$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/b17428a8-6329-3ff7-aa3e-990b90bd0785.roa File: b17428a8-6329-3ff7-aa3e-990b90bd0785.roa (raw, json) Hash identifier: xWi8yoX9Ip8SvMjw3B4s3Vax4yyRUeUretKEm8ikdYU= Subject key identifier: 70:AB:30:AA:DB:7E:BE:BE:11:E0:82:6A:79:AC:58:06:45:A2:63:C6 Certificate issuer: /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Certificate serial: 010D0C9F4328584F5EA4A83F98C30AED5BDA3680 Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/b17428a8-6329-3ff7-aa3e-990b90bd0785.roa Signing time: Fri 02 Oct 2026 15:13:12 +0000 ROA not before: Fri 02 Oct 2026 15:13:12 +0000 ROA not after: Thu 31 Dec 2026 16:13:12 +0000 asID: 396502 IP address blocks: 208.68.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:a4:a8:3f:98:c3:0a:ed:5b:da:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Validity Not Before: Oct 2 15:13:12 2026 GMT Not After : Dec 31 16:13:12 2026 GMT Subject: CN=08dba023-85d6-493d-aa32-50a81ef4f943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4f:96:1f:56:10:00:90:ef:7c:10:5d:34:1f: 2f:cd:ca:dc:d4:7e:3d:52:f0:04:e9:87:eb:91:3d: 8c:bd:e1:0f:d0:d9:f5:a8:20:64:28:71:b3:e6:55: 48:dc:d0:8d:59:b2:35:f1:39:56:57:a0:83:01:3d: 05:81:73:54:24:e8:bd:dd:79:18:a7:e3:0e:08:cd: 16:ef:8a:df:9d:63:ac:1d:64:c6:89:22:e4:b9:13: b6:69:c9:91:ec:5f:7a:56:3f:b2:d0:da:af:95:c4: f4:bb:97:b0:1e:3e:3d:0e:20:9a:29:7a:44:f0:20: f7:51:95:83:67:2e:74:c7:77:56:34:6d:43:ec:47: ba:e7:99:6f:38:05:bc:c8:b7:08:7d:e2:90:a3:65: 5e:38:ea:a6:2a:7d:97:dd:6a:d9:5f:2d:72:01:54: 82:72:b0:68:93:17:87:50:51:97:82:1e:78:d8:3e: 49:11:a6:10:f8:40:06:d4:78:72:19:03:a0:90:18: 35:aa:1d:68:55:59:22:d3:54:cc:8f:8f:5e:b8:70: b6:55:c1:e6:2f:81:c5:b1:34:05:ab:e5:40:2b:46: 7e:3a:3c:28:37:e7:ef:58:71:d6:f8:c2:08:e3:44: dd:3d:88:84:1d:0e:1d:9b:4b:0e:37:9c:6b:a9:b3: 21:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AB:30:AA:DB:7E:BE:BE:11:E0:82:6A:79:AC:58:06:45:A2:63:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/b17428a8-6329-3ff7-aa3e-990b90bd0785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl X509v3 Authority Key Identifier: keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer sbgp-ipAddrBlock: critical IPv4: 208.68.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:47:3a:81:48:6f:37:1d:25:9f:91:e8:e9:0d:49:f3:a2:1b: 97:e0:36:63:cb:b2:f5:e6:fc:0d:87:3d:8d:0a:af:9f:d9:16: 43:19:47:bb:6a:84:df:1c:07:a8:58:93:14:45:26:df:0a:f2: 77:c2:fb:46:69:1d:ac:72:d8:79:9e:a1:fc:13:0a:9d:4d:9a: fe:9d:60:fb:d0:bf:26:bf:70:10:e7:fd:72:a5:1f:41:6f:76: bc:38:b0:c8:ae:da:b9:19:3c:d0:cb:25:bf:a3:06:16:30:21: c0:71:8c:30:3f:dd:09:f6:3d:24:9c:3f:6d:a0:38:c3:eb:0c: 9a:85:c1:72:1e:dd:17:b8:4b:71:19:49:a6:79:a8:ca:57:43: ac:f8:b3:6a:40:42:2e:91:18:a2:5b:19:4b:5a:09:e2:ae:81: 9b:67:78:91:6d:60:d7:56:d6:94:31:01:99:72:a4:20:55:25: 7d:fc:55:46:5b:03:41:6c:12:cc:c7:56:85:b2:91:76:f5:5b: bc:d6:40:a9:34:04:91:ee:00:4c:4a:70:e5:92:e0:df:fb:11: 85:d3:db:59:92:e3:db:43:02:05:b6:61:5b:55:e5:33:82:7c: ab:8b:6b:17:d6:e7:0e:b0:d2:50:8a:e3:dc:fe:d3:b8:26:43: d4:2c:e3:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9epKg/mMMK7VvaNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjNWNlYTctY2QyNS00YTI3LTliNjMtYmQ4MjM2Njkz MmIxMB4XDTI2MTAwMjE1MTMxMloXDTI2MTIzMTE2MTMxMlowLzEtMCsGA1UEAxMk MDhkYmEwMjMtODVkNi00OTNkLWFhMzItNTBhODFlZjRmOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0+WH1YQAJDvfBBdNB8vzcrc1H49UvAE6Yfr kT2MveEP0Nn1qCBkKHGz5lVI3NCNWbI18TlWV6CDAT0FgXNUJOi93XkYp+MOCM0W 74rfnWOsHWTGiSLkuRO2acmR7F96Vj+y0NqvlcT0u5ewHj49DiCaKXpE8CD3UZWD Zy50x3dWNG1D7Ee655lvOAW8yLcIfeKQo2VeOOqmKn2X3WrZXy1yAVSCcrBokxeH UFGXgh542D5JEaYQ+EAG1HhyGQOgkBg1qh1oVVki01TMj49euHC2VcHmL4HFsTQF q+VAK0Z+OjwoN+fvWHHW+MII40TdPYiEHQ4dm0sON5xrqbMhrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCrMKrbfr6+EeCCanmsWAZFomPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1 Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgyMzY2OTMyYjEvYjE3NDI4YTgtNjMyOS0z ZmY3LWFhM2UtOTkwYjkwYmQwNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGFjNWNlYTctY2QyNS00YTI3LTli NjMtYmQ4MjM2NjkzMmIxL2RhYzVjZWE3LWNkMjUtNGEyNy05YjYzLWJkODIzNjY5 MzJiMS5jcmwwHwYDVR0jBBgwFoAU+JBSGwgPViIKwWgKRaFYd8tXPl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgy MzY2OTMyYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EQqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMNHOoFIbzcdJZ+R6OkNSfOiG5fgNmPLsvXm/A2HPY0Kr5/ZFkMZR7tq hN8cB6hYkxRFJt8K8nfC+0ZpHaxy2HmeofwTCp1Nmv6dYPvQvya/cBDn/XKlH0Fv drw4sMiu2rkZPNDLJb+jBhYwIcBxjDA/3Qn2PSScP22gOMPrDJqFwXIe3Re4S3EZ SaZ5qMpXQ6z4s2pAQi6RGKJbGUtaCeKugZtneJFtYNdW1pQxAZlypCBVJX38VUZb A0FsEszHVoWykXb1W7zWQKk0BJHuAExKcOWS4N/7EYXT21mS49tDAgW2YVtV5TOC fKuLaxfW5w6w0lCK49z+07gmQ9Qs43U= -----END CERTIFICATE-----Generated at Sun Oct 11 06:32:32 2026 by rpki-client