$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa File: 9814d97b-c411-3c0f-aac7-5659a975f78a.roa (raw, json) Hash identifier: b4VmAAL7vnZWlkrq5kNwwCg4D1mGXex4CUegmpvWv9Q= Subject key identifier: 11:F3:15:DF:B4:3E:3F:F6:C7:5E:2E:C0:81:AD:12:D4:A4:9A:E0:BA Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584F4C3D786DAA4D1D9D60A75380 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 33322 IP address blocks: 208.71.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:78:6d:aa:4d:1d:9d:60:a7:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=8828a338-f8dd-42b9-a691-ccc51bf02f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b9:f4:17:b0:b0:1f:4f:f0:eb:56:45:e9:70: c0:7e:33:20:00:ef:08:74:6c:7a:31:31:83:e7:be: 57:45:ae:82:c5:6b:9e:52:dc:53:8e:8c:79:c5:e7: 02:be:14:11:72:12:53:1b:0e:14:bd:cf:4c:71:3f: cc:9b:ac:6b:f3:db:33:f4:cf:84:40:74:13:ed:01: 11:a5:4e:19:94:5b:19:b9:05:84:25:fa:fc:f7:56: b6:c6:d6:0d:b7:84:7e:5b:34:f0:b0:b6:2b:18:ca: 79:46:86:a4:33:92:ae:b4:d9:14:3c:f8:97:65:f4: 64:ff:c2:26:19:77:2e:72:b2:06:a3:7a:c3:0c:8e: 91:5a:2c:53:4d:1d:f7:ef:78:04:71:84:d0:b0:54: ac:e8:83:a0:b1:2f:cc:17:fb:f3:23:ed:e4:aa:a5: ab:e6:3b:33:98:c3:56:c7:cd:aa:f3:a2:43:de:67: c2:be:53:29:61:c2:7f:cd:dd:72:f6:85:8d:50:60: e7:23:28:dc:66:c1:bc:24:e2:c0:c5:02:1d:45:25: 4c:4c:af:fa:a8:99:8c:d8:80:21:d8:b4:d2:c0:1b: 27:5d:57:b1:03:12:f5:17:97:1c:7d:36:55:66:23: 07:3c:cd:cd:7e:a5:08:b4:a5:cb:39:06:a4:26:7d: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F3:15:DF:B4:3E:3F:F6:C7:5E:2E:C0:81:AD:12:D4:A4:9A:E0:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 208.71.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:da:a6:31:34:64:3f:d1:63:ba:3a:44:96:08:06:ab:4d:13: 4f:ea:e2:8f:b3:a7:18:6d:51:9c:cc:fd:f0:4c:b1:25:f0:97: 0d:07:23:08:de:f7:0f:1e:06:72:11:c8:b6:ba:ea:6b:45:68: aa:f2:68:89:59:88:a6:51:8f:0b:99:a0:32:f7:48:4c:75:a8: 36:74:2b:7c:05:64:a1:14:f7:cd:fa:3e:c1:b3:89:0a:c0:15: 67:3f:69:48:04:91:10:84:20:82:f1:15:dd:1c:1a:9b:cc:9f: 54:aa:81:45:57:b0:e2:a6:9b:a8:f6:4f:fc:29:1c:82:17:3a: e8:cf:98:1e:aa:2b:a7:bf:da:eb:ec:b8:78:8f:f3:94:ca:db: 53:33:1b:88:59:44:69:12:a4:0c:4a:eb:74:67:ec:12:24:bd: df:0f:6b:39:e4:b7:65:40:44:f7:47:86:1a:4e:f1:7c:db:cb: aa:7c:b8:49:db:9b:a2:df:35:d1:8c:97:5b:ab:c1:b8:5e:1f: 60:87:5f:e8:68:2c:59:a7:77:e1:1e:40:e6:30:b8:46:7b:16: cd:d6:4d:19:4a:7c:de:e7:0d:68:39:23:ee:63:cd:4f:08:bd: e2:c3:41:18:11:f7:a4:b5:e8:4d:b8:ef:40:bd:ec:42:45:cd: 9a:b9:5c:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXhtqk0dnWCnU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODgyOGEzMzgtZjhkZC00MmI5LWE2OTEtY2NjNTFiZjAyZjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLn0F7CwH0/w61ZF6XDAfjMgAO8IdGx6MTGD 575XRa6CxWueUtxTjox5xecCvhQRchJTGw4Uvc9McT/Mm6xr89sz9M+EQHQT7QER pU4ZlFsZuQWEJfr891a2xtYNt4R+WzTwsLYrGMp5RoakM5KutNkUPPiXZfRk/8Im GXcucrIGo3rDDI6RWixTTR3373gEcYTQsFSs6IOgsS/MF/vzI+3kqqWr5jszmMNW x82q86JD3mfCvlMpYcJ/zd1y9oWNUGDnIyjcZsG8JOLAxQIdRSVMTK/6qJmM2IAh 2LTSwBsnXVexAxL1F5ccfTZVZiMHPM3NfqUItKXLOQakJn0+bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHzFd+0Pj/2x14uwIGtEtSkmuC6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvOTgxNGQ5N2ItYzQxMS0z YzBmLWFhYzctNTY1OWE5NzVmNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjapjE0ZD/RY7o6RJYIBqtNE0/q4o+zpxhtUZzM/fBMsSXwlw0HIwje 9w8eBnIRyLa66mtFaKryaIlZiKZRjwuZoDL3SEx1qDZ0K3wFZKEU9836PsGziQrA FWc/aUgEkRCEIILxFd0cGpvMn1SqgUVXsOKmm6j2T/wpHIIXOujPmB6qK6e/2uvs uHiP85TK21MzG4hZRGkSpAxK63Rn7BIkvd8Paznkt2VARPdHhhpO8Xzby6p8uEnb m6LfNdGMl1urwbheH2CHX+hoLFmnd+EeQOYwuEZ7Fs3WTRlKfN7nDWg5I+5jzU8I veLDQRgR96S16E2470C97EJFzZq5XAQ= -----END CERTIFICATE-----Generated at Sun Oct 4 22:02:59 2026 by rpki-client