$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/2084f899-7d01-37c6-a226-f5e6d53fcee9.roa File: 2084f899-7d01-37c6-a226-f5e6d53fcee9.roa (raw, json) Hash identifier: qHXnPQDLIWl2MXMm8MwLfMnIbVx8q/vMqZaqboWpWoY= Subject key identifier: 82:B8:B0:74:AA:D1:AA:5A:64:1F:7E:B6:86:0A:3A:F5:EC:8A:C8:87 Certificate issuer: /CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074 Certificate serial: 010D0C9F4328584F4973F616398873F082B29B00 Authority key identifier: 31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/2084f899-7d01-37c6-a226-f5e6d53fcee9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 208.112.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f6:16:39:88:73:f0:82:b2:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5aa3e867-32f5-4aa6-83fc-39fe312ed7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:55:96:a4:87:40:6c:b2:91:66:83:d9:f7: ad:30:68:6a:e4:93:26:70:74:ed:df:c4:c2:4e:7c: e9:25:a8:bc:1c:e3:dd:76:53:3e:69:52:02:a4:bf: 8c:d8:cc:fd:18:cd:43:56:6a:cf:09:4b:3c:6f:65: 7f:fb:b3:9a:cd:02:3e:9e:59:12:99:79:74:d5:77: e4:73:61:46:d7:b3:4c:1e:0c:8a:95:f3:87:ac:fc: 21:a1:a4:0e:05:e2:10:0e:25:d5:37:47:0c:68:43: 4b:8b:e9:01:32:cf:ff:65:7f:42:ea:21:b5:53:e9: e0:b8:6d:2b:36:b6:00:0e:01:04:d7:b1:a8:25:87: ab:01:23:2d:dd:84:53:71:ac:d8:33:c4:02:8f:ca: c6:80:30:91:73:b9:43:a4:42:06:38:9d:8e:32:47: 2f:be:04:74:fb:98:d4:3e:bd:cf:89:6b:70:87:3f: c6:e3:d5:da:55:eb:8b:4f:c2:cc:7c:c6:ae:9f:4d: ff:75:56:5b:cb:a4:78:31:e9:3c:1a:b4:0b:0c:b4: b0:01:39:04:69:3c:69:1a:fc:f5:e9:e7:72:4b:6a: 1f:09:97:04:c0:26:7d:a0:a4:38:e4:f8:c8:43:bc: 32:bf:0e:53:08:46:40:4f:0e:af:0d:c3:ae:32:77: 18:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B8:B0:74:AA:D1:AA:5A:64:1F:7E:B6:86:0A:3A:F5:EC:8A:C8:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/2084f899-7d01-37c6-a226-f5e6d53fcee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl X509v3 Authority Key Identifier: keyid:31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer sbgp-ipAddrBlock: critical IPv4: 208.112.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:75:e2:47:21:a3:00:ea:84:40:c7:ab:20:df:f3:d5:c6:d5: ad:4b:e9:ec:14:da:11:cf:80:3e:36:56:ca:98:e9:74:35:97: ad:85:9a:4f:12:67:05:58:ff:7e:e4:5b:1a:cd:d2:e4:4c:d9: 81:fb:5a:23:fd:84:d5:8d:f6:47:4e:09:b3:25:ff:d0:eb:95: 8e:7b:78:21:92:ff:a3:78:81:ef:7e:a7:b9:59:eb:df:b6:88: 76:49:6b:f0:53:a8:cd:38:19:97:48:76:0a:bc:be:ee:0d:6f: 41:76:7f:00:43:f1:90:9e:7c:d4:5f:1c:b1:a7:ff:ae:39:80: df:35:ea:0a:45:65:c4:bc:44:a4:d5:a5:f6:83:76:34:f0:4d: db:e3:89:1a:8e:52:72:f4:38:03:8a:68:09:bc:c0:84:1d:96: 1f:75:18:e9:3b:da:84:12:e6:ae:3c:73:ff:32:00:82:84:ca: 37:15:df:67:80:de:e6:45:52:04:2a:e9:15:2d:63:84:74:03: 99:6e:8c:8e:44:a5:e1:e9:33:79:93:b9:9b:57:8d:e6:6a:e2: b0:4f:94:05:e7:c1:a4:6b:9f:f5:ea:3d:7a:8c:93:e5:ae:3d: ae:4d:7a:21:c0:89:84:c2:b5:91:51:f5:c6:57:51:b9:99:95: 8d:63:0e:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/YWOYhz8IKymwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNlZjVjN2MtZjgxZi00YWZlLWE4MzMtNmFkOTA1M2M0 MDc0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWFhM2U4NjctMzJmNS00YWE2LTgzZmMtMzlmZTMxMmVkN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtytVlqSHQGyykWaD2fetMGhq5JMmcHTt38TC TnzpJai8HOPddlM+aVICpL+M2Mz9GM1DVmrPCUs8b2V/+7OazQI+nlkSmXl01Xfk c2FG17NMHgyKlfOHrPwhoaQOBeIQDiXVN0cMaENLi+kBMs//ZX9C6iG1U+nguG0r NrYADgEE17GoJYerASMt3YRTcazYM8QCj8rGgDCRc7lDpEIGOJ2OMkcvvgR0+5jU Pr3PiWtwhz/G49XaVeuLT8LMfMaun03/dVZby6R4Mek8GrQLDLSwATkEaTxpGvz1 6edyS2ofCZcEwCZ9oKQ45PjIQ7wyvw5TCEZATw6vDcOuMncYrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIK4sHSq0apaZB9+toYKOvXsisiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xY2Vm NWM3Yy1mODFmLTRhZmUtYTgzMy02YWQ5MDUzYzQwNzQvMjA4NGY4OTktN2QwMS0z N2M2LWEyMjYtZjVlNmQ1M2ZjZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWNlZjVjN2MtZjgxZi00YWZlLWE4 MzMtNmFkOTA1M2M0MDc0LzFjZWY1YzdjLWY4MWYtNGFmZS1hODMzLTZhZDkwNTNj NDA3NC5jcmwwHwYDVR0jBBgwFoAUMXFPqit2ohWgbOL7dataV3NzPhowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xY2VmNWM3Yy1mODFmLTRhZmUtYTgzMy02YWQ5 MDUzYzQwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACB14kchowDqhEDHqyDf89XG1a1L6ewU2hHPgD42VsqY6XQ1l62Fmk8S ZwVY/37kWxrN0uRM2YH7WiP9hNWN9kdOCbMl/9DrlY57eCGS/6N4ge9+p7lZ69+2 iHZJa/BTqM04GZdIdgq8vu4Nb0F2fwBD8ZCefNRfHLGn/645gN816gpFZcS8RKTV pfaDdjTwTdvjiRqOUnL0OAOKaAm8wIQdlh91GOk72oQS5q48c/8yAIKEyjcV32eA 3uZFUgQq6RUtY4R0A5lujI5EpeHpM3mTuZtXjeZq4rBPlAXnwaRrn/XqPXqMk+Wu Pa5NeiHAiYTCtZFR9cZXUbmZlY1jDog= -----END CERTIFICATE-----Generated at Sun Oct 11 18:13:40 2026 by rpki-client