$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50/a21ae39c-25e2-38bc-a0b5-9e906f257c84.roa File: a21ae39c-25e2-38bc-a0b5-9e906f257c84.roa (raw, json) Hash identifier: nGPr6S8OGsM1ix4o451FO9+wP4SRKnt6IEVbUcd5YVs= Subject key identifier: 25:0F:2D:C1:2B:3C:1E:F2:D4:D5:16:B0:A4:F9:2D:BD:22:8C:C4:A1 Certificate issuer: /CN=450e8e4a-f260-4fd5-93f6-48b4a6cb0b50 Certificate serial: 010D0C9F4328584F4AD7DE3C720BDFAC5B20B600 Authority key identifier: 02:60:D9:8D:53:B5:16:D5:27:05:F9:71:B9:A8:86:02:42:22:F0:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50/a21ae39c-25e2-38bc-a0b5-9e906f257c84.roa Signing time: Fri 25 Sep 2026 13:00:11 +0000 ROA not before: Fri 25 Sep 2026 13:00:11 +0000 ROA not after: Thu 24 Dec 2026 14:00:11 +0000 asID: 22134 IP address blocks: 208.82.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d7:de:3c:72:0b:df:ac:5b:20:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=450e8e4a-f260-4fd5-93f6-48b4a6cb0b50 Validity Not Before: Sep 25 13:00:11 2026 GMT Not After : Dec 24 14:00:11 2026 GMT Subject: CN=290263e3-368a-4ba2-8c1f-5c6e7a6865ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:57:8c:e5:32:c5:15:5d:6a:d6:6c:27:38:7b: 8d:92:d6:63:ce:22:f0:a9:ea:2a:f4:42:45:f9:fa: bf:17:6a:58:c5:3d:a9:3c:7e:05:65:ad:a8:d1:56: 6c:95:10:06:68:69:7c:35:2b:20:9b:9a:7c:92:83: 8d:4f:0a:10:e4:e6:92:12:d9:05:7b:96:37:21:45: ed:3f:cb:95:9e:1e:1e:35:4c:b4:a6:95:d7:b1:45: cd:3d:03:fc:12:54:be:13:c9:bb:33:0d:a8:df:7f: df:ca:94:b7:2e:cf:7c:83:f2:d4:13:8c:98:eb:68: ae:df:d3:63:da:7d:85:95:28:a5:47:5a:98:46:46: 41:01:84:ef:9d:09:91:d2:00:0a:06:5f:bc:ec:39: 19:bf:d5:76:b3:b4:b2:93:bc:f9:cd:cb:10:45:d8: 0b:1b:9a:84:c9:3e:fc:35:67:ea:42:00:c4:9e:7f: ea:c2:6a:f6:19:84:8a:74:82:b7:9e:9e:a2:86:d6: d1:93:a2:3e:de:18:8d:ab:08:e2:4e:c0:00:f6:fe: cc:02:c0:0d:9b:96:de:b7:16:db:ef:b3:77:5f:1c: bd:8b:1b:16:ce:f7:f8:c7:a7:53:07:a9:3e:45:11: 15:eb:6f:c1:9d:ab:48:c5:0e:5e:ad:cf:5e:65:77: 72:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:0F:2D:C1:2B:3C:1E:F2:D4:D5:16:B0:A4:F9:2D:BD:22:8C:C4:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50/a21ae39c-25e2-38bc-a0b5-9e906f257c84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50.crl X509v3 Authority Key Identifier: keyid:02:60:D9:8D:53:B5:16:D5:27:05:F9:71:B9:A8:86:02:42:22:F0:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/450e8e4a-f260-4fd5-93f6-48b4a6cb0b50.cer sbgp-ipAddrBlock: critical IPv4: 208.82.