$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/7c82a209-9386-3901-a7b9-57c1f597512b.roa File: 7c82a209-9386-3901-a7b9-57c1f597512b.roa (raw, json) Hash identifier: gjUSrYJEjMPMi5VKBJ+Vsh1MVIwOl5oh1nVy4GzIr6k= Subject key identifier: BA:F1:24:17:DD:2B:8E:42:68:26:67:58:A6:C2:DF:20:CE:A7:0A:F3 Certificate issuer: /CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Certificate serial: 010D0C9F4328584F49740C67F2C69FEA071A0D00 Authority key identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/7c82a209-9386-3901-a7b9-57c1f597512b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22251 IP address blocks: 208.68.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0c:67:f2:c6:9f:ea:07:1a:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e7a9c202-88ce-4e52-a0ba-82004c86f8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4a:e7:8e:3f:03:6a:9e:18:09:61:60:67:ff: 2a:e0:e2:dc:1d:ad:00:43:19:f7:f5:69:bc:af:44: 64:a2:9b:8a:45:26:8a:df:e9:9c:99:7f:f4:9f:12: 02:ba:41:ce:a1:6f:59:2f:9a:d6:5a:2c:83:ee:b3: cf:20:b4:c1:bb:9d:a9:ec:59:37:20:65:62:fa:e0: d9:d6:34:2d:e1:60:49:83:c3:d7:ca:7e:01:31:87: e2:4c:8c:91:08:9a:19:f2:8c:3f:f3:6e:b2:fd:18: a3:3c:5c:20:15:80:51:51:71:64:ca:d2:d7:3a:70: 9e:0d:c9:4a:eb:5c:85:7a:d3:b4:4d:e5:f7:91:a6: 64:ce:ff:fb:42:0f:fe:d6:fb:45:dd:40:4f:9d:83: 57:00:64:03:fa:86:65:02:8e:59:17:30:73:b4:9b: a3:0d:12:95:0f:86:b5:b8:06:c2:08:a3:03:d6:40: 23:b3:2b:ef:99:76:cc:db:fa:0c:c6:3e:fa:44:2d: 8c:04:6f:62:a9:33:00:8b:e9:27:34:3a:76:52:a1: 23:68:f1:9d:f1:40:d2:c6:15:65:58:f0:0f:b3:e0: 57:de:91:01:75:51:da:e3:c8:a3:19:d3:19:d0:9a: 97:33:9e:57:07:12:3f:d5:b1:f0:55:3f:9b:8f:15: a3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F1:24:17:DD:2B:8E:42:68:26:67:58:A6:C2:DF:20:CE:A7:0A:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/7c82a209-9386-3901-a7b9-57c1f597512b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl X509v3 Authority Key Identifier: keyid:99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer sbgp-ipAddrBlock: critical IPv4: 208.68.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e5:66:db:0b:67:05:85:6a:35:83:05:e3:5c:bc:fc:36:97: bb:d6:a0:e4:98:e9:03:ee:c9:e1:43:97:33:c4:f4:60:d9:34: f5:6c:9b:f6:ca:ae:b0:45:46:65:97:6f:08:df:1e:e8:b9:65: 0a:f7:a6:2d:3f:bd:30:21:fc:b4:ca:b9:f9:4d:03:ba:68:98: a7:4a:02:28:80:12:41:fe:63:ba:2e:bb:48:4c:18:be:fb:82: 7d:1e:a4:55:67:88:0e:78:72:75:ea:f8:d8:01:c8:25:b4:d8: 6e:31:58:3b:3a:92:c6:b7:88:9d:95:8d:87:1a:1f:40:7b:50: 28:60:5a:af:d0:44:49:17:a2:b9:21:7e:0c:e1:7b:40:34:ba: 86:29:e6:dc:fc:ad:b6:01:3f:1c:f4:8d:0f:72:79:24:eb:81: 2a:26:3b:d6:70:3a:9d:65:8c:ea:e0:9d:95:19:3f:cc:e8:4b: bf:57:a4:d0:6c:26:87:ea:fc:35:55:86:15:4d:2b:ff:0a:eb: 1b:9a:36:b0:60:e6:32:5d:47:8b:2c:c4:b3:43:38:52:ec:17: 88:48:23:3b:c4:a3:6f:7c:32:93:1a:42:04:96:2e:9f:2f:6d: d1:91:d4:31:58:dc:94:10:5f:9d:a7:ff:52:0e:b3:a5:59:7e: a2:9e:9a:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdAxn8saf6gcaDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmODgwN2MtNDk0ZS00MWFiLTg0MmMtYzA2NzJkNjI4 M2IxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTdhOWMyMDItODhjZS00ZTUyLWEwYmEtODIwMDRjODZmOGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwErnjj8Dap4YCWFgZ/8q4OLcHa0AQxn39Wm8 r0RkopuKRSaK3+mcmX/0nxICukHOoW9ZL5rWWiyD7rPPILTBu52p7Fk3IGVi+uDZ 1jQt4WBJg8PXyn4BMYfiTIyRCJoZ8ow/826y/RijPFwgFYBRUXFkytLXOnCeDclK 61yFetO0TeX3kaZkzv/7Qg/+1vtF3UBPnYNXAGQD+oZlAo5ZFzBztJujDRKVD4a1 uAbCCKMD1kAjsyvvmXbM2/oMxj76RC2MBG9iqTMAi+knNDp2UqEjaPGd8UDSxhVl WPAPs+BX3pEBdVHa48ijGdMZ0JqXM55XBxI/1bHwVT+bjxWjawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrxJBfdK45CaCZnWKbC3yDOpwrzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4 ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3MmQ2MjgzYjEvN2M4MmEyMDktOTM4Ni0z OTAxLWE3YjktNTdjMWY1OTc1MTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNmODgwN2MtNDk0ZS00MWFiLTg0 MmMtYzA2NzJkNjI4M2IxLzhjZjg4MDdjLTQ5NGUtNDFhYi04NDJjLWMwNjcyZDYy ODNiMS5jcmwwHwYDVR0jBBgwFoAUmSK0wlNyF+E9BTJuTe5jaHRRhJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3 MmQ2MjgzYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTlZtsLZwWFajWDBeNcvPw2l7vWoOSY6QPuyeFDlzPE9GDZNPVsm/bK rrBFRmWXbwjfHui5ZQr3pi0/vTAh/LTKuflNA7pomKdKAiiAEkH+Y7ouu0hMGL77 gn0epFVniA54cnXq+NgByCW02G4xWDs6ksa3iJ2VjYcaH0B7UChgWq/QREkXorkh fgzhe0A0uoYp5tz8rbYBPxz0jQ9yeSTrgSomO9ZwOp1ljOrgnZUZP8zoS79XpNBs Jofq/DVVhhVNK/8K6xuaNrBg5jJdR4ssxLNDOFLsF4hIIzvEo298MpMaQgSWLp8v bdGR1DFY3JQQX52n/1IOs6VZfqKemgw= -----END CERTIFICATE-----Generated at Sun Oct 4 00:01:09 2026 by rpki-client