$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/5ce2a931-2efd-3ddb-bffe-2a7b4e85b83f.roa File: 5ce2a931-2efd-3ddb-bffe-2a7b4e85b83f.roa (raw, json) Hash identifier: RNgasQJZ399ilVsRCwIgg/QnImN3lKHI+QHcGIws5dg= Subject key identifier: 7D:21:88:AB:FF:B3:19:9A:F0:19:DA:D5:B3:3F:24:59:1A:13:0D:CE Certificate issuer: /CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Certificate serial: 010D0C9F4328584F4973F018A12DAB4BCADE4280 Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/5ce2a931-2efd-3ddb-bffe-2a7b4e85b83f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22926 IP address blocks: 208.70.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f0:18:a1:2d:ab:4b:ca:de:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=edc12065-99a9-4cc2-8fd4-186c0bdb9331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:30:f3:20:0e:46:96:8a:24:9a:13:69:2e: 5f:2b:4c:6c:83:d7:cc:57:ca:61:64:e7:26:63:c2: ac:b1:62:a3:40:30:d1:b5:fb:19:6b:27:c8:47:4f: 42:72:ac:3d:77:a3:81:de:f7:fe:b0:b4:82:16:1b: b1:64:8e:a6:76:3c:a9:5f:43:76:09:71:8f:8d:bf: 25:8b:b2:e6:44:58:8d:b0:e6:79:21:54:c9:2d:b1: 75:54:12:ec:e5:c7:b8:aa:2e:fd:d2:71:18:3d:6d: db:e1:29:4c:48:ee:d6:12:c7:ea:84:44:6b:b8:65: 84:69:8a:99:1f:c8:cd:67:14:e2:fd:80:9b:21:19: e3:2d:6a:61:a7:24:a1:e2:71:4a:85:75:1a:df:92: 2e:f9:89:c9:60:29:12:7d:93:cb:b7:7a:f4:38:e3: 39:56:33:f9:e1:54:81:55:3b:b0:43:af:78:62:20: e4:d0:d1:8a:80:63:f6:e0:8a:3c:25:84:a4:86:4c: ef:32:73:71:33:17:a3:1a:21:1d:73:12:a6:13:b8: 48:9e:b2:53:26:1f:88:c2:dc:b5:0c:c9:17:ad:4b: df:31:f6:50:98:52:f4:83:bb:de:b1:d4:8a:43:2e: a7:d4:c8:dc:ba:ab:ed:c6:eb:80:82:c7:97:cc:e9: 39:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:21:88:AB:FF:B3:19:9A:F0:19:DA:D5:B3:3F:24:59:1A:13:0D:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/5ce2a931-2efd-3ddb-bffe-2a7b4e85b83f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl X509v3 Authority Key Identifier: keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer sbgp-ipAddrBlock: critical IPv4: 208.70.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:44:06:cb:7c:dc:34:57:8b:bd:16:1c:b9:ec:1b:bf:b3:d5: 2f:d4:27:56:18:9b:ed:61:b7:a1:55:2b:e8:87:76:ac:a1:4e: 3f:89:81:7a:22:7a:d8:85:7b:38:ae:43:45:fd:cc:80:5d:34: 39:1a:d0:e6:e3:ab:01:da:bf:94:f8:0e:a1:12:ad:81:bf:c8: 98:a8:29:3e:6c:c8:5d:94:cf:47:61:e9:ea:2c:11:86:0f:d3: ea:eb:a2:a1:40:c6:bd:56:db:f9:1b:d4:8a:3a:e0:be:03:46: 39:28:bf:d7:1e:16:cb:3b:7b:6c:7e:2c:06:87:84:56:6c:9c: a6:f4:fc:4b:0a:e6:2f:4e:5c:63:4d:c3:d5:8f:41:b3:36:f0: e6:a7:21:c9:88:83:95:d2:ec:a3:de:cb:db:90:7c:1c:35:5e: ab:35:55:d0:f3:c2:61:ac:08:c1:5e:fc:4c:39:d2:3c:28:36: bd:9f:7b:68:eb:e7:d6:fd:6d:a0:64:24:57:e7:1f:54:a5:9b: 43:5c:f1:ec:8b:fd:93:42:bb:76:81:ae:52:56:dd:b7:87:37: 81:c6:54:fe:b0:54:1a:5a:4f:cd:45:ef:68:90:2a:01:d7:c0: 06:89:7d:ea:8b:76:70:4e:09:da:ff:f9:0a:e3:be:8f:08:51: 74:fa:4d:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/AYoS2rS8reQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4NGU0NzEtMDgwYS00ZTU0LWJmOTQtNjBkZDBjOGJl YjQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWRjMTIwNjUtOTlhOS00Y2MyLThmZDQtMTg2YzBiZGI5MzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPkw8yAORpaKJJoTaS5fK0xsg9fMV8phZOcm Y8KssWKjQDDRtfsZayfIR09Ccqw9d6OB3vf+sLSCFhuxZI6mdjypX0N2CXGPjb8l i7LmRFiNsOZ5IVTJLbF1VBLs5ce4qi790nEYPW3b4SlMSO7WEsfqhERruGWEaYqZ H8jNZxTi/YCbIRnjLWphpySh4nFKhXUa35Iu+YnJYCkSfZPLt3r0OOM5VjP54VSB VTuwQ694YiDk0NGKgGP24Io8JYSkhkzvMnNxMxejGiEdcxKmE7hInrJTJh+Iwty1 DMkXrUvfMfZQmFL0g7vesdSKQy6n1MjcuqvtxuuAgseXzOk53QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0hiKv/sxma8Bna1bM/JFkaEw3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0 ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRkMGM4YmViNDgvNWNlMmE5MzEtMmVmZC0z ZGRiLWJmZmUtMmE3YjRlODViODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDE4NGU0NzEtMDgwYS00ZTU0LWJm OTQtNjBkZDBjOGJlYjQ4L2QxODRlNDcxLTA4MGEtNGU1NC1iZjk0LTYwZGQwYzhi ZWI0OC5jcmwwHwYDVR0jBBgwFoAUgirGXwV3ltYS+ySG5nLGEqW2QVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMTg0ZTQ3MS0wODBhLTRlNTQtