$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/4a5d91ce-905d-3735-89f3-e4746eb21770.roa File: 4a5d91ce-905d-3735-89f3-e4746eb21770.roa (raw, json) Hash identifier: M8t5PwKgAXICS9XxK910GFilRm2Bdclvn9XiAD5RBiQ= Subject key identifier: 4A:A7:7C:F4:A1:BC:72:9B:B5:B9:DD:64:E6:2B:E4:DC:E4:29:17:1C Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f Certificate serial: 010D0C9F4328584EE4235EC75B15F8E86DFF2500 Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/4a5d91ce-905d-3735-89f3-e4746eb21770.roa Signing time: Wed 19 Aug 2026 18:04:05 +0000 ROA not before: Wed 19 Aug 2026 18:04:05 +0000 ROA not after: Mon 30 Jul 2029 04:00:00 +0000 asID: 30148 IP address blocks: 208.109.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5e:c7:5b:15:f8:e8:6d:ff:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f Validity Not Before: Aug 19 18:04:05 2026 GMT Not After : Jul 30 04:00:00 2029 GMT Subject: CN=1d6ce971-dd8f-437c-82dd-4e5e353ac239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d8:21:78:6b:12:6c:5c:5e:be:2e:45:51:46: b2:c9:06:a3:96:64:9a:fa:e1:29:a3:ca:f6:25:8d: 82:f0:43:5c:c4:5c:0f:8b:79:e5:e5:77:28:33:60: 15:75:0d:7f:4a:dc:e6:9c:d5:2e:16:22:7b:18:0b: 56:41:c5:e7:29:8c:e0:63:26:a6:50:2b:80:15:77: 40:80:56:2f:71:fe:43:16:31:7b:f7:b0:4b:b5:21: 00:46:11:59:df:f6:ab:aa:0c:ce:46:42:e1:fd:c3: df:40:7b:7e:47:73:3b:dd:39:a2:6f:b5:96:84:ff: 13:b1:d6:48:49:c9:cf:35:ee:52:f0:55:14:f1:84: 20:87:cc:4f:69:cd:bf:3b:68:c3:ce:09:9c:ea:13: 0b:ed:a8:fa:84:90:7a:b9:9d:68:a4:89:fe:e0:8f: d1:8d:f3:56:d1:26:db:c7:01:e6:92:d1:26:bc:ef: aa:e9:ad:4b:7c:cf:80:41:78:b6:e6:95:5f:b8:5b: 5b:e0:2f:ea:b2:2e:b2:fe:dd:b3:1b:99:be:ea:4e: c5:51:71:bd:ae:69:3d:bc:8b:35:14:14:22:37:1e: 7e:a5:25:b7:8a:3d:6a:91:e2:7f:57:cb:7a:b3:8a: 7f:40:25:d9:77:5c:6e:8c:a5:77:b6:80:52:ea:75: 4d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A7:7C:F4:A1:BC:72:9B:B5:B9:DD:64:E6:2B:E4:DC:E4:29:17:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/4a5d91ce-905d-3735-89f3-e4746eb21770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl X509v3 Authority Key Identifier: keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer sbgp-ipAddrBlock: critical IPv4: 208.109.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:9e:fc:e0:80:02:64:52:5e:53:a2:57:c9:a4:ff:21:c6:07: a8:2c:c2:2a:19:73:f7:6a:d0:ae:c0:0a:59:55:5b:22:65:af: b5:5d:5a:91:5a:e4:79:4c:4f:de:f3:e6:49:5e:e6:68:0b:c1: 9a:3b:94:1e:92:75:71:31:93:06:c0:06:ee:17:46:05:95:3a: 71:b6:54:a5:a4:97:15:0b:03:88:4a:37:50:e9:a0:39:30:c2: 86:10:7f:2a:24:42:d3:03:e0:9a:97:b9:8e:a5:1e:97:ed:f5: a3:26:01:73:5d:4d:99:15:0c:c9:1c:0c:6d:8c:2b:8c:96:f8: 11:34:3d:52:a4:2d:0b:be:a1:27:ec:a3:c2:72:68:08:dd:47: fa:d4:87:e1:ca:ab:75:b6:df:bf:14:89:d6:b2:1a:02:4a:48: 96:45:77:1f:10:fa:a7:01:cc:a1:15:f8:8c:1d:82:cf:83:f1: a8:51:4f:5a:11:a6:ca:d5:5a:93:1c:58:34:7b:4e:af:49:0c: 29:ba:39:c2:06:11:bc:99:f1:23:93:91:e7:c1:a0:85:e2:64: 2d:4d:63:ed:a4:18:02:37:3d:76:a9:85:83:37:42:42:52:6c: 9c:6c:ec:34:c7:87:8d:55:67:69:93:77:29:2a:dd:da:95:66: 81:65:0f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI17HWxX46G3/JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWVkNWNlODAtMjI0ZS00NmFiLTk0ZjEtMWFmY2U4Y2Nm MTNmMB4XDTI2MDgxOTE4MDQwNVoXDTI5MDczMDA0MDAwMFowLzEtMCsGA1UEAxMk MWQ2Y2U5NzEtZGQ4Zi00MzdjLTgyZGQtNGU1ZTM1M2FjMjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9gheGsSbFxevi5FUUayyQajlmSa+uEpo8r2 JY2C8ENcxFwPi3nl5XcoM2AVdQ1/StzmnNUuFiJ7GAtWQcXnKYzgYyamUCuAFXdA gFYvcf5DFjF797BLtSEARhFZ3/arqgzORkLh/cPfQHt+R3M73Tmib7WWhP8TsdZI ScnPNe5S8FUU8YQgh8xPac2/O2jDzgmc6hML7aj6hJB6uZ1opIn+4I/RjfNW0Sbb xwHmktEmvO+q6a1LfM+AQXi25pVfuFtb4C/qsi6y/t2zG5m+6k7FUXG9rmk9vIs1 FBQiNx5+pSW3ij1qkeJ/V8t6s4p/QCXZd1xujKV3toBS6nVN+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqnfPShvHKbtbndZOYr5NzkKRccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1 Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZjZThjY2YxM2YvNGE1ZDkxY2UtOTA1ZC0z NzM1LTg5ZjMtZTQ3NDZlYjIxNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWVkNWNlODAtMjI0ZS00NmFiLTk0 ZjEtMWFmY2U4Y2NmMTNmLzllZDVjZTgwLTIyNGUtNDZhYi05NGYxLTFhZmNlOGNj ZjEzZi5jcmwwHwYDVR0jBBgwFoAUOB2fprp8wahErgn+WgCWnTv84Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85ZWQ1Y2U4MC0yMjRlLTQ2YWItOTRmMS0xYWZj ZThjY2YxM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0G0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWe/OCAAmRSXlOiV8mk/yHGB6gswioZc/dq0K7ACllVWyJlr7VdWpFa 5HlMT97z5kle5mgLwZo7lB6SdXExkwbABu4XRgWVOnG2VKWklxULA4hKN1DpoDkw woYQfyokQtMD4JqXuY6lHpft9aMmAXNdTZkVDMkcDG2MK4yW+BE0PVKkLQu+oSfs o8JyaAjdR/rUh+HKq3W2378UidayGgJKSJZFdx8Q+qcBzKEV+Iwdgs+D8ahRT1oR psrVWpMcWDR7Tq9JDCm6OcIGEbyZ8SOTkefBoIXiZC1NY+2kGAI3PXaphYM3QkJS bJxs7DTHh41VZ2mTdykq3dqVZoFlDyE= -----END CERTIFICATE-----Generated at Sat Sep 26 09:26:51 2026 by rpki-client