$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/94a1cd2a-851c-3915-a473-89bb45dc08f4.roa File: 94a1cd2a-851c-3915-a473-89bb45dc08f4.roa (raw, json) Hash identifier: cdF2DD5iCzx6p4fzCYQw/Dimw+Z/vHzIlFHgCbSkpAo= Subject key identifier: 06:6C:5B:E8:63:22:18:64:D9:01:1B:D1:8D:09:BA:5A:14:6F:DD:41 Certificate issuer: /CN=6cc45f23-c458-4442-ae7b-a87738f24fe8 Certificate serial: 010D0C9F4328584F6D85D44B78275DEE864DBF80 Authority key identifier: E0:9C:DA:DF:CF:B9:44:F0:7E:83:3B:BD:B3:68:C8:CC:7B:2B:64:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/94a1cd2a-851c-3915-a473-89bb45dc08f4.roa Signing time: Wed 07 Oct 2026 23:08:13 +0000 ROA not before: Wed 07 Oct 2026 23:08:13 +0000 ROA not after: Wed 06 Jan 2027 00:08:13 +0000 asID: 40511 IP address blocks: 208.77.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:85:d4:4b:78:27:5d:ee:86:4d:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc45f23-c458-4442-ae7b-a87738f24fe8 Validity Not Before: Oct 7 23:08:13 2026 GMT Not After : Jan 6 00:08:13 2027 GMT Subject: CN=321ff4de-ded3-4582-baa7-53a1475ce5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4c:1c:e3:1d:3b:39:02:4b:df:70:21:d7:95: 72:5a:a9:26:ac:2b:dd:be:23:25:19:85:d2:22:35: bb:9a:42:55:dc:b6:d1:97:1c:31:19:99:c6:ae:13: 1b:74:29:2b:f6:55:2f:7d:42:b7:74:2a:19:a9:9c: b6:d3:4c:0d:7d:c5:c4:22:f5:1f:fb:08:11:d5:d5: e3:7b:e6:a4:52:fe:5c:b8:99:54:f2:da:7e:eb:35: c5:38:02:00:ce:64:49:b2:8f:14:14:c8:f6:3c:af: 77:64:c3:2e:b9:1a:2b:ed:be:d8:73:33:1c:2f:3a: bf:ae:a5:fd:d6:f9:7e:df:df:cf:17:27:a3:e9:27: c6:91:10:64:97:81:0e:21:79:40:aa:19:65:62:49: 65:0f:1b:56:85:22:07:22:e8:b0:f8:bc:19:8f:0f: a5:62:56:04:cc:bd:4f:0f:7c:58:8a:ac:36:42:ba: a4:c2:85:18:e9:13:15:fc:21:f9:af:0f:e5:39:8e: 85:fd:6e:3e:c8:cd:c5:7f:ec:0c:62:ab:35:69:49: ca:8e:1d:e2:f8:7b:e5:0c:bf:0b:d4:0e:7a:68:ba: 4e:5a:e1:45:fc:9b:35:0a:65:d3:2a:da:fc:cf:d8: 2e:fb:6f:34:31:80:a1:42:8a:91:64:cd:2b:bf:67: a4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6C:5B:E8:63:22:18:64:D9:01:1B:D1:8D:09:BA:5A:14:6F:DD:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/94a1cd2a-851c-3915-a473-89bb45dc08f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.crl X509v3 Authority Key Identifier: keyid:E0:9C:DA:DF:CF:B9:44:F0:7E:83:3B:BD:B3:68:C8:CC:7B:2B:64:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer sbgp-ipAddrBlock: critical IPv4: 208.77.