$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa File: 2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa (raw, json) Hash identifier: OEqpkDqxeDk3HI+NDbE8J/JLx6xYTD4H1y1/kZf3vgc= Subject key identifier: D4:FC:3A:0A:9F:F3:88:33:53:38:ED:B3:D7:EB:69:8E:A1:5A:39:96 Certificate issuer: /CN=a8825ed0-210f-48ae-8970-c92773afbb48 Certificate serial: 010D0C9F4328584F4974829E3DB9A2D50EF5FF00 Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16766 IP address blocks: 208.122.32.0/21 maxlen: 24 208.122.40.0/23 maxlen: 24 208.122.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:82:9e:3d:b9:a2:d5:0e:f5:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bad551ba-9923-439e-a23e-c0c8935d0d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2c:ca:65:ff:1b:23:da:fc:be:3b:ea:cb:96: 91:fe:b4:c5:2e:64:bc:3d:06:75:65:2b:99:f2:99: 34:11:d2:c7:4c:3a:1e:57:2e:d3:f8:c8:4e:31:e2: 27:a8:a2:16:29:f1:14:c4:84:99:23:03:9d:06:8f: fe:b0:89:65:7a:20:82:da:71:8f:c6:f8:8b:ee:09: e4:21:f0:ed:23:da:1a:8e:c8:61:5c:60:48:49:2c: 03:b5:13:6a:f9:c3:93:54:9f:44:8f:b2:cd:82:c2: f3:f8:a7:ba:ef:4a:af:d1:c0:8e:55:3f:82:aa:f9: df:0f:f5:52:2d:85:e1:ef:69:6f:01:9d:4d:c7:43: b6:cd:73:70:72:96:e2:9c:8e:4b:54:16:77:ce:ff: 6e:93:2c:e3:af:c1:e6:f6:c5:0d:06:1d:9c:25:41: d2:a5:1a:8f:8a:db:aa:c7:d3:06:42:30:fa:ca:b8: 64:d2:a3:ed:44:29:c7:95:72:65:64:e3:8a:56:67: 9c:9a:9a:c9:34:90:d1:fc:92:a2:2c:a0:31:1a:1b: b0:0e:5e:4a:67:f4:26:fd:df:ca:16:9b:1a:a8:f2: db:08:cb:5d:0e:ad:a5:d9:97:2a:d0:c4:52:12:81: 31:9a:f7:c2:e7:6b:29:6c:d4:55:3b:76:a2:13:7c: da:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FC:3A:0A:9F:F3:88:33:53:38:ED:B3:D7:EB:69:8E:A1:5A:39:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl X509v3 Authority Key Identifier: keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer sbgp-ipAddrBlock: critical IPv4: 208.122.32.0-208.122.42.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:8b:5f:1c:1d:2d:4e:95:e7:97:05:f3:42:79:b8:da:f1:f0: 03:b8:f9:de:41:dc:77:9d:7a:ce:93:2a:96:72:45:f2:ca:d6: 09:14:23:33:e1:b0:b9:38:9e:d2:54:51:b9:15:19:d9:69:cb: e6:52:60:ae:d6:34:67:d3:3c:30:df:84:2b:50:49:4a:95:46: 2c:96:98:ee:62:c5:bc:d0:6e:a2:a9:f6:a4:44:7d:1a:00:ae: 66:c7:c7:4f:0c:4f:fa:eb:d6:c5:a1:a4:a4:b1:58:9a:ef:61: 38:7c:3a:e2:56:e7:c5:a4:91:bb:fb:b8:6e:5c:7b:e9:37:73: 50:6f:1f:26:dc:71:ee:bb:fb:1e:89:ec:a5:29:d5:d0:15:3f: fd:6d:2b:b6:2b:aa:2b:43:b0:68:04:0a:4f:6e:70:67:ea:ed: 99:e4:a8:f4:f6:39:a0:cb:a9:c1:a2:6a:01:28:1d:58:04:1d: 00:66:a4:12:fe:7e:a9:7b:29:51:9b:96:33:d2:12:65:09:92: f6:0b:c2:6f:ac:09:5a:51:a1:2a:de:fa:18:59:8d:bf:e4:b5: 73:2e:3f:bd:a6:5f:d7:55:1c:6d:67:d8:ac:c9:8c:5d:bd:c4: 8f:33:db:d6:77:a9:94:b1:58:5c:54:e9:dc:76:06:11:e4:31: ba:3b:e8:ad -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9JdIKePbmi1Q71/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg4MjVlZDAtMjEwZi00OGFlLTg5NzAtYzkyNzczYWZi YjQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmFkNTUxYmEtOTkyMy00MzllLWEyM2UtYzBjODkzNWQwZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCzKZf8bI9r8vjvqy5aR/rTFLmS8PQZ1ZSuZ 8pk0EdLHTDoeVy7T+MhOMeInqKIWKfEUxISZIwOdBo/+sIlleiCC2nGPxviL7gnk IfDtI9oajshhXGBISSwDtRNq+cOTVJ9Ej7LNgsLz+Ke670qv0cCOVT+CqvnfD/VS LYXh72lvAZ1Nx0O2zXNwcpbinI5LVBZ3zv9ukyzjr8Hm9sUNBh2cJUHSpRqPituq x9MGQjD6yrhk0qPtRCnHlXJlZOOKVmecmprJNJDR/JKiLKAxGhuwDl5KZ/Qm/d/K FpsaqPLbCMtdDq2l2Zcq0MRSEoExmvfC52spbNRVO3aiE3zanQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFNT8Ogqf84gzUzjts9fraY6hWjmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgy NWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3NzNhZmJiNDgvMmVhN2NmNTktN2ExNC0z OTFiLTliZmMtYTQ2ZDE2Y2M3NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg4MjVlZDAtMjEwZi00OGFlLTg5 NzAtYzkyNzczYWZiYjQ4L2E4ODI1ZWQwLTIxMGYtNDhhZS04OTcwLWM5Mjc3M2Fm YmI0OC5jcmwwHwYDVR0jBBgwFoAUuwWm2x54AOi+CyBW1ajduRjiP2UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgyNWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3 NzNhZmJiNDguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXQeiAD BADQeiowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAaotfHB0tTpXnlwXzQnm42vHwA7j53kHcd516zpMqlnJF 8srWCRQjM+GwuTie0lRRuRUZ2WnL5lJgrtY0Z9M8MN+EK1BJSpVGLJaY7mLFvNBu oqn2pER9GgCuZsfHTwxP+uvWxaGkpLFYmu9hOHw64lbnxaSRu/u4blx76TdzUG8f Jtxx7rv7HonspSnV0BU//W0rtiuqK0OwaAQKT25wZ+rtmeSo9PY5oMupwaJqASgd WAQdAGakEv5+qXspUZuWM9ISZQmS9gvCb6wJWlGhKt76GFmNv+S1cy4/vaZf11Uc bWfYrMmMXb3EjzPb1neplLFYXFTp3HYGEeQxujvorQ== -----END CERTIFICATE-----Generated at Wed Oct 7 08:01:44 2026 by rpki-client