$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/dc0a95d6-af35-384c-b09b-f04705928384.roa File: dc0a95d6-af35-384c-b09b-f04705928384.roa (raw, json) Hash identifier: W+m3ilIz5Qc8mYwTjYxT7KnvsS1oLsuHRZaL1CoEYGY= Subject key identifier: 43:66:75:30:F6:04:B7:4B:4F:04:99:A2:13:21:2E:CF:75:7E:39:C2 Certificate issuer: /CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d Certificate serial: 010D0C9F4328584ECD372557602690DDEB050C80 Authority key identifier: 92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/dc0a95d6-af35-384c-b09b-f04705928384.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 1299 IP address blocks: 209.170.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:25:57:60:26:90:dd:eb:05:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cb29b44-8f5c-4462-bb13-d72b4e15e20d Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=8a91efcc-2d32-4a2d-bdbf-949ea14ee467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0a:b6:c7:44:a4:73:f8:fa:f3:50:84:8e:45: 01:f4:27:e9:40:e6:dd:7c:fe:c8:69:01:56:2b:19: 10:f5:60:f6:b9:21:df:bb:de:a9:b3:d2:a4:ce:2d: a0:93:ec:1e:80:13:4d:9f:ef:bd:a5:10:61:f5:90: 4a:ba:04:0b:1c:7f:31:83:24:3d:39:dd:a5:b8:9e: c7:b8:65:c7:7e:7e:2d:fe:18:e4:9c:d3:bc:f7:4a: 04:91:02:bc:6e:bb:1c:d0:73:1b:0f:51:70:d0:32: ae:31:79:87:3a:5e:09:a3:6a:0b:32:fd:52:92:f1: 24:76:60:c4:80:64:92:40:29:9d:13:a3:67:d6:1b: b0:d8:12:0e:d1:c0:95:a6:0d:f7:1c:8d:e8:72:cd: 51:a5:a0:17:07:aa:c8:f1:1d:bc:79:7e:ac:44:52: 86:13:62:eb:d2:5b:c6:ae:ab:9b:f3:77:e1:63:a2: f0:5d:94:9d:04:62:e8:d3:a2:fe:54:d3:c1:50:1b: 98:91:69:dd:b7:5d:b5:9a:e0:9d:69:03:0f:e3:20: 87:ba:c9:77:bb:51:0a:59:11:0e:be:d1:17:3a:1f: 6e:9f:7b:14:25:0d:5e:41:90:08:e7:03:39:d7:62: e1:98:8c:d7:7e:5d:c8:ae:5b:a6:d2:19:a4:53:2d: c4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:66:75:30:F6:04:B7:4B:4F:04:99:A2:13:21:2E:CF:75:7E:39:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/dc0a95d6-af35-384c-b09b-f04705928384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.crl X509v3 Authority Key Identifier: keyid:92:DD:F4:0B:DD:98:98:64:EC:5A:DC:E0:F4:C0:20:1B:B0:64:7B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8cb29b44-8f5c-4462-bb13-d72b4e15e20d.cer sbgp-ipAddrBlock: critical IPv4: 209.170.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e2:b2:dd:6e:0a:05:30:6a:30:fb:1c:d0:ab:f1:6e:a1:b5: 4b:12:ae:08:3b:52:23:34:1e:84:5e:e0:31:a0:d5:c8:f7:40: 72:f3:c2:99:b9:9a:c8:22:71:bc:78:25:cb:a5:1f:34:0c:c1: f9:d1:99:b3:8e:4e:5d:35:2e:7e:34:7f:63:04:68:2c:28:d7: a6:1f:32:75:dc:87:a4:0e:f9:bf:cb:7a:d9:d6:99:ae:8d:1f: f3:96:3f:67:a5:d3:d7:1a:94:39:62:02:a2:01:ec:f4:b7:b6: c6:e5:e2:e3:b2:e4:9b:6f:ad:d4:d3:e7:f6:f3:df:c6:28:27: b6:51:e2:47:c5:c1:8d:6d:36:99:04:8b:86:f3:69:dd:35:f1: be:90:61:7d:78:40:97:39:66:6f:13:2d:9d:17:3a:5e:0d:50: f7:68:6b:ad:6d:f5:0e:bb:8b:f2:a4:9f:b0:00:0a:16:9b:5b: 64:bb:cf:dd:49:13:01:a8:6b:61:69:f7:ec:cf:9a:1a:2f:96: a7:a2:31:a1:e6:f4:8a:98:c2:9e:4a:e5:12:1c:ec:02:7d:33: e5:b9:98:6d:f1:48:74:20:7c:9a:c5:d0:cd:5f:a3:06:16:f0: b5:de:29:85:98:8f:e9:20:df:0d:9f:b3:12:3f:cc:88:c1:da: f2:32:64:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNyVXYCaQ3esFDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNiMjliNDQtOGY1Yy00NDYyLWJiMTMtZDcyYjRlMTVl MjBkMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk OGE5MWVmY2MtMmQzMi00YTJkLWJkYmYtOTQ5ZWExNGVlNDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gq2x0Skc/j681CEjkUB9CfpQObdfP7IaQFW KxkQ9WD2uSHfu96ps9Kkzi2gk+wegBNNn++9pRBh9ZBKugQLHH8xgyQ9Od2luJ7H uGXHfn4t/hjknNO890oEkQK8brsc0HMbD1Fw0DKuMXmHOl4Jo2oLMv1SkvEkdmDE gGSSQCmdE6Nn1huw2BIO0cCVpg33HI3ocs1RpaAXB6rI8R28eX6sRFKGE2Lr0lvG rqub83fhY6LwXZSdBGLo06L+VNPBUBuYkWndt121muCdaQMP4yCHusl3u1EKWREO vtEXOh9un3sUJQ1eQZAI5wM512LhmIzXfl3Irlum0hmkUy3ExQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENmdTD2BLdLTwSZohMhLs91fjnCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84Y2Iy OWI0NC04ZjVjLTQ0NjItYmIxMy1kNzJiNGUxNWUyMGQvZGMwYTk1ZDYtYWYzNS0z ODRjLWIwOWItZjA0NzA1OTI4Mzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGNiMjliNDQtOGY1Yy00NDYyLWJi MTMtZDcyYjRlMTVlMjBkLzhjYjI5YjQ0LThmNWMtNDQ2Mi1iYjEzLWQ3MmI0ZTE1 ZTIwZC5jcmwwHwYDVR0jBBgwFoAUkt30C92YmGTsWtzg9MAgG7Bke3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84Y2IyOWI0NC04ZjVjLTQ0NjItYmIxMy1kNzJi NGUxNWUyMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0apAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzist1uCgUwajD7HNCr8W6htUsSrgg7UiM0HoRe4DGg1cj3QHLzwpm5 msgicbx4JculHzQMwfnRmbOOTl01Ln40f2MEaCwo16YfMnXch6QO+b/LetnWma6N H/OWP2el09calDliAqIB7PS3tsbl4uOy5JtvrdTT5/bz38YoJ7ZR4kfFwY1tNpkE i4bzad018b6QYX14QJc5Zm8TLZ0XOl4NUPdoa61t9Q67i/Kkn7AAChabW2S7z91J EwGoa2Fp9+zPmhovlqeiMaHm9IqYwp5K5RIc7AJ9M+W5mG3xSHQgfJrF0M1fowYW 8LXeKYWYj+kg3w2fsxI/zIjB2vIyZGc= -----END CERTIFICATE-----Generated at Sat Sep 5 03:23:07 2026 by rpki-client