$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5f900eb5-41ef-3759-be3d-6cfc67e72a04.roa File: 5f900eb5-41ef-3759-be3d-6cfc67e72a04.roa (raw, json) Hash identifier: hpoHhkl7uw+rPoofo7rYWe6f7Bdll2185Kv3qNF+oF8= Subject key identifier: BC:56:E6:6E:6A:7A:29:95:0B:4A:09:A4:98:E1:DE:A3:75:A5:E3:6B Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Certificate serial: 010D0C9F4328584F4972A87C25EDF8D402068780 Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5f900eb5-41ef-3759-be3d-6cfc67e72a04.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1273 IP address blocks: 208.132.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a8:7c:25:ed:f8:d4:02:06:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2df75ece-bcf8-4aae-b1cd-2c869e0f09fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:37:80:c0:10:8f:2a:9a:16:da:78:0d:d8:7e: ee:51:0d:5f:a8:c0:2b:fa:ac:a1:6f:25:36:21:6b: aa:3c:6f:35:2c:43:10:b7:de:6f:3c:d5:b4:db:82: 94:5f:b9:57:b1:8a:f1:ac:6a:c9:12:33:3c:d5:cb: 8b:11:9d:92:8d:88:c0:4e:42:7a:db:78:59:3b:71: c1:b8:76:01:56:75:bf:dc:71:52:c7:3b:b7:75:4c: fa:52:e3:97:27:ee:94:03:e5:e2:ad:d9:20:72:db: 36:7a:fd:ad:87:6a:fb:36:5d:b0:99:a2:d6:cb:ad: 31:96:a0:65:2e:fe:0e:34:12:bd:1a:09:11:9d:c8: 48:75:53:5b:06:b3:fa:a5:a9:79:3c:42:23:3c:f5: bf:d3:c6:40:2b:a8:ca:7c:63:44:9c:6c:98:2f:d7: e9:63:88:92:1a:68:99:2f:0b:85:fa:3d:2c:1a:36: 3a:0f:3f:e9:f9:d4:e3:4d:a2:88:c6:c8:74:e6:9d: fa:c1:79:4e:0d:69:ad:94:87:9d:ba:1d:93:42:0a: fe:a0:cd:96:56:98:2c:8c:9c:53:3d:de:ad:fc:40: 23:13:c6:92:f9:38:f5:1e:98:14:d7:1b:23:85:3a: 59:8c:3c:70:c0:97:33:ce:71:b0:32:a8:b9:b8:da: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:56:E6:6E:6A:7A:29:95:0B:4A:09:A4:98:E1:DE:A3:75:A5:E3:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5f900eb5-41ef-3759-be3d-6cfc67e72a04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl X509v3 Authority Key Identifier: keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer sbgp-ipAddrBlock: critical IPv4: 208.132.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:49:26:e8:d7:6f:73:e7:e2:a5:8a:fe:0a:54:54:99:91:00: ae:75:ff:11:76:a8:11:02:23:08:41:c1:63:0f:a1:f9:fd:87: 27:71:4c:f3:48:ad:f0:b4:fc:cd:06:3b:fa:65:31:71:ba:24: 0d:0c:fd:00:f3:24:4c:3d:72:4e:61:26:f9:19:41:20:c9:b7: 91:d0:b3:43:3e:3e:f1:c0:fb:b3:f8:ac:c7:91:17:4e:06:c0: a2:09:99:15:c1:f3:92:ea:45:8c:db:b0:1e:3f:b1:30:0f:b8: 2e:6c:6f:f3:2c:4d:48:3d:52:b9:4a:2a:f8:cf:e4:99:34:bf: d8:23:9f:e0:f6:bb:06:4b:bf:bd:7c:5f:5e:2e:ef:31:ff:94: 08:df:90:5d:b4:b0:bf:80:4f:c8:ac:20:da:7b:c2:ae:4d:79: d3:90:8a:5e:27:c7:51:0f:5a:d9:f0:bc:7f:46:06:c5:e8:cf: c2:95:26:19:42:c2:78:fa:ef:63:94:b7:d5:8f:83:80:9e:01: ee:63:05:04:f8:f1:d1:20:c5:91:94:a1:db:d1:97:cc:c1:be: ad:5e:34:ee:83:4c:93:3f:d0:b0:ce:be:0e:cb:78:ef:0f:51: 28:76:59:2c:3b:09:b0:cd:cc:4a:62:3c:39:43:22:75:5e:99: 5e:54:c7:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcqh8Je341AIGh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4 NTgyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmRmNzVlY2UtYmNmOC00YWFlLWIxY2QtMmM4NjllMGYwOWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TeAwBCPKpoW2ngN2H7uUQ1fqMAr+qyhbyU2 IWuqPG81LEMQt95vPNW024KUX7lXsYrxrGrJEjM81cuLEZ2SjYjATkJ623hZO3HB uHYBVnW/3HFSxzu3dUz6UuOXJ+6UA+Xirdkgcts2ev2th2r7Nl2wmaLWy60xlqBl Lv4ONBK9GgkRnchIdVNbBrP6pal5PEIjPPW/08ZAK6jKfGNEnGyYL9fpY4iSGmiZ LwuF+j0sGjY6Dz/p+dTjTaKIxsh05p36wXlODWmtlIeduh2TQgr+oM2WVpgsjJxT Pd6t/EAjE8aS+Tj1HpgU1xsjhTpZjDxwwJczznGwMqi5uNoqGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxW5m5qeimVC0oJpJjh3qN1peNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvNWY5MDBlYjUtNDFlZi0z NzU5LWJlM2QtNmNmYzY3ZTcyYTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3 NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0IRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtJJujXb3Pn4qWK/gpUVJmRAK51/xF2qBECIwhBwWMPofn9hydxTPNI rfC0/M0GO/plMXG6JA0M/QDzJEw9ck5hJvkZQSDJt5HQs0M+PvHA+7P4rMeRF04G wKIJmRXB85LqRYzbsB4/sTAPuC5sb/MsTUg9UrlKKvjP5Jk0v9gjn+D2uwZLv718 X14u7zH/lAjfkF20sL+AT8isINp7wq5NedOQil4nx1EPWtnwvH9GBsXoz8KVJhlC wnj672OUt9WPg4CeAe5jBQT48dEgxZGUodvRl8zBvq1eNO6DTJM/0LDOvg7LeO8P USh2WSw7CbDNzEpiPDlDInVemV5Ux0o= -----END CERTIFICATE-----Generated at Sun Sep 27 10:33:31 2026 by rpki-client