$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7009fc0a-8414-4526-824b-f3cf577f1821/7c376d5c-6432-3523-ae0d-c28d0d186697.roa File: 7c376d5c-6432-3523-ae0d-c28d0d186697.roa (raw, json) Hash identifier: tM95DnWAdRsrFtL3xYRjUq5w+xYJKM09hs5lCanNX9I= Subject key identifier: B9:14:21:6C:45:D6:85:EF:C8:9B:90:97:A4:FD:39:16:15:3C:F0:72 Certificate issuer: /CN=7009fc0a-8414-4526-824b-f3cf577f1821 Certificate serial: 010D0C9F4328584F1EB89856E93082B3ED1B7380 Authority key identifier: 9D:18:CB:76:33:06:5F:27:4C:D7:9B:75:47:97:E7:4D:61:EB:F3:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7009fc0a-8414-4526-824b-f3cf577f1821.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7009fc0a-8414-4526-824b-f3cf577f1821/7c376d5c-6432-3523-ae0d-c28d0d186697.roa Signing time: Wed 09 Sep 2026 17:41:38 +0000 ROA not before: Wed 09 Sep 2026 17:41:38 +0000 ROA not after: Tue 08 Dec 2026 18:41:38 +0000 asID: 29832 IP address blocks: 208.85.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7009fc0a-8414-4526-824b-f3cf577f1821/7009fc0a-8414-4526-824b-f3cf577f1821.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7009fc0a-8414-4526-824b-f3cf577f1821/7009fc0a-8414-4526-824b-f3cf577f1821.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7009fc0a-8414-4526-824b-f3cf577f1821.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:b8:98:56:e9:30:82:b3:ed:1b:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7009fc0a-8414-4526-824b-f3cf577f1821 Validity Not Before: Sep 9 17:41:38 2026 GMT Not After : Dec 8 18:41:38 2026 GMT Subject: CN=8905a463-ed28-4893-8ad3-9157e6c8019b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ec:c8:c6:f9:a2:27:fa:01:86:df:46:f1:76: 30:6b:55:d5:77:25:1a:66:a4:cb:64:ba:91:45:27: 1c:a7:a0:6e:34:8d:f3:8c:b1:99:d0:3f:bf:2e:e7: e3:95:c3:7b:b0:8d:e8:7e:5d:90:64:74:b7:9e:57: a1:a7:9c:7a:d5:de:e8:d8:fd:6c:d5:e7:95:f8:e0: bf:97:d4:06:7c:18:84:58:98:19:f3:07:d1:1f:25: 31:a8:be:dd:55:18:19:01:ba:86:cc:4b:9c:fc:25: cb:32:b0:c5:aa:9b:38:c2:20:17:2e:4e:23:94:3c: 52:85:fc:0f:52:89:1b:2e:30:c6:50:9a:0e:cd:25: a1:db:96:ba:2f:13:45:cc:dd:37:d2:b1:31:0c:16: 78:2e:ab:36:78:96:c5:61:37:b7:32:11:a3:cb:f3: c7:28:6d:4c:d4:f8:b6:1d:6c:2b:6c:fb:20:e4:a5: ca:e3:c7:e6:09:17:c4:7a:f7:8c:c9:0a:5b:da:72: f7:a2:a7:85:40:82:0a:16:5c:30:4d:31:7e:28:cb: d3:3f:06:b3:37:76:17:e0:d9:d0:42:40:d8:cd:71: 32:dd:f8:75:53:86:39:cc:4d:76:df:8a:13:d8:83: 29:75:eb:0a:db:9c:24:3f:44:9c:44:25:a8:77:09: e2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:14:21:6C:45:D6:85:EF:C8:9B:90:97:A4:FD:39:16:15:3C:F0:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7009fc0a-8414-4526-824b-f3cf577f1821/7c376d5c-6432-3523-ae0d-c28d0d186697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7009fc0a-8414-4526-824b-f3cf577f1821/7009fc0a-8414-4526-824b-f3cf577f1821.crl X509v3 Authority Key Identifier: keyid:9D:18:CB:76:33:06:5F:27:4C:D7:9B:75:47:97:E7:4D:61:EB:F3:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7009fc0a-8414-4526-824b-f3cf577f1821.cer sbgp-ipAddrBlock: critical IPv4: 208.85.