$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa File: d8d9475d-3273-347c-bebb-562c1777f770.roa (raw, json) Hash identifier: AniDQBvBURkNX+aQ0joWgiaAfYoKeXcyuFem+YQLzC4= Subject key identifier: 5B:56:38:30:B9:DA:9D:AC:C2:22:8B:A9:43:39:90:A2:18:15:AF:10 Certificate issuer: /CN=cfb7045d-2d5f-4c56-bfa4-e35f745a61f8 Certificate serial: 010D0C9F4328584F6292CACE72330E615543AD00 Authority key identifier: 87:08:FA:CC:1A:BD:61:90:0F:41:14:19:3A:6A:01:FD:DA:5E:6B:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 6939 IP address blocks: 208.65.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ca:ce:72:33:0e:61:55:43:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb7045d-2d5f-4c56-bfa4-e35f745a61f8 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=0a09bad9-76b0-45ac-a14c-824d511327da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b9:35:3f:12:98:7b:6e:44:fe:60:49:9e:e0: 27:4b:8f:e4:cc:42:6e:f8:91:8f:32:ef:1a:33:ba: de:bf:a7:b9:66:2a:78:b4:77:9d:ab:30:3d:a1:5d: c2:1a:43:35:8d:ff:84:2e:bd:d8:54:58:39:ff:e7: 60:d9:48:7b:1f:fe:81:86:b8:43:16:e0:58:ab:bf: 09:9a:ac:4e:60:c9:bf:9e:64:3f:aa:9d:b0:da:c0: 5a:86:12:c7:8d:62:ae:d6:f5:d7:7e:d8:f3:d1:c3: 2d:43:f5:c8:16:1a:7d:4d:1f:15:26:92:4f:52:8f: 7c:22:ad:dd:3e:0b:93:83:5d:8e:69:d0:6b:65:de: 24:63:1b:6e:64:99:37:2e:5b:62:c7:db:2f:bf:4c: e5:7b:2d:12:55:09:55:7c:88:bd:df:f7:7b:d5:91: 60:ff:b7:54:3b:df:eb:3d:f1:17:f4:60:6f:6f:62: 61:9c:f8:a9:00:0a:e6:91:64:cb:69:1e:48:2e:1d: 90:3e:61:27:53:72:0c:4a:de:92:11:cc:b3:1b:6b: 88:ca:ad:ad:dd:5b:7e:f6:d8:69:42:b1:00:f0:b3: 38:50:93:1f:1e:b7:c7:e8:d3:cb:44:df:fc:33:65: 7e:b3:ed:bc:de:92:32:01:05:fb:84:da:1c:42:38: ff:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:56:38:30:B9:DA:9D:AC:C2:22:8B:A9:43:39:90:A2:18:15:AF:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.crl X509v3 Authority Key Identifier: keyid:87:08:FA:CC:1A:BD:61:90:0F:41:14:19:3A:6A:01:FD:DA:5E:6B:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer sbgp-ipAddrBlock: critical IPv4: 208.65.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:5f:23:cc:2b:4f:a9:31:20:8f:2c:2b:25:71:2b:0f:ab:36: 2a:1e:0e:d1:ca:81:0a:48:03:3e:88:0e:e8:0a:be:dd:bd:1e: c9:7a:67:29:0e:ea:6a:79:b7:76:ae:fb:b7:cd:ab:b2:1e:93: b4:79:7f:32:03:d8:01:80:0f:e7:56:84:d0:8d:d0:a3:e9:29: 67:f7:12:9f:38:12:a1:03:37:a3:f2:32:e0:ef:fa:84:20:5e: 48:5d:d3:38:21:b7:23:67:87:2f:dd:ab:6b:97:58:ff:9b:ec: cb:d1:64:71:ec:0f:87:87:4a:62:32:a5:0d:5b:1e:0d:04:b4: 1f:8c:23:34:8e:ed:7a:9c:71:1d:02:25:9f:a2:2d:40:6a:ef: d1:e1:e3:4f:4c:68:73:76:e5:4d:06:19:d4:22:36:c5:d2:75: b9:f1:0b:8d:44:69:a6:da:87:fc:5f:20:8b:6f:3a:b4:31:42: 94:fe:35:69:1f:83:5c:aa:cd:b4:a5:d7:87:3c:9e:49:d5:c8: 68:71:90:ca:02:c6:34:7f:dc:39:69:e1:71:4e:af:90:66:2f: 82:9e:b2:a4:cf:28:ce:39:5e:69:08:4e:7b:60:b8:49:a5:6c: fe:ef:58:2b:d0:28:44:56:6a:9a:96:a7:8c:b8:ae:6c:ee:62: 07:d9:30:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iksrOcjMOYVVDrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZiNzA0NWQtMmQ1Zi00YzU2LWJmYTQtZTM1Zjc0NWE2 MWY4MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MGEwOWJhZDktNzZiMC00NWFjLWExNGMtODI0ZDUxMTMyN2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbk1PxKYe25E/mBJnuAnS4/kzEJu+JGPMu8a M7rev6e5Zip4tHedqzA9oV3CGkM1jf+ELr3YVFg5/+dg2Uh7H/6BhrhDFuBYq78J mqxOYMm/nmQ/qp2w2sBahhLHjWKu1vXXftjz0cMtQ/XIFhp9TR8VJpJPUo98Iq3d PguTg12OadBrZd4kYxtuZJk3Lltix9svv0zley0SVQlVfIi93/d71ZFg/7dUO9/r PfEX9GBvb2JhnPipAArmkWTLaR5ILh2QPmEnU3IMSt6SEcyzG2uIyq2t3Vt+9thp QrEA8LM4UJMfHrfH6NPLRN/8M2V+s+283pIyAQX7hNocQjj/BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtWODC52p2swiKLqUM5kKIYFa8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZmI3 MDQ1ZC0yZDVmLTRjNTYtYmZhNC1lMzVmNzQ1YTYxZjgvZDhkOTQ3NWQtMzI3My0z NDdjLWJlYmItNTYyYzE3NzdmNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2ZiNzA0NWQtMmQ1Zi00YzU2LWJm YTQtZTM1Zjc0NWE2MWY4L2NmYjcwNDVkLTJkNWYtNGM1Ni1iZmE0LWUzNWY3NDVh NjFmOC5jcmwwHwYDVR0jBBgwFoAUhwj6zBq9YZAPQRQZOmoB/dpea44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZmI3MDQ1ZC0yZDVmLTRjNTYtYmZhNC1lMzVm NzQ1YTYxZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhfI8wrT6kxII8sKyVxKw+rNioeDtHKgQpIAz6IDugKvt29Hsl6ZykO 6mp5t3au+7fNq7Iek7R5fzID2AGAD+dWhNCN0KPpKWf3Ep84EqEDN6PyMuDv+oQg Xkhd0zghtyNnhy/dq2uXWP+b7MvRZHHsD4eHSmIypQ1bHg0EtB+MIzSO7XqccR0C JZ+iLUBq79Hh409MaHN25U0GGdQiNsXSdbnxC41Eaabah/xfIItvOrQxQpT+NWkf g1yqzbSl14c8nknVyGhxkMoCxjR/3Dlp4XFOr5BmL4KesqTPKM45XmkITntguEml bP7vWCvQKERWapqWp4y4rmzuYgfZMJo= -----END CERTIFICATE-----Generated at Sun Oct 18 04:30:44 2026 by rpki-client