$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/689a175c-8139-38d7-8a6f-600b40ae21e3.roa File: 689a175c-8139-38d7-8a6f-600b40ae21e3.roa (raw, json) Hash identifier: YEGa4jLDgxYX/1Sa0k8DEWuOUM3cs+f8de0SdCArXOY= Subject key identifier: F7:C7:EE:AC:B5:88:AE:7E:1D:DC:6E:A9:13:0A:1B:1E:84:FE:38:CD Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584ED001F7A5491415F7003A37E0 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/689a175c-8139-38d7-8a6f-600b40ae21e3.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 8014 IP address blocks: 204.236.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:f7:a5:49:14:15:f7:00:3a:37:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=21332cd4-9a54-4e4e-a9b9-9c54ea40b707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cd:8c:28:35:e5:9f:15:0c:40:7c:71:08:10: 10:40:ef:2d:84:f9:65:3f:39:8c:f2:d0:f1:4b:d2: dd:c4:ed:2f:6c:cc:7c:e3:0b:96:81:18:eb:2e:aa: 24:27:30:ab:77:75:ef:74:3d:67:8e:71:8e:1a:6e: c5:07:24:3d:de:3b:d6:15:98:6a:ca:f0:65:a0:7d: 6d:93:ad:07:ce:c3:dd:98:1a:0a:16:3a:ab:06:4d: 40:d9:58:c8:14:75:6c:5e:2f:83:51:61:fb:56:f7: 20:af:8b:37:b8:01:30:c8:28:54:1a:46:3a:f0:56: 18:22:5b:fa:d8:84:e2:0d:bc:40:6b:da:dc:dd:67: d8:70:05:3e:ae:79:6c:8a:57:f8:4c:cd:15:33:f3: a4:27:3e:c1:19:7a:c2:23:b0:44:e4:1b:07:f5:36: 84:f0:12:8e:28:98:18:ee:bf:f1:06:ba:ab:90:9e: a5:af:f1:6d:38:2a:99:67:15:63:82:ee:05:f0:1b: c0:9a:9c:2c:fe:f2:78:fb:28:cf:a3:d3:c7:41:8a: d7:04:6d:f7:c1:94:16:cf:ce:d2:bb:13:7a:b1:15: 1c:42:1d:d8:93:82:61:dd:e7:77:fa:fc:81:e9:f7: b5:ba:17:82:5b:3a:9f:b4:b4:82:42:bf:70:2f:8a: 12:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C7:EE:AC:B5:88:AE:7E:1D:DC:6E:A9:13:0A:1B:1E:84:FE:38:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/689a175c-8139-38d7-8a6f-600b40ae21e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ec:7b:04:ad:f3:0e:1c:14:1a:fd:67:80:98:8e:98:50:60: fd:de:74:f3:69:46:8c:7b:ad:d5:e1:b8:ff:91:65:83:dd:61: 46:55:86:8a:57:19:86:f5:e7:a7:51:b8:17:b5:52:42:bf:c7: 72:be:0c:f6:6c:9f:de:e3:e6:bb:6e:7b:5c:4c:90:0e:a2:8d: 35:84:9b:b5:ed:25:e2:90:a4:e6:a4:db:52:7b:0d:cc:fa:9d: ac:01:25:2e:ab:08:eb:5c:0a:be:69:f6:8c:81:18:1d:2f:20: 35:17:63:17:e6:e2:5e:fa:5b:c4:f1:17:d6:51:cc:f9:8d:f7: d5:e3:68:bd:c0:59:55:6d:1d:62:f7:47:df:58:7e:24:b3:ec: ec:e3:83:91:06:6b:4a:60:a9:20:32:55:72:24:b4:64:4a:a9: 4b:03:4d:7e:a2:fa:d5:52:a8:17:84:a3:3e:05:f4:43:18:a9: f2:a9:ac:7d:a7:69:6a:20:b7:45:14:d8:ef:7c:ce:42:f1:48: 4e:f8:07:c6:bf:c4:78:35:c7:c4:84:3a:4a:76:e9:e6:57:6f: a4:d7:25:2c:b1:cc:b5:39:f1:04:2a:4c:2e:f9:a3:30:a2:3e: 6e:b5:32:ce:a1:0f:f9:f4:84:2b:68:f5:21:d0:48:7d:4d:1c: a1:b5:e9:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfelSRQV9wA6N+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk MjEzMzJjZDQtOWE1NC00ZTRlLWE5YjktOWM1NGVhNDBiNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps2MKDXlnxUMQHxxCBAQQO8thPllPzmM8tDx S9LdxO0vbMx84wuWgRjrLqokJzCrd3XvdD1njnGOGm7FByQ93jvWFZhqyvBloH1t k60HzsPdmBoKFjqrBk1A2VjIFHVsXi+DUWH7Vvcgr4s3uAEwyChUGkY68FYYIlv6 2ITiDbxAa9rc3WfYcAU+rnlsilf4TM0VM/OkJz7BGXrCI7BE5BsH9TaE8BKOKJgY 7r/xBrqrkJ6lr/FtOCqZZxVjgu4F8BvAmpws/vJ4+yjPo9PHQYrXBG33wZQWz87S uxN6sRUcQh3Yk4Jh3ed3+vyB6fe1uheCWzqftLSCQr9wL4oSoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfH7qy1iK5+HdxuqRMKGx6E/jjNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvNjg5YTE3NWMtODEzOS0z OGQ3LThhNmYtNjAwYjQwYWUyMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvsewSt8w4cFBr9Z4CYjphQYP3edPNpRox7rdXhuP+RZYPdYUZVhopX GYb156dRuBe1UkK/x3K+DPZsn97j5rtue1xMkA6ijTWEm7XtJeKQpOak21J7Dcz6 nawBJS6rCOtcCr5p9oyBGB0vIDUXYxfm4l76W8TxF9ZRzPmN99XjaL3AWVVtHWL3 R99YfiSz7Ozjg5EGa0pgqSAyVXIktGRKqUsDTX6i+tVSqBeEoz4F9EMYqfKprH2n aWogt0UU2O98zkLxSE74B8a/xHg1x8SEOkp26eZXb6TXJSyxzLU58QQqTC75ozCi Pm61Ms6hD/n0hCto9SHQSH1NHKG16Q8= -----END CERTIFICATE-----Generated at Thu Sep 10 19:56:53 2026 by rpki-client