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:04:60:6e:13:11:a5:b0:d4:7f:31:20:0d:76:24:28:51:f2: 94:11:68:8a:0b:24:23:09:9e:33:f8:0b:6e:49:af:b1:e3:c0: 11:39:f3:e8:62:46:50:c2:65:18:9f:85:aa:73:61:ac:c7:bc: c6:8b:0d:c5:0c:08:12:37:52:ec:3d:b8:b2:10:18:de:cb:8d: 0c:17:1b:b8:de:d8:69:8f:18:69:4a:f7:f5:d9:73:00:66:75: 75:67:c5:29:df:2e:eb:06:33:a5:48:ad:38:9a:26:4c:4c:28: ec:d8:a2:e2:4a:49:98:04:1d:38:20:07:87:c6:cd:be:14:51: 92:b6:fd:1b:67:01:69:fb:2b:7b:2d:6a:a7:2d:13:03:13:8a: 9a:32:e1:6c:34:3f:5f:58:dd:cd:99:57:60:e6:56:96:7a:38: ba:23:51:a4:7e:ea:59:f1:f1:af:15:83:7e:68:13:52:bd:49: 96:fa:42:99:93:c9:1d:da:26:c2:5c:99:c8:a9:ca:95:e2:6f: fb:35:0f:95:29:74:c4:47:2b:83:8c:37:9b:41:c4:28:99:9f: 8b:34:03:04:b3:0d:87:5b:f1:a9:6b:33:ca:e1:a9:74:67:0a: 33:bd:fc:cb:af:3d:a6:b2:8c:8f:cd:a6:78:aa:63:de:a3:77: b0:6e:60:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9K1948cgvfrFsgtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDUwZThlNGEtZjI2MC00ZmQ1LTkzZjYtNDhiNGE2Y2Iw YjUwMB4XDTI2MDkyNTEzMDAxMVoXDTI2MTIyNDE0MDAxMVowLzEtMCsGA1UEAxMk MjkwMjYzZTMtMzY4YS00YmEyLThjMWYtNWM2ZTdhNjg2NWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFeM5TLFFV1q1mwnOHuNktZjziLwqeoq9EJF +fq/F2pYxT2pPH4FZa2o0VZslRAGaGl8NSsgm5p8koONTwoQ5OaSEtkFe5Y3IUXt P8uVnh4eNUy0ppXXsUXNPQP8ElS+E8m7Mw2o33/fypS3Ls98g/LUE4yY62iu39Nj 2n2FlSilR1qYRkZBAYTvnQmR0gAKBl+87DkZv9V2s7Syk7z5zcsQRdgLG5qEyT78 NWfqQgDEnn/qwmr2GYSKdIK3np6ihtbRk6I+3hiNqwjiTsAA9v7MAsANm5betxbb 77N3Xxy9ixsWzvf4x6dTB6k+RREV62/BnatIxQ5erc9eZXdyBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUPLcErPB7y1NUWsKT5Lb0ijMShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80NTBl OGU0YS1mMjYwLTRmZDUtOTNmNi00OGI0YTZjYjBiNTAvYTIxYWUzOWMtMjVlMi0z OGJjLWEwYjUtOWU5MDZmMjU3Yzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDUwZThlNGEtZjI2MC00ZmQ1LTkz ZjYtNDhiNGE2Y2IwYjUwLzQ1MGU4ZTRhLWYyNjAtNGZkNS05M2Y2LTQ4YjRhNmNi MGI1MC5jcmwwHwYDVR0jBBgwFoAUAmDZjVO1FtUnBflxuaiGAkIi8IowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80NTBlOGU0YS1mMjYwLTRmZDUtOTNmNi00OGI0 YTZjYjBiNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FJ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAEYG4TEaWw1H8xIA12JChR8pQRaIoLJCMJnjP4C25Jr7HjwBE58+hi RlDCZRifhapzYazHvMaLDcUMCBI3Uuw9uLIQGN7LjQwXG7je2GmPGGlK9/XZcwBm dXVnxSnfLusGM6VIrTiaJkxMKOzYouJKSZgEHTggB4fGzb4UUZK2/RtnAWn7K3st aqctEwMTipoy4Ww0P19Y3c2ZV2DmVpZ6OLojUaR+6lnx8a8Vg35oE1K9SZb6QpmT yR3aJsJcmcipypXib/s1D5UpdMRHK4OMN5tBxCiZn4s0AwSzDYdb8alrM8rhqXRn CjO9/MuvPaayjI/NpniqY96jd7BuYGU= -----END CERTIFICATE-----Generated at Wed Oct 7 04:20:48 2026 by rpki-client