:fb:09:c4:42:8d:5a:0d:15:15:66:01:76: fc:64:6a:e9:75:41:40:00:09:fe:ed:6c:ab:5a:bc:2f:bd:6f: 17:58:68:66:b8:b9:4e:18:8d:6a:26:c6:5e:90:bb:a2:e9:5c: 9e:8f:87:0e:50:7a:2a:08:51:ea:19:85:ee:e3:f9:cc:b8:81: 2b:66:27:45:8d:09:ac:7b:68:b6:54:4a:da:bf:86:be:ae:55: ee:06:8d:d4:02:d3:40:6c:5d:ed:18:13:36:7f:a5:92:d6:20: ae:25:5c:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN4/4aywOIkdaHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk MWIyMzA0MzItZTA3Yy00YzA4LWFmZDctMjQyZDQxYzI3MjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGzF92xuR8s2bmbYX1d0M6Vy9oU3aED86fel lZvpzAP9rSbv3J1E5YLE3dmq2vOiQtspxAQ2VCvqLqKwEemRqR8sXnQw//BUPljx hNiEjQfcz1Ul4asYJH1gd/j2Wo6ywr5OAseK6PfiKVixfzV5sVDYWwl21QEIqM3p xEkIKLanWKZZknBydvkGDsl389KCOKmEgmYQ0XCT2ENArqlJOKspcwAcoKX/rPYR lkzzsJPvOsrOawR9dSsMY2jwNo/DQQ+gn2cbKesR4RjQpuF0MvY+tkGzgijJtBFS QncKCrSj2AaahqgLRwzJFTLnOw1x1cg0Wzwtu3GG3hLxM78CVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLOb4NZlIGdLU8+/UIfXuvjugCwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvYzY2YjgwZTYtZDMzOC0z M2I5LTgyODAtMjc3MmU3YmYxNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0bLuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHeuvuuA0qDO3w77DoQh/3clHQhnG0t9lgPoPuqtAUGKxEqpzptE2I6 dhY0hRdD5A7nQsydUdp4kPQ2GHST9fhTb7xHIpR1A74wwRybzLSCj4/2R5/3a+er dKG12OI70nY5M7+b5qBEuc2uSrOXg3wbcNPYd5Isn4pxQRBeT6ArvhZ3syQ1eGbW 0ktSKAHBLNSEyvU0P/sJxEKNWg0VFWYBdvxkaul1QUAACf7tbKtavC+9bxdYaGa4 uU4YjWomxl6Qu6LpXJ6Phw5QeioIUeoZhe7j+cy4gStmJ0WNCax7aLZUStq/hr6u Ve4GjdQC00BsXe0YEzZ/pZLWIK4lXHA= -----END CERTIFICATE-----Generated at Fri Sep 4 22:27:08 2026 by rpki-client