$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa File: 8a37a60a-eebd-367b-baaf-9445a8a0316f.roa (raw, json) Hash identifier: /2HUNrjb9r+S7HwqoX/Q8nONGV9s53tZDZgGHlihmP0= Subject key identifier: 96:9F:27:44:C4:1D:E5:4D:D4:12:92:33:61:B3:DE:11:A7:51:51:DE Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584F3E47EC03A5DDB051F2815180 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 3561 IP address blocks: 208.132.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:ec:03:a5:dd:b0:51:f2:81:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=36878233-a56c-40ee-9fd8-647091a5a60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:db:5c:13:70:8b:70:2d:97:68:4e:da:ff:ce: 43:13:33:db:b0:9c:d3:1f:06:06:33:83:0c:85:5b: f4:8d:df:57:4c:6e:7c:75:53:20:ec:f1:2b:48:48: be:41:89:94:17:17:a6:d1:9e:f8:f5:ac:ad:a3:64: 4b:e6:49:8f:fa:00:01:8b:82:fb:57:a7:9a:8f:8f: 33:46:c6:09:9f:d0:41:66:93:e0:cc:71:f0:47:c8: 4c:7c:6c:28:e7:ee:9c:88:3b:81:19:1f:90:8b:db: df:ad:07:a6:fb:cf:bc:04:dc:a3:1e:85:d9:27:49: e9:cc:1b:d0:45:55:38:78:db:62:3b:32:29:7f:44: 04:50:68:1b:8a:86:16:30:d6:e3:21:08:43:69:3b: 82:1a:8f:59:86:28:de:94:10:59:d3:62:99:c6:51: 6c:74:79:e6:f6:45:0b:da:4b:bc:4b:71:3f:0e:55: 0c:2b:76:e4:47:76:d6:4f:e3:cf:72:53:b5:58:ca: f9:06:a6:33:31:80:78:8e:ae:aa:09:7f:5a:90:7f: fe:41:70:25:4a:c3:a4:1b:f8:be:79:86:10:5f:d8: a9:0c:60:37:d3:aa:9d:1d:90:f1:7c:68:14:e6:3e: 86:bd:c2:26:ac:04:14:ac:3b:52:3e:79:9e:ca:cd: a3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9F:27:44:C4:1D:E5:4D:D4:12:92:33:61:B3:DE:11:A7:51:51:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8a37a60a-eebd-367b-baaf-9445a8a0316f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.132.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2d:f9:4d:4d:a6:2e:a8:4b:96:ba:53:0e:f4:a4:3e:3a:61: 62:39:55:89:30:3a:41:08:4b:87:4f:68:6d:59:7f:49:c8:63: 98:10:78:34:65:74:ad:f2:6b:79:78:c0:70:74:5b:bb:8b:f7: 13:01:eb:04:6f:9a:ac:f8:12:1c:03:cf:2a:40:37:7d:fa:ca: b0:34:5b:2a:aa:fe:49:43:8e:c6:50:e4:95:86:f4:c4:5a:04: a6:6d:14:59:e7:a5:e7:2e:be:a7:2c:2a:ae:99:d3:f8:a1:be: a5:06:a0:6b:23:ee:78:c1:a5:f7:42:a9:67:3c:79:83:12:6f: 0c:ad:c2:fc:bf:36:e3:22:52:d3:9b:73:01:8a:d7:8d:21:a6: 58:07:98:88:f0:e5:64:0d:78:18:e4:14:be:33:d8:35:fc:43: 86:4c:70:16:94:73:78:57:34:1e:79:c9:ca:cb:a9:13:fb:9d: 7e:ab:f8:70:59:19:bc:df:bd:3f:d2:b6:50:a6:d8:be:c4:34: 35:65:3e:92:c7:3b:88:f7:b0:8b:fd:9c:f8:96:1c:31:92:6c: 55:14:d5:62:40:10:ea:bf:8c:e5:21:be:4c:10:22:e4:9f:44: 17:95:01:c8:97:6e:b5:e4:55:3d:3d:4c:f2:7e:3f:d7:9c:93: f9:92:16:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+wDpd2wUfKBUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MzY4NzgyMzMtYTU2Yy00MGVlLTlmZDgtNjQ3MDkxYTVhNjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9tcE3CLcC2XaE7a/85DEzPbsJzTHwYGM4MM hVv0jd9XTG58dVMg7PErSEi+QYmUFxem0Z749ayto2RL5kmP+gABi4L7V6eaj48z RsYJn9BBZpPgzHHwR8hMfGwo5+6ciDuBGR+Qi9vfrQem+8+8BNyjHoXZJ0npzBvQ RVU4eNtiOzIpf0QEUGgbioYWMNbjIQhDaTuCGo9ZhijelBBZ02KZxlFsdHnm9kUL 2ku8S3E/DlUMK3bkR3bWT+PPclO1WMr5BqYzMYB4jq6qCX9akH/+QXAlSsOkG/i+ eYYQX9ipDGA306qdHZDxfGgU5j6GvcImrAQUrDtSPnmeys2jPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJafJ0TEHeVN1BKSM2Gz3hGnUVHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvOGEzN2E2MGEtZWViZC0z NjdiLWJhYWYtOTQ0NWE4YTAzMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0ISAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABct+U1Npi6oS5a6Uw70pD46YWI5VYkwOkEIS4dPaG1Zf0nIY5gQeDRl dK3ya3l4wHB0W7uL9xMB6wRvmqz4EhwDzypAN336yrA0Wyqq/klDjsZQ5JWG9MRa BKZtFFnnpecuvqcsKq6Z0/ihvqUGoGsj7njBpfdCqWc8eYMSbwytwvy/NuMiUtOb cwGK140hplgHmIjw5WQNeBjkFL4z2DX8Q4ZMcBaUc3hXNB55ycrLqRP7nX6r+HBZ GbzfvT/StlCm2L7ENDVlPpLHO4j3sIv9nPiWHDGSbFUU1WJAEOq/jOUhvkwQIuSf RBeVAciXbrXkVT09TPJ+P9eck/mSFhE= -----END CERTIFICATE-----Generated at Sun Sep 27 03:22:10 2026 by rpki-client