$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa File: 0affa3ca-5e84-377e-8612-b0e2003b6f16.roa (raw, json) Hash identifier: I4ZquJ2WX4zngj/bquuCzLiqJI6/lDh8Wk9T4YtMMyo= Subject key identifier: 64:24:96:F3:14:12:F0:B6:E6:88:82:09:09:3C:9B:39:5B:6F:40:25 Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Certificate serial: 010D0C9F4328584F698D7B47D8FF4B14E6116F00 Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 208.79.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:7b:47:d8:ff:4b:14:e6:11:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=fda4bde9-ea97-49cf-b4d1-25b80d897f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e8:b0:af:0c:12:b0:23:e6:f5:ae:8f:c9:aa: 12:fc:a1:ac:74:07:63:e4:d5:62:39:5e:e6:09:c1: 7a:64:db:c0:b7:72:8e:ef:29:9d:be:92:7b:8e:6e: e6:e8:f8:de:76:71:a7:e2:3d:d6:27:54:67:fa:65: 45:48:71:4c:5c:e6:21:10:36:6b:55:75:09:e5:50: 95:2a:12:93:94:fe:0f:b1:45:c5:52:4d:51:5f:9d: df:09:d3:a4:ba:02:12:ac:88:ef:30:01:59:c4:75: 41:79:5d:9d:40:07:44:72:cc:55:0d:c7:c4:1e:f0: 9b:5d:69:c4:4d:f9:4a:22:d0:45:64:49:92:8c:59: b9:b2:14:44:91:e2:a2:ce:f3:8a:d1:a8:75:da:19: 65:c2:ae:67:a0:f2:fd:39:98:ef:14:34:c5:d2:24: 53:78:c5:a1:59:b7:03:57:4e:80:46:17:83:2a:59: 83:de:db:f0:7f:13:d8:f9:27:c7:1c:5f:0b:5d:05: ca:0b:30:4e:4b:2f:d8:67:4b:c8:97:09:fc:ec:b2: 45:d6:36:4b:0c:03:d8:59:54:6b:3c:0f:17:03:9e: 95:88:83:94:ee:c3:a3:d5:11:fb:b0:be:fa:54:30: 98:f1:d6:63:24:f6:4e:43:f0:db:6e:db:55:c9:4a: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:24:96:F3:14:12:F0:B6:E6:88:82:09:09:3C:9B:39:5B:6F:40:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl X509v3 Authority Key Identifier: keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer sbgp-ipAddrBlock: critical IPv4: 208.79.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5d:a0:75:b5:d5:d0:98:4a:48:18:7c:18:91:fc:88:a8:b9: c5:08:ce:d7:60:2d:7d:cc:a3:7e:de:4a:2d:c0:8e:f6:36:79: 09:06:0c:6c:3c:e6:48:07:b7:01:97:2d:62:ec:4f:1a:4f:75: 88:fe:f6:ec:99:f5:9a:3c:92:ae:7b:7f:66:3e:40:85:35:f5: e3:c0:8a:64:6d:43:f5:84:d6:03:5b:91:82:42:af:3c:5a:ee: 25:5b:5f:e8:8a:49:c2:a9:61:04:9b:e0:03:8a:c1:01:ff:f6: 79:56:30:f3:64:55:fa:42:0a:88:74:57:02:b0:2c:cd:a5:84: 4c:05:25:e9:db:1d:55:4e:63:8b:40:85:8c:43:ba:12:5a:b9: 46:e3:55:80:d7:7a:c3:38:75:5a:ea:09:3b:fe:65:46:08:56: e9:87:7b:b2:0b:65:5e:ac:8b:74:14:b9:bb:32:e8:c9:da:90: 35:2d:8d:95:a0:da:2e:f1:c0:a4:53:9d:48:04:48:40:4e:bd: 7a:f9:da:88:c0:12:f1:3e:e4:4c:61:b1:51:41:da:09:19:29: ee:36:f2:a8:d1:7f:a2:ac:3f:aa:a8:71:47:99:1d:63:69:14: 02:3c:c7:53:c7:2f:33:60:a1:0e:04:1f:c8:c3:35:ff:14:af: 6c:77:0e:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXtH2P9LFOYRbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzNGRhNDItNzUzZS00YjlhLWFiNzYtMzdmZDZjZmQ3 NjVkMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZmRhNGJkZTktZWE5Ny00OWNmLWI0ZDEtMjViODBkODk3ZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuiwrwwSsCPm9a6PyaoS/KGsdAdj5NViOV7m CcF6ZNvAt3KO7ymdvpJ7jm7m6PjednGn4j3WJ1Rn+mVFSHFMXOYhEDZrVXUJ5VCV KhKTlP4PsUXFUk1RX53fCdOkugISrIjvMAFZxHVBeV2dQAdEcsxVDcfEHvCbXWnE TflKItBFZEmSjFm5shREkeKizvOK0ah12hllwq5noPL9OZjvFDTF0iRTeMWhWbcD V06ARheDKlmD3tvwfxPY+SfHHF8LXQXKCzBOSy/YZ0vIlwn87LJF1jZLDAPYWVRr PA8XA56ViIOU7sOj1RH7sL76VDCY8dZjJPZOQ/DbbttVyUqLgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQklvMUEvC25oiCCQk8mzlbb0AlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0 ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2ZkNmNmZDc2NWQvMGFmZmEzY2EtNWU4NC0z NzdlLTg2MTItYjBlMjAwM2I2ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2UzNGRhNDItNzUzZS00YjlhLWFi NzYtMzdmZDZjZmQ3NjVkLzNlMzRkYTQyLTc1M2UtNGI5YS1hYjc2LTM3ZmQ2Y2Zk NzY1ZC5jcmwwHwYDVR0jBBgwFoAUyczkBMk8UbylYUVW4zKa/Jhk+IwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2Zk NmNmZDc2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRdoHW11dCYSkgYfBiR/IioucUIztdgLX3Mo37eSi3AjvY2eQkGDGw8 5kgHtwGXLWLsTxpPdYj+9uyZ9Zo8kq57f2Y+QIU19ePAimRtQ/WE1gNbkYJCrzxa 7iVbX+iKScKpYQSb4AOKwQH/9nlWMPNkVfpCCoh0VwKwLM2lhEwFJenbHVVOY4tA hYxDuhJauUbjVYDXesM4dVrqCTv+ZUYIVumHe7ILZV6si3QUubsy6MnakDUtjZWg 2i7xwKRTnUgESEBOvXr52ojAEvE+5ExhsVFB2gkZKe428qjRf6KsP6qocUeZHWNp FAI8x1PHLzNgoQ4EH8jDNf8Ur2x3Dlc= -----END CERTIFICATE-----Generated at Tue Oct 6 18:11:40 2026 by rpki-client