$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/10935088-7b41-35a5-964a-87c340874376.roa File: 10935088-7b41-35a5-964a-87c340874376.roa (raw, json) Hash identifier: czCPPYc21h3RyTNGqu8+ow8gAtNaS5WEoBU4pYCkxOs= Subject key identifier: 83:0C:4B:FA:DA:15:04:49:D3:E1:5A:9F:3E:49:E1:9D:22:30:49:A0 Certificate issuer: /CN=8847881a-ccc0-4631-8384-a7d78db5864d Certificate serial: 010D0C9F4328584F498918FFB6AF0D3089727A40 Authority key identifier: 65:0C:DD:D3:74:05:4D:57:AA:6E:30:A8:E0:12:B2:B4:A7:44:39:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/10935088-7b41-35a5-964a-87c340874376.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 208.78.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/8847881a-ccc0-4631-8384-a7d78db5864d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/8847881a-ccc0-4631-8384-a7d78db5864d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:18:ff:b6:af:0d:30:89:72:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8847881a-ccc0-4631-8384-a7d78db5864d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=37db7512-15eb-4eba-a423-4b03825b8b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:06:19:08:72:2a:df:4a:86:ae:80:df:8d:68: 5f:87:af:b9:9e:12:7a:e7:a4:80:23:f1:aa:02:3b: 1e:bb:b3:83:40:07:13:61:45:1a:f5:e4:ac:06:3b: fe:4d:03:7d:3d:20:07:2d:64:0e:ab:c1:30:b4:ae: ce:95:f5:c2:57:98:05:fa:5d:0d:12:ca:c8:1f:1e: 3e:11:68:e2:63:7b:98:fa:51:b6:8f:14:78:57:b0: ee:22:76:4c:0a:de:35:3c:21:b7:26:85:ee:0c:40: d3:79:4a:c0:8c:70:88:83:f7:7b:9a:54:0c:7e:00: 67:22:17:aa:3d:74:db:6b:3d:43:42:41:95:a0:64: bb:59:e2:38:c9:d7:88:f1:00:3e:f2:2e:7d:cb:0f: 46:c1:5c:68:15:5a:d8:75:c0:51:c0:c8:30:aa:fa: 50:3b:b8:ce:04:8d:b7:a0:06:e1:c6:a5:80:82:d2: a3:19:80:2d:47:ca:c6:9f:39:87:35:33:7f:6d:ca: a3:ea:0c:7c:14:88:29:52:e7:ad:c0:95:ef:84:4a: dd:b6:de:f9:79:28:4a:d9:03:ae:fd:92:6b:d3:eb: e9:57:99:3e:b6:ce:af:44:7b:7e:e0:40:51:5d:02: b1:e2:6d:a1:c7:44:41:09:35:62:27:5b:f3:9c:e6: 25:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0C:4B:FA:DA:15:04:49:D3:E1:5A:9F:3E:49:E1:9D:22:30:49:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/10935088-7b41-35a5-964a-87c340874376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/8847881a-ccc0-4631-8384-a7d78db5864d.crl X509v3 Authority Key Identifier: keyid:65:0C:DD:D3:74:05:4D:57:AA:6E:30:A8:E0:12:B2:B4:A7:44:39:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d.cer sbgp-ipAddrBlock: critical IPv4: 208.78.