$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa File: 844a9f17-b00f-3490-8954-09544703c001.roa (raw, json) Hash identifier: sC3pi6OZobnVbU3+An4dXEeCH1SFNKkPYlmnJ4y2Sls= Subject key identifier: CC:07:F1:74:07:BC:E4:15:32:22:49:47:43:FA:67:28:16:F1:DC:A8 Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F4328584F3FAD32AB8E8AD59AC3F46580 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 13629 IP address blocks: 208.94.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:32:ab:8e:8a:d5:9a:c3:f4:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=0f505b0e-4579-41d0-8c43-216814f0b6f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ca:50:1e:31:35:42:13:99:56:33:91:ea:ca: c7:d9:ed:07:ad:d0:e1:ff:4f:5c:47:13:d3:88:e5: 30:09:85:29:cc:88:51:bf:4c:a3:3f:d0:7d:e9:0b: 23:fc:95:98:c0:22:6d:f0:86:45:2c:50:53:4c:f2: 5d:4b:96:ae:ef:bf:d0:88:19:cc:ba:d9:42:a7:a8: 53:44:cd:07:63:1d:7d:8e:5c:96:e6:01:a7:8c:a3: 8e:56:d6:c2:ee:f8:e2:51:d9:0b:4f:dc:0d:8d:05: 2f:73:af:b5:f7:c1:e3:d2:e9:c9:90:18:5f:5d:3a: 3a:76:1e:c2:0c:e9:a2:c9:93:eb:16:27:49:84:70: 56:dd:b7:35:99:cd:90:7e:cc:43:a4:19:16:61:bc: a2:2a:5f:a9:84:da:a0:6c:ec:b6:89:05:14:f4:6b: 7d:1b:25:34:72:95:45:1e:b4:b9:e8:d1:6b:96:4d: f4:76:23:bc:22:29:9e:5e:ff:da:87:ff:01:69:68: 58:6d:f1:73:62:5c:eb:4a:05:55:e2:81:80:fd:18: 58:af:e0:82:1f:b3:ef:36:ba:cb:a2:7b:6f:4d:88: e4:cd:06:2f:6b:fc:9f:61:55:11:f9:13:0b:4d:98: 5e:e5:f4:0d:dc:38:fe:ed:49:7a:57:ab:5c:0b:0c: 1c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:07:F1:74:07:BC:E4:15:32:22:49:47:43:FA:67:28:16:F1:DC:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/844a9f17-b00f-3490-8954-09544703c001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:d2:3b:95:a4:b8:39:7a:76:b3:f4:ec:90:5b:37:bb:7c:4b: 3c:af:58:0c:3e:19:38:5f:53:45:7c:46:f0:9e:24:c2:a9:e5: 03:fe:b2:69:72:60:03:0e:dd:b7:b3:99:53:10:ad:9a:65:a0: 16:a3:97:4d:85:f4:f5:05:b5:86:41:6b:49:b7:59:a2:2e:0e: 1d:09:f5:54:c6:5a:70:e0:dd:29:ee:ca:6e:ca:ad:05:9f:9e: 4d:98:9d:7f:1e:eb:25:75:a8:5d:b2:27:30:4e:45:8a:f0:3c: a2:e6:c1:05:d3:b0:60:ba:06:53:91:2e:53:ac:0f:54:8f:9d: e6:d1:aa:18:7a:b3:20:aa:de:d6:de:bd:a5:03:78:b2:bc:67: 68:11:78:cf:14:c3:ae:b0:8b:10:ff:24:c5:05:93:93:e5:d4: 28:74:15:52:ec:fb:ac:5a:40:55:17:f3:61:27:80:5f:fd:ec: 22:f3:28:96:db:68:67:46:cb:e5:6c:7a:8e:7a:d8:c4:c8:32: 8e:c5:0b:b2:b5:1a:5b:7d:16:db:56:91:bd:bd:33:2e:5b:a3: 16:7f:81:54:fb:a7:1d:77:2b:76:3c:49:d6:a6:b3:80:26:7e: 0d:91:13:92:80:1a:a6:59:90:c1:0c:56:91:91:e8:12:65:a5: 16:c2:e3:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTKrjorVmsP0ZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MGY1MDViMGUtNDU3OS00MWQwLThjNDMtMjE2ODE0ZjBiNmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMpQHjE1QhOZVjOR6srH2e0HrdDh/09cRxPT iOUwCYUpzIhRv0yjP9B96Qsj/JWYwCJt8IZFLFBTTPJdS5au77/QiBnMutlCp6hT RM0HYx19jlyW5gGnjKOOVtbC7vjiUdkLT9wNjQUvc6+198Hj0unJkBhfXTo6dh7C DOmiyZPrFidJhHBW3bc1mc2QfsxDpBkWYbyiKl+phNqgbOy2iQUU9Gt9GyU0cpVF HrS56NFrlk30diO8IimeXv/ah/8BaWhYbfFzYlzrSgVV4oGA/RhYr+CCH7PvNrrL ontvTYjkzQYva/yfYVUR+RMLTZhe5fQN3Dj+7Ul6V6tcCwwcxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwH8XQHvOQVMiJJR0P6ZygW8dyoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvODQ0YTlmMTctYjAwZi0z NDkwLTg5NTQtMDk1NDQ3MDNjMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzSO5WkuDl6drP07JBbN7t8SzyvWAw+GThfU0V8RvCeJMKp5QP+smly YAMO3bezmVMQrZploBajl02F9PUFtYZBa0m3WaIuDh0J9VTGWnDg3Snuym7KrQWf nk2YnX8e6yV1qF2yJzBORYrwPKLmwQXTsGC6BlORLlOsD1SPnebRqhh6syCq3tbe vaUDeLK8Z2gReM8Uw66wixD/JMUFk5Pl1Ch0FVLs+6xaQFUX82EngF/97CLzKJbb aGdGy+Vseo562MTIMo7FC7K1Glt9FttWkb29My5boxZ/gVT7px13K3Y8Sdams4Am fg2RE5KAGqZZkMEMVpGR6BJlpRbC4+w= -----END CERTIFICATE-----Generated at Sun Sep 27 01:19:27 2026 by rpki-client