$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/4c31f62b-8334-37b8-97a9-2ff29484f9ab.roa File: 4c31f62b-8334-37b8-97a9-2ff29484f9ab.roa (raw, json) Hash identifier: gK6+moprFckXioEnQ2DIcjWQX340G0jvtZVhWj9h9Lk= Subject key identifier: 43:A4:74:63:37:F2:72:22:4D:E3:67:6C:CE:2A:3F:11:44:81:DB:CB Certificate issuer: /CN=a234649d-ab49-458b-a5e3-7765fe7a066c Certificate serial: 010D0C9F4328584F5A32F5E949D098428E9FF500 Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/4c31f62b-8334-37b8-97a9-2ff29484f9ab.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 40929 IP address blocks: 208.68.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:f5:e9:49:d0:98:42:8e:9f:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=97e00458-ddf9-4fee-aa83-3d9a3f4b607f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:12:50:94:e0:02:9e:12:bb:fe:cb:42:29:19: bd:fc:1f:2f:eb:31:30:27:99:75:aa:29:95:e2:92: b5:68:d3:76:fd:ea:1e:54:87:ba:88:4e:13:49:17: fe:50:c8:5c:75:24:2b:3a:0c:6e:eb:b5:10:13:79: 94:30:b2:b8:db:0f:8a:4e:81:7b:e8:93:6b:91:7a: 8f:30:0c:7c:f0:b7:3f:b0:21:dc:1c:07:99:2f:de: f2:3d:e8:d8:bd:f8:02:dc:0f:cd:0c:6c:86:1f:2c: 60:b3:17:50:d4:98:d6:47:f0:2d:4f:8d:42:bb:c9: 8b:1f:e4:60:c6:0f:12:9e:87:b8:58:97:06:0c:ab: 9d:8d:92:c9:2e:35:0f:ec:13:a8:b8:ba:44:0e:02: c6:6a:50:47:a9:a7:e9:8e:5f:8a:3b:da:07:82:47: 4c:fa:95:91:b8:dd:8a:af:e0:3a:0d:b1:5b:13:8a: 97:28:19:06:78:1a:9a:20:f2:26:3b:e3:5b:8e:c2: de:79:b0:11:00:c7:3a:d0:d4:13:4a:ad:93:d5:ec: 00:cf:c4:be:39:e2:4c:ba:47:b8:89:60:2e:0c:ad: 85:f6:c9:d6:df:78:1a:0d:81:05:62:b6:31:24:e4: 71:dd:e7:37:5d:c7:98:3d:76:e0:06:9d:dc:9e:5c: 03:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A4:74:63:37:F2:72:22:4D:E3:67:6C:CE:2A:3F:11:44:81:DB:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/4c31f62b-8334-37b8-97a9-2ff29484f9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl X509v3 Authority Key Identifier: keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer sbgp-ipAddrBlock: critical IPv4: 208.68.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:b9:09:43:b1:88:85:9d:27:36:60:0b:be:a4:df:af:d5:3a: c2:bb:b0:0f:96:7b:d4:b3:4c:d5:de:7c:f9:b3:88:cd:53:33: e6:01:19:7b:7c:49:19:44:2c:46:de:29:22:9b:81:31:89:6c: 24:cd:fe:3d:5d:66:85:32:73:66:99:30:30:8d:4d:bd:31:c4: 7d:23:98:c6:41:1e:0c:0a:2a:3a:56:c8:3a:96:6f:a8:2a:2f: d0:67:40:18:09:22:90:9e:ce:8b:d1:5d:18:f1:43:7a:66:7c: 9f:9e:ba:fe:e8:45:df:f0:5d:83:3a:4c:89:2b:f3:b6:43:18: 35:20:24:0f:0d:a1:9e:f5:2c:02:00:3d:9d:2e:b4:3e:32:6f: 19:84:d2:da:ec:4e:66:f8:81:40:2f:e8:eb:04:42:35:85:06: be:ae:6a:8b:5f:73:41:57:92:b5:b6:81:e8:68:27:34:01:93: 36:ed:e4:46:9e:5e:b0:33:fb:a1:3d:9b:eb:28:93:f1:74:ea: 92:52:36:24:53:6d:03:ac:4d:92:3c:58:56:e5:30:fb:63:af: e5:2a:35:7f:8f:42:a9:96:2f:54:ec:6e:98:80:87:10:9f:5f: 0a:df:2a:aa:53:8a:45:2d:b7:1e:72:0f:33:4a:92:fe:a1:e9: 9f:1f:0a:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMvXpSdCYQo6f9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew NjZjMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OTdlMDA0NTgtZGRmOS00ZmVlLWFhODMtM2Q5YTNmNGI2MDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhJQlOACnhK7/stCKRm9/B8v6zEwJ5l1qimV 4pK1aNN2/eoeVIe6iE4TSRf+UMhcdSQrOgxu67UQE3mUMLK42w+KToF76JNrkXqP MAx88Lc/sCHcHAeZL97yPejYvfgC3A/NDGyGHyxgsxdQ1JjWR/AtT41Cu8mLH+Rg xg8Snoe4WJcGDKudjZLJLjUP7BOouLpEDgLGalBHqafpjl+KO9oHgkdM+pWRuN2K r+A6DbFbE4qXKBkGeBqaIPImO+NbjsLeebARAMc60NQTSq2T1ewAz8S+OeJMuke4 iWAuDK2F9snW33gaDYEFYrYxJORx3ec3XceYPXbgBp3cnlwDewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOkdGM38nIiTeNnbM4qPxFEgdvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0 NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvNGMzMWY2MmItODMzNC0z N2I4LTk3YTktMmZmMjk0ODRmOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1 ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1 ZmU3YTA2NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ES1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAK5CUOxiIWdJzZgC76k36/VOsK7sA+We9SzTNXefPmziM1TM+YBGXt8 SRlELEbeKSKbgTGJbCTN/j1dZoUyc2aZMDCNTb0xxH0jmMZBHgwKKjpWyDqWb6gq L9BnQBgJIpCezovRXRjxQ3pmfJ+euv7oRd/wXYM6TIkr87ZDGDUgJA8NoZ71LAIA PZ0utD4ybxmE0trsTmb4gUAv6OsEQjWFBr6uaotfc0FXkrW2gehoJzQBkzbt5Eae XrAz+6E9m+sok/F06pJSNiRTbQOsTZI8WFblMPtjr+UqNX+PQqmWL1TsbpiAhxCf XwrfKqpTikUttx5yDzNKkv6h6Z8fCiU= -----END CERTIFICATE-----Generated at Sun Oct 4 22:40:55 2026 by rpki-client