$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/e71bd7ae-7692-36a7-9e04-60944673c683.roa File: e71bd7ae-7692-36a7-9e04-60944673c683.roa (raw, json) Hash identifier: w1KQUH/f3uUaEOBhcflJxxJW8ysqXO1wRdC6pLMGmzk= Subject key identifier: 4C:27:60:97:52:A1:1A:C9:A0:FF:DF:78:55:85:29:F3:2B:C4:06:AC Certificate issuer: /CN=84d03f70-8e0c-4ab4-aea0-4f32765a286b Certificate serial: 010D0C9F4328584F597F321E339A7B9A4960D480 Authority key identifier: 71:38:C3:AC:BB:AF:6B:FF:72:14:82:A8:BD:1E:8B:E8:FD:1A:14:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/e71bd7ae-7692-36a7-9e04-60944673c683.roa Signing time: Wed 30 Sep 2026 18:58:41 +0000 ROA not before: Wed 30 Sep 2026 18:58:41 +0000 ROA not after: Tue 29 Dec 2026 19:58:41 +0000 asID: 26225 IP address blocks: 208.88.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:59:7f:32:1e:33:9a:7b:9a:49:60:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84d03f70-8e0c-4ab4-aea0-4f32765a286b Validity Not Before: Sep 30 18:58:41 2026 GMT Not After : Dec 29 19:58:41 2026 GMT Subject: CN=d1ff8702-8c5e-4da9-ba1f-ed19b9d96810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:09:52:d4:d7:f0:5a:de:fa:2f:91:b6:37: b0:ac:16:94:aa:70:66:f5:8c:c6:3d:cf:93:5f:45: f3:27:f0:a7:33:63:5f:45:3f:fc:68:3c:ca:86:67: 16:86:b1:af:e8:dd:97:d1:94:e3:95:03:23:1e:b3: ad:54:1a:fe:5d:a6:42:93:8b:35:70:a1:9e:f7:24: b7:be:ab:71:84:62:50:cd:42:0e:b3:9b:de:7b:fb: 36:a5:d6:14:9c:dc:db:fe:69:62:40:ec:ae:85:d8: d9:57:31:b3:20:51:a1:0d:78:c5:10:4d:29:36:81: cc:9d:0a:80:f5:f2:e6:cc:23:c0:29:7b:26:70:a6: 5a:3b:e2:98:3e:c1:11:13:9f:71:60:00:3a:53:1c: ed:bd:a0:79:75:1a:f2:c9:d0:de:d8:e7:42:87:66: 5b:74:8f:1c:01:79:d9:bb:c0:2d:0b:6d:ae:36:0d: 3a:f9:51:26:fb:c1:48:b7:f6:4f:ca:f2:11:49:d4: 0b:83:be:74:42:8f:8f:7c:ce:6f:3b:3a:ae:8e:92: fa:22:88:f9:d0:f4:82:a0:1c:04:5a:4a:2e:ad:5e: 81:3a:a4:ff:b4:30:1b:64:b8:36:37:8a:59:c8:1e: 20:c3:7e:30:dd:03:de:39:d3:22:24:2b:c1:05:0f: c6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:27:60:97:52:A1:1A:C9:A0:FF:DF:78:55:85:29:F3:2B:C4:06:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/e71bd7ae-7692-36a7-9e04-60944673c683.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b/84d03f70-8e0c-4ab4-aea0-4f32765a286b.crl X509v3 Authority Key Identifier: keyid:71:38:C3:AC:BB:AF:6B:FF:72:14:82:A8:BD:1E:8B:E8:FD:1A:14:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/84d03f70-8e0c-4ab4-aea0-4f32765a286b.cer sbgp-ipAddrBlock: critical IPv4: 208.88.