$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3d04025a-ebda-34fb-a988-824b2dfbf80e.roa File: 3d04025a-ebda-34fb-a988-824b2dfbf80e.roa (raw, json) Hash identifier: 6fEB90OLBxHmKSQP8agbj8hKbgp8H5SLFlFHQjZsa1I= Subject key identifier: 1B:03:F2:44:E0:3B:85:FF:67:1E:E2:57:87:00:32:62:21:84:73:78 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584F498A4CD23F8BA501CC4E8300 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3d04025a-ebda-34fb-a988-824b2dfbf80e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3561 IP address blocks: 208.152.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:4c:d2:3f:8b:a5:01:cc:4e:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b4c06eb1-4efb-4122-bc06-77156709710b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:09:3a:46:df:8b:80:e1:e0:84:bd:da:84:5f: e3:6f:c8:b3:c6:5b:3b:ef:bf:70:d2:5a:b9:a2:01: fb:f2:4f:19:84:16:c6:67:4f:c4:76:f7:78:45:3e: d4:b3:af:1e:a5:6c:29:a2:40:19:92:7c:b0:2d:81: 00:38:4e:1c:4a:18:bf:b0:ca:99:fc:b0:bb:ad:6b: d7:a2:3c:fc:56:84:c7:4b:f9:e7:c2:fd:bd:24:d0: 52:09:ba:6a:38:b6:03:a3:e8:11:38:f4:2a:05:c4: 59:fb:29:ee:ae:cd:0a:c9:ad:e1:ad:9c:ff:31:47: 5a:04:e4:a9:08:ef:41:db:24:71:72:37:21:12:bb: 8f:ec:99:59:1c:c0:15:3f:58:fa:c3:a4:f6:ac:0c: 9b:67:20:8d:b5:80:1e:54:d8:1b:58:3f:c1:5f:aa: cf:02:74:7f:33:4d:4a:18:0a:5c:be:df:be:02:99: 07:74:f3:e7:e6:9b:7a:02:11:69:20:c1:e4:25:54: b0:a0:63:4d:83:d2:5c:7b:0e:39:95:fe:8f:9f:8a: e2:ee:64:19:8c:4b:0a:c9:1c:ba:b3:e8:46:e5:04: 5a:d8:76:07:ac:92:50:39:ba:1e:99:d8:5c:77:b5: dd:93:dc:79:1e:9e:3e:3d:de:0b:1c:15:b3:8c:53: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:03:F2:44:E0:3B:85:FF:67:1E:E2:57:87:00:32:62:21:84:73:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/3d04025a-ebda-34fb-a988-824b2dfbf80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.152.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:23:f5:4f:39:91:be:e3:93:15:da:fc:ce:e5:ee:55:fa:7e: 26:a3:02:52:0a:20:6c:ab:50:b8:60:01:c9:a7:b0:bf:e9:bb: b7:b1:d5:c9:0f:b3:6a:54:d9:56:50:d2:5e:71:40:3b:e2:fd: 27:22:fc:99:00:c4:1f:dc:ed:cb:3c:35:bc:04:20:3e:6a:a0: a2:e4:0c:8f:52:e3:bc:c1:b8:f6:23:ed:d8:71:f6:39:4f:8b: 7d:47:77:34:1c:0d:11:d0:e5:8c:44:8a:0e:d2:d6:2d:fd:3e: 19:54:f4:bf:a3:96:95:ad:9c:65:32:0f:0e:f5:87:ad:99:ce: ef:b4:3e:4c:72:62:82:e1:63:c2:6e:e6:c3:d9:49:66:89:bc: e4:14:b3:97:d7:25:04:c5:4d:1c:3f:45:23:24:4e:c8:ce:5b: d9:ef:26:cf:cd:0a:30:cc:48:f5:60:00:ff:3c:e5:79:fb:53: 40:63:a1:5e:54:14:4e:82:ab:2d:27:52:0d:4c:3e:b6:87:2a: b1:75:9a:c7:d4:22:2f:7d:42:73:0c:9e:87:ac:82:b6:56:05: 44:a3:67:29:c7:48:fd:b3:3d:63:05:a7:c9:95:e1:4c:13:a4: 9d:64:77:25:21:32:b8:0d:7f:e6:80:76:6b:2a:cb:a5:59:00: ed:54:6e:8a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9JikzSP4ulAcxOgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjRjMDZlYjEtNGVmYi00MTIyLWJjMDYtNzcxNTY3MDk3MTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAk6Rt+LgOHghL3ahF/jb8izxls7779w0lq5 ogH78k8ZhBbGZ0/Edvd4RT7Us68epWwpokAZknywLYEAOE4cShi/sMqZ/LC7rWvX ojz8VoTHS/nnwv29JNBSCbpqOLYDo+gROPQqBcRZ+ynurs0Kya3hrZz/MUdaBOSp CO9B2yRxcjchEruP7JlZHMAVP1j6w6T2rAybZyCNtYAeVNgbWD/BX6rPAnR/M01K GApcvt++ApkHdPPn5pt6AhFpIMHkJVSwoGNNg9Jcew45lf6Pn4ri7mQZjEsKyRy6 s+hG5QRa2HYHrJJQOboemdhcd7Xdk9x5Hp4+Pd4LHBWzjFP67wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBsD8kTgO4X/Zx7iV4cAMmIhhHN4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvM2QwNDAyNWEtZWJkYS0z NGZiLWE5ODgtODI0YjJkZmJmODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMC0JgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAdiP1TzmRvuOTFdr8zuXuVfp+JqMCUgogbKtQuGAByaewv+m7t7HVyQ+z alTZVlDSXnFAO+L9JyL8mQDEH9ztyzw1vAQgPmqgouQMj1LjvMG49iPt2HH2OU+L fUd3NBwNEdDljESKDtLWLf0+GVT0v6OWla2cZTIPDvWHrZnO77Q+THJiguFjwm7m w9lJZom85BSzl9clBMVNHD9FIyROyM5b2e8mz80KMMxI9WAA/zzleftTQGOhXlQU ToKrLSdSDUw+tocqsXWax9QiL31Ccwyeh6yCtlYFRKNnKcdI/bM9YwWnyZXhTBOk nWR3JSEyuA1/5oB2ayrLpVkA7VRuig== -----END CERTIFICATE-----Generated at Mon Oct 5 14:51:03 2026 by rpki-client