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b2:98:d7:a3:ba:c0:8d:da:91:5f:bc:77:2f:07:10:11:2a: 70:63:a5:ad:45:88:e1:8e:20:89:3e:5c:f1:d5:45:e3:ed:1a: 0c:29:72:d0:f9:20:01:9e:64:5c:c2:84:f2:bd:24:43:ed:1f: e0:fc:3c:7c:69:ea:9c:cb:9a:e3:c9:92:9a:10:f5:1b:29:ef: 90:82:89:0a:dc:40:93:09:3e:20:38:ee:5c:a4:21:98:30:64: 2d:73:7d:14:2d:c8:87:b1:c5:a1:15:f7:b3:82:10:ec:c9:fc: 2c:12:e1:65:bb:06:3a:97:59:45:c2:c9:4b:15:fe:98:a2:dd: 5a:e2:90:66:eb:23:60:c0:e9:5b:82:16:3b:24:e4:43:b0:e7: 80:21:59:55:02:fb:31:7a:99:e5:f9:61:d2:4d:04:af:26:22: d2:68:8b:1e:2d:f4:20:9d:5b:e4:ff:7d:0b:bf:1b:04:b1:1b: 71:74:ab:53:7e:43:24:cd:d5:66:ac:49:90:5b:75:2b:6a:7e: 41:32:28:12:03:24:4c:c5:cf:6b:53:f8:55:09:51:41:30:05: 5b:51:74:35:c1:73:07:a8:04:4d:0c:c8:1a:24:5a:87:fb:35: a9:de:70:a6:d8:73:70:68:41:ff:d2:02:89:be:e2:2d:7a:cc: fd:9c:38:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9thdRLeCdd7oZNv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNjNDVmMjMtYzQ1OC00NDQyLWFlN2ItYTg3NzM4ZjI0 ZmU4MB4XDTI2MTAwNzIzMDgxM1oXDTI3MDEwNjAwMDgxM1owLzEtMCsGA1UEAxMk MzIxZmY0ZGUtZGVkMy00NTgyLWJhYTctNTNhMTQ3NWNlNWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkwc4x07OQJL33Ah15VyWqkmrCvdviMlGYXS IjW7mkJV3LbRlxwxGZnGrhMbdCkr9lUvfUK3dCoZqZy200wNfcXEIvUf+wgR1dXj e+akUv5cuJlU8tp+6zXFOAIAzmRJso8UFMj2PK93ZMMuuRor7b7YczMcLzq/rqX9 1vl+39/PFyej6SfGkRBkl4EOIXlAqhllYkllDxtWhSIHIuiw+LwZjw+lYlYEzL1P D3xYiqw2QrqkwoUY6RMV/CH5rw/lOY6F/W4+yM3Ff+wMYqs1aUnKjh3i+HvlDL8L 1A56aLpOWuFF/Js1CmXTKtr8z9gu+280MYChQoqRZM0rv2ek/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZsW+hjIhhk2QEb0Y0JuloUb91BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82Y2M0 NWYyMy1jNDU4LTQ0NDItYWU3Yi1hODc3MzhmMjRmZTgvOTRhMWNkMmEtODUxYy0z OTE1LWE0NzMtODliYjQ1ZGMwOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNmNjNDVmMjMtYzQ1OC00NDQyLWFl N2ItYTg3NzM4ZjI0ZmU4LzZjYzQ1ZjIzLWM0NTgtNDQ0Mi1hZTdiLWE4NzczOGYy NGZlOC5jcmwwHwYDVR0jBBgwFoAU4Jza38+5RPB+gzu9s2jIzHsrZMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82Y2M0NWYyMy1jNDU4LTQ0NDItYWU3Yi1hODc3 MzhmMjRmZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0E3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKymNejusCN2pFfvHcvBxARKnBjpa1FiOGOIIk+XPHVRePtGgwpctD5 IAGeZFzChPK9JEPtH+D8PHxp6pzLmuPJkpoQ9Rsp75CCiQrcQJMJPiA47lykIZgw ZC1zfRQtyIexxaEV97OCEOzJ/CwS4WW7BjqXWUXCyUsV/pii3VrikGbrI2DA6VuC Fjsk5EOw54AhWVUC+zF6meX5YdJNBK8mItJoix4t9CCdW+T/fQu/GwSxG3F0q1N+ QyTN1WasSZBbdStqfkEyKBIDJEzFz2tT+FUJUUEwBVtRdDXBcweoBE0MyBokWof7 NanecKbYc3BoQf/SAom+4i16zP2cOFg= -----END CERTIFICATE-----Generated at Sun Oct 11 18:56:03 2026 by rpki-client