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:8a:5b:46:55:d6:9c:9a:67:fd:36:86:75:33:ab:53:a2:86: aa:50:63:ea:ea:d6:6f:ea:72:74:96:26:33:91:b4:4f:32:86: a6:63:8e:db:b5:41:6a:03:f6:50:6d:26:60:07:23:c3:13:a4: db:91:a2:12:79:ab:47:91:3d:de:53:94:c7:f0:16:dc:41:5a: 3c:62:94:88:1f:d9:bd:ad:65:1b:29:64:a6:e3:19:85:09:94: 25:14:25:02:23:12:46:59:01:06:58:7e:35:cd:6c:9a:68:38: 9d:81:83:ae:d4:d8:e7:af:f4:4c:95:ac:ff:1d:be:83:99:de: 97:f9:61:3e:c0:bb:b0:da:f9:d9:c0:30:56:80:93:63:20:4b: 58:22:0e:33:8f:f6:de:3b:be:d6:1d:5c:b5:62:6c:43:fe:c3: 0a:00:3c:b5:95:cc:02:e5:c4:1b:8d:62:16:aa:cb:60:c4:49: 68:cf:d0:fb:ef:3b:4f:9e:06:e6:94:8a:14:c4:16:ae:78:b2: da:5e:15:2f:b3:88:23:aa:09:a0:24:81:07:01:13:ee:20:95: 96:8e:a5:f6:2a:30:40:c2:a8:80:00:ca:62:a9:2e:f4:4c:1a: 4a:f8:dc:62:6f:76:e2:c7:92:dc:da:db:14:37:ce:dc:35:a6: de:40:e6:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8euJhW6TCCs+0bc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAwOWZjMGEtODQxNC00NTI2LTgyNGItZjNjZjU3N2Yx ODIxMB4XDTI2MDkwOTE3NDEzOFoXDTI2MTIwODE4NDEzOFowLzEtMCsGA1UEAxMk ODkwNWE0NjMtZWQyOC00ODkzLThhZDMtOTE1N2U2YzgwMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ezIxvmiJ/oBht9G8XYwa1XVdyUaZqTLZLqR RSccp6BuNI3zjLGZ0D+/LufjlcN7sI3ofl2QZHS3nlehp5x61d7o2P1s1eeV+OC/ l9QGfBiEWJgZ8wfRHyUxqL7dVRgZAbqGzEuc/CXLMrDFqps4wiAXLk4jlDxShfwP UokbLjDGUJoOzSWh25a6LxNFzN030rExDBZ4Lqs2eJbFYTe3MhGjy/PHKG1M1Pi2 HWwrbPsg5KXK48fmCRfEeveMyQpb2nL3oqeFQIIKFlwwTTF+KMvTPwazN3YX4NnQ QkDYzXEy3fh1U4Y5zE1234oT2IMpdesK25wkP0ScRCWodwni1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkUIWxF1oXvyJuQl6T9ORYVPPByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MDA5 ZmMwYS04NDE0LTQ1MjYtODI0Yi1mM2NmNTc3ZjE4MjEvN2MzNzZkNWMtNjQzMi0z NTIzLWFlMGQtYzI4ZDBkMTg2Njk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzAwOWZjMGEtODQxNC00NTI2LTgy NGItZjNjZjU3N2YxODIxLzcwMDlmYzBhLTg0MTQtNDUyNi04MjRiLWYzY2Y1Nzdm MTgyMS5jcmwwHwYDVR0jBBgwFoAUnRjLdjMGXydM15t1R5fnTWHr870wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MDA5ZmMwYS04NDE0LTQ1MjYtODI0Yi1mM2Nm NTc3ZjE4MjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaKW0ZV1pyaZ/02hnUzq1OihqpQY+rq1m/qcnSWJjORtE8yhqZjjtu1 QWoD9lBtJmAHI8MTpNuRohJ5q0eRPd5TlMfwFtxBWjxilIgf2b2tZRspZKbjGYUJ lCUUJQIjEkZZAQZYfjXNbJpoOJ2Bg67U2Oev9EyVrP8dvoOZ3pf5YT7Au7Da+dnA MFaAk2MgS1giDjOP9t47vtYdXLVibEP+wwoAPLWVzALlxBuNYhaqy2DESWjP0Pvv O0+eBuaUihTEFq54stpeFS+ziCOqCaAkgQcBE+4glZaOpfYqMEDCqIAAymKpLvRM Gkr43GJvduLHktza2xQ3ztw1pt5A5i8= -----END CERTIFICATE-----Generated at Tue Sep 29 16:33:24 2026 by rpki-client