$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/08907099-391f-3bc0-aa7a-ec8730b3de2a.roa File: 08907099-391f-3bc0-aa7a-ec8730b3de2a.roa (raw, json) Hash identifier: 1AkbGWnXvolIgu6VQTNX0D7LAK0IoVaSwG9ch9yuocs= Subject key identifier: D5:A1:5B:29:7D:BB:2F:F2:5D:4F:41:43:B6:C6:98:3B:90:C1:42:C3 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584ECD372BEC2EA61051F651CD62 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/08907099-391f-3bc0-aa7a-ec8730b3de2a.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 203724 IP address blocks: 208.81.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:2b:ec:2e:a6:10:51:f6:51:cd:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=470f407c-b0ab-4031-bf0c-796ae8bb7759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:38:0f:06:48:6b:b1:c9:04:77:6f:33:84:1b: a3:12:fe:24:e2:74:07:c0:24:63:a7:9f:f1:5c:52: ac:f1:76:ce:f6:09:26:68:40:77:e4:73:84:23:85: 62:cc:dd:1c:93:95:fd:02:c0:1f:7b:be:a4:df:cf: d6:8f:f4:bd:f3:f4:ad:ab:a5:f2:db:39:6e:0c:c5: e5:88:64:6f:59:d3:95:93:0d:89:a5:03:1d:1f:3d: a4:13:bc:65:67:85:c9:cf:d2:a0:5d:e0:32:6e:e0: 90:0b:53:3b:c5:f0:01:fc:93:53:28:09:66:02:dd: 72:b1:10:ee:ac:6d:f4:6c:b8:0c:99:59:e2:31:b0: f5:b7:32:ad:b4:ff:2f:bd:66:69:e3:5a:1f:a8:9e: 93:fc:90:80:92:eb:c7:7b:1e:26:79:f1:71:41:d1: 43:2d:5d:dd:3b:98:7c:81:38:1c:fe:72:4b:9f:8c: 5c:0c:3a:db:e0:bc:e2:f2:e7:c4:d4:64:7a:e6:70: c9:fd:77:2a:04:0b:d4:8b:b1:7a:00:2d:38:e9:bb: 7c:fc:78:5c:04:65:8b:8f:6a:e4:6d:90:04:9f:5b: 66:f9:f2:cd:bb:65:e0:34:5e:07:00:84:0f:42:ed: 5e:b9:cd:63:6c:c6:d1:4a:84:f1:5e:65:9d:a9:de: b2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A1:5B:29:7D:BB:2F:F2:5D:4F:41:43:B6:C6:98:3B:90:C1:42:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/08907099-391f-3bc0-aa7a-ec8730b3de2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 208.81.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a7:05:2c:19:74:84:7f:6a:8a:a1:c8:53:0d:42:02:a4:b3: b3:c1:ec:4e:3d:9f:47:b1:66:ad:0e:47:44:41:ab:a0:42:8c: cd:9d:05:80:25:c2:ba:e1:f1:51:dd:0f:85:9b:e1:09:ca:99: d6:14:a9:83:43:04:9d:f4:4e:c1:c2:ac:b2:f8:54:f2:48:1c: 21:73:2a:dd:b4:16:d1:43:c0:1c:0c:b7:44:77:fb:93:3b:5b: 0d:c4:c4:a9:f4:51:7c:69:80:76:4c:13:0b:09:60:d3:86:d2: fa:a5:e4:69:e1:8e:83:e8:f0:f5:94:23:52:39:4c:20:87:ad: 4a:76:83:85:27:9a:3a:8d:66:f3:7d:31:b5:92:ba:23:8d:90: 73:83:b0:81:67:02:5b:59:60:62:ba:d1:b4:37:e1:bf:cd:08: 18:98:70:3f:52:4a:48:0b:b7:a7:fa:3a:8e:e7:2d:e3:83:05: ed:eb:29:35:43:31:33:77:51:c0:a9:1a:5f:57:89:96:c1:0a: 27:57:b1:ab:26:a5:66:0b:0d:89:d2:2b:06:61:f9:93:44:9e: 4d:35:a5:f9:36:4e:d3:b5:4b:10:51:74:b0:58:a3:66:83:d1: 60:9c:e3:32:46:cf:3e:f5:1f:40:8b:c0:8b:9f:e6:c9:1c:8d: 3f:9e:33:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyvsLqYQUfZRzWIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk NDcwZjQwN2MtYjBhYi00MDMxLWJmMGMtNzk2YWU4YmI3NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDgPBkhrsckEd28zhBujEv4k4nQHwCRjp5/x XFKs8XbO9gkmaEB35HOEI4VizN0ck5X9AsAfe76k38/Wj/S98/Stq6Xy2zluDMXl iGRvWdOVkw2JpQMdHz2kE7xlZ4XJz9KgXeAybuCQC1M7xfAB/JNTKAlmAt1ysRDu rG30bLgMmVniMbD1tzKttP8vvWZp41ofqJ6T/JCAkuvHex4mefFxQdFDLV3dO5h8 gTgc/nJLn4xcDDrb4Lzi8ufE1GR65nDJ/XcqBAvUi7F6AC046bt8/HhcBGWLj2rk bZAEn1tm+fLNu2XgNF4HAIQPQu1euc1jbMbRSoTxXmWdqd6ycQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWhWyl9uy/yXU9BQ7bGmDuQwULDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMDg5MDcwOTktMzkxZi0z YmMwLWFhN2EtZWM4NzMwYjNkZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FFFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSnBSwZdIR/aoqhyFMNQgKks7PB7E49n0exZq0OR0RBq6BCjM2dBYAl wrrh8VHdD4Wb4QnKmdYUqYNDBJ30TsHCrLL4VPJIHCFzKt20FtFDwBwMt0R3+5M7 Ww3ExKn0UXxpgHZMEwsJYNOG0vql5GnhjoPo8PWUI1I5TCCHrUp2g4UnmjqNZvN9 MbWSuiONkHODsIFnAltZYGK60bQ34b/NCBiYcD9SSkgLt6f6Oo7nLeODBe3rKTVD MTN3UcCpGl9XiZbBCidXsasmpWYLDYnSKwZh+ZNEnk01pfk2TtO1SxBRdLBYo2aD 0WCc4zJGzz71H0CLwIuf5skcjT+eM5c= -----END CERTIFICATE-----Generated at Sat Sep 19 02:16:30 2026 by rpki-client