$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/dbda1118-9914-33ac-a372-020cfd89d214.roa File: dbda1118-9914-33ac-a372-020cfd89d214.roa (raw, json) Hash identifier: W3cRQ7jEM0b6TVnqSFi2rfbihM23X9sTghpvRIjmgQc= Subject key identifier: 05:9B:DB:2A:47:A8:A7:FE:A1:A5:4B:12:4F:48:87:47:FF:5E:CE:E3 Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F4328584F3FAD3276F634710C3C3AB300 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/dbda1118-9914-33ac-a372-020cfd89d214.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 13629 IP address blocks: 208.94.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:32:76:f6:34:71:0c:3c:3a:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=58582f41-0932-49b6-bac5-1b8f71d25717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5c:91:15:cf:d8:73:15:e1:7e:bf:8b:b0:b8: 0d:e1:78:fd:78:2f:bb:19:e6:6a:b5:fb:6a:21:24: 0a:cc:33:30:cf:2b:03:66:23:b0:51:a0:c1:ac:7f: 29:0c:df:fe:bd:c8:c6:3d:f4:9c:9e:03:e3:f0:c3: ca:16:7d:78:a3:4a:a2:6e:b7:3d:ef:80:92:56:53: 95:7c:3c:f6:ca:bb:02:d4:ef:79:76:28:54:ea:34: 1d:00:fb:7d:0d:5a:20:f0:70:6a:e3:40:02:77:dc: 49:37:e5:68:21:7e:af:9f:5f:0c:2f:bb:ee:61:b7: a0:de:1d:60:38:5d:cb:a3:59:0a:f4:de:67:b7:fe: 1f:d9:7c:f8:5a:bf:2c:09:71:c4:50:38:23:8c:8e: 17:1d:eb:87:5a:09:e9:c5:62:81:05:c5:58:64:e4: d6:89:92:0d:66:da:68:96:bf:89:84:f9:73:ea:c8: 21:f2:5e:52:c6:1b:01:5c:ff:29:db:68:a3:ed:45: 0c:12:12:d3:95:45:44:bd:7f:71:98:67:bf:0e:bc: 0d:2c:a4:63:a0:02:e9:4d:ab:2b:e0:98:ae:8a:ec: 2a:12:5b:99:12:7f:4c:59:df:70:20:99:ec:2d:a9: 6b:5e:18:9f:eb:b9:65:05:70:44:ca:49:9a:53:ac: 3d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:9B:DB:2A:47:A8:A7:FE:A1:A5:4B:12:4F:48:87:47:FF:5E:CE:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/dbda1118-9914-33ac-a372-020cfd89d214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:11:ae:41:49:75:f5:ee:41:30:7e:9a:a2:da:01:c4:9c:95: 0a:71:f1:c4:44:cc:19:35:5b:6d:72:fa:4c:19:93:b1:c6:fd: 1f:4f:a5:52:73:71:8c:83:9a:e9:ab:4b:c0:4b:0d:2f:88:fd: 5e:2b:e8:c7:da:ce:0a:13:e3:c5:64:28:89:81:96:fa:68:ab: b2:cc:24:45:a2:c9:be:48:31:3d:ae:f0:0b:b8:ca:9f:41:e5: 8e:2c:0b:c5:d4:47:6d:bf:d8:84:22:64:ae:e2:4d:95:f8:a6: ee:7f:52:15:ee:4c:4b:d0:7b:a9:1a:ba:56:81:2d:aa:20:6c: 0f:28:5e:dc:87:e0:99:bf:e9:ce:38:a0:8c:7b:81:c6:09:42: 21:8a:52:05:84:87:90:33:1c:8e:40:27:03:30:73:d4:36:c0: 89:39:a2:9c:a0:c0:8b:95:b2:02:0c:0b:3e:5a:4a:91:37:47: cc:90:9d:4c:5d:30:eb:88:f6:fd:23:0e:ce:24:07:90:8a:55: ec:5b:40:5a:fe:d4:50:2d:f6:21:4b:91:d4:b1:ae:28:b4:9e: 25:ad:b4:9a:3b:83:12:47:9a:22:47:d3:cb:ac:d4:de:10:31: 10:63:f8:39:fb:c6:af:ff:49:23:a0:61:34:b4:a1:23:81:81: e7:22:7c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTJ29jRxDDw6swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NTg1ODJmNDEtMDkzMi00OWI2LWJhYzUtMWI4ZjcxZDI1NzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFyRFc/YcxXhfr+LsLgN4Xj9eC+7GeZqtftq ISQKzDMwzysDZiOwUaDBrH8pDN/+vcjGPfScngPj8MPKFn14o0qibrc974CSVlOV fDz2yrsC1O95dihU6jQdAPt9DVog8HBq40ACd9xJN+VoIX6vn18ML7vuYbeg3h1g OF3Lo1kK9N5nt/4f2Xz4Wr8sCXHEUDgjjI4XHeuHWgnpxWKBBcVYZOTWiZINZtpo lr+JhPlz6sgh8l5SxhsBXP8p22ij7UUMEhLTlUVEvX9xmGe/DrwNLKRjoALpTasr 4JiuiuwqEluZEn9MWd9wIJnsLalrXhif67llBXBEykmaU6w9swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWb2ypHqKf+oaVLEk9Ih0f/Xs7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvZGJkYTExMTgtOTkxNC0z M2FjLWEzNzItMDIwY2ZkODlkMjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYRrkFJdfXuQTB+mqLaAcSclQpx8cREzBk1W21y+kwZk7HG/R9PpVJz cYyDmumrS8BLDS+I/V4r6MfazgoT48VkKImBlvpoq7LMJEWiyb5IMT2u8Au4yp9B 5Y4sC8XUR22/2IQiZK7iTZX4pu5/UhXuTEvQe6kaulaBLaogbA8oXtyH4Jm/6c44 oIx7gcYJQiGKUgWEh5AzHI5AJwMwc9Q2wIk5opygwIuVsgIMCz5aSpE3R8yQnUxd MOuI9v0jDs4kB5CKVexbQFr+1FAt9iFLkdSxrii0niWttJo7gxJHmiJH08us1N4Q MRBj+Dn7xq//SSOgYTS0oSOBgecifAo= -----END CERTIFICATE-----Generated at Thu Sep 24 21:29:33 2026 by rpki-client