$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa File: 38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa (raw, json) Hash identifier: 1IzXoI3ch+nbeLLFGgI4Vplw8rgbaSxquAhwPF//Tuk= Subject key identifier: 82:1F:D4:AC:A9:82:49:05:EA:EF:47:58:7D:7B:AC:03:BA:E5:6F:9E Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584EA17A83116B086246DC689EC0 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa Signing time: Sun 26 Jul 2026 21:00:11 +0000 ROA not before: Sun 26 Jul 2026 21:00:11 +0000 ROA not after: Sat 24 Oct 2026 21:00:11 +0000 asID: 21782 IP address blocks: 67.209.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a1:7a:83:11:6b:08:62:46:dc:68:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Jul 26 21:00:11 2026 GMT Not After : Oct 24 21:00:11 2026 GMT Subject: CN=732a070e-1b55-410b-b35b-91638d33b71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:16:75:0c:82:93:42:a0:90:b3:cd:18:97:47: f6:e1:98:54:93:56:b4:a9:47:fd:8b:bb:42:4c:ca: c2:34:45:bf:7b:cc:88:7d:ce:48:ca:29:c0:e1:b0: 28:df:70:cc:1b:c8:b6:f6:0d:56:9b:ac:93:57:d5: 51:18:ae:54:9c:ad:c0:e4:22:d5:c0:ac:b2:30:81: 5d:cf:2d:c9:81:42:12:24:90:36:8a:d1:6f:74:d8: 37:ae:78:13:09:65:b6:f6:7e:eb:15:b5:06:b5:38: cc:16:72:08:2f:fd:51:2e:59:f4:ef:9c:b6:ad:de: 57:a2:52:10:e1:00:eb:a3:98:d2:2a:15:d0:57:b8: ba:39:ab:9c:21:9d:a6:7c:b8:f2:72:ad:e7:f4:9a: bb:df:0b:8c:bb:ee:4d:ee:52:f9:0d:2b:9d:f0:44: 28:fe:2b:13:ea:26:3a:ed:31:64:01:f0:99:c7:38: f3:6d:37:61:ae:18:4e:c4:47:5b:86:5a:5c:88:d2: 64:d8:65:b2:2e:d2:de:95:e3:db:08:c9:89:da:69: 0e:d1:de:fa:2b:6f:0a:eb:83:36:bc:b2:84:44:cd: ae:73:75:d4:8e:bf:3a:1b:b7:f5:4c:7f:a8:7f:23: 72:06:a8:9c:6f:4b:75:12:6c:f4:0f:c6:78:62:2b: c9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1F:D4:AC:A9:82:49:05:EA:EF:47:58:7D:7B:AC:03:BA:E5:6F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/38034f38-ee51-39ae-8b7b-9c9ac94d3590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 67.209.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:a6:7b:c4:84:9a:67:ba:9c:29:56:b4:22:a3:0b:06:ee:52: f2:63:e7:35:3b:cd:96:6e:5d:34:ab:7a:b4:8a:66:92:ae:b9: a6:2f:75:6a:ac:59:4b:b8:f6:59:e6:7b:bf:95:85:67:fe:63: b9:71:bc:ed:12:f9:61:f3:ee:34:9b:03:14:be:d2:89:6c:d0: fe:6f:dc:2e:82:24:7f:42:ff:33:d0:01:95:8b:68:16:1a:c9: 66:bd:65:08:7a:b2:74:58:db:b8:73:36:7c:9c:fc:f0:7e:4a: da:f5:c1:e0:fa:8c:58:ab:16:43:45:bc:78:53:d9:00:f1:e2: 53:9a:fe:5d:33:fb:6f:40:51:60:02:cb:d5:16:3d:15:05:29: 2d:7c:dc:77:20:96:aa:08:ed:de:4d:e9:69:c0:69:ee:a2:b3: 49:4f:c0:fc:51:c8:aa:96:e6:6f:15:6d:2f:6b:a6:3d:53:1a: 37:a8:b6:f9:cf:37:e2:06:af:f5:7e:40:97:89:a2:d0:04:cc: 11:4f:dd:73:b7:0d:1e:a4:96:c4:96:a2:fd:80:f1:d6:82:19: 09:35:34:2e:47:1c:38:6b:07:7c:a6:99:99:b1:e9:43:78:96: 66:43:23:de:d2:9b:ff:c2:c0:d2:e6:8d:42:a2:35:13:23:8f: 6a:82:99:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heoMRawhiRtxonsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk NzMyYTA3MGUtMWI1NS00MTBiLWIzNWItOTE2MzhkMzNiNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBZ1DIKTQqCQs80Yl0f24ZhUk1a0qUf9i7tC TMrCNEW/e8yIfc5IyinA4bAo33DMG8i29g1Wm6yTV9VRGK5UnK3A5CLVwKyyMIFd zy3JgUISJJA2itFvdNg3rngTCWW29n7rFbUGtTjMFnIIL/1RLln075y2rd5XolIQ 4QDro5jSKhXQV7i6OaucIZ2mfLjycq3n9Jq73wuMu+5N7lL5DSud8EQo/isT6iY6 7TFkAfCZxzjzbTdhrhhOxEdbhlpciNJk2GWyLtLelePbCMmJ2mkO0d76K28K64M2 vLKERM2uc3XUjr86G7f1TH+ofyNyBqicb0t1Emz0D8Z4YivJzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIf1KypgkkF6u9HWH17rAO65W+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvMzgwMzRmMzgtZWU1MS0z OWFlLThiN2ItOWM5YWM5NGQzNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ9HQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJame8SEmme6nClWtCKjCwbuUvJj5zU7zZZuXTSrerSKZpKuuaYvdWqs WUu49lnme7+VhWf+Y7lxvO0S+WHz7jSbAxS+0ols0P5v3C6CJH9C/zPQAZWLaBYa yWa9ZQh6snRY27hzNnyc/PB+Str1weD6jFirFkNFvHhT2QDx4lOa/l0z+29AUWAC y9UWPRUFKS183HcglqoI7d5N6WnAae6is0lPwPxRyKqW5m8VbS9rpj1TGjeotvnP N+IGr/V+QJeJotAEzBFP3XO3DR6klsSWov2A8daCGQk1NC5HHDhrB3ymmZmx6UN4 lmZDI97Sm//CwNLmjUKiNRMjj2qCmcw= -----END CERTIFICATE-----Generated at Tue Aug 25 10:13:04 2026 by rpki-client