$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa File: dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa (raw, json) Hash identifier: lfHNJM3xX0jZE3FkyRUfcHFgz74k4K77GezivL9BTpI= Subject key identifier: E3:6C:F3:AF:22:A5:C6:91:8D:87:B8:D4:58:C1:D2:79:79:4E:B6:48 Certificate issuer: /CN=378928e8-c134-40aa-9858-3838053cbbe9 Certificate serial: 010D0C9F4328584F2ABD1A75DCF71F09E243B100 Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 12261 IP address blocks: 208.118.192.0/22 maxlen: 22 208.118.196.0/22 maxlen: 22 208.118.200.0/22 maxlen: 22 208.118.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:1a:75:dc:f7:1f:09:e2:43:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=9f571aa9-60ee-4b9c-bb90-8f83f0563f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5f:c2:b0:8d:2e:fd:bc:dc:32:8b:8d:13:1e: 5d:0f:17:9a:c2:a6:0d:2d:9e:08:8d:4c:34:a0:7c: c7:72:c2:8e:f0:7d:67:7c:a5:7b:31:f1:90:6d:a9: 64:b6:e5:62:51:53:fa:e9:59:59:91:ac:ac:a7:30: 25:85:08:02:4b:07:af:47:26:ee:07:f6:20:eb:47: 4a:8d:ea:6f:7e:4d:3b:93:c7:14:04:62:93:32:ac: 74:0a:47:8e:f5:2d:06:b5:88:70:ae:ce:03:2d:7f: 5d:72:0c:69:d0:0a:aa:8c:2c:d3:0b:5a:66:f5:22: 9c:91:3b:51:a1:32:76:53:72:b4:14:89:66:47:50: 99:1b:39:dc:ca:20:bb:27:a6:90:22:15:ca:45:56: 7e:c1:cd:e5:70:85:b9:5d:76:30:10:c3:3c:8b:3d: aa:58:98:fb:b7:2d:3d:c0:63:24:89:6f:f2:d2:3b: f4:aa:ce:9c:ce:20:36:e8:a0:8f:d1:53:b2:78:22: af:ea:e9:ab:8e:84:18:be:fa:21:8d:fc:7c:fd:40: 5b:95:f3:99:12:fa:ab:25:0e:7d:34:31:ff:d1:d6: b1:2e:d4:41:2a:11:8c:1e:bf:2b:cd:72:b8:d3:01: 65:94:1c:ce:d4:3f:77:9d:f9:ca:e2:c9:58:1c:4e: 7d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6C:F3:AF:22:A5:C6:91:8D:87:B8:D4:58:C1:D2:79:79:4E:B6:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl X509v3 Authority Key Identifier: keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer sbgp-ipAddrBlock: critical IPv4: 208.118.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:57:e6:ad:41:4d:74:65:e5:06:88:79:7f:bc:ac:5e:fc:91: 4c:a2:2d:c7:eb:a5:93:d5:18:22:c9:50:79:f9:a3:b1:24:ac: 9b:dd:0b:f2:f8:40:9a:ac:b1:28:ae:78:bc:21:7b:23:b2:9b: 63:40:e1:bd:be:0e:31:f2:f1:a5:1f:62:94:ef:0f:af:da:2b: 86:d9:f4:3c:49:f9:37:64:a5:14:4d:d2:e3:65:17:3c:65:25: f1:a2:34:d3:18:5e:30:b4:c9:57:50:e1:bb:62:36:b8:ed:e5: bf:6a:6a:55:b5:c4:35:de:28:bc:93:0a:8f:cc:6d:97:b5:9f: 08:7b:30:c3:4c:a5:4f:ea:76:dc:7e:42:73:8b:18:af:60:88: 33:be:65:06:9d:0d:e2:01:5d:97:b4:e0:33:30:f0:53:1d:c8: 7f:ff:e7:cc:1a:74:a7:cd:66:5b:2d:f4:df:53:88:17:9c:a3: 91:eb:83:f0:f7:b6:f3:62:bb:af:f5:cf:6f:3d:c9:f2:7a:ae: 1f:21:31:c1:8f:f2:9a:c4:84:6a:9d:b6:6e:f4:12:55:5c:cf: f9:19:d4:d1:0e:59:2b:96:fb:1c:a0:3f:2a:e9:3f:95:a7:7e: 28:7e:58:9a:94:0d:d3:e7:cf:d4:b1:44:e5:72:6c:60:1c:5f: 00:a0:b3:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvRp13PcfCeJDsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTI4ZTgtYzEzNC00MGFhLTk4NTgtMzgzODA1M2Ni YmU5MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk OWY1NzFhYTktNjBlZS00YjljLWJiOTAtOGY4M2YwNTYzZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV/CsI0u/bzcMouNEx5dDxeawqYNLZ4IjUw0 oHzHcsKO8H1nfKV7MfGQbalktuViUVP66VlZkayspzAlhQgCSwevRybuB/Yg60dK jepvfk07k8cUBGKTMqx0CkeO9S0GtYhwrs4DLX9dcgxp0AqqjCzTC1pm9SKckTtR oTJ2U3K0FIlmR1CZGzncyiC7J6aQIhXKRVZ+wc3lcIW5XXYwEMM8iz2qWJj7ty09 wGMkiW/y0jv0qs6cziA26KCP0VOyeCKv6umrjoQYvvohjfx8/UBblfOZEvqrJQ59 NDH/0daxLtRBKhGMHr8rzXK40wFllBzO1D93nfnK4slYHE59oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONs868ipcaRjYe41FjB0nl5TrZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5 MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4MDUzY2JiZTkvZGZkNWE2ZDItYjUwOC0z Njg1LThmZmYtY2Y2Y2UyMDUwZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzc4OTI4ZTgtYzEzNC00MGFhLTk4 NTgtMzgzODA1M2NiYmU5LzM3ODkyOGU4LWMxMzQtNDBhYS05ODU4LTM4MzgwNTNj YmJlOS5jcmwwHwYDVR0jBBgwFoAUBYTnTjebSl6FC+Qck2G4ZCYVGJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4 MDUzY2JiZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANX5q1BTXRl5QaIeX+8rF78kUyiLcfrpZPVGCLJUHn5o7EkrJvdC/L4 QJqssSiueLwheyOym2NA4b2+DjHy8aUfYpTvD6/aK4bZ9DxJ+TdkpRRN0uNlFzxl JfGiNNMYXjC0yVdQ4btiNrjt5b9qalW1xDXeKLyTCo/MbZe1nwh7MMNMpU/qdtx+ QnOLGK9giDO+ZQadDeIBXZe04DMw8FMdyH//58wadKfNZlst9N9TiBeco5Hrg/D3 tvNiu6/1z289yfJ6rh8hMcGP8prEhGqdtm70ElVcz/kZ1NEOWSuW+xygPyrpP5Wn fih+WJqUDdPnz9SxROVybGAcXwCgs5Y= -----END CERTIFICATE-----Generated at Sun Oct 4 20:16:45 2026 by rpki-client