$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/fcba6f4e-95eb-3bc4-90a0-3d3192dfc55f.roa File: fcba6f4e-95eb-3bc4-90a0-3d3192dfc55f.roa (raw, json) Hash identifier: m+Gxoo80JGqXZQro0d2RR7FXbuJvD/R6EQLbPq77/x8= Subject key identifier: 85:37:96:42:8B:09:EA:01:BB:2D:6F:EE:05:EF:6E:DF:B7:21:15:4B Certificate issuer: /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Certificate serial: 010D0C9F4328584F5EA4D89A72493DC2ED18FA20 Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/fcba6f4e-95eb-3bc4-90a0-3d3192dfc55f.roa Signing time: Fri 02 Oct 2026 15:13:35 +0000 ROA not before: Fri 02 Oct 2026 15:13:35 +0000 ROA not after: Thu 31 Dec 2026 16:13:35 +0000 asID: 396502 IP address blocks: 208.68.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:a4:d8:9a:72:49:3d:c2:ed:18:fa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Validity Not Before: Oct 2 15:13:35 2026 GMT Not After : Dec 31 16:13:35 2026 GMT Subject: CN=ab3e2923-15bd-46c5-87a0-d23390031ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:48:d5:81:76:cd:08:e3:20:9b:67:5f:7c:66: 41:0b:53:a4:19:1e:27:d1:4e:15:94:95:d1:99:b7: ca:e1:6c:08:a3:19:93:9a:e7:a8:fa:cf:ac:a9:cd: e3:6a:91:b3:51:19:e3:68:c4:8b:51:96:98:ca:07: 63:4f:61:1a:19:fa:c3:1d:10:26:a0:2b:29:6c:b6: e1:4a:37:17:8e:d7:f2:7c:ac:5b:82:65:48:da:80: c8:8f:fb:e5:6b:25:53:bc:86:d9:e3:d2:67:0f:3a: 0a:93:90:5d:fa:74:9d:08:dc:4e:06:7a:f7:72:06: 8e:45:e1:cf:29:c2:ab:cf:e2:ab:bb:e8:13:74:17: 14:29:57:91:4f:83:ad:56:11:bd:86:80:05:31:49: b8:2a:43:1b:04:27:7f:68:eb:26:93:95:b1:2b:f2: 58:09:cd:f4:e4:fe:04:cd:c0:af:6d:95:ff:85:61: 95:20:e5:ce:2f:dc:23:9d:29:04:82:ec:06:f5:b1: 8b:38:61:f3:3e:18:4d:d3:ee:f2:7a:0e:fa:d0:08: 16:16:10:e2:1d:4e:67:84:cf:f7:28:4f:df:86:ee: 56:41:63:40:f8:4a:7d:db:d0:9d:ca:aa:d1:ec:cc: e6:21:53:ec:b5:78:b8:da:53:63:3a:e0:c8:66:5d: f8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:37:96:42:8B:09:EA:01:BB:2D:6F:EE:05:EF:6E:DF:B7:21:15:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/fcba6f4e-95eb-3bc4-90a0-3d3192dfc55f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl X509v3 Authority Key Identifier: keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer sbgp-ipAddrBlock: critical IPv4: 208.68.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:53:ab:bb:e8:e8:2a:6b:a2:9e:04:16:4d:83:2d:09:82:0f: 93:59:42:8e:42:bb:3c:ca:21:03:cb:a0:83:3a:4a:9a:78:e1: 2c:e6:42:25:94:e0:07:a7:df:27:df:47:57:d2:4c:f6:b9:e6: 16:ba:11:b3:d8:28:e0:41:c0:5d:aa:63:27:bd:cd:57:ba:ec: 7b:0a:16:78:98:ac:af:14:66:d9:57:79:f7:9d:e0:55:3b:22: 0e:1f:f1:7f:10:ea:e1:63:f0:32:12:a9:ba:b0:43:ea:dc:32: 74:89:da:ee:e7:a6:92:dd:27:96:3a:f6:12:cb:eb:d2:aa:17: f0:f2:b4:ea:78:d5:f6:65:9f:d8:a5:99:d2:cf:89:7b:f7:ff: 41:d1:b2:ba:4e:fa:5d:b2:50:4f:7d:ff:55:36:20:b6:ef:bd: c3:0e:90:fa:21:1a:2b:34:5e:42:39:43:1e:c4:1c:db:60:79: 59:60:74:8f:03:f1:93:c1:46:f3:0a:8d:d1:0f:41:80:fc:ee: 41:15:e2:9b:3c:d9:c8:a2:9e:ec:0e:20:af:a9:8e:27:db:0b: a8:eb:57:f2:ca:0e:76:ec:e6:db:a8:67:bb:03:e9:f8:69:79: 5e:f9:e2:b0:d1:e7:33:f2:c9:aa:39:9f:9c:fe:c1:52:d1:96: 7a:b8:07:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9epNiackk9wu0Y+iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjNWNlYTctY2QyNS00YTI3LTliNjMtYmQ4MjM2Njkz MmIxMB4XDTI2MTAwMjE1MTMzNVoXDTI2MTIzMTE2MTMzNVowLzEtMCsGA1UEAxMk YWIzZTI5MjMtMTViZC00NmM1LTg3YTAtZDIzMzkwMDMxZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkjVgXbNCOMgm2dffGZBC1OkGR4n0U4VlJXR mbfK4WwIoxmTmueo+s+sqc3japGzURnjaMSLUZaYygdjT2EaGfrDHRAmoCspbLbh SjcXjtfyfKxbgmVI2oDIj/vlayVTvIbZ49JnDzoKk5Bd+nSdCNxOBnr3cgaOReHP KcKrz+Kru+gTdBcUKVeRT4OtVhG9hoAFMUm4KkMbBCd/aOsmk5WxK/JYCc305P4E zcCvbZX/hWGVIOXOL9wjnSkEguwG9bGLOGHzPhhN0+7yeg760AgWFhDiHU5nhM/3 KE/fhu5WQWNA+Ep929CdyqrR7MzmIVPstXi42lNjOuDIZl34YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU3lkKLCeoBuy1v7gXvbt+3IRVLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1 Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgyMzY2OTMyYjEvZmNiYTZmNGUtOTVlYi0z YmM0LTkwYTAtM2QzMTkyZGZjNTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGFjNWNlYTctY2QyNS00YTI3LTli NjMtYmQ4MjM2NjkzMmIxL2RhYzVjZWE3LWNkMjUtNGEyNy05YjYzLWJkODIzNjY5 MzJiMS5jcmwwHwYDVR0jBBgwFoAU+JBSGwgPViIKwWgKRaFYd8tXPl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgy MzY2OTMyYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EQrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5Tq7vo6Cprop4EFk2DLQmCD5NZQo5CuzzKIQPLoIM6Spp44SzmQiWU 4Aen3yffR1fSTPa55ha6EbPYKOBBwF2qYye9zVe67HsKFniYrK8UZtlXefed4FU7 Ig4f8X8Q6uFj8DISqbqwQ+rcMnSJ2u7nppLdJ5Y69hLL69KqF/DytOp41fZln9il mdLPiXv3/0HRsrpO+l2yUE99/1U2ILbvvcMOkPohGis0XkI5Qx7EHNtgeVlgdI8D 8ZPBRvMKjdEPQYD87kEV4ps82ciinuwOIK+pjifbC6jrV/LKDnbs5tuoZ7sD6fhp eV754rDR5zPyyao5n5z+wVLRlnq4Bww= -----END CERTIFICATE-----Generated at Sun Oct 11 03:26:51 2026 by rpki-client