$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/7024bef8-8ab1-362a-b627-3f376d546ed0.roa File: 7024bef8-8ab1-362a-b627-3f376d546ed0.roa (raw, json) Hash identifier: iUZIsX/EIwvdILDVbBF2HUL2n6wjB+fmz4wHomwgXZg= Subject key identifier: C3:C5:24:1F:83:72:F6:15:71:DA:99:47:60:4F:2F:D9:99:17:6A:E7 Certificate issuer: /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Certificate serial: 010D0C9F4328584F5EA2EDD4047A475534B17180 Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/7024bef8-8ab1-362a-b627-3f376d546ed0.roa Signing time: Fri 02 Oct 2026 15:09:43 +0000 ROA not before: Fri 02 Oct 2026 15:09:43 +0000 ROA not after: Thu 31 Dec 2026 16:09:43 +0000 asID: 396502 IP address blocks: 208.68.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:a2:ed:d4:04:7a:47:55:34:b1:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Validity Not Before: Oct 2 15:09:43 2026 GMT Not After : Dec 31 16:09:43 2026 GMT Subject: CN=d2a2aeae-41e4-4833-81cd-7a1da4e342db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f9:d7:94:d2:a4:da:2d:4d:db:0b:3f:fd:63: 5c:18:44:6d:4b:33:0b:fc:52:13:10:dd:7c:1a:4e: 52:6b:5c:7b:57:b1:51:7d:4b:df:1d:dd:ae:6b:cb: c0:1f:32:dc:bb:73:ba:86:48:3a:ec:d2:67:0d:8f: 29:5d:b4:d3:de:bf:9c:65:f0:16:9b:13:b0:37:35: 71:81:21:44:4b:0a:40:8e:a1:25:a0:10:73:cd:2e: 7f:f0:22:eb:07:18:f4:e3:f4:30:d2:2d:fc:a0:78: 34:9e:49:ed:d6:f8:77:e4:7f:bf:0d:92:d2:34:23: 7a:40:4e:25:b1:e0:43:8b:62:68:52:92:2d:ed:ab: 8d:ab:b8:0e:5b:96:bc:c1:de:a0:df:23:1a:e2:70: b6:06:5b:5d:e9:0a:c5:34:c0:6f:61:99:a0:49:8f: 90:3c:c7:67:03:96:cc:d9:05:cd:05:8d:42:0c:99: 77:11:02:d7:92:2f:bf:54:99:62:61:a1:8d:93:26: 6f:a0:64:e6:dc:f7:40:ed:9d:70:1c:e4:fb:fd:33: c8:a2:2d:47:67:b0:40:13:4b:9a:fc:2d:d5:81:28: f2:33:25:56:36:f9:d7:6a:98:35:21:51:cd:8e:1b: 8d:b6:53:09:83:1f:e7:d5:57:17:c9:6f:c8:8f:4f: 49:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C5:24:1F:83:72:F6:15:71:DA:99:47:60:4F:2F:D9:99:17:6A:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/7024bef8-8ab1-362a-b627-3f376d546ed0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl X509v3 Authority Key Identifier: keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer sbgp-ipAddrBlock: critical IPv4: 208.68.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:dd:01:37:fe:95:bf:21:92:cc:65:23:58:0e:29:cd:99:68: 58:2b:17:83:8e:44:88:68:8d:30:7c:07:99:a4:64:50:cb:38: 93:a0:5e:df:4c:a4:f5:3d:e9:81:d9:5b:b0:ef:5e:1a:d7:a5: 6d:2a:42:ef:0a:26:b0:ab:51:3a:03:3d:15:31:09:26:96:5a: bd:78:9a:c4:75:e5:5f:55:ef:3d:d5:4c:02:90:42:24:ab:ed: 83:c1:0d:4e:32:c3:c6:b2:bd:eb:d4:fc:17:83:41:e2:49:87: f6:74:55:c6:74:e0:7c:e0:5e:e3:d9:d1:2e:41:cb:fd:a0:ed: 0d:4e:9c:7d:94:8c:8a:69:c1:e8:d3:cb:86:7a:46:e8:d3:bc: fa:21:dd:9d:b6:ee:8c:d8:59:89:57:47:11:0e:67:92:63:5c: c5:7d:f6:87:a4:fb:f0:07:54:32:a7:e0:49:3e:04:10:8e:77: fc:e8:05:14:1e:16:a6:0b:a8:95:ab:98:18:a8:e7:31:16:63: 42:39:a3:c2:00:56:ca:76:12:94:cf:17:09:b3:cb:89:5e:dd: 27:f8:87:71:41:2f:e2:d2:d7:23:23:01:4f:aa:57:62:7d:5a: f5:d9:9e:88:37:3d:2e:ce:b4:bb:3f:af:b0:41:9e:40:5f:d5: 9e:31:f6:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eou3UBHpHVTSxcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjNWNlYTctY2QyNS00YTI3LTliNjMtYmQ4MjM2Njkz MmIxMB4XDTI2MTAwMjE1MDk0M1oXDTI2MTIzMTE2MDk0M1owLzEtMCsGA1UEAxMk ZDJhMmFlYWUtNDFlNC00ODMzLTgxY2QtN2ExZGE0ZTM0MmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPnXlNKk2i1N2ws//WNcGERtSzML/FITEN18 Gk5Sa1x7V7FRfUvfHd2ua8vAHzLcu3O6hkg67NJnDY8pXbTT3r+cZfAWmxOwNzVx gSFESwpAjqEloBBzzS5/8CLrBxj04/Qw0i38oHg0nknt1vh35H+/DZLSNCN6QE4l seBDi2JoUpIt7auNq7gOW5a8wd6g3yMa4nC2Bltd6QrFNMBvYZmgSY+QPMdnA5bM 2QXNBY1CDJl3EQLXki+/VJliYaGNkyZvoGTm3PdA7Z1wHOT7/TPIoi1HZ7BAE0ua /C3VgSjyMyVWNvnXapg1IVHNjhuNtlMJgx/n1VcXyW/Ij09JiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPFJB+DcvYVcdqZR2BPL9mZF2rnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1 Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgyMzY2OTMyYjEvNzAyNGJlZjgtOGFiMS0z NjJhLWI2MjctM2YzNzZkNTQ2ZWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGFjNWNlYTctY2QyNS00YTI3LTli NjMtYmQ4MjM2NjkzMmIxL2RhYzVjZWE3LWNkMjUtNGEyNy05YjYzLWJkODIzNjY5 MzJiMS5jcmwwHwYDVR0jBBgwFoAU+JBSGwgPViIKwWgKRaFYd8tXPl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgy MzY2OTMyYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EQoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfdATf+lb8hksxlI1gOKc2ZaFgrF4OORIhojTB8B5mkZFDLOJOgXt9M pPU96YHZW7DvXhrXpW0qQu8KJrCrUToDPRUxCSaWWr14msR15V9V7z3VTAKQQiSr 7YPBDU4yw8ayvevU/BeDQeJJh/Z0VcZ04HzgXuPZ0S5By/2g7Q1OnH2UjIppwejT y4Z6RujTvPoh3Z227ozYWYlXRxEOZ5JjXMV99oek+/AHVDKn4Ek+BBCOd/zoBRQe FqYLqJWrmBio5zEWY0I5o8IAVsp2EpTPFwmzy4le3Sf4h3FBL+LS1yMjAU+qV2J9 WvXZnog3PS7OtLs/r7BBnkBf1Z4x9qs= -----END CERTIFICATE-----Generated at Mon Oct 12 12:36:50 2026 by rpki-client