$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3305d876-f28d-36d4-a431-98ba06f7b31e.roa File: 3305d876-f28d-36d4-a431-98ba06f7b31e.roa (raw, json) Hash identifier: mV4nkLQDi18GKmChGq5i6xHZbS/LR3+r/AfxQTItXrY= Subject key identifier: 7E:88:CD:65:95:B0:A5:15:80:6F:16:71:03:CA:FD:31:F7:96:15:50 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584FCCC69567850B94FBA62C99C0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3305d876-f28d-36d4-a431-98ba06f7b31e.roa Signing time: Wed 11 Nov 2026 02:00:12 +0000 ROA not before: Wed 11 Nov 2026 02:00:12 +0000 ROA not after: Tue 09 Feb 2027 02:00:12 +0000 asID: 396982 IP address blocks: 208.81.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cc:c6:95:67:85:0b:94:fb:a6:2c:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Nov 11 02:00:12 2026 GMT Not After : Feb 9 02:00:12 2027 GMT Subject: CN=d7b8311f-d3d2-4797-a3cb-52bad8e95e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:04:ee:8f:4a:1d:7a:1d:d5:51:42:ce:0a:9d: 92:bc:ac:c5:6b:60:53:bf:a1:48:24:47:cd:52:2b: 8e:5b:47:74:11:26:29:73:2d:1e:b3:65:05:0d:51: 52:64:ab:e5:99:d3:67:a4:40:93:ae:f3:12:6f:8c: 31:ff:2c:b8:98:68:00:7d:9d:bd:5b:b1:d2:dc:37: 23:ab:fc:a6:57:14:91:c4:5b:d5:7e:12:de:be:43: 85:f5:89:22:a3:4c:b7:ae:a2:9b:fa:e8:a2:c8:57: 1b:29:9d:a0:8e:da:2f:84:c4:ab:c4:25:69:2a:62: c7:44:30:4f:c1:39:cf:39:98:8e:c6:46:8e:a9:b0: 4e:43:a0:78:f1:ba:e2:6c:8e:3a:a5:b2:1e:6f:23: 5d:60:f0:85:7b:e7:c2:1b:03:7c:ef:1f:ae:3c:2b: 40:6a:d2:58:99:5a:dd:cc:a2:33:86:08:dd:2d:5b: 93:d4:95:52:ab:37:b3:c4:bf:34:b4:e8:38:55:a5: 4c:92:fe:05:fd:4a:e0:8a:e3:73:f7:9e:2b:d8:5f: b9:ff:b4:43:ab:40:c0:b0:e7:22:75:82:47:16:47: a2:a1:d5:48:ab:73:a7:7a:7e:4d:7a:3c:11:6e:ad: 80:54:12:06:ea:6b:3d:96:ad:b5:b6:95:ee:a6:a7: b5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:88:CD:65:95:B0:A5:15:80:6F:16:71:03:CA:FD:31:F7:96:15:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3305d876-f28d-36d4-a431-98ba06f7b31e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.81.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b9:63:2c:01:ea:fd:05:84:ad:ff:57:83:ce:68:8f:93:8e: 53:88:4a:07:41:8b:39:56:b5:8a:fd:08:13:ff:b5:a5:00:88: ab:0d:d3:02:72:8a:de:da:74:a9:3b:f1:c9:94:4b:3b:69:41: 90:b6:01:f9:c0:8e:de:fc:a0:3a:0a:c6:9f:0d:ab:75:e4:e9: b0:40:d5:d8:e6:aa:e4:dd:e1:57:32:dc:13:19:d2:29:d2:85: 22:fa:c2:ea:cb:73:ed:bc:f9:05:79:bb:56:69:8c:68:be:e7: 61:4c:6b:20:83:64:20:92:fe:a4:76:c8:e7:14:4b:0b:1e:5c: e9:db:e7:6e:cc:94:09:e0:16:b1:e9:a2:52:3c:56:5c:ed:a4: b4:23:fb:1c:b3:37:11:bb:8a:93:90:66:cf:9b:16:f1:ad:50: cb:68:f5:88:3c:06:25:56:6f:02:43:aa:4b:0b:7b:a7:bb:69: 32:ef:11:3f:37:e2:35:59:35:e1:72:72:c8:ac:8e:87:a6:7a: c7:0b:2a:73:e1:5d:6c:43:8f:31:1f:fe:ce:b0:1e:fb:71:46: be:ad:10:32:c1:fb:51:d1:36:92:f3:ae:32:43:50:c0:a9:30: dc:e2:63:6a:2f:65:39:90:97:1c:fb:ad:2b:d8:33:82:c1:5a: 7d:b5:08:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/MxpVnhQuU+6YsmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MTExMTAyMDAxMloXDTI3MDIwOTAyMDAxMlowLzEtMCsGA1UEAxMk ZDdiODMxMWYtZDNkMi00Nzk3LWEzY2ItNTJiYWQ4ZTk1ZTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQTuj0odeh3VUULOCp2SvKzFa2BTv6FIJEfN UiuOW0d0ESYpcy0es2UFDVFSZKvlmdNnpECTrvMSb4wx/yy4mGgAfZ29W7HS3Dcj q/ymVxSRxFvVfhLevkOF9Ykio0y3rqKb+uiiyFcbKZ2gjtovhMSrxCVpKmLHRDBP wTnPOZiOxkaOqbBOQ6B48bribI46pbIebyNdYPCFe+fCGwN87x+uPCtAatJYmVrd zKIzhgjdLVuT1JVSqzezxL80tOg4VaVMkv4F/UrgiuNz954r2F+5/7RDq0DAsOci dYJHFkeiodVIq3Onen5NejwRbq2AVBIG6ms9lq21tpXupqe1GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6IzWWVsKUVgG8WcQPK/TH3lhVQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzMwNWQ4NzYtZjI4ZC0z NmQ0LWE0MzEtOThiYTA2ZjdiMzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FG8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu5YywB6v0FhK3/V4POaI+TjlOISgdBizlWtYr9CBP/taUAiKsN0wJy it7adKk78cmUSztpQZC2AfnAjt78oDoKxp8Nq3Xk6bBA1djmquTd4Vcy3BMZ0inS hSL6wurLc+28+QV5u1ZpjGi+52FMayCDZCCS/qR2yOcUSwseXOnb527MlAngFrHp olI8VlztpLQj+xyzNxG7ipOQZs+bFvGtUMto9Yg8BiVWbwJDqksLe6e7aTLvET83 4jVZNeFycsisjoemescLKnPhXWxDjzEf/s6wHvtxRr6tEDLB+1HRNpLzrjJDUMCp MNziY2ovZTmQlxz7rSvYM4LBWn21CHc= -----END CERTIFICATE-----Generated at Sun Nov 15 17:45:07 2026 by rpki-client