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:7f:98:1e:82:f7:26:50:d3:34:b4:18:4a:8e:f0:15:fe:ab: 38:98:e2:92:91:3c:91:2c:4a:dd:02:2b:06:ba:91:ff:93:10: a1:30:66:ee:8a:17:85:71:71:ae:04:87:aa:49:19:6a:be:5d: 6b:c3:fc:45:2c:db:e4:52:55:d7:64:a2:bb:26:dc:9f:08:45: ee:4b:b9:83:9a:0b:df:bf:13:11:f1:34:ea:e4:63:dc:4e:17: 02:36:9a:d0:aa:16:44:50:04:d5:36:45:95:be:4c:5c:f3:79: 01:c0:31:f2:ee:04:0e:86:e7:4f:ba:37:25:92:76:a9:a6:04: 70:e1:88:50:a1:72:03:ff:05:7f:34:31:75:9a:7a:86:69:3b: 84:8a:20:aa:a3:2d:e5:81:21:1e:b1:d5:bb:86:b3:6e:68:14: 56:5e:17:3c:fa:fd:de:69:96:86:c0:08:76:35:25:41:ee:ec: 9e:80:7a:04:fc:ae:f5:8d:5a:90:b0:20:d7:d2:a9:4b:5e:3a: f5:3f:da:76:14:57:b7:f1:66:8a:69:42:d7:5d:f1:9d:e2:f5: be:c4:a2:45:ed:29:aa:6f:a2:75:32:32:b9:d4:43:d9:68:a6: b0:89:cd:68:59:4f:74:c0:16:73:95:26:f1:dc:d0:ad:a7:9e: 6f:15:ff:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiRj/tq8NMIlyekAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Nzg4MWEtY2NjMC00NjMxLTgzODQtYTdkNzhkYjU4 NjRkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzdkYjc1MTItMTVlYi00ZWJhLWE0MjMtNGIwMzgyNWI4YjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwYZCHIq30qGroDfjWhfh6+5nhJ656SAI/Gq Ajseu7ODQAcTYUUa9eSsBjv+TQN9PSAHLWQOq8EwtK7OlfXCV5gF+l0NEsrIHx4+ EWjiY3uY+lG2jxR4V7DuInZMCt41PCG3JoXuDEDTeUrAjHCIg/d7mlQMfgBnIheq PXTbaz1DQkGVoGS7WeI4ydeI8QA+8i59yw9GwVxoFVrYdcBRwMgwqvpQO7jOBI23 oAbhxqWAgtKjGYAtR8rGnzmHNTN/bcqj6gx8FIgpUuetwJXvhErdtt75eShK2QOu /ZJr0+vpV5k+ts6vRHt+4EBRXQKx4m2hx0RBCTViJ1vznOYlKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMMS/raFQRJ0+Fanz5J4Z0iMEmgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84ODQ3 ODgxYS1jY2MwLTQ2MzEtODM4NC1hN2Q3OGRiNTg2NGQvMTA5MzUwODgtN2I0MS0z NWE1LTk2NGEtODdjMzQwODc0Mzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODg0Nzg4MWEtY2NjMC00NjMxLTgz ODQtYTdkNzhkYjU4NjRkLzg4NDc4ODFhLWNjYzAtNDYzMS04Mzg0LWE3ZDc4ZGI1 ODY0ZC5jcmwwHwYDVR0jBBgwFoAUZQzd03QFTVeqbjCo4BKytKdEOQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84ODQ3ODgxYS1jY2MwLTQ2MzEtODM4NC1hN2Q3 OGRiNTg2NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt/mB6C9yZQ0zS0GEqO8BX+qziY4pKRPJEsSt0CKwa6kf+TEKEwZu6K F4Vxca4Eh6pJGWq+XWvD/EUs2+RSVddkorsm3J8IRe5LuYOaC9+/ExHxNOrkY9xO FwI2mtCqFkRQBNU2RZW+TFzzeQHAMfLuBA6G50+6NyWSdqmmBHDhiFChcgP/BX80 MXWaeoZpO4SKIKqjLeWBIR6x1buGs25oFFZeFzz6/d5plobACHY1JUHu7J6AegT8 rvWNWpCwINfSqUteOvU/2nYUV7fxZoppQtdd8Z3i9b7EokXtKapvonUyMrnUQ9lo prCJzWhZT3TAFnOVJvHc0K2nnm8V/5g= -----END CERTIFICATE-----Generated at Sat Oct 10 16:27:38 2026 by rpki-client