$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa File: 1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa (raw, json) Hash identifier: 8IkIpzzwTWgjuRaw1O39d5Gbd2hzlIkjFwndiY5F+Hw= Subject key identifier: 23:8D:AE:57:38:AF:17:6B:FB:6F:37:24:97:9B:8E:F5:47:3F:AC:94 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584F4C3D7860A0EC9C00431C9580 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 33322 IP address blocks: 208.67.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:78:60:a0:ec:9c:00:43:1c:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=1a4e24a3-6018-4f0d-97fd-dc1c6da32ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:c8:12:5f:b6:c7:86:10:a9:07:23:35:53: df:f0:87:04:4e:d0:d2:b4:fe:37:4b:ff:3b:66:46: 60:4d:2c:f9:ac:14:b6:89:01:32:4a:6c:4b:b4:cf: fc:30:9d:90:01:b0:a0:c9:88:c5:bf:ec:16:16:c8: 96:b7:53:1c:c5:a3:01:de:b9:8e:25:13:06:f9:2b: 08:4d:ce:f8:46:56:11:e0:d7:f8:fb:78:f6:39:69: a3:5f:65:94:34:a4:91:80:cd:f4:60:e6:2f:3c:fb: 34:a3:85:e8:f6:3f:c2:64:21:70:fd:0a:68:46:70: a9:55:b0:ce:38:30:cb:0d:ca:a3:48:54:3e:d2:f1: 39:8e:d0:08:ae:b3:a6:4a:b4:53:ca:ec:f4:da:4c: 70:0b:ba:92:2a:42:06:45:24:ec:1d:77:87:41:ac: bd:11:05:8f:cc:a0:af:a6:69:6d:b3:14:60:84:9d: 94:dd:d6:5b:07:08:15:25:3b:60:91:90:b0:d1:c1: 06:92:c5:3f:98:9a:54:6e:3c:7f:3b:f6:83:64:d3: b5:e4:22:a3:cb:7a:67:b1:04:3a:86:fb:39:26:25: 0a:e4:d4:0c:d2:3c:17:2b:b0:0d:4d:c0:5b:0b:2d: e9:fc:6a:cd:e2:0a:27:19:20:2d:7a:42:75:85:e7: 11:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8D:AE:57:38:AF:17:6B:FB:6F:37:24:97:9B:8E:F5:47:3F:AC:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 208.67.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:a3:41:38:fd:3d:a7:86:5d:ef:d8:a1:79:32:e4:68:6a:d2: 07:dc:0d:86:25:c7:d8:c9:40:51:9f:df:f7:0f:8a:c4:e3:d5: 2b:96:16:96:05:fd:ad:f6:5a:df:d5:3d:b5:6d:c0:a1:f2:88: 1b:00:d6:92:62:c7:9b:69:9a:11:c4:30:f0:59:d2:99:12:99: 8a:21:40:57:eb:74:d1:a9:c4:56:e8:2f:ab:88:34:e8:4e:85: 5d:04:7d:25:e7:f9:b9:ed:cf:b8:3d:e3:f7:30:16:a5:6a:5c: 0e:70:94:b8:ef:d9:d6:94:55:31:9c:8d:45:e2:8e:a4:89:66: 8a:5f:29:d3:30:b0:c1:be:d1:9b:75:13:f0:7e:e6:70:ac:7c: 0e:5e:87:03:54:90:cb:fc:08:c8:94:81:26:59:57:f3:b6:df: 57:1b:b7:37:6e:07:c3:a8:b9:17:b3:82:52:5c:fe:30:03:08: d5:31:5f:4d:10:a9:46:df:a5:0d:ef:87:f4:08:ce:f6:25:21: 58:cd:c9:1f:5f:18:99:a6:79:87:af:13:b0:7e:ec:e2:3b:7f: 7a:ce:91:8e:5f:b7:d1:41:f7:43:84:a4:26:97:3f:58:2a:ae: 65:d8:e3:6c:e5:40:df:74:36:f5:c2:bf:9b:7d:cd:80:d6:f5: 3a:2b:28:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXhgoOycAEMclYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MWE0ZTI0YTMtNjAxOC00ZjBkLTk3ZmQtZGMxYzZkYTMyY2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5LIEl+2x4YQqQcjNVPf8IcETtDStP43S/87 ZkZgTSz5rBS2iQEySmxLtM/8MJ2QAbCgyYjFv+wWFsiWt1McxaMB3rmOJRMG+SsI Tc74RlYR4Nf4+3j2OWmjX2WUNKSRgM30YOYvPPs0o4Xo9j/CZCFw/QpoRnCpVbDO ODDLDcqjSFQ+0vE5jtAIrrOmSrRTyuz02kxwC7qSKkIGRSTsHXeHQay9EQWPzKCv pmltsxRghJ2U3dZbBwgVJTtgkZCw0cEGksU/mJpUbjx/O/aDZNO15CKjy3pnsQQ6 hvs5JiUK5NQM0jwXK7ANTcBbCy3p/GrN4gonGSAtekJ1hecRNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCONrlc4rxdr+283JJebjvVHP6yUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvMWMzNDQzZTUtZWJlNC0z Y2FhLTk2YjEtYjRmNmZiNGM1ZTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EO0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyjQTj9PaeGXe/YoXky5Ghq0gfcDYYlx9jJQFGf3/cPisTj1SuWFpYF /a32Wt/VPbVtwKHyiBsA1pJix5tpmhHEMPBZ0pkSmYohQFfrdNGpxFboL6uINOhO hV0EfSXn+bntz7g94/cwFqVqXA5wlLjv2daUVTGcjUXijqSJZopfKdMwsMG+0Zt1 E/B+5nCsfA5ehwNUkMv8CMiUgSZZV/O231cbtzduB8OouRezglJc/jADCNUxX00Q qUbfpQ3vh/QIzvYlIVjNyR9fGJmmeYevE7B+7OI7f3rOkY5ft9FB90OEpCaXP1gq rmXY42zlQN90NvXCv5t9zYDW9TorKDg= -----END CERTIFICATE-----Generated at Sun Oct 4 12:33:12 2026 by rpki-client