$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa File: 507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa (raw, json) Hash identifier: s8rrj8ir6A6EP8JYYy0ZcvMYJkuro36Xc8iBJqVRhlg= Subject key identifier: 9B:2F:75:B2:5B:D3:92:96:8B:9D:C4:89:4A:DC:4B:FC:88:99:50:4F Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584F4976D63CA00C3A90D09CF680 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398420 IP address blocks: 208.89.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:d6:3c:a0:0c:3a:90:d0:9c:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bc4c539c-8395-4b87-84d2-1f572be840e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:e2:15:52:64:ee:0d:d0:3a:e0:41:b5:eb: bd:6d:d0:c0:64:a2:ad:27:5e:94:64:df:f1:3c:64: 4e:52:64:6b:52:09:fe:d2:76:6c:b6:00:fb:05:be: c2:39:83:ea:1c:11:37:37:f2:08:8c:bb:5d:8b:3d: 5a:ec:30:5d:dc:b5:8a:78:ec:b4:78:70:fa:20:e8: 01:70:bc:e5:f7:45:56:52:79:05:cc:d6:07:48:70: a3:e0:14:da:14:c1:bc:f1:ff:d6:06:5e:b7:03:46: 29:a1:4c:18:b3:f8:68:7b:00:61:09:45:1e:ee:c9: 44:98:59:24:00:7f:83:26:b6:f4:c9:c7:fe:eb:45: 53:bc:20:68:e2:95:7a:7f:9e:0f:02:a7:46:c1:e5: e5:90:72:73:96:59:83:a0:04:18:63:ae:c9:ca:74: 16:56:d1:6f:b6:70:e7:b0:02:da:56:29:df:aa:b9: 65:74:01:fe:16:3b:12:76:9b:b8:b4:45:f1:3d:cd: 89:25:2c:5d:b5:68:3f:c1:45:e5:51:a3:47:60:ad: 11:f8:88:23:17:0d:88:12:ee:22:72:bf:f1:ee:c9: 03:c3:03:ee:8b:05:0d:6f:f9:6e:da:49:d4:d6:a6: 7a:c5:6c:a2:4a:1a:ff:31:c9:22:e1:a1:2b:84:d2: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2F:75:B2:5B:D3:92:96:8B:9D:C4:89:4A:DC:4B:FC:88:99:50:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/507bd869-6a96-3cdf-b3e3-29a62ea90c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:fc:c6:38:8c:b3:4b:ea:32:3f:d1:42:dc:a7:5f:36:1f:1e: c7:23:76:7c:d0:92:55:fd:1f:76:40:af:a2:84:b0:b6:d5:8a: 77:1f:a6:fe:39:a5:f1:97:c2:e3:f6:ad:f0:74:4a:9b:5a:0e: de:35:01:58:ea:c5:95:de:90:0a:9d:7e:34:e7:36:18:42:9d: 41:52:64:fa:09:93:19:8d:0b:a7:b5:9e:30:61:f0:32:e3:68: 5d:4a:d7:2c:2c:76:c3:08:f6:6b:bc:f1:6e:d2:6e:2b:38:37: 57:4d:d4:55:aa:1a:5d:43:ef:fe:4f:6f:54:e1:f6:bc:8e:10: 42:f3:2f:65:5c:28:a5:82:fc:56:0f:6e:6f:12:7d:ee:d7:e4: 5d:f8:a6:86:af:dd:12:52:6e:c7:d4:da:7e:86:aa:e6:dd:10: e3:bf:35:97:f7:fc:bf:ab:63:d7:a6:11:94:d2:3f:ff:86:18: 73:62:28:00:0d:9a:55:76:6a:57:87:e6:55:ff:3f:ad:74:41: f6:ce:3c:87:e4:16:36:a3:82:04:f7:53:8e:76:6b:d5:4f:22: af:99:cf:aa:37:e7:55:37:ea:48:14:46:ec:da:d5:d0:34:82: 9c:99:d9:cf:d4:c2:71:ad:9b:05:40:e4:60:54:98:3d:2a:a4: 67:49:14:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdtY8oAw6kNCc9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmM0YzUzOWMtODM5NS00Yjg3LTg0ZDItMWY1NzJiZTg0MGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn7iFVJk7g3QOuBBteu9bdDAZKKtJ16UZN/x PGROUmRrUgn+0nZstgD7Bb7COYPqHBE3N/IIjLtdiz1a7DBd3LWKeOy0eHD6IOgB cLzl90VWUnkFzNYHSHCj4BTaFMG88f/WBl63A0YpoUwYs/hoewBhCUUe7slEmFkk AH+DJrb0ycf+60VTvCBo4pV6f54PAqdGweXlkHJzllmDoAQYY67JynQWVtFvtnDn sALaVinfqrlldAH+FjsSdpu4tEXxPc2JJSxdtWg/wUXlUaNHYK0R+IgjFw2IEu4i cr/x7skDwwPuiwUNb/lu2knU1qZ6xWyiShr/Mcki4aErhNJYgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsvdbJb05KWi53EiUrcS/yImVBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvNTA3YmQ4NjktNmE5Ni0z Y2RmLWIzZTMtMjlhNjJlYTkwYzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Fk2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb8xjiMs0vqMj/RQtynXzYfHscjdnzQklX9H3ZAr6KEsLbVincfpv45 pfGXwuP2rfB0SptaDt41AVjqxZXekAqdfjTnNhhCnUFSZPoJkxmNC6e1njBh8DLj aF1K1ywsdsMI9mu88W7Sbis4N1dN1FWqGl1D7/5Pb1Th9ryOEELzL2VcKKWC/FYP bm8Sfe7X5F34poav3RJSbsfU2n6GqubdEOO/NZf3/L+rY9emEZTSP/+GGHNiKAAN mlV2aleH5lX/P610QfbOPIfkFjajggT3U452a9VPIq+Zz6o351U36kgURuza1dA0 gpyZ2c/UwnGtmwVA5GBUmD0qpGdJFOQ= -----END CERTIFICATE-----Generated at Fri Oct 2 20:58:50 2026 by rpki-client