$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa File: 0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa (raw, json) Hash identifier: 4+AFLmWuV6A4KD25GgnshuUflpwxRZIfKYnNCXRXh40= Subject key identifier: AC:F0:80:9F:DA:3F:4C:AD:E2:86:1B:78:18:AA:B8:CC:69:89:39:1F Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584F4975AE947AB0C20A2F025080 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33322 IP address blocks: 72.1.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:ae:94:7a:b0:c2:0a:2f:02:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d4987a50-5be8-4ac4-8e4b-eb827f43bb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b1:81:f3:e7:db:24:5a:96:9a:c7:19:85:01: 8d:42:40:7c:be:ac:57:14:d1:7f:f7:ad:ae:24:8e: d7:b3:47:0e:16:67:e1:59:ba:33:90:d8:26:1d:36: 3d:19:31:6d:a7:12:60:c2:b8:b7:1b:7a:2b:c3:8f: c1:76:0e:fc:2a:66:bd:f2:1c:b6:2b:5e:24:fc:0e: 94:cc:74:9b:39:a4:06:86:1c:0f:b9:01:70:2f:5b: fb:3f:62:df:d3:a2:11:65:aa:29:c9:e4:27:f5:e9: fc:e2:0b:a2:b8:40:76:48:62:32:64:31:d5:d0:90: b2:31:6c:65:d0:2f:5c:b6:bd:f1:a8:38:88:2c:a3: e7:9e:41:2f:e6:19:c3:8e:89:37:75:3d:2f:16:6d: 80:56:fc:bd:d2:93:c8:1f:6c:40:dd:ad:03:f9:05: d8:00:4f:b1:47:81:5f:3c:79:9a:a2:b0:83:fd:8d: 10:66:f2:5c:6b:5e:56:9d:03:1b:e9:27:84:8e:7d: b5:ae:ff:09:50:40:b1:3d:a7:a2:ef:81:40:4b:ac: ea:9d:d5:69:1b:fc:c4:28:06:a2:d3:69:58:5e:37: 4a:61:b4:1a:23:f1:cc:4d:18:4e:c5:46:9a:26:16: 2f:c0:e2:0f:f0:23:5f:82:39:d1:01:09:a9:c7:9b: 38:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F0:80:9F:DA:3F:4C:AD:E2:86:1B:78:18:AA:B8:CC:69:89:39:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/0de8a9ec-bfc4-3e80-b8fa-67d78b5b184d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 72.1.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:da:68:28:2b:3b:9b:0e:18:0d:14:ec:26:b5:8a:4c:2f:12: 79:bc:9e:d8:63:fa:21:30:60:39:62:7f:1e:54:a5:6f:17:3d: bb:4a:e4:61:2e:7d:6d:fc:20:7a:75:a1:59:98:7a:08:d0:7f: 04:a4:16:19:ed:e0:8f:1b:a7:1f:5f:c0:43:14:4c:ff:34:db: 41:36:b7:2f:69:25:2a:9b:88:62:6e:19:90:9f:2c:0a:ec:74: f5:72:af:e4:13:73:38:22:a7:1e:f9:0c:4d:e6:af:e9:b7:66: 39:fe:7c:3c:5a:fb:56:7b:d4:a3:86:7a:c3:eb:c4:4f:eb:77: a6:3a:d8:ec:e2:60:10:f1:75:65:87:37:6f:ee:66:df:d4:18: 05:8f:89:bc:ee:b8:6b:27:5b:65:e8:dd:65:96:59:41:81:33: 4f:1b:b2:c2:14:f0:47:60:ae:74:7e:d5:ee:f0:7d:84:79:de: 7c:79:6a:7e:39:ca:65:c8:62:09:58:be:9f:83:a0:ec:b8:08: 06:56:4d:c3:ed:28:b9:25:d1:0a:37:57:41:8e:aa:31:bd:13: fd:b2:ef:11:b8:78:43:8b:52:2a:e9:9d:41:dd:0d:ba:63:44: 20:6c:e9:c3:c0:d0:7e:88:2a:09:0a:d6:9f:a5:6c:91:df:d2: 06:45:87:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jda6UerDCCi8CUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDQ5ODdhNTAtNWJlOC00YWM0LThlNGItZWI4MjdmNDNiYjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LGB8+fbJFqWmscZhQGNQkB8vqxXFNF/962u JI7Xs0cOFmfhWbozkNgmHTY9GTFtpxJgwri3G3orw4/Bdg78Kma98hy2K14k/A6U zHSbOaQGhhwPuQFwL1v7P2Lf06IRZaopyeQn9en84guiuEB2SGIyZDHV0JCyMWxl 0C9ctr3xqDiILKPnnkEv5hnDjok3dT0vFm2AVvy90pPIH2xA3a0D+QXYAE+xR4Ff PHmaorCD/Y0QZvJca15WnQMb6SeEjn21rv8JUECxPaei74FAS6zqndVpG/zEKAai 02lYXjdKYbQaI/HMTRhOxUaaJhYvwOIP8CNfgjnRAQmpx5s4xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzwgJ/aP0yt4oYbeBiquMxpiTkfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvMGRlOGE5ZWMtYmZjNC0z ZTgwLWI4ZmEtNjdkNzhiNWIxODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfaaCgrO5sOGA0U7Ca1ikwvEnm8nthj+iEwYDlifx5UpW8XPbtK5GEu fW38IHp1oVmYegjQfwSkFhnt4I8bpx9fwEMUTP8020E2ty9pJSqbiGJuGZCfLArs dPVyr+QTczgipx75DE3mr+m3Zjn+fDxa+1Z71KOGesPrxE/rd6Y62OziYBDxdWWH N2/uZt/UGAWPibzuuGsnW2Xo3WWWWUGBM08bssIU8EdgrnR+1e7wfYR53nx5an45 ymXIYglYvp+DoOy4CAZWTcPtKLkl0Qo3V0GOqjG9E/2y7xG4eEOLUirpnUHdDbpj RCBs6cPA0H6IKgkK1p+lbJHf0gZFh8I= -----END CERTIFICATE-----Generated at Sun Oct 4 17:21:58 2026 by rpki-client