$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa File: db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa (raw, json) Hash identifier: GXqwlG3v8qDfyitSjMzKD7huBwiESJTXSG+jvSyTUV4= Subject key identifier: D2:5A:24:29:39:62:65:41:FE:5E:40:1F:12:0C:97:58:04:8F:01:4E Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9 Certificate serial: 010D0C9F4328584F5E62BFCAEAAAFB69417A2780 Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 398143 IP address blocks: 208.103.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:bf:ca:ea:aa:fb:69:41:7a:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=4ffb8358-c96e-45a1-a371-292e2b406724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ca:de:06:cf:33:31:8c:09:ad:e2:45:e1:97: 0a:64:53:67:6e:20:26:7a:4c:92:7d:3b:6e:3b:be: 94:c1:8c:f9:00:2b:5a:f3:45:97:2e:bf:01:b5:7b: 45:c4:a9:6b:8e:d2:02:c0:ba:ae:53:c1:97:a0:8a: 5d:3b:69:de:78:5a:6a:c6:fb:fc:57:c2:f6:0f:72: 48:01:8c:b8:b9:ac:84:d2:95:91:0e:e3:ab:33:9d: da:6f:00:f4:d0:74:14:d7:3c:94:0c:f3:c1:48:f6: 82:19:00:7e:f5:ca:7d:a1:ad:75:d3:7a:03:3a:4b: d0:cd:09:1d:14:33:f6:86:eb:41:9f:28:cd:35:1b: 34:0e:3c:d1:d2:4d:82:d2:05:b8:a9:9d:6d:99:7b: dc:8b:c0:48:79:88:b8:df:27:0f:d0:55:bc:3f:90: d3:00:11:63:08:f1:be:65:53:1a:2b:d6:44:6a:bf: 3e:69:22:e9:84:ed:46:c1:1b:d1:7a:70:76:80:73: fe:e5:cb:ab:79:70:3a:b1:0c:1d:8b:ba:44:1b:ab: dc:77:59:da:56:af:93:fe:41:b7:29:78:1f:5f:75: 58:6f:ae:c3:6e:3a:0e:12:f3:a0:23:90:75:47:69: 32:94:45:24:e9:b9:55:8e:17:8d:83:d0:1b:5d:78: f6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:5A:24:29:39:62:65:41:FE:5E:40:1F:12:0C:97:58:04:8F:01:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/db276d5e-d619-3e2a-bcc0-ef4aa9a7e694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl X509v3 Authority Key Identifier: keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer sbgp-ipAddrBlock: critical IPv4: 208.103.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:8b:09:f8:ea:54:6d:b1:9e:bf:33:a6:96:00:c5:81:a1:f5: b2:94:ef:93:40:e9:62:a4:d3:8a:14:ed:07:21:33:94:3b:04: f2:0d:79:a3:af:b3:a8:8a:79:b2:fc:97:93:45:29:ff:b2:9f: fd:40:17:21:e0:b9:d2:81:7e:a0:9c:11:ef:ef:e9:41:6a:72: 2c:8f:9e:45:68:4b:81:ca:93:4b:bc:12:c3:61:e7:db:da:7a: 2d:f6:3a:4a:88:64:90:56:61:e0:d4:c8:72:a4:a5:86:9c:51: 32:17:ec:72:6d:05:14:3c:74:3f:b0:00:57:35:c4:20:b5:01: 9a:93:a4:04:9f:b2:a0:3d:ce:7a:8f:8e:18:b3:7c:6d:9d:cf: a0:08:6f:e7:48:0c:7d:bd:a0:0e:ab:58:5b:89:ca:e0:7b:b1: 81:24:5f:23:10:f7:ef:a6:15:5a:26:5a:67:bd:09:37:9e:cf: 07:a4:20:06:b5:a7:29:ef:51:7d:1c:af:6d:0a:d3:61:09:07: 2b:ae:2e:84:09:57:67:e9:2d:60:fe:53:7a:96:e8:de:7c:a0: 22:2d:f2:ba:99:78:9b:14:1f:1e:35:7d:43:f9:4c:15:54:b2: b2:9e:5e:71:80:b0:a5:7b:e2:b7:9d:d5:16:7c:a6:12:95:a5: e5:16:22:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYr/K6qr7aUF6J4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh YWQ5MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NGZmYjgzNTgtYzk2ZS00NWExLWEzNzEtMjkyZTJiNDA2NzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sreBs8zMYwJreJF4ZcKZFNnbiAmekySfTtu O76UwYz5ACta80WXLr8BtXtFxKlrjtICwLquU8GXoIpdO2neeFpqxvv8V8L2D3JI AYy4uayE0pWRDuOrM53abwD00HQU1zyUDPPBSPaCGQB+9cp9oa1103oDOkvQzQkd FDP2hutBnyjNNRs0DjzR0k2C0gW4qZ1tmXvci8BIeYi43ycP0FW8P5DTABFjCPG+ ZVMaK9ZEar8+aSLphO1GwRvRenB2gHP+5cureXA6sQwdi7pEG6vcd1naVq+T/kG3 KXgfX3VYb67DbjoOEvOgI5B1R2kylEUk6blVjheNg9AbXXj28QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJaJCk5YmVB/l5AHxIMl1gEjwFOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvZGIyNzZkNWUtZDYxOS0z ZTJhLWJjYzAtZWY0YWE5YTdlNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0 OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuLCfjqVG2xnr8zppYAxYGh9bKU75NA6WKk04oU7QchM5Q7BPINeaOv s6iKebL8l5NFKf+yn/1AFyHgudKBfqCcEe/v6UFqciyPnkVoS4HKk0u8EsNh59va ei32OkqIZJBWYeDUyHKkpYacUTIX7HJtBRQ8dD+wAFc1xCC1AZqTpASfsqA9znqP jhizfG2dz6AIb+dIDH29oA6rWFuJyuB7sYEkXyMQ9++mFVomWme9CTeezwekIAa1 pynvUX0cr20K02EJByuuLoQJV2fpLWD+U3qW6N58oCIt8rqZeJsUHx41fUP5TBVU srKeXnGAsKV74red1RZ8phKVpeUWIog= -----END CERTIFICATE-----Generated at Sun Oct 4 17:43:56 2026 by rpki-client