$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa File: 276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa (raw, json) Hash identifier: rEus+Xm+UkQVqAQwOcTp2LmEfzzZdXngVYYURGJU+6Q= Subject key identifier: F4:52:A2:8E:11:5D:BE:E7:09:3D:6B:0D:F1:59:71:F8:51:8C:64:A2 Certificate issuer: /CN=208dcf74-3dce-4384-beaf-70319895fc4b Certificate serial: 010D0C9F4328584F7BB2FE9CDE085189C89C4000 Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 8075 IP address blocks: 134.65.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:fe:9c:de:08:51:89:c8:9c:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=8c80ca3b-54dc-41e4-8608-fbd94cc2e311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:33:ed:ca:9b:fc:93:79:0e:80:b3:14:b6:df: 26:cd:27:63:b7:5d:e8:db:be:2e:74:f5:a2:c4:4d: 44:fd:34:4c:56:6a:1f:43:7b:83:26:f3:72:92:03: ad:6c:cc:55:3c:00:2a:e6:9d:c4:77:6e:7d:9f:71: 93:e7:8d:47:46:2f:1f:52:28:c2:c7:da:5a:8f:c4: c6:55:3b:ec:e4:00:6e:8c:41:f5:40:0c:aa:aa:6a: e8:5e:bb:04:f3:96:ca:51:20:52:17:eb:85:02:70: 9c:e2:75:4f:59:9c:71:19:39:c0:80:ee:cd:67:65: 7a:3f:4c:95:34:5a:71:b8:e2:9f:49:9d:1e:5a:28: 05:5c:db:18:18:53:35:ac:95:5c:03:af:c8:5b:15: 52:ec:bd:08:db:d4:d0:08:ed:cc:7f:d9:5f:07:fd: 22:b4:8f:50:19:89:93:b8:d1:59:26:6e:df:3c:4a: 8c:ed:43:64:fe:bf:b1:0e:7b:0f:e4:90:8e:93:e5: f5:a9:d6:b0:f8:1c:4f:c5:6f:21:1c:30:fc:76:49: 8f:08:8b:51:d0:30:3b:57:fa:5a:ae:b5:e2:86:a9: b0:86:b9:48:4e:81:ad:61:7f:32:a9:56:cc:8e:8c: c5:5f:ef:48:99:49:79:af:db:7f:e9:28:77:1e:dd: f5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:52:A2:8E:11:5D:BE:E7:09:3D:6B:0D:F1:59:71:F8:51:8C:64:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl X509v3 Authority Key Identifier: keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer sbgp-ipAddrBlock: critical IPv4: 134.65.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:79:46:27:9c:24:bf:a1:0d:e9:7a:fa:2a:08:98:d0:7f:00: c3:c5:3f:e0:51:fc:05:11:38:2d:3b:3f:af:53:cd:c4:3f:1e: 53:d1:c2:4e:a8:5e:5e:7c:f5:f5:b1:a3:e9:b3:a2:c6:ea:ce: a0:c5:b6:15:20:06:0b:e0:8b:a0:85:71:95:ac:47:0c:62:59: 33:fe:00:93:ca:42:35:fd:d6:3d:d9:3b:b5:ea:de:16:d7:68: cd:11:be:b5:8b:59:99:f9:b2:99:e4:18:e9:b4:3a:a7:dd:0c: 32:b7:a3:f7:5c:e2:93:4b:10:7b:d9:a5:26:77:20:ec:41:9f: 6e:83:e6:aa:76:f3:34:d1:47:c8:fe:40:9f:31:33:84:5c:82: e3:12:61:c6:c2:74:df:89:90:80:e0:47:12:9f:59:68:9e:8a: 2a:ac:bd:d8:92:c8:07:92:03:a9:9c:22:1a:41:51:ad:6d:6b: bd:47:48:dd:61:94:bb:47:2d:ac:6f:60:2e:f4:5b:12:7a:48: 3c:ab:a9:56:a8:ec:6f:0d:1b:56:07:e6:d1:b1:12:9d:d6:08: e0:2e:f6:01:31:fb:f9:b6:61:5a:c3:67:0e:87:5c:b8:98:04: 29:c8:0a:5e:91:e2:97:3f:25:ce:70:28:c1:c9:f9:65:76:af: e9:db:d3:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sv6c3ghRicicQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZGNmNzQtM2RjZS00Mzg0LWJlYWYtNzAzMTk4OTVm YzRiMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk OGM4MGNhM2ItNTRkYy00MWU0LTg2MDgtZmJkOTRjYzJlMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TPtypv8k3kOgLMUtt8mzSdjt13o274udPWi xE1E/TRMVmofQ3uDJvNykgOtbMxVPAAq5p3Ed259n3GT541HRi8fUijCx9paj8TG VTvs5ABujEH1QAyqqmroXrsE85bKUSBSF+uFAnCc4nVPWZxxGTnAgO7NZ2V6P0yV NFpxuOKfSZ0eWigFXNsYGFM1rJVcA6/IWxVS7L0I29TQCO3Mf9lfB/0itI9QGYmT uNFZJm7fPEqM7UNk/r+xDnsP5JCOk+X1qdaw+BxPxW8hHDD8dkmPCItR0DA7V/pa rrXihqmwhrlIToGtYX8yqVbMjozFX+9ImUl5r9t/6Sh3Ht31EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRSoo4RXb7nCT1rDfFZcfhRjGSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDhk Y2Y3NC0zZGNlLTQzODQtYmVhZi03MDMxOTg5NWZjNGIvMjc2YzFlMzYtNDhmYS0z ZGIzLWE0YjAtZWFmNDcxZDVhOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA4ZGNmNzQtM2RjZS00Mzg0LWJl YWYtNzAzMTk4OTVmYzRiLzIwOGRjZjc0LTNkY2UtNDM4NC1iZWFmLTcwMzE5ODk1 ZmM0Yi5jcmwwHwYDVR0jBBgwFoAUtFZe+2BitOcxIpuQ8WaNOb1jB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMDhkY2Y3NC0zZGNlLTQzODQtYmVhZi03MDMx OTg5NWZjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhkGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALl5RiecJL+hDel6+ioImNB/AMPFP+BR/AUROC07P69TzcQ/HlPRwk6o Xl589fWxo+mzosbqzqDFthUgBgvgi6CFcZWsRwxiWTP+AJPKQjX91j3ZO7Xq3hbX aM0RvrWLWZn5spnkGOm0OqfdDDK3o/dc4pNLEHvZpSZ3IOxBn26D5qp28zTRR8j+ QJ8xM4RcguMSYcbCdN+JkIDgRxKfWWieiiqsvdiSyAeSA6mcIhpBUa1ta71HSN1h lLtHLaxvYC70WxJ6SDyrqVao7G8NG1YH5tGxEp3WCOAu9gEx+/m2YVrDZw6HXLiY BCnICl6R4pc/Jc5wKMHJ+WV2r+nb05w= -----END CERTIFICATE-----Generated at Wed Oct 21 10:15:52 2026 by rpki-client