$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/3baae0c4-63e8-3640-b573-a9277c99d98b.roa File: 3baae0c4-63e8-3640-b573-a9277c99d98b.roa (raw, json) Hash identifier: RgX/+k29KwubhNW+l/kOhws8WrGTz3n+NB6sAqUwfKM= Subject key identifier: 28:3F:04:4C:65:18:8C:ED:E4:69:06:9A:D1:9A:CD:0F:24:C4:30:DC Certificate issuer: /CN=7895ee85-2a16-4e54-9c5b-a9a05908877e Certificate serial: 010D0C9F4328584F0D6CD5794CC56461818128C0 Authority key identifier: B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/3baae0c4-63e8-3640-b573-a9277c99d98b.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 53903 IP address blocks: 208.123.141.0/24 maxlen: 24 208.123.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d5:79:4c:c5:64:61:81:81:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7895ee85-2a16-4e54-9c5b-a9a05908877e Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=a5855118-7195-4b8a-9b0a-9d99c0550c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:82:32:d5:71:af:9a:e7:ae:33:87:f4:26:50: 2a:73:40:5f:79:f0:cb:ba:aa:d7:0e:05:71:be:6e: 79:ee:ff:de:e8:73:18:7b:42:a1:a9:82:b6:31:b0: cd:d5:53:69:59:53:3b:75:7b:76:e8:73:4e:ef:76: e5:12:95:93:5b:21:e4:93:51:13:c3:f3:04:ff:70: c0:15:14:3c:a7:4f:e6:d9:17:8b:c2:da:67:9d:e9: bb:8a:75:29:dd:dd:ac:6f:d8:c3:1c:7b:45:19:a9: df:40:ca:79:31:89:90:0d:d6:dc:f0:55:0b:af:c8: 58:82:1d:70:ea:9c:3a:a8:0c:7c:47:3a:12:f5:8e: 1f:09:57:9a:5e:6e:a4:9c:90:ed:23:05:64:e1:3b: 5f:24:34:6f:a3:f1:79:33:69:14:8d:8a:81:12:c3: 47:99:01:f1:84:d1:fc:d2:bc:90:0d:c3:78:6d:b7: 71:bf:03:83:c0:90:14:5f:39:d9:0d:3b:c5:a2:03: a3:06:af:7f:db:e6:66:83:fc:db:51:2f:eb:fd:83: 1d:2d:af:b1:9f:ee:64:84:4e:a5:43:c9:7a:5a:fa: bc:bf:f7:7b:54:25:f8:ef:c0:0b:49:70:ab:9c:a5: 8a:99:cf:62:ac:30:eb:5d:33:5f:51:e9:9b:6d:bc: e6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3F:04:4C:65:18:8C:ED:E4:69:06:9A:D1:9A:CD:0F:24:C4:30:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/3baae0c4-63e8-3640-b573-a9277c99d98b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.crl X509v3 Authority Key Identifier: keyid:B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer sbgp-ipAddrBlock: critical IPv4: 208.123.141.0-208.123.142.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:94:19:37:be:e5:17:b5:45:46:08:c9:9f:f5:1c:f9:22:d1: d6:2a:97:02:44:e0:91:97:0a:b5:45:d3:e1:da:aa:a9:e5:90: 98:8d:6a:1f:d7:14:75:05:fc:14:f1:2f:59:20:f1:ec:f9:56: c3:c0:6c:c0:82:f6:59:91:c4:93:b4:98:d4:cc:98:18:de:b2: 7c:e5:69:69:1c:fe:24:4c:d7:0c:15:8c:bf:66:0b:c5:48:e0: 0e:5e:9d:eb:4e:95:ec:9d:bf:c8:c1:2c:6b:5e:4c:07:e3:f8: cf:05:f4:e1:28:7f:d5:7c:e2:1c:b5:fb:9e:11:fc:de:1c:31: 82:7d:35:4d:0f:a6:9c:a0:9c:20:1f:68:ed:ff:c2:c1:22:ae: 9b:cb:a8:f8:8f:0f:37:d4:2a:7a:41:13:6d:2b:8b:ce:a2:e9: b7:27:62:d5:26:c3:16:90:cf:02:cb:1b:18:2b:be:10:39:4a: a7:fe:ee:81:bd:4d:77:3a:90:d6:9e:7c:5e:7f:79:d6:a2:75: e9:06:22:ca:83:78:90:97:3a:79:fb:1f:14:3e:c2:e2:8f:bb: f8:69:d3:08:c9:91:1b:60:c2:a4:12:ea:c7:43:75:81:0a:54: a2:4d:e5:81:88:58:2e:51:71:ab:7a:c6:93:b6:5c:d6:98:bc: c1:f4:7b:a0 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE8NbNV5TMVkYYGBKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg5NWVlODUtMmExNi00ZTU0LTljNWItYTlhMDU5MDg4 NzdlMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YTU4NTUxMTgtNzE5NS00YjhhLTliMGEtOWQ5OWMwNTUwYzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYIy1XGvmueuM4f0JlAqc0BfefDLuqrXDgVx vm557v/e6HMYe0KhqYK2MbDN1VNpWVM7dXt26HNO73blEpWTWyHkk1ETw/ME/3DA FRQ8p0/m2ReLwtpnnem7inUp3d2sb9jDHHtFGanfQMp5MYmQDdbc8FULr8hYgh1w 6pw6qAx8RzoS9Y4fCVeaXm6knJDtIwVk4TtfJDRvo/F5M2kUjYqBEsNHmQHxhNH8 0ryQDcN4bbdxvwODwJAUXznZDTvFogOjBq9/2+Zmg/zbUS/r/YMdLa+xn+5khE6l Q8l6Wvq8v/d7VCX478ALSXCrnKWKmc9irDDrXTNfUembbbzm7wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFCg/BExlGIzt5GkGmtGazQ8kxDDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ODk1 ZWU4NS0yYTE2LTRlNTQtOWM1Yi1hOWEwNTkwODg3N2UvM2JhYWUwYzQtNjNlOC0z NjQwLWI1NzMtYTkyNzdjOTlkOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzg5NWVlODUtMmExNi00ZTU0LTlj NWItYTlhMDU5MDg4NzdlLzc4OTVlZTg1LTJhMTYtNGU1NC05YzViLWE5YTA1OTA4 ODc3ZS5jcmwwHwYDVR0jBBgwFoAUs6GjrSqK+NRV7x3nqCV+EXmy9SowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83ODk1ZWU4NS0yYTE2LTRlNTQtOWM1Yi1hOWEw NTkwODg3N2UuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADQe40D BADQe44wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAFJQZN77lF7VFRgjJn/Uc+SLR1iqXAkTgkZcKtUXT4dqq qeWQmI1qH9cUdQX8FPEvWSDx7PlWw8BswIL2WZHEk7SY1MyYGN6yfOVpaRz+JEzX DBWMv2YLxUjgDl6d606V7J2/yMEsa15MB+P4zwX04Sh/1XziHLX7nhH83hwxgn01 TQ+mnKCcIB9o7f/CwSKum8uo+I8PN9QqekETbSuLzqLptydi1SbDFpDPAssbGCu+ EDlKp/7ugb1NdzqQ1p58Xn951qJ16QYiyoN4kJc6efsfFD7C4o+7+GnTCMmRG2DC pBLqx0N1gQpUok3lgYhYLlFxq3rGk7Zc1pi8wfR7oA== -----END CERTIFICATE-----Generated at Sat Sep 12 10:15:09 2026 by rpki-client