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:41:cf:b6:d0:08:0b:12:6f:2d:c1:e1:4b:9e:41:f8:0c:be: ee:cb:e0:a5:d1:08:b3:57:d2:19:a3:5f:04:8a:ec:be:b3:bc: ec:37:a9:12:c3:70:b0:60:27:32:2a:86:bd:69:3d:bd:9f:e2: 1b:31:1e:e1:7c:74:b5:a9:61:80:03:50:cc:f4:d2:cb:00:a2: d2:1f:e2:b9:ba:f8:ba:8c:8e:68:05:74:0e:a2:c1:6c:24:cf: 27:b2:a6:88:69:9b:e8:44:4b:4b:27:ac:71:a8:d6:87:4c:b8: 46:56:89:53:08:9c:30:83:5c:20:3c:6a:2f:b0:19:59:77:8d: 7a:9e:f3:5b:ff:8f:a7:02:2c:eb:cc:fb:5b:f7:9f:92:fe:10: 01:94:d3:d8:e0:91:fd:da:8b:44:d5:48:65:50:37:48:d2:c7: 3d:8c:2c:1c:77:e7:f5:46:3c:3f:56:c7:97:4a:a9:76:1a:2e: e7:b3:af:5c:b3:5e:9c:8e:35:7b:7a:bf:11:f0:39:1e:a9:ff: 7b:7c:bc:c8:30:3e:a6:e5:6e:f8:a4:ca:99:df:7f:8d:a8:d4: 8d:29:3c:a0:4f:f5:ab:81:9c:2b:2a:1c:d7:c9:82:05:de:8c: ee:fe:dc:3b:59:46:ad:86:35:7b:71:fe:9a:f3:ae:d4:c7:eb: fc:b2:aa:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ZfzIeM5p7mklg1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRkMDNmNzAtOGUwYy00YWI0LWFlYTAtNGYzMjc2NWEy ODZiMB4XDTI2MDkzMDE4NTg0MVoXDTI2MTIyOTE5NTg0MVowLzEtMCsGA1UEAxMk ZDFmZjg3MDItOGM1ZS00ZGE5LWJhMWYtZWQxOWI5ZDk2ODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1kJUtTX8Fre+i+RtjewrBaUqnBm9YzGPc+T X0XzJ/CnM2NfRT/8aDzKhmcWhrGv6N2X0ZTjlQMjHrOtVBr+XaZCk4s1cKGe9yS3 vqtxhGJQzUIOs5vee/s2pdYUnNzb/mliQOyuhdjZVzGzIFGhDXjFEE0pNoHMnQqA 9fLmzCPAKXsmcKZaO+KYPsERE59xYAA6UxztvaB5dRryydDe2OdCh2ZbdI8cAXnZ u8AtC22uNg06+VEm+8FIt/ZPyvIRSdQLg750Qo+PfM5vOzqujpL6Ioj50PSCoBwE WkourV6BOqT/tDAbZLg2N4pZyB4gw34w3QPeOdMiJCvBBQ/GGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwnYJdSoRrJoP/feFWFKfMrxAasMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NGQw M2Y3MC04ZTBjLTRhYjQtYWVhMC00ZjMyNzY1YTI4NmIvZTcxYmQ3YWUtNzY5Mi0z NmE3LTllMDQtNjA5NDQ2NzNjNjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODRkMDNmNzAtOGUwYy00YWI0LWFl YTAtNGYzMjc2NWEyODZiLzg0ZDAzZjcwLThlMGMtNGFiNC1hZWEwLTRmMzI3NjVh Mjg2Yi5jcmwwHwYDVR0jBBgwFoAUcTjDrLuva/9yFIKovR6L6P0aFOowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NGQwM2Y3MC04ZTBjLTRhYjQtYWVhMC00ZjMy NzY1YTI4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRBz7bQCAsSby3B4UueQfgMvu7L4KXRCLNX0hmjXwSK7L6zvOw3qRLD cLBgJzIqhr1pPb2f4hsxHuF8dLWpYYADUMz00ssAotIf4rm6+LqMjmgFdA6iwWwk zyeypohpm+hES0snrHGo1odMuEZWiVMInDCDXCA8ai+wGVl3jXqe81v/j6cCLOvM +1v3n5L+EAGU09jgkf3ai0TVSGVQN0jSxz2MLBx35/VGPD9Wx5dKqXYaLuezr1yz XpyONXt6vxHwOR6p/3t8vMgwPqblbvikypnff42o1I0pPKBP9auBnCsqHNfJggXe jO7+3DtZRq2GNXtx/przrtTH6/yyqjg= -----END CERTIFICATE-----Generated at Wed Oct 28 19:16:12 2026 by rpki-client