$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/8bc22993-6bac-381b-b9a2-eb39df41ffc0.roa File: 8bc22993-6bac-381b-b9a2-eb39df41ffc0.roa (raw, json) Hash identifier: Jeflin24gj0KyIojikY0S9sbXB95chJ+1iTNB3TXGY8= Subject key identifier: 6F:59:D5:40:30:3D:D2:82:50:52:67:5D:0C:F2:49:33:7C:1A:99:96 Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584ED9C73AE035DBC49BC3E90640 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/8bc22993-6bac-381b-b9a2-eb39df41ffc0.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 6079 IP address blocks: 192.159.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:3a:e0:35:db:c4:9b:c3:e9:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=df036297-d37c-4626-8d13-4e1b22c58f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:18:13:d3:3a:91:9e:ef:44:fb:2a:e5:5e:f6: b7:ce:5a:8d:62:63:04:a2:9b:9f:c8:5a:fe:d2:86: d7:88:6b:77:7e:d4:5e:ea:f6:a6:7d:42:54:83:5c: 76:42:b4:49:f8:8d:85:c7:47:af:8f:d6:44:9a:6f: a9:04:04:6a:6f:b0:23:f1:8b:4d:e0:45:10:42:c5: 3f:c1:55:8d:f3:e5:7e:5c:52:be:51:f1:ef:df:98: bd:47:fb:66:c4:89:6c:11:8a:b6:1a:66:b4:c7:0e: 6d:2a:6d:94:a7:aa:a4:00:a1:e0:a2:32:61:94:7c: d8:69:c2:b8:9c:de:7e:7f:0e:e0:b4:06:e3:71:ab: 10:8f:fc:90:d1:b3:08:da:c2:40:4d:a9:05:2f:71: 40:d6:81:39:44:ad:ff:32:0d:e4:30:f4:aa:58:23: fa:5f:c1:9f:b1:4b:e0:1f:3b:3b:de:f9:07:d4:86: fb:d8:95:c7:35:9b:9d:3e:9f:82:49:b3:28:81:e1: 58:69:77:84:49:f2:8f:0e:a9:b2:3f:fb:19:92:57: 57:b4:77:eb:28:b4:8d:d2:d5:e2:21:29:a5:6b:78: 35:6f:74:3c:48:25:d4:e7:6c:d4:c4:13:d7:db:87: 3c:79:cf:a8:4c:35:72:b1:58:3e:67:99:a4:22:ad: 54:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:59:D5:40:30:3D:D2:82:50:52:67:5D:0C:F2:49:33:7C:1A:99:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/8bc22993-6bac-381b-b9a2-eb39df41ffc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv4: 192.159.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:ac:71:e7:d8:bb:1a:20:0f:eb:4a:47:33:76:1f:0d:ac:9f: 39:6e:ed:8f:fd:a3:51:f1:e5:60:b8:a5:99:27:75:e8:71:06: b2:90:b0:9a:5b:71:55:74:4e:78:a8:42:78:bb:ae:b5:ef:10: aa:dd:fc:62:4f:18:ba:d4:c6:9b:a0:cc:e3:24:2a:5b:65:15: 48:89:dc:d9:2c:28:13:ba:15:69:b4:05:5e:e7:63:2e:21:cd: e7:9b:02:8f:8a:c8:c5:b5:39:39:c9:16:64:b1:91:91:16:f4: fd:58:aa:7d:2f:aa:0b:ea:26:70:22:75:67:46:46:a0:0d:8a: bb:46:03:b1:d1:b5:88:92:9f:19:0e:0d:20:be:94:b8:94:f8: 84:c6:ba:37:bd:4b:70:1a:bc:b7:30:66:d7:ab:00:96:11:f3: a0:bf:5e:06:a4:32:42:d6:d7:c5:8e:94:51:d1:ed:6e:a2:9d: 09:ef:ba:79:fa:6a:ed:cb:85:d9:27:67:af:62:b2:83:5f:10: 57:30:a8:de:2b:b3:f2:e9:a7:6a:25:8d:f4:88:6b:47:10:40: e9:23:e7:ab:9b:3b:3c:2e:31:6c:b1:5c:4f:96:e1:ee:e5:f6: 94:bd:1d:a8:f1:8f:a8:07:8a:90:a7:15:21:38:f2:55:06:25: d5:e0:ae:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ZxzrgNdvEm8PpBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZGYwMzYyOTctZDM3Yy00NjI2LThkMTMtNGUxYjIyYzU4ZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxgT0zqRnu9E+yrlXva3zlqNYmMEopufyFr+ 0obXiGt3ftRe6vamfUJUg1x2QrRJ+I2Fx0evj9ZEmm+pBARqb7Aj8YtN4EUQQsU/ wVWN8+V+XFK+UfHv35i9R/tmxIlsEYq2Gma0xw5tKm2Up6qkAKHgojJhlHzYacK4 nN5+fw7gtAbjcasQj/yQ0bMI2sJATakFL3FA1oE5RK3/Mg3kMPSqWCP6X8GfsUvg Hzs73vkH1Ib72JXHNZudPp+CSbMogeFYaXeESfKPDqmyP/sZkldXtHfrKLSN0tXi ISmla3g1b3Q8SCXU52zUxBPX24c8ec+oTDVysVg+Z5mkIq1UgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9Z1UAwPdKCUFJnXQzySTN8GpmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvOGJjMjI5OTMtNmJhYy0z ODFiLWI5YTItZWIzOWRmNDFmZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ8hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANOscefYuxogD+tKRzN2Hw2snzlu7Y/9o1Hx5WC4pZkndehxBrKQsJpb cVV0TnioQni7rrXvEKrd/GJPGLrUxpugzOMkKltlFUiJ3NksKBO6FWm0BV7nYy4h zeebAo+KyMW1OTnJFmSxkZEW9P1Yqn0vqgvqJnAidWdGRqANirtGA7HRtYiSnxkO DSC+lLiU+ITGuje9S3AavLcwZterAJYR86C/XgakMkLW18WOlFHR7W6inQnvunn6 au3LhdknZ69isoNfEFcwqN4rs/Lpp2oljfSIa0cQQOkj56ubOzwuMWyxXE+W4e7l 9pS9Hajxj6gHipCnFSE48lUGJdXgrvQ= -----END CERTIFICATE-----Generated at Fri Aug 28 18:34:21 2026 by rpki-client