$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/11cff431-9278-3524-bc39-08ba7453130b.roa File: 11cff431-9278-3524-bc39-08ba7453130b.roa (raw, json) Hash identifier: Qc6dptly9Frx1a1CYzXGv7PwJOsFmUVwahTgRgvJ5JI= Subject key identifier: C2:94:A0:92:22:B6:38:56:AC:C2:91:C3:7A:29:C5:E8:99:E8:FD:E1 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584ECD372C0380B817F5B6825820 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/11cff431-9278-3524-bc39-08ba7453130b.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 203724 IP address blocks: 208.81.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:2c:03:80:b8:17:f5:b6:82:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=c890bb41-6c0f-4f51-8e92-b9abba79f6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:9f:9f:b7:6d:fc:b9:e2:07:b5:32:1f:9e: 3c:6b:0f:47:91:d8:e9:13:25:96:77:0a:62:50:a1: fe:65:07:4d:eb:d9:f0:b1:e3:1b:82:34:d3:ce:7e: 39:e5:31:7b:c0:56:6b:0b:17:48:bd:79:ed:87:c4: 9b:a1:0a:20:83:3b:9d:41:6e:b5:df:c8:09:95:46: f1:53:a3:ff:96:1a:eb:9e:50:9e:b6:88:ec:db:d2: 74:b7:d4:4b:8d:0c:dd:cd:18:21:07:a5:4a:01:c0: 69:06:19:d6:c9:d9:9b:88:dd:a8:7f:92:d8:a1:c1: 20:56:e8:86:dd:c9:aa:06:44:cf:e6:56:59:00:27: 55:66:45:98:15:90:e1:3d:a6:a8:ef:4c:b0:9a:e4: 8e:5c:4f:66:5a:86:0a:70:b2:46:92:a4:62:22:f4: 7f:7d:0a:31:82:1b:21:17:21:99:58:e7:31:7b:3e: 27:73:50:bc:69:d2:f5:4d:a4:76:b7:ad:68:03:35: 04:77:52:71:fa:8b:35:38:4c:90:d2:d6:fc:df:02: 8b:4e:b0:f4:78:52:a9:01:87:e2:17:ee:c3:3d:88: e7:ac:d2:81:66:13:60:26:02:56:5d:dd:66:4b:22: df:0b:5d:af:f8:a5:4c:6b:9c:eb:1b:43:0e:09:c1: e3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:94:A0:92:22:B6:38:56:AC:C2:91:C3:7A:29:C5:E8:99:E8:FD:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/11cff431-9278-3524-bc39-08ba7453130b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 208.81.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f0:c1:31:4a:c3:8a:f2:ae:19:01:63:33:d7:6c:4b:e4:4f: 5c:82:22:78:86:b6:d1:90:c9:81:6d:9a:e9:63:15:47:46:18: 94:c9:5a:49:e6:22:e4:bb:e1:6b:a5:e2:93:16:18:02:d5:44: 75:10:cc:af:c8:bf:30:67:6a:0f:99:4f:35:20:aa:4a:c3:6d: e4:ba:25:df:9f:55:10:f2:7f:59:12:3c:3b:33:32:aa:82:78: d1:36:fd:78:6e:6c:31:7d:62:62:72:75:18:30:8e:ef:d6:87: ae:c7:74:a6:58:ff:47:31:b7:3d:23:35:bf:89:d8:44:ee:b7: 38:b2:e3:2b:31:76:de:37:22:16:b4:84:29:21:ac:88:5f:27: 7a:63:d5:8a:48:c6:60:8b:ef:c2:ef:d6:c4:ba:89:44:95:d0: cf:cc:b6:ef:8e:b0:e2:8b:01:d2:c2:d4:c6:5e:e4:40:eb:0c: 4f:79:a3:c2:90:95:dd:95:95:af:ad:f9:4d:fb:da:9e:0b:8a: f4:e8:7f:b0:ae:bf:69:8c:5f:cb:fe:4a:de:49:e7:9f:6a:72: 9f:71:2c:41:39:71:4d:59:3b:e5:d4:e7:db:ee:4c:b2:09:ab: ce:30:fd:bf:66:8c:a7:c2:3c:26:3d:fe:7c:94:bd:6f:c5:de: c3:bc:fc:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNywDgLgX9baCWCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk Yzg5MGJiNDEtNmMwZi00ZjUxLThlOTItYjlhYmJhNzlmNmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQKfn7dt/LniB7UyH548aw9HkdjpEyWWdwpi UKH+ZQdN69nwseMbgjTTzn455TF7wFZrCxdIvXnth8SboQoggzudQW6138gJlUbx U6P/lhrrnlCetojs29J0t9RLjQzdzRghB6VKAcBpBhnWydmbiN2of5LYocEgVuiG 3cmqBkTP5lZZACdVZkWYFZDhPaao70ywmuSOXE9mWoYKcLJGkqRiIvR/fQoxghsh FyGZWOcxez4nc1C8adL1TaR2t61oAzUEd1Jx+os1OEyQ0tb83wKLTrD0eFKpAYfi F+7DPYjnrNKBZhNgJgJWXd1mSyLfC12v+KVMa5zrG0MOCcHjxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKUoJIitjhWrMKRw3opxeiZ6P3hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMTFjZmY0MzEtOTI3OC0z NTI0LWJjMzktMDhiYTc0NTMxMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FFHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbwwTFKw4ryrhkBYzPXbEvkT1yCIniGttGQyYFtmuljFUdGGJTJWknm IuS74Wul4pMWGALVRHUQzK/IvzBnag+ZTzUgqkrDbeS6Jd+fVRDyf1kSPDszMqqC eNE2/XhubDF9YmJydRgwju/Wh67HdKZY/0cxtz0jNb+J2ETutziy4ysxdt43Iha0 hCkhrIhfJ3pj1YpIxmCL78Lv1sS6iUSV0M/Mtu+OsOKLAdLC1MZe5EDrDE95o8KQ ld2Vla+t+U372p4LivTof7Cuv2mMX8v+St5J559qcp9xLEE5cU1ZO+XU59vuTLIJ q84w/b9mjKfCPCY9/nyUvW/F3sO8/AM= -----END CERTIFICATE-----Generated at Sat Sep 19 02:19:00 2026 by rpki-client