$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2b0914da-3387-3454-bc38-ee4a7e5e9603.roa File: 2b0914da-3387-3454-bc38-ee4a7e5e9603.roa (raw, json) Hash identifier: Oxt//vSVaH2fi+pe8lKHQQfEMynYV22WP36FvjHCaRQ= Subject key identifier: F8:70:76:FF:AC:5B:73:E5:57:66:05:05:38:CC:F8:DC:A3:6D:A4:BD Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Certificate serial: 010D0C9F4328584F4974510978332CA1D2FE6000 Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2b0914da-3387-3454-bc38-ee4a7e5e9603.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32913 IP address blocks: 208.85.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:51:09:78:33:2c:a1:d2:fe:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3267690b-7e96-48d3-ad5f-eddaad0b9889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:8a:75:bf:0e:7c:89:7c:15:e3:ba:00:00: 18:a0:88:28:1f:1b:a9:06:84:5b:0d:58:89:43:8f: 72:37:59:11:11:2b:0a:1a:90:67:57:5a:57:ad:29: bd:b4:ba:ca:e3:71:35:9f:49:6a:17:bd:c3:2a:a7: 26:52:71:d3:a7:38:c4:2d:6b:e1:9d:f5:5c:ec:e5: e5:c8:fe:52:89:48:07:48:5c:eb:cd:4f:7b:49:71: bc:0d:90:4f:1b:7f:63:5d:9d:e2:d2:0a:51:be:8d: 1e:2c:00:7c:c4:d3:8f:74:99:ae:ea:89:0a:af:cc: 18:cd:5b:9e:89:d8:5d:4e:41:7b:e1:06:61:0c:dc: e4:9e:9e:46:b2:70:d2:b8:e7:c0:e3:bb:d8:55:db: 21:ea:ba:96:d5:4c:28:9f:27:38:c7:fd:66:55:d4: 2f:17:9b:d3:43:f7:1b:b3:17:86:f6:55:07:56:72: 91:a0:dc:76:42:1b:1b:9a:ff:bd:ed:cb:53:2b:fa: bc:37:0b:90:10:4e:23:8c:fa:22:ae:f6:71:12:c8: f7:25:f6:66:d8:1c:1f:55:8d:7e:4d:75:1e:15:05: 4d:6c:03:a6:ca:02:22:90:21:87:18:68:38:3c:19: ba:ea:bd:ba:5f:d6:9c:a3:e2:65:ed:ea:a4:a5:ac: 83:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:70:76:FF:AC:5B:73:E5:57:66:05:05:38:CC:F8:DC:A3:6D:A4:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/2b0914da-3387-3454-bc38-ee4a7e5e9603.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl X509v3 Authority Key Identifier: keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer sbgp-ipAddrBlock: critical IPv4: 208.85.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:04:c1:47:68:63:33:8d:a3:92:4d:04:f7:b1:67:88:e9:8d: d1:ce:03:bb:fd:1e:cc:6e:4e:61:c5:8e:b8:05:07:30:e7:57: 56:78:f6:92:22:06:ec:96:11:0f:d9:ee:a3:82:59:76:7c:16: 26:96:2a:0c:4b:3f:db:ea:5a:f9:6a:4c:ca:ee:5c:8a:91:63: 46:a9:3b:f7:99:e6:f1:76:ee:3c:f1:81:20:76:3d:10:a1:5e: d5:18:c9:2b:cb:9a:8d:2a:ce:7b:29:6a:6c:2d:95:67:1d:29: a6:84:e3:76:9e:2c:ce:c0:26:b8:6f:83:df:7c:ad:69:21:b9: 80:36:1b:fc:c0:26:dc:20:08:24:4f:da:ab:df:fe:00:30:89: 0a:11:3c:cb:a1:68:e2:80:75:e3:38:ab:70:f0:1e:1c:6a:1d: b2:7d:8c:03:89:e7:2e:f9:97:2b:a1:95:64:71:98:29:39:8c: 48:8f:f0:0b:54:1b:38:2e:cd:16:19:b1:cd:5f:7d:18:01:49: 17:13:25:37:53:84:8c:f8:34:82:08:f8:3c:09:42:3c:e5:53: 52:29:c9:0b:8f:b4:40:b1:e4:b6:72:1c:c9:e7:eb:4b:ef:0e: 29:c3:57:df:e5:bc:0c:18:3f:12:38:11:09:05:a7:fe:dd:8b: a9:30:cb:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdFEJeDMsodL+YAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ3NTRhNzUtNmZlZi00MjdhLThhNWQtZDE1MmZiNzJm NDZkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzI2NzY5MGItN2U5Ni00OGQzLWFkNWYtZWRkYWFkMGI5ODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4yKdb8OfIl8FeO6AAAYoIgoHxupBoRbDViJ Q49yN1kRESsKGpBnV1pXrSm9tLrK43E1n0lqF73DKqcmUnHTpzjELWvhnfVc7OXl yP5SiUgHSFzrzU97SXG8DZBPG39jXZ3i0gpRvo0eLAB8xNOPdJmu6okKr8wYzVue idhdTkF74QZhDNzknp5GsnDSuOfA47vYVdsh6rqW1Uwonyc4x/1mVdQvF5vTQ/cb sxeG9lUHVnKRoNx2Qhsbmv+97ctTK/q8NwuQEE4jjPoirvZxEsj3JfZm2BwfVY1+ TXUeFQVNbAOmygIikCGHGGg4PBm66r26X9aco+Jl7eqkpayDkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhwdv+sW3PlV2YFBTjM+NyjbaS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1 NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUyZmI3MmY0NmQvMmIwOTE0ZGEtMzM4Ny0z NDU0LWJjMzgtZWU0YTdlNWU5NjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQ3NTRhNzUtNmZlZi00MjdhLThh NWQtZDE1MmZiNzJmNDZkLzRkNzU0YTc1LTZmZWYtNDI3YS04YTVkLWQxNTJmYjcy ZjQ2ZC5jcmwwHwYDVR0jBBgwFoAU5CP6ME5Q8PdRdEWBvW4TN/kZ2UswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUy ZmI3MmY0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FWkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcEwUdoYzONo5JNBPexZ4jpjdHOA7v9HsxuTmHFjrgFBzDnV1Z49pIi BuyWEQ/Z7qOCWXZ8FiaWKgxLP9vqWvlqTMruXIqRY0apO/eZ5vF27jzxgSB2PRCh XtUYySvLmo0qznspamwtlWcdKaaE43aeLM7AJrhvg998rWkhuYA2G/zAJtwgCCRP 2qvf/gAwiQoRPMuhaOKAdeM4q3DwHhxqHbJ9jAOJ5y75lyuhlWRxmCk5jEiP8AtU GzguzRYZsc1ffRgBSRcTJTdThIz4NIII+DwJQjzlU1IpyQuPtECx5LZyHMnn60vv DinDV9/lvAwYPxI4EQkFp/7di6kwy1M= -----END CERTIFICATE-----Generated at Sun Oct 4 16:58:31 2026 by rpki-client