$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa File: d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa (raw, json) Hash identifier: U803wq7UaEjuNUWVP1rJN/cnO/KUVdFHTjEwJ+LTbFk= Subject key identifier: 0D:42:F8:7C:15:E2:EB:1F:4F:1F:BD:EE:74:84:82:90:2B:1F:B9:7A Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Certificate serial: 010D0C9F4328584F6F22DA9AB46D418B96C2A070 Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 16509 IP address blocks: 208.71.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:da:9a:b4:6d:41:8b:96:c2:a0:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=747d6f0e-5635-4ca8-a564-86641f6f79e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:4f:56:8f:04:28:7b:34:d0:c2:a2:7d:29: 0f:01:3b:33:15:83:69:e8:3e:15:bd:a7:97:b1:76: 27:11:e8:ff:ac:0a:3c:72:29:5c:56:3f:0a:be:8c: e0:3b:ac:2e:36:2f:55:bb:b0:b3:e2:40:00:05:a3: 50:79:00:0f:a8:48:58:45:6c:64:68:77:d0:62:9b: a3:0c:74:2a:7d:09:3e:20:d4:17:87:44:6a:45:75: 46:d0:1d:c3:f7:5c:c7:30:6f:ff:a6:95:2b:54:94: 98:b5:a6:7c:99:20:cc:ae:4a:32:87:02:ae:b0:59: 5d:20:4f:fa:8d:ad:5c:7d:66:aa:52:b6:8f:d2:56: 9a:d8:cf:ce:a6:0f:e6:41:6c:31:5c:3b:78:03:5c: b8:6d:9a:23:bb:fb:79:72:70:45:56:1b:f3:3e:3a: 42:29:5f:1b:76:3e:6a:0e:05:58:bc:25:99:62:7d: a9:90:e9:f9:18:1f:4e:f0:c7:40:6d:79:84:1d:a4: 52:49:65:42:4a:5d:16:ba:03:77:f1:93:66:68:76: ca:67:7d:d4:c7:cd:ca:1d:b8:7c:37:a4:cd:e5:d4: 2a:13:0d:e2:d0:6a:42:76:27:d8:b5:bc:46:c7:27: 63:e2:bc:f8:47:dd:0d:0a:6d:e1:90:88:61:8f:af: 13:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:42:F8:7C:15:E2:EB:1F:4F:1F:BD:EE:74:84:82:90:2B:1F:B9:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl X509v3 Authority Key Identifier: keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer sbgp-ipAddrBlock: critical IPv4: 208.71.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:23:73:e5:38:6b:00:f4:13:2b:f8:ce:1b:67:af:ef:18:7a: d5:ca:d0:43:11:ea:c6:6c:18:b9:4e:ae:54:18:9f:9c:b8:b9: da:82:22:13:4e:7a:e3:93:27:0b:71:d1:34:d9:2d:10:de:9b: 1e:44:9f:f7:2f:ca:01:42:00:1c:f6:25:4e:c4:58:26:e1:9d: 30:7a:04:0f:68:65:d4:2c:5f:0f:59:85:da:91:e4:49:fc:68: f6:19:a9:c3:c6:58:20:f7:62:2b:9a:30:2d:7b:24:05:8b:73: 3c:c1:75:37:bc:50:65:a8:ad:de:02:83:aa:f4:8c:29:bf:10: 68:37:c7:50:91:c8:3d:b8:bb:ec:f6:34:07:27:13:a6:7d:5b: 70:4a:a7:0e:56:5a:b8:5f:5a:7e:2b:91:b6:4d:40:48:97:36: 39:f2:c9:e7:4d:0c:43:a6:02:e0:df:f7:64:7a:74:e2:3b:32: ea:70:aa:d0:e1:91:bf:f2:d9:48:60:9a:13:d2:e5:71:ae:b0: 2d:38:8e:d1:fd:58:0a:55:fd:c8:c5:b7:d1:be:a9:38:b4:e7: 34:f5:22:8e:23:c7:7b:dc:93:a5:5b:f7:dc:4c:cd:01:c1:2c: 4c:95:8f:97:b5:0b:fd:19:d3:11:12:fd:5d:56:84:86:60:3a: df:ec:63:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vItqatG1Bi5bCoHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYw NTdhMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NzQ3ZDZmMGUtNTYzNS00Y2E4LWE1NjQtODY2NDFmNmY3OWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ5PVo8EKHs00MKifSkPATszFYNp6D4VvaeX sXYnEej/rAo8cilcVj8KvozgO6wuNi9Vu7Cz4kAABaNQeQAPqEhYRWxkaHfQYpuj DHQqfQk+INQXh0RqRXVG0B3D91zHMG//ppUrVJSYtaZ8mSDMrkoyhwKusFldIE/6 ja1cfWaqUraP0laa2M/Opg/mQWwxXDt4A1y4bZoju/t5cnBFVhvzPjpCKV8bdj5q DgVYvCWZYn2pkOn5GB9O8MdAbXmEHaRSSWVCSl0WugN38ZNmaHbKZ33Ux83KHbh8 N6TN5dQqEw3i0GpCdifYtbxGxydj4rz4R90NCm3hkIhhj68TIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1C+HwV4usfTx+97nSEgpArH7l6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZl MzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvZDA1YmNiYWUtOWI2NC0z MGVlLWI2YjUtOTM0NmEzZTJmZDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JmZTMzYTgtNjFiOC00ZTNkLWFj NzUtNmEzY2RlMmYwNTdhL2NiZmUzM2E4LTYxYjgtNGUzZC1hYzc1LTZhM2NkZTJm MDU3YS5jcmwwHwYDVR0jBBgwFoAUBj/6j7Ngvw6CCzIXp8vTb1pEE6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNj ZGUyZjA1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EcXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEjc+U4awD0Eyv4zhtnr+8YetXK0EMR6sZsGLlOrlQYn5y4udqCIhNO euOTJwtx0TTZLRDemx5En/cvygFCABz2JU7EWCbhnTB6BA9oZdQsXw9ZhdqR5En8 aPYZqcPGWCD3YiuaMC17JAWLczzBdTe8UGWord4Cg6r0jCm/EGg3x1CRyD24u+z2 NAcnE6Z9W3BKpw5WWrhfWn4rkbZNQEiXNjnyyedNDEOmAuDf92R6dOI7MupwqtDh kb/y2UhgmhPS5XGusC04jtH9WApV/cjFt9G+qTi05zT1Io4jx3vck6Vb99xMzQHB LEyVj5e1C/0Z0xES/V1WhIZgOt/sY5Q= -----END CERTIFICATE-----Generated at Fri Oct 9 17:52:08 2026 by rpki-client