$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/938b0830-f60b-32bf-91a7-948dad182a19.roa File: 938b0830-f60b-32bf-91a7-948dad182a19.roa (raw, json) Hash identifier: lUZ94Y70dAI1rCWKY2m2QU/d4ATbJbZTaoWsVeUjX6E= Subject key identifier: F0:36:4A:CE:65:DB:3D:BB:94:32:98:77:81:6C:79:E4:3F:2D:BE:70 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA799C07D9FE4A4E534445A80 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/938b0830-f60b-32bf-91a7-948dad182a19.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 0 IP address blocks: 208.30.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:c0:7d:9f:e4:a4:e5:34:44:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b836c2b9-6bf2-4b5a-8d8a-f615b1eab81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e7:a5:2f:dd:1a:1f:9b:47:6e:0e:0b:d7:fb: ef:1b:47:3f:75:45:43:c3:c8:e4:0e:57:0e:4c:5e: f0:4e:91:e8:c1:92:ae:a7:04:24:2c:62:fa:f4:83: 7f:a7:84:2a:26:30:8c:ce:9c:05:5a:99:70:bc:33: 29:88:10:6f:a5:a0:dc:7c:01:06:c5:38:27:a8:27: f4:1d:b1:31:80:77:05:b3:74:cc:e6:85:7d:45:12: 44:26:ea:83:39:ba:7e:62:83:07:87:6f:7d:4b:9d: 26:95:20:74:43:42:b9:07:cc:1f:9a:1f:d0:71:19: fa:4d:26:40:dd:b4:be:d9:e4:e5:1d:1e:71:4e:42: 62:5a:70:14:15:2f:12:36:33:4e:af:ab:00:1b:58: 20:c9:0f:24:67:e0:2d:10:0c:b3:b2:57:ab:1d:eb: 45:7d:c9:a3:e1:88:e2:13:02:c5:5b:3d:85:2e:f6: 72:9c:31:a7:92:b8:98:b6:2c:37:4d:b9:2f:96:8c: dd:57:1b:3b:cf:00:09:34:4a:18:a9:78:d3:6f:a9: b7:50:e7:41:3a:1c:a8:21:02:74:09:3d:f1:26:7a: a5:2a:32:9d:b6:ce:65:7a:15:f6:bf:e7:8c:57:a4: 38:9e:2e:52:26:7a:e4:98:4f:da:8d:47:88:d0:46: f6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:36:4A:CE:65:DB:3D:BB:94:32:98:77:81:6C:79:E4:3F:2D:BE:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/938b0830-f60b-32bf-91a7-948dad182a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 208.30.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9f:d3:31:72:60:ca:1d:38:7e:ad:70:c5:4c:50:b8:b8:55: 46:9c:25:5b:62:a8:d1:99:54:84:9c:e0:f3:79:e0:15:1d:53: 8c:5c:fa:be:69:49:97:0f:47:07:d4:63:34:8a:c9:7b:ee:e0: f5:f3:4a:ce:ff:72:b5:38:cb:5b:17:d2:a3:da:b1:d6:fc:40: 78:58:ad:97:88:33:ca:7a:3e:76:8e:87:03:82:b0:33:3d:97: fd:3d:c0:ff:ff:35:08:40:0a:89:78:0f:cb:66:76:bb:05:61: f3:13:89:54:27:39:60:89:d8:d3:fe:1a:c2:35:f3:6a:c2:fe: bb:b1:1e:06:e2:f2:ae:da:6f:0b:47:f8:a4:5d:b3:f4:62:88: 59:0a:71:b5:58:3d:c5:88:39:38:1a:fa:e4:40:76:89:af:5f: 03:67:4d:2b:72:2c:08:10:ba:e8:73:f6:23:2a:af:b5:da:55: f0:bb:8d:fb:f1:14:8c:c1:6e:f0:88:d4:d1:8f:4b:9e:c4:12: fb:2f:c9:f7:74:fe:02:36:08:49:68:83:81:d5:db:db:7d:f9: 80:37:64:97:7b:ac:a3:e5:5c:38:ba:4f:4e:39:66:2c:ef:07: f0:1c:73:0d:cb:5b:a0:14:29:33:e8:56:5f:66:8e:02:9b:60: 2d:ec:12:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmcB9n+Sk5TREWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjgzNmMyYjktNmJmMi00YjVhLThkOGEtZjYxNWIxZWFiODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+elL90aH5tHbg4L1/vvG0c/dUVDw8jkDlcO TF7wTpHowZKupwQkLGL69IN/p4QqJjCMzpwFWplwvDMpiBBvpaDcfAEGxTgnqCf0 HbExgHcFs3TM5oV9RRJEJuqDObp+YoMHh299S50mlSB0Q0K5B8wfmh/QcRn6TSZA 3bS+2eTlHR5xTkJiWnAUFS8SNjNOr6sAG1ggyQ8kZ+AtEAyzslerHetFfcmj4Yji EwLFWz2FLvZynDGnkriYtiw3TbkvlozdVxs7zwAJNEoYqXjTb6m3UOdBOhyoIQJ0 CT3xJnqlKjKdts5lehX2v+eMV6Q4ni5SJnrkmE/ajUeI0Eb2aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA2Ss5l2z27lDKYd4FseeQ/Lb5wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOTM4YjA4MzAtZjYwYi0z MmJmLTkxYTctOTQ4ZGFkMTgyYTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0B4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOf0zFyYModOH6tcMVMULi4VUacJVtiqNGZVISc4PN54BUdU4xc+r5p SZcPRwfUYzSKyXvu4PXzSs7/crU4y1sX0qPasdb8QHhYrZeIM8p6PnaOhwOCsDM9 l/09wP//NQhACol4D8tmdrsFYfMTiVQnOWCJ2NP+GsI182rC/ruxHgbi8q7abwtH +KRds/RiiFkKcbVYPcWIOTga+uRAdomvXwNnTStyLAgQuuhz9iMqr7XaVfC7jfvx FIzBbvCI1NGPS57EEvsvyfd0/gI2CElog4HV29t9+YA3ZJd7rKPlXDi6T045Zizv B/Accw3LW6AUKTPoVl9mjgKbYC3sEpo= -----END CERTIFICATE-----Generated at Fri Sep 11 13:13:27 2026 by rpki-client