$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa File: 9a864864-8b89-3c24-892f-a08a1af18543.roa (raw, json) Hash identifier: uddNXyRpsSaj4irNx4x7+NAEhw1VmPtp57t+6+vngbc= Subject key identifier: E9:04:79:98:9D:98:BB:0A:55:CB:34:EC:0F:87:0D:42:A3:59:78:CF Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584EA7A029F6DEADA00EC312FC40 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 15169 IP address blocks: 208.68.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:29:f6:de:ad:a0:0e:c3:12:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3491bfb9-3c7e-4d91-bb02-5540d035d0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:11:88:3c:78:ee:e1:de:61:3a:45:c8:f1:dd: 65:20:c7:bb:8b:c5:f6:d5:6e:ea:dd:9d:5d:3c:13: 05:20:af:0a:d9:e9:07:d5:7c:80:c7:39:40:2a:89: 40:1a:71:dd:d8:4a:4f:8c:8a:43:94:a8:f2:9a:f0: 9d:be:be:7e:76:5a:26:12:8e:37:56:28:31:0e:e6: ec:4b:87:8b:6d:fa:71:55:d6:41:57:6d:d4:35:5b: cb:79:6a:41:f7:c8:38:eb:61:d8:98:90:4c:e4:12: e8:72:2b:83:12:26:5d:b2:6c:db:57:00:2f:93:ed: 4e:11:8b:89:bf:b2:b0:dc:94:82:9d:06:96:e5:3b: d7:71:b7:74:a8:65:cc:5f:74:dd:dc:74:7e:04:1a: 62:d4:1e:75:07:64:7e:52:44:1c:64:1f:a8:61:99: 2b:81:02:ea:e8:8a:9e:9d:ec:8c:05:34:3b:59:da: 70:94:1e:4b:26:be:27:16:e0:32:e4:63:7e:79:b1: 31:8a:a6:41:73:e9:26:89:de:e5:5c:23:c5:2b:9d: 40:5d:f2:3f:d3:35:c5:10:42:2a:9e:c6:dc:08:ab: ff:46:64:d7:68:65:d8:9d:6f:31:58:88:2c:40:50: 5d:f9:eb:5d:7b:0d:cb:81:35:3c:06:59:77:a9:91: 1a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:04:79:98:9D:98:BB:0A:55:CB:34:EC:0F:87:0D:42:A3:59:78:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:19:08:64:4b:a7:59:a9:03:90:fc:50:bd:4c:09:d5:95:76: 43:c1:8c:46:e8:2a:26:d3:2c:43:b1:16:74:13:60:fa:4e:64: 27:a0:07:18:b7:33:be:a4:cf:7e:35:66:c2:68:c0:a4:82:bc: d6:1f:89:e8:c9:dd:0f:2e:9b:ba:da:09:f5:0a:0d:1a:34:be: b6:9a:8a:ab:87:c0:6d:fa:04:88:8d:8a:11:ff:14:14:bd:d9: a8:ae:85:f9:a9:b2:bf:99:73:6a:a4:26:25:cf:e8:6c:46:4f: e7:e6:d0:8e:eb:fc:d4:82:96:3b:fd:27:32:f3:3d:10:1e:5d: bc:8a:a0:a9:59:ae:68:02:7b:78:31:6b:3b:1c:c4:32:bb:63: 33:b8:6e:23:80:31:0c:bc:2e:da:00:31:0e:6e:7f:a2:97:df: 72:dd:8e:6a:c4:34:92:c0:fa:d6:6a:19:a2:71:f3:22:79:68: 25:a3:57:31:1a:84:07:7f:8a:7b:b1:55:6d:81:b2:56:8f:84: e1:4d:68:b7:4e:74:4d:05:e1:70:d0:48:ca:3b:66:99:a8:18: 06:33:6f:12:b1:ea:5f:c2:33:ca:da:43:eb:c6:86:f2:13:cb: 53:d3:02:1d:8d:03:48:86:e7:6f:b9:0c:f4:e9:e4:7c:97:cc: 58:47:42:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noCn23q2gDsMS/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzQ5MWJmYjktM2M3ZS00ZDkxLWJiMDItNTU0MGQwMzVkMGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRGIPHju4d5hOkXI8d1lIMe7i8X21W7q3Z1d PBMFIK8K2ekH1XyAxzlAKolAGnHd2EpPjIpDlKjymvCdvr5+dlomEo43VigxDubs S4eLbfpxVdZBV23UNVvLeWpB98g462HYmJBM5BLociuDEiZdsmzbVwAvk+1OEYuJ v7Kw3JSCnQaW5TvXcbd0qGXMX3Td3HR+BBpi1B51B2R+UkQcZB+oYZkrgQLq6Iqe neyMBTQ7WdpwlB5LJr4nFuAy5GN+ebExiqZBc+kmid7lXCPFK51AXfI/0zXFEEIq nsbcCKv/RmTXaGXYnW8xWIgsQFBd+etdew3LgTU8Bll3qZEa6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkEeZidmLsKVcs07A+HDUKjWXjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWE4NjQ4NjQtOGI4OS0z YzI0LTg5MmYtYTA4YTFhZjE4NTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8ZCGRLp1mpA5D8UL1MCdWVdkPBjEboKibTLEOxFnQTYPpOZCegBxi3 M76kz341ZsJowKSCvNYfiejJ3Q8um7raCfUKDRo0vraaiquHwG36BIiNihH/FBS9 2aiuhfmpsr+Zc2qkJiXP6GxGT+fm0I7r/NSCljv9JzLzPRAeXbyKoKlZrmgCe3gx azscxDK7YzO4biOAMQy8LtoAMQ5uf6KX33LdjmrENJLA+tZqGaJx8yJ5aCWjVzEa hAd/inuxVW2BslaPhOFNaLdOdE0F4XDQSMo7ZpmoGAYzbxKx6l/CM8raQ+vGhvIT y1PTAh2NA0iG52+5DPTp5HyXzFhHQvs= -----END CERTIFICATE-----Generated at Fri Aug 7 21:47:26 2026 by rpki-client