$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa File: fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa (raw, json) Hash identifier: gaOb5zPTrLQqlPu5rJwnJCk2T/qRlVgKmfnU95a/xWE= Subject key identifier: 41:6F:15:A2:CD:26:91:3D:10:BA:5A:44:2B:94:EA:01:E5:EB:0E:6B Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584ED001EB628BC7B89482827A80 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 11260 IP address blocks: 208.96.64.0/18 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:eb:62:8b:c7:b8:94:82:82:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=7a979ae9-d57a-4b36-badf-7a04f344585a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4d:44:d0:8a:03:37:cb:b6:b5:3e:f5:80:08: ac:18:ee:62:f2:80:9e:f7:66:b0:50:26:87:1c:b2: e5:b4:46:be:56:6e:c4:8c:cd:96:da:12:73:3f:a9: ec:7b:c1:e1:a7:69:46:68:9b:0c:84:1f:56:37:89: 8c:ec:c5:df:f3:d7:3c:9e:60:cb:e1:e1:8f:4f:1a: c9:75:c0:0f:64:07:98:00:78:1e:07:e4:3b:22:63: cd:af:30:d9:18:3e:65:c2:7c:f7:cb:2b:2b:c7:51: 56:f2:53:d1:9d:b0:9a:a3:5f:46:5f:f2:44:80:59: 0e:de:1a:6c:7d:a6:51:81:31:bd:56:5a:9a:81:cd: 85:bd:da:db:0e:08:82:93:37:03:47:01:71:c9:3c: 66:ec:8d:48:6e:f9:0c:87:1b:42:48:1e:c4:97:88: 9f:01:09:79:d2:f4:1a:4f:e7:11:a5:a4:c1:69:49: ad:88:02:23:cc:bb:0b:59:10:e0:07:c3:24:0a:dd: 5f:58:3d:73:1c:21:75:48:b0:47:f2:d2:69:72:e9: 6d:98:39:e0:63:3b:66:fc:ed:a2:d0:65:28:32:ac: eb:bb:fa:f0:9c:e0:b4:3c:37:71:14:db:27:95:54: aa:da:b3:17:d6:9e:44:21:03:03:be:6a:6a:99:10: 77:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6F:15:A2:CD:26:91:3D:10:BA:5A:44:2B:94:EA:01:E5:EB:0E:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 208.96.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:86:1a:ff:3d:9e:2c:8f:27:fc:7c:df:60:e4:68:fe:6d:bd: ee:fa:4a:aa:a5:0d:a3:bd:36:c7:32:85:69:7d:86:e0:2f:6d: 7d:16:ff:67:a9:4a:f4:f0:85:46:db:59:2c:7e:a9:17:4a:91: a2:ed:50:ee:bd:4e:0b:5a:1a:0d:48:68:43:d0:88:43:68:4e: 2b:47:ea:2c:86:a7:61:99:2d:d8:25:f5:f7:e3:09:47:f1:74: 4b:4d:56:d7:cb:bc:17:b5:26:e9:99:36:ae:70:a5:ff:19:6c: ac:f6:46:00:74:07:01:c7:a4:44:c0:df:da:4b:fa:4d:8d:c2: 2c:99:13:8a:f0:b6:2b:cf:c2:e9:0e:0f:4e:0b:0c:ba:c9:d7: 0b:21:4d:25:1c:e9:d7:a9:cc:48:7a:a8:8c:e4:05:7e:72:2e: 60:5e:a2:b6:6b:f1:a2:ec:5e:8e:06:00:07:2f:2e:ac:3b:f6: 66:81:7c:8e:e9:9d:bc:cf:1d:a7:e4:99:00:99:92:24:56:54: 59:8e:cf:d8:17:da:66:23:50:59:91:ba:d5:b5:1b:a0:d9:dd: 0d:63:3f:54:ad:46:6e:e8:35:bc:c2:22:bf:9a:b3:e5:67:bf: d6:a0:93:89:d8:db:13:d3:72:62:17:ed:3d:d0:9a:32:96:ef: b8:78:85:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAetii8e4lIKCeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk N2E5NzlhZTktZDU3YS00YjM2LWJhZGYtN2EwNGYzNDQ1ODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5U1E0IoDN8u2tT71gAisGO5i8oCe92awUCaH HLLltEa+Vm7EjM2W2hJzP6nse8Hhp2lGaJsMhB9WN4mM7MXf89c8nmDL4eGPTxrJ dcAPZAeYAHgeB+Q7ImPNrzDZGD5lwnz3yysrx1FW8lPRnbCao19GX/JEgFkO3hps faZRgTG9Vlqagc2FvdrbDgiCkzcDRwFxyTxm7I1IbvkMhxtCSB7El4ifAQl50vQa T+cRpaTBaUmtiAIjzLsLWRDgB8MkCt1fWD1zHCF1SLBH8tJpcultmDngYztm/O2i 0GUoMqzru/rwnOC0PDdxFNsnlVSq2rMX1p5EIQMDvmpqmRB3kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFvFaLNJpE9ELpaRCuU6gHl6w5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvZmNkOGVmNGItMDYzMi0z ZDZhLTg5ZTEtODQwZWQ5OTMxODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0GBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOGGv89niyPJ/x832DkaP5tve76SqqlDaO9NscyhWl9huAvbX0W/2ep SvTwhUbbWSx+qRdKkaLtUO69TgtaGg1IaEPQiENoTitH6iyGp2GZLdgl9ffjCUfx dEtNVtfLvBe1JumZNq5wpf8ZbKz2RgB0BwHHpETA39pL+k2NwiyZE4rwtivPwukO D04LDLrJ1wshTSUc6depzEh6qIzkBX5yLmBeorZr8aLsXo4GAAcvLqw79maBfI7p nbzPHafkmQCZkiRWVFmOz9gX2mYjUFmRutW1G6DZ3Q1jP1StRm7oNbzCIr+as+Vn v9agk4nY2xPTcmIX7T3QmjKW77h4hQg= -----END CERTIFICATE-----Generated at Sat Sep 5 17:50:23 2026 by rpki-client