$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa File: 4049c44a-f808-3c97-bfb6-a323f04f3436.roa (raw, json) Hash identifier: 7iT31p/UyQMS272JBUYD9+AERD7Q77Og1wNWfCWm0Oo= Subject key identifier: 72:53:3F:DE:61:56:D1:A9:86:29:08:35:7D:5B:8A:4C:91:A4:48:3D Certificate issuer: /CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Certificate serial: 010D0C9F4328584F0242254BB84F940794026700 Authority key identifier: 88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 395927 IP address blocks: 208.72.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:25:4b:b8:4f:94:07:94:02:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c655aaf-76f4-4bab-b4f7-8fb23c3d4011 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=e03b3833-6dca-4a57-8a57-12103ee21024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:b1:15:f2:6c:2b:00:c1:4b:b3:ef:56:15: 1e:43:c8:f2:d4:e8:18:2e:b0:15:02:b9:c2:cf:36: c7:ba:c6:4b:97:fa:2e:8d:d3:d1:05:e7:39:d8:5e: 47:13:06:1b:b9:8e:19:2a:a4:24:c3:d6:77:d3:03: fb:a3:44:d1:dd:49:9f:56:a6:83:17:88:0c:9b:7d: 2c:98:59:de:29:cc:e4:4f:47:df:e9:46:3f:90:0c: a1:d9:1a:0f:32:0f:6b:9b:6e:25:dd:92:a1:4b:e3: 8a:93:ec:32:e8:08:a4:ce:a1:a0:52:dc:68:13:c3: 04:58:a9:20:6a:0c:9f:0a:03:1a:58:f2:fb:ba:47: 8c:60:c3:6d:bb:8c:49:22:6d:a3:78:0e:33:92:52: fb:ec:fa:57:99:d0:f1:03:34:f8:ed:87:fb:3e:e8: c4:bb:da:68:3f:21:62:cc:6e:08:af:a8:d3:75:9b: ce:fa:f5:2a:6d:6e:61:56:45:c5:3b:37:80:fb:13: 93:dd:66:15:ac:fe:a7:7a:67:ce:64:54:e0:ad:24: bb:50:9f:41:b5:44:91:16:2a:2f:94:85:a4:67:4f: c1:49:78:c1:08:3e:f7:48:7e:e2:e5:36:60:42:ff: e8:01:ab:84:b4:6e:6b:9b:0c:73:42:dc:f8:79:4b: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:53:3F:DE:61:56:D1:A9:86:29:08:35:7D:5B:8A:4C:91:A4:48:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/4049c44a-f808-3c97-bfb6-a323f04f3436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.crl X509v3 Authority Key Identifier: keyid:88:73:89:5B:D7:48:07:9E:32:C3:7E:DE:E7:B8:93:C8:98:EC:2C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3c655aaf-76f4-4bab-b4f7-8fb23c3d4011.cer sbgp-ipAddrBlock: critical IPv4: 208.72.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:dc:6c:5a:f1:81:49:8d:d5:32:97:da:0e:33:e1:57:6e:b4: da:ba:e9:9a:50:2f:37:9c:be:9c:53:56:a9:22:d4:f4:5f:40: fa:b9:ec:26:a3:64:35:2c:75:b7:4b:3d:48:e2:86:cd:9e:24: b5:44:ec:52:eb:6e:2e:58:91:37:45:6b:48:a1:f7:96:63:4f: d0:37:2a:ac:0a:22:3b:c4:55:0f:c2:ab:ce:5f:b3:9e:bf:f1: 58:20:f9:60:b7:f1:57:f6:8b:14:23:d3:bb:b5:8d:a9:aa:bf: e2:fc:b1:d9:1b:fc:f3:07:89:48:a7:c1:92:59:90:5c:48:8d: 3d:f4:a9:71:f7:b2:2c:7e:80:32:b5:58:5f:fd:46:de:a2:6f: 2b:dd:ef:93:f5:e2:b5:3f:7b:cd:60:1f:ac:36:6b:89:ec:b0: 33:03:45:e9:5f:3f:6f:38:a8:62:ab:f3:e9:0f:3f:7d:68:4d: 4f:55:ef:22:ce:63:61:a8:94:a9:0a:74:51:c9:11:10:9c:e7: 96:ec:70:e9:d6:12:3d:c2:86:f1:13:d8:4f:1c:7b:ea:2b:2c: 44:57:b3:b1:02:2c:6e:ff:62:9d:f4:50:09:b0:55:3f:a9:63: 23:5b:d2:6c:05:fc:21:95:21:40:21:cb:61:cf:4d:d1:22:90: 58:3f:dc:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQiVLuE+UB5QCZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M2NTVhYWYtNzZmNC00YmFiLWI0ZjctOGZiMjNjM2Q0 MDExMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk ZTAzYjM4MzMtNmRjYS00YTU3LThhNTctMTIxMDNlZTIxMDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmyxFfJsKwDBS7PvVhUeQ8jy1OgYLrAVArnC zzbHusZLl/oujdPRBec52F5HEwYbuY4ZKqQkw9Z30wP7o0TR3UmfVqaDF4gMm30s mFneKczkT0ff6UY/kAyh2RoPMg9rm24l3ZKhS+OKk+wy6AikzqGgUtxoE8MEWKkg agyfCgMaWPL7ukeMYMNtu4xJIm2jeA4zklL77PpXmdDxAzT47Yf7PujEu9poPyFi zG4Ir6jTdZvO+vUqbW5hVkXFOzeA+xOT3WYVrP6nemfOZFTgrSS7UJ9BtUSRFiov lIWkZ0/BSXjBCD73SH7i5TZgQv/oAauEtG5rmwxzQtz4eUusiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJTP95hVtGphikINX1bikyRpEg9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1 NWFhZi03NmY0LTRiYWItYjRmNy04ZmIyM2MzZDQwMTEvNDA0OWM0NGEtZjgwOC0z Yzk3LWJmYjYtYTMyM2YwNGYzNDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2M2NTVhYWYtNzZmNC00YmFiLWI0 ZjctOGZiMjNjM2Q0MDExLzNjNjU1YWFmLTc2ZjQtNGJhYi1iNGY3LThmYjIzYzNk NDAxMS5jcmwwHwYDVR0jBBgwFoAUiHOJW9dIB54yw37e57iTyJjsLBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYzY1NWFhZi03NmY0LTRiYWItYjRmNy04ZmIy M2MzZDQwMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0Eg0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHcbFrxgUmN1TKX2g4z4VdutNq66ZpQLzecvpxTVqki1PRfQPq57Caj ZDUsdbdLPUjihs2eJLVE7FLrbi5YkTdFa0ih95ZjT9A3KqwKIjvEVQ/Cq85fs56/ 8Vgg+WC38Vf2ixQj07u1jamqv+L8sdkb/PMHiUinwZJZkFxIjT30qXH3six+gDK1 WF/9Rt6ibyvd75P14rU/e81gH6w2a4nssDMDRelfP284qGKr8+kPP31oTU9V7yLO Y2GolKkKdFHJERCc55bscOnWEj3ChvET2E8ce+orLERXs7ECLG7/Yp30UAmwVT+p YyNb0mwF/CGVIUAhy2HPTdEikFg/3O0= -----END CERTIFICATE-----Generated at Sun Oct 11 19:22:57 2026 by rpki-client