$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c796bd5-f5b7-3903-b7ea-c1d01686a752.roa File: 8c796bd5-f5b7-3903-b7ea-c1d01686a752.roa (raw, json) Hash identifier: bKCy4nQh6wspL2TUFoOERFpLWrHmwNrO3Rw1g3IXBeY= Subject key identifier: 40:64:4C:F3:31:50:64:9A:3D:43:B1:52:8F:B1:A7:57:27:46:FC:33 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F497D114E47BA2BE22A3C7180 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c796bd5-f5b7-3903-b7ea-c1d01686a752.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 208.68.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:11:4e:47:ba:2b:e2:2a:3c:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bb5595ae-8b01-4876-87e4-eb7163013bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:58:b1:83:30:65:42:31:66:63:76:ec:30:b8: 92:fc:42:ee:08:73:bc:af:21:81:6c:34:5c:99:b2: 89:20:02:7f:4f:50:af:eb:49:c5:8c:59:fd:41:54: a4:4b:d3:91:ba:bd:95:9c:5b:68:33:db:f1:68:c1: 2a:2d:99:82:c0:ac:0e:ca:85:1f:f5:2f:8e:34:53: 45:38:4b:81:c7:9d:42:9c:df:25:f1:89:d9:e6:df: 86:4f:c2:58:00:36:3c:d2:a0:6a:f7:b3:52:61:35: 94:14:25:5c:2c:90:28:72:6b:78:65:e4:7a:c7:fe: ca:9a:33:41:77:86:78:a3:9d:d6:2b:d5:9d:9d:98: ad:9c:fb:33:11:01:0e:3b:a1:b5:cb:4a:7c:54:02: 15:b5:78:27:3b:be:4b:0b:47:6e:a3:6c:ef:0b:e1: f0:f3:5e:d7:c3:91:7a:32:d3:6e:e1:41:28:a6:ff: 49:5a:37:7e:3b:7b:c5:32:07:e6:66:b6:5a:0e:52: a7:e1:3e:b1:ec:5d:b2:82:75:ad:99:93:24:d9:64: 47:70:d7:e0:4a:eb:26:c0:c8:8c:9b:5d:15:0d:16: 7b:0a:63:98:ba:a9:e7:2e:08:40:87:70:47:b5:68: bc:de:6c:73:10:cd:99:20:d0:0a:70:23:96:a6:2a: 01:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:64:4C:F3:31:50:64:9A:3D:43:B1:52:8F:B1:A7:57:27:46:FC:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8c796bd5-f5b7-3903-b7ea-c1d01686a752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:58:e5:bd:d1:9b:af:55:fb:fd:8a:88:80:fa:fe:4e:c8:6a: a6:a3:3b:74:93:36:1e:76:b4:0e:9a:68:95:2c:4a:6f:15:49: 5d:0a:81:50:15:9a:e1:a4:0e:a4:6c:bc:b4:05:a1:fb:c5:c6: 66:63:bb:fd:bc:54:4d:f4:2f:92:eb:a0:90:7c:21:91:6e:90: 70:d4:69:9a:62:03:08:0e:fb:49:8a:a5:98:6b:11:5d:0c:3e: d3:7c:84:db:27:8c:17:ed:dc:69:14:c9:9c:00:46:0a:e9:be: 0c:5c:ef:5e:b8:6f:10:9e:74:8f:fc:5d:96:42:e2:85:1b:70: 23:8f:1d:ca:28:ed:86:d5:90:04:51:e1:2a:b0:15:bf:7c:7f: 33:0a:0d:1d:8f:97:70:1a:23:2f:20:78:fa:be:18:46:81:5a: c2:97:79:6d:60:58:91:69:17:e7:3a:1f:ac:4a:ae:99:62:90: b6:32:5d:4e:23:43:28:22:8a:3c:b1:f9:3a:2c:18:5e:09:1e: 82:f9:b7:99:aa:1a:40:4e:e6:21:a4:b5:57:ff:8f:b5:1f:d4: 3e:62:9b:b9:77:23:e3:04:2a:7b:41:dd:31:fa:b8:42:e6:f7: cb:79:f1:9d:d2:52:24:ca:2b:84:4b:3f:6c:66:70:2e:76:6d: 9a:75:2c:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfRFOR7or4io8cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmI1NTk1YWUtOGIwMS00ODc2LTg3ZTQtZWI3MTYzMDEzYmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFixgzBlQjFmY3bsMLiS/ELuCHO8ryGBbDRc mbKJIAJ/T1Cv60nFjFn9QVSkS9ORur2VnFtoM9vxaMEqLZmCwKwOyoUf9S+ONFNF OEuBx51CnN8l8YnZ5t+GT8JYADY80qBq97NSYTWUFCVcLJAocmt4ZeR6x/7KmjNB d4Z4o53WK9WdnZitnPszEQEOO6G1y0p8VAIVtXgnO75LC0duo2zvC+Hw817Xw5F6 MtNu4UEopv9JWjd+O3vFMgfmZrZaDlKn4T6x7F2ygnWtmZMk2WRHcNfgSusmwMiM m10VDRZ7CmOYuqnnLghAh3BHtWi83mxzEM2ZINAKcCOWpioBFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBkTPMxUGSaPUOxUo+xp1cnRvwzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOGM3OTZiZDUtZjViNy0z OTAzLWI3ZWEtYzFkMDE2ODZhNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ERuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxY5b3Rm69V+/2KiID6/k7IaqajO3STNh52tA6aaJUsSm8VSV0KgVAV muGkDqRsvLQFofvFxmZju/28VE30L5LroJB8IZFukHDUaZpiAwgO+0mKpZhrEV0M PtN8hNsnjBft3GkUyZwARgrpvgxc7164bxCedI/8XZZC4oUbcCOPHcoo7YbVkARR 4SqwFb98fzMKDR2Pl3AaIy8gePq+GEaBWsKXeW1gWJFpF+c6H6xKrplikLYyXU4j Qygiijyx+TosGF4JHoL5t5mqGkBO5iGktVf/j7Uf1D5im7l3I+MEKntB3TH6uELm 98t58Z3SUiTKK4RLP2xmcC52bZp1LIs= -----END CERTIFICATE-----Generated at Fri Sep 25 17:49:05 2026 by rpki-client