$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa File: ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa (raw, json) Hash identifier: 3/HWhUd90YSYfUQuDrZ8ivoEnOWxRyJxOHw1/nUiM7w= Subject key identifier: 68:C7:47:0C:E1:0F:B0:EA:81:48:A2:09:56:FE:2B:4E:9C:9C:FD:D1 Certificate issuer: /CN=e2135eb7-dbed-4351-942d-90483acb1b22 Certificate serial: 010D0C9F4328584EF44CB4B7193E3C63D8610740 Authority key identifier: 2F:4E:F1:A1:A1:22:CC:D4:F6:68:2F:88:E4:78:E3:AE:CF:1D:AB:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 174 IP address blocks: 208.64.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:b4:b7:19:3e:3c:63:d8:61:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2135eb7-dbed-4351-942d-90483acb1b22 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=fa36a263-ed63-4d20-86b8-9cd2c3509790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:6e:e5:0a:e6:75:03:ef:8e:40:0a:dc:7d: 8b:4e:87:c9:d8:36:47:a1:ef:9d:22:c2:ac:23:62: db:bf:15:07:9f:b1:f7:84:f8:e0:6c:92:35:e1:f0: 5f:df:2b:e5:3a:c2:f0:9f:be:7c:c0:10:a6:79:e2: bb:d5:69:42:3d:2e:c6:2f:79:9b:38:88:e1:45:a6: 4e:ea:2b:7d:cf:c8:97:98:71:7e:01:f5:c4:8e:c1: 15:0c:05:65:8e:06:65:bf:21:66:2f:54:0e:5c:71: c0:9a:76:02:d4:95:45:6d:cd:35:bb:7e:0d:1c:a0: 15:92:69:3f:56:cd:e0:73:c2:d2:21:79:b7:30:eb: 0d:ee:75:ab:51:db:60:8e:a6:e9:4c:89:ea:dc:c3: d8:31:df:d4:9f:63:5d:37:0f:e7:68:0b:b7:4c:46: 0d:da:88:a9:cd:fd:55:99:38:64:1c:93:8d:f1:d3: 13:fc:30:ba:d1:8d:60:71:5d:76:a6:ff:8d:33:8a: 27:5e:84:6b:53:7f:0e:e0:8d:e9:dc:da:aa:92:f9: 59:90:a7:ca:c0:e6:55:07:31:d6:09:85:95:6c:66: 54:5c:0d:ca:1c:2c:be:5d:a7:fd:4c:f8:44:3f:3f: e8:f2:21:01:4a:02:59:21:3c:02:86:ae:ba:0c:8e: b9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C7:47:0C:E1:0F:B0:EA:81:48:A2:09:56:FE:2B:4E:9C:9C:FD:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/ca1046b1-3c53-3a2e-8d66-721b06cf9bcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22/e2135eb7-dbed-4351-942d-90483acb1b22.crl X509v3 Authority Key Identifier: keyid:2F:4E:F1:A1:A1:22:CC:D4:F6:68:2F:88:E4:78:E3:AE:CF:1D:AB:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e2135eb7-dbed-4351-942d-90483acb1b22.cer sbgp-ipAddrBlock: critical IPv4: 208.64.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:1a:59:a2:26:be:5a:17:b3:ad:b6:27:c4:11:d6:66:8b:07: 37:21:7c:07:2c:05:0c:b6:c9:5c:de:ab:ef:d9:52:0e:bb:9b: 1d:5c:f3:3b:ae:5a:a3:f3:06:9e:e5:09:a8:09:58:a4:3c:2d: b2:34:83:ad:d8:8b:54:99:ce:63:02:33:21:b1:ae:97:0e:f5: 5a:d2:80:ae:b4:25:98:81:97:54:df:33:b2:a7:95:fc:c8:17: 10:18:d8:d8:23:8d:d7:15:c6:ff:0f:62:26:c4:10:91:33:b2: 1f:1a:f2:7f:40:b3:64:02:91:d3:14:07:8c:fa:79:46:f6:a1: 07:db:01:50:76:52:8b:ab:be:7a:8c:03:7c:b7:66:52:17:d1: 28:f4:54:56:de:93:2d:69:7d:e4:9c:da:70:05:b9:e3:73:b0: 2d:d8:a8:32:59:e9:e8:e1:e0:5f:8b:de:62:b4:dd:04:57:8e: ef:b3:09:da:c4:ff:55:74:ee:b9:16:7f:87:15:9e:9f:43:b2: 31:70:03:91:c5:20:6b:64:7f:a4:d8:19:46:46:cd:c3:e9:e8: 8a:02:f1:be:e5:15:08:27:c7:b5:3e:fa:9e:8c:4f:e9:c5:0c: e0:6c:7e:a0:29:03:99:78:26:b9:a3:03:69:69:f9:ef:f5:60: a8:21:7d:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TLS3GT48Y9hhB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIxMzVlYjctZGJlZC00MzUxLTk0MmQtOTA0ODNhY2Ix YjIyMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk ZmEzNmEyNjMtZWQ2My00ZDIwLTg2YjgtOWNkMmMzNTA5NzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArclu5QrmdQPvjkAK3H2LTofJ2DZHoe+dIsKs I2LbvxUHn7H3hPjgbJI14fBf3yvlOsLwn758wBCmeeK71WlCPS7GL3mbOIjhRaZO 6it9z8iXmHF+AfXEjsEVDAVljgZlvyFmL1QOXHHAmnYC1JVFbc01u34NHKAVkmk/ Vs3gc8LSIXm3MOsN7nWrUdtgjqbpTInq3MPYMd/Un2NdNw/naAu3TEYN2oipzf1V mThkHJON8dMT/DC60Y1gcV12pv+NM4onXoRrU38O4I3p3NqqkvlZkKfKwOZVBzHW CYWVbGZUXA3KHCy+Xaf9TPhEPz/o8iEBSgJZITwChq66DI65+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjHRwzhD7DqgUiiCVb+K06cnP3RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lMjEz NWViNy1kYmVkLTQzNTEtOTQyZC05MDQ4M2FjYjFiMjIvY2ExMDQ2YjEtM2M1My0z YTJlLThkNjYtNzIxYjA2Y2Y5YmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTIxMzVlYjctZGJlZC00MzUxLTk0 MmQtOTA0ODNhY2IxYjIyL2UyMTM1ZWI3LWRiZWQtNDM1MS05NDJkLTkwNDgzYWNi MWIyMi5jcmwwHwYDVR0jBBgwFoAUL07xoaEizNT2aC+I5Hjjrs8dq4MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lMjEzNWViNy1kYmVkLTQzNTEtOTQyZC05MDQ4 M2FjYjFiMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQaWaImvloXs622J8QR1maLBzchfAcsBQy2yVzeq+/ZUg67mx1c8zuu WqPzBp7lCagJWKQ8LbI0g63Yi1SZzmMCMyGxrpcO9VrSgK60JZiBl1TfM7KnlfzI FxAY2NgjjdcVxv8PYibEEJEzsh8a8n9As2QCkdMUB4z6eUb2oQfbAVB2UourvnqM A3y3ZlIX0Sj0VFbeky1pfeSc2nAFueNzsC3YqDJZ6ejh4F+L3mK03QRXju+zCdrE /1V07rkWf4cVnp9DsjFwA5HFIGtkf6TYGUZGzcPp6IoC8b7lFQgnx7U++p6MT+nF DOBsfqApA5l4JrmjA2lp+e/1YKghfeg= -----END CERTIFICATE-----Generated at Tue Aug 25 17:08:57 2026 by rpki-client