$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa File: 1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa (raw, json) Hash identifier: LGoPXpJon0WON1nY2tDQbqS0Ws4qHucmmKX/6dZpMqQ= Subject key identifier: 6C:68:B1:EE:5C:29:61:D2:0B:F3:D6:5F:63:E6:EC:88:73:98:CB:52 Certificate issuer: /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Certificate serial: 010D0C9F4328584EA79A57E91E870785FD75DE00 Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8075 IP address blocks: 208.64.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:57:e9:1e:87:07:85:fd:75:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6a9b01b3-5b94-4e48-9c00-0fcd57ac01fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:1d:64:8c:87:8d:8a:ea:8e:33:1c:7c:00: 92:b7:29:b8:09:f7:98:77:8b:70:8e:30:21:74:bc: 58:a5:ec:92:1d:2d:14:ee:57:83:39:f0:07:07:c8: 6e:41:0b:06:af:21:56:0f:57:ac:35:be:3b:f8:c2: ba:64:1c:4e:57:e8:66:7d:11:2b:45:e1:a4:56:01: de:c6:cd:23:d7:74:8f:26:62:c9:fc:0f:14:fb:80: 5a:64:9f:c0:74:6c:9f:56:3c:2c:75:f9:26:a7:b2: ef:98:d0:28:85:dc:31:33:ca:29:4c:bb:c3:e9:da: 61:b8:09:8f:1c:f1:42:08:18:89:9a:63:fa:1c:53: 86:17:d5:dd:89:a9:23:7f:ee:37:d3:e8:46:c7:e1: 4f:99:1a:87:c2:46:5a:a2:47:d0:81:dd:fe:41:ac: 59:0f:65:39:41:ac:09:1c:31:64:25:62:50:2d:b7: b8:70:91:df:1c:28:e9:df:b9:42:64:33:99:53:cb: e8:5c:41:11:04:74:9f:2b:34:3b:79:14:dd:88:57: 60:aa:10:e5:42:c5:43:e6:5f:8c:47:2a:06:33:f5: e7:08:a6:bc:1c:bb:fa:3f:71:f8:4e:48:8c:88:25: eb:3a:a5:56:9c:63:58:bb:7d:eb:5a:29:64:cf:a6: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:68:B1:EE:5C:29:61:D2:0B:F3:D6:5F:63:E6:EC:88:73:98:CB:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/1c2d769e-b210-3e6b-9095-f066b9cb35a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl X509v3 Authority Key Identifier: keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer sbgp-ipAddrBlock: critical IPv4: 208.64.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1f:a8:c7:fd:ea:7c:cd:b8:c1:88:2a:c3:c3:2a:5a:28:09: d2:44:71:0c:5f:28:50:3c:9e:be:eb:c5:89:48:03:4e:5c:2e: de:28:ae:ce:67:b7:6f:a1:71:46:93:95:73:f8:30:10:50:58: 1e:07:5b:43:4e:21:ef:23:54:2d:9c:8c:cc:f5:df:0c:c5:1b: 10:d1:db:48:bb:72:31:0d:45:26:04:5f:dd:f4:bb:e7:be:04: 35:96:a5:43:33:50:2d:19:09:e7:13:f3:27:fd:3d:c5:ed:2c: eb:86:62:c5:0b:1f:da:4b:1a:ba:8e:cb:93:0b:8f:1d:a3:45: 5d:84:61:f3:68:e9:97:c2:b9:5a:87:d9:27:ff:93:52:84:d1: cd:5c:eb:63:e3:55:76:f0:12:13:70:57:81:89:23:91:7b:bc: a4:72:93:de:df:97:39:11:e4:1b:12:6d:45:97:c9:63:28:34: 2b:27:7c:0b:3a:52:f1:64:92:02:10:98:4b:a6:25:b7:fb:57: 52:ea:29:6a:ee:f7:9d:5e:c2:b4:52:19:1f:4c:bb:2d:99:8d: d1:49:d0:88:8a:37:94:9f:cf:b0:98:80:2b:81:3a:0f:14:20: d4:7b:34:ce:fc:72:a8:54:af:11:03:2d:0a:d6:04:ab:eb:62: ab:5c:e5:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmlfpHocHhf113gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2MwYjMtMzgzYS00MzhjLWFhNDUtMWU1ZGYwZDBl MDYxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmE5YjAxYjMtNWI5NC00ZTQ4LTljMDAtMGZjZDU3YWMwMWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGodZIyHjYrqjjMcfACStym4CfeYd4twjjAh dLxYpeySHS0U7leDOfAHB8huQQsGryFWD1esNb47+MK6ZBxOV+hmfRErReGkVgHe xs0j13SPJmLJ/A8U+4BaZJ/AdGyfVjwsdfkmp7LvmNAohdwxM8opTLvD6dphuAmP HPFCCBiJmmP6HFOGF9Xdiakjf+430+hGx+FPmRqHwkZaokfQgd3+QaxZD2U5QawJ HDFkJWJQLbe4cJHfHCjp37lCZDOZU8voXEERBHSfKzQ7eRTdiFdgqhDlQsVD5l+M RyoGM/XnCKa8HLv6P3H4TkiMiCXrOqVWnGNYu33rWilkz6a97wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxose5cKWHSC/PWX2Pm7IhzmMtSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3 YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVkZjBkMGUwNjEvMWMyZDc2OWUtYjIxMC0z ZTZiLTkwOTUtZjA2NmI5Y2IzNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGU4N2MwYjMtMzgzYS00MzhjLWFh NDUtMWU1ZGYwZDBlMDYxLzRlODdjMGIzLTM4M2EtNDM4Yy1hYTQ1LTFlNWRmMGQw ZTA2MS5jcmwwHwYDVR0jBBgwFoAUIbRtv8sZKo0pVPBrIIKDwhIbf9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZTg3YzBiMy0zODNhLTQzOGMtYWE0NS0xZTVk ZjBkMGUwNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0EBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsfqMf96nzNuMGIKsPDKlooCdJEcQxfKFA8nr7rxYlIA05cLt4ors5n t2+hcUaTlXP4MBBQWB4HW0NOIe8jVC2cjMz13wzFGxDR20i7cjENRSYEX930u+e+ BDWWpUMzUC0ZCecT8yf9PcXtLOuGYsULH9pLGrqOy5MLjx2jRV2EYfNo6ZfCuVqH 2Sf/k1KE0c1c62PjVXbwEhNwV4GJI5F7vKRyk97flzkR5BsSbUWXyWMoNCsnfAs6 UvFkkgIQmEumJbf7V1LqKWru951ewrRSGR9Muy2ZjdFJ0IiKN5Sfz7CYgCuBOg8U INR7NM78cqhUrxEDLQrWBKvrYqtc5QI= -----END CERTIFICATE-----Generated at Sat Sep 5 06:07:13 2026 by rpki-client