$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa File: 591c3c16-29be-383d-a211-f4243526102e.roa (raw, json) Hash identifier: wmvcpqEjh8OEhK3EEvQC2i5lkMw+MxhnPJ7L1SujzAs= Subject key identifier: 80:5D:BC:88:F2:DC:F0:C4:80:E9:D0:E9:AB:4C:47:83:8D:D4:56:F5 Certificate issuer: /CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Certificate serial: 010D0C9F4328584F698D7801394E7EECBC5E6780 Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 208.80.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:78:01:39:4e:7e:ec:bc:5e:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=af0684e8-4319-4126-b853-bd3896c9b86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:57:d3:1c:98:5c:fe:07:33:9c:5f:21:1b: 3c:ba:ad:4f:f2:b8:1f:fd:70:3f:43:8c:6a:d6:21: e5:1a:96:0e:59:1a:f6:81:01:ca:79:61:b5:68:a5: 8b:5a:2c:22:ac:26:bf:2b:2c:a1:6a:f1:f6:b1:d8: ca:76:34:3a:b6:34:71:ed:3d:60:b6:13:fb:12:92: b9:d1:62:bb:b6:87:59:93:c8:d0:55:6d:92:51:53: e3:6b:3f:36:f9:bd:cb:de:e4:06:59:98:d7:10:da: a0:e9:4e:b7:20:03:fd:2c:7c:9b:0b:7d:dc:82:bd: 5d:07:d3:42:45:89:ac:5b:ef:d2:bb:02:be:91:62: 9c:9f:1d:46:23:f9:78:d3:49:99:4b:cb:d8:1a:b5: 74:3a:c7:bf:23:b3:0f:53:c7:69:49:e1:5f:ef:ad: 62:ac:a7:48:d8:47:1f:99:22:77:7e:ae:03:6e:ba: b4:8e:c0:9e:a9:6a:1d:eb:d8:3a:1e:dd:42:54:e4: 41:2f:93:b5:f0:a5:55:ca:cd:c3:fa:8e:ae:6f:1d: cf:10:ad:db:f3:89:82:73:c6:10:d4:1e:c8:bc:49: 20:6f:7a:04:ba:69:e9:40:74:e3:c9:4b:c8:7e:7a: b8:19:52:21:ae:b0:17:23:83:b7:75:64:a6:44:52: 95:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5D:BC:88:F2:DC:F0:C4:80:E9:D0:E9:AB:4C:47:83:8D:D4:56:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl X509v3 Authority Key Identifier: keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer sbgp-ipAddrBlock: critical IPv4: 208.80.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:e8:71:ce:78:5d:80:e7:86:70:9f:61:0a:2f:69:05:6f:cd: 90:b3:71:bd:2e:04:5b:6b:d3:29:bc:d1:f7:7d:34:93:5a:e8: 50:b3:4e:52:da:d7:30:ef:74:1e:6b:2e:24:2c:37:a5:da:be: 2d:42:ca:d4:b4:55:20:1e:87:59:51:7c:b7:35:cf:7c:9c:dc: 50:35:a1:86:17:f0:c7:07:22:45:c8:9b:a1:84:da:98:28:95: a1:24:42:23:71:ce:62:f5:94:2a:c2:56:3a:b1:2d:bc:29:e8: 93:c9:38:d0:36:19:2b:a8:e8:61:2b:9a:8e:35:83:fa:e5:f2: 6f:22:48:95:82:12:9c:56:e8:18:44:dc:e1:30:94:0e:8d:73: 5e:71:73:1c:54:73:a7:3c:07:dc:32:75:fd:2d:4a:ab:61:08: 59:ab:bf:a9:09:02:d4:7c:22:f5:ce:4f:c9:01:35:91:d9:39: 0b:1c:da:25:4d:26:fa:c7:75:47:7b:d2:0d:71:7d:b9:a9:e1: ba:bb:b1:4c:4e:b0:4c:05:e4:36:35:19:25:ee:73:8f:9e:65: e9:cf:14:41:49:ea:49:70:c6:a0:e8:6c:b8:3c:8a:39:a5:31: 34:bb:c4:39:b6:69:db:d7:72:77:90:3b:16:9d:34:52:7d:1b: 0b:8a:62:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjXgBOU5+7LxeZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgyNWRkYTYtMGRmNy00YzM1LWFmNjUtNGJiNjljZjcx MDUzMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk YWYwNjg0ZTgtNDMxOS00MTI2LWI4NTMtYmQzODk2YzliODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7BX0xyYXP4HM5xfIRs8uq1P8rgf/XA/Q4xq 1iHlGpYOWRr2gQHKeWG1aKWLWiwirCa/KyyhavH2sdjKdjQ6tjRx7T1gthP7EpK5 0WK7todZk8jQVW2SUVPjaz82+b3L3uQGWZjXENqg6U63IAP9LHybC33cgr1dB9NC RYmsW+/SuwK+kWKcnx1GI/l400mZS8vYGrV0Ose/I7MPU8dpSeFf761irKdI2Ecf mSJ3fq4Dbrq0jsCeqWod69g6Ht1CVORBL5O18KVVys3D+o6ubx3PEK3b84mCc8YQ 1B7IvEkgb3oEumnpQHTjyUvIfnq4GVIhrrAXI4O3dWSmRFKVyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBdvIjy3PDEgOnQ6atMR4ON1Fb1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1 ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2OWNmNzEwNTMvNTkxYzNjMTYtMjliZS0z ODNkLWEyMTEtZjQyNDM1MjYxMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTgyNWRkYTYtMGRmNy00YzM1LWFm NjUtNGJiNjljZjcxMDUzLzk4MjVkZGE2LTBkZjctNGMzNS1hZjY1LTRiYjY5Y2Y3 MTA1My5jcmwwHwYDVR0jBBgwFoAUD1Z9CXLtC8kPPAwfMwEEOGva3FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ODI1ZGRhNi0wZGY3LTRjMzUtYWY2NS00YmI2 OWNmNzEwNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FDKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7occ54XYDnhnCfYQovaQVvzZCzcb0uBFtr0ym80fd9NJNa6FCzTlLa 1zDvdB5rLiQsN6Xavi1CytS0VSAeh1lRfLc1z3yc3FA1oYYX8McHIkXIm6GE2pgo laEkQiNxzmL1lCrCVjqxLbwp6JPJONA2GSuo6GErmo41g/rl8m8iSJWCEpxW6BhE 3OEwlA6Nc15xcxxUc6c8B9wydf0tSqthCFmrv6kJAtR8IvXOT8kBNZHZOQsc2iVN JvrHdUd70g1xfbmp4bq7sUxOsEwF5DY1GSXuc4+eZenPFEFJ6klwxqDobLg8ijml MTS7xDm2advXcneQOxadNFJ9GwuKYhc= -----END CERTIFICATE-----Generated at Sun Oct 11 11:16:56 2026 by rpki-client