$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/6b5552b6-61df-3788-b537-8378e270c304.roa File: 6b5552b6-61df-3788-b537-8378e270c304.roa (raw, json) Hash identifier: MZ5Q8QiYJCj1zS2WnZxXQ7AobNshTVSXqDD4NUva0IE= Subject key identifier: FA:CE:AB:67:B1:75:53:39:7A:15:53:CA:4D:64:38:C3:84:39:D2:34 Certificate issuer: /CN=a8825ed0-210f-48ae-8970-c92773afbb48 Certificate serial: 010D0C9F4328584F498BBC02010F7E1C76610BC8 Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/6b5552b6-61df-3788-b537-8378e270c304.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 208.122.32.0/21 maxlen: 24 208.122.40.0/23 maxlen: 24 208.122.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:bc:02:01:0f:7e:1c:76:61:0b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9da2858f-7796-4586-bb5b-49119b6f615c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f5:42:09:bf:af:18:cd:7a:a8:46:3b:01:b5: ef:f8:23:05:ba:c9:c3:47:d8:f3:8b:e8:64:cd:e7: 74:d6:69:26:bf:40:8a:fe:db:41:f5:c8:a5:d3:f8: e3:4e:bb:d1:20:14:ad:de:4e:6d:66:a0:97:16:e4: 61:e6:06:ba:ac:9a:c1:2d:ee:e5:70:98:ea:5b:9d: 13:ed:01:04:96:ee:8b:cb:f8:77:16:05:51:44:10: 8f:b8:87:14:c8:1b:53:3f:41:65:a4:41:71:26:36: 5f:85:60:b8:3e:c4:70:50:7b:a4:c0:30:96:67:8b: bb:7a:12:66:8a:7a:57:27:c1:f1:7f:4b:35:aa:23: 2a:d9:55:d9:95:e3:d0:ee:28:04:c4:49:85:51:1c: 77:a5:2e:90:7f:e2:e8:44:20:9a:61:68:d2:22:e8: 59:f5:3f:41:b5:e3:85:53:4d:61:07:3a:41:59:44: 79:f9:23:b6:fc:8e:bb:d9:1f:99:f6:5c:67:aa:33: 39:26:da:c6:24:53:43:61:a6:c8:f6:cd:ca:8e:31: a4:f3:2d:2c:e3:f3:01:b7:be:14:c1:09:6b:8b:5d: e6:5b:88:40:fe:4d:64:35:02:c6:ad:46:05:a2:39: 78:dc:79:ae:a6:b1:64:4d:bc:b8:5f:f8:27:45:14: c3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CE:AB:67:B1:75:53:39:7A:15:53:CA:4D:64:38:C3:84:39:D2:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/6b5552b6-61df-3788-b537-8378e270c304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl X509v3 Authority Key Identifier: keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer sbgp-ipAddrBlock: critical IPv4: 208.122.32.0-208.122.42.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:76:f7:0b:5b:76:0f:54:2b:72:46:58:b4:0a:b2:6b:89:34: c2:a9:98:61:01:dd:16:0f:0d:d2:f4:80:6f:80:2e:36:77:19: a0:1e:db:8c:37:fc:de:85:1f:f0:5f:29:a2:10:8a:ae:92:77: be:20:10:2c:2e:9e:58:91:46:d0:94:68:a7:f0:6d:f5:2e:a9: 31:5d:f0:df:82:98:a6:22:13:56:d1:55:0d:1e:e5:c2:03:30: 3f:60:5f:34:51:07:a0:fa:b8:fb:65:43:61:69:69:c4:73:7f: 4c:9e:af:de:05:a6:2c:e4:5d:cf:a0:1f:66:a0:26:84:0e:be: 03:00:ca:0f:0f:6b:72:48:d2:dd:fb:24:aa:8c:05:d7:16:9c: 4f:64:c8:7f:3c:5b:41:d2:e6:2f:a1:52:0b:0e:59:09:76:2d: d2:f9:33:cd:40:4a:00:c9:37:da:eb:4c:35:97:17:f8:d5:b6: b0:91:c9:0d:f7:29:6e:81:e8:19:f7:b2:a3:23:39:7e:2d:a8: c6:3b:96:76:45:40:02:83:28:c3:87:6a:1b:73:04:ca:50:71: d2:28:fc:00:ae:53:ab:c7:a5:ee:ca:bb:35:ec:21:c1:60:80: 50:24:e2:f8:3e:4f:d7:25:00:23:b0:d6:84:c5:5e:8d:f9:59: f1:d3:f6:51 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9Ji7wCAQ9+HHZhC8gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg4MjVlZDAtMjEwZi00OGFlLTg5NzAtYzkyNzczYWZi YjQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWRhMjg1OGYtNzc5Ni00NTg2LWJiNWItNDkxMTliNmY2MTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPVCCb+vGM16qEY7AbXv+CMFusnDR9jzi+hk zed01mkmv0CK/ttB9cil0/jjTrvRIBSt3k5tZqCXFuRh5ga6rJrBLe7lcJjqW50T 7QEElu6Ly/h3FgVRRBCPuIcUyBtTP0FlpEFxJjZfhWC4PsRwUHukwDCWZ4u7ehJm inpXJ8Hxf0s1qiMq2VXZlePQ7igExEmFURx3pS6Qf+LoRCCaYWjSIuhZ9T9BteOF U01hBzpBWUR5+SO2/I672R+Z9lxnqjM5JtrGJFNDYabI9s3KjjGk8y0s4/MBt74U wQlri13mW4hA/k1kNQLGrUYFojl43HmuprFkTby4X/gnRRTDYwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFPrOq2exdVM5ehVTyk1kOMOEOdI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgy NWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3NzNhZmJiNDgvNmI1NTUyYjYtNjFkZi0z Nzg4LWI1MzctODM3OGUyNzBjMzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg4MjVlZDAtMjEwZi00OGFlLTg5 NzAtYzkyNzczYWZiYjQ4L2E4ODI1ZWQwLTIxMGYtNDhhZS04OTcwLWM5Mjc3M2Fm YmI0OC5jcmwwHwYDVR0jBBgwFoAUuwWm2x54AOi+CyBW1ajduRjiP2UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgyNWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3 NzNhZmJiNDguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXQeiAD BADQeiowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEApXb3C1t2D1QrckZYtAqya4k0wqmYYQHdFg8N0vSAb4Au NncZoB7bjDf83oUf8F8pohCKrpJ3viAQLC6eWJFG0JRop/Bt9S6pMV3w34KYpiIT VtFVDR7lwgMwP2BfNFEHoPq4+2VDYWlpxHN/TJ6v3gWmLORdz6AfZqAmhA6+AwDK Dw9rckjS3fskqowF1xacT2TIfzxbQdLmL6FSCw5ZCXYt0vkzzUBKAMk32utMNZcX +NW2sJHJDfcpboHoGfeyoyM5fi2oxjuWdkVAAoMow4dqG3MEylBx0ij8AK5Tq8el 7sq7NewhwWCAUCTi+D5P1yUAI7DWhMVejflZ8dP2UQ== -----END CERTIFICATE-----Generated at Sun Sep 27 06:39:38 2026 by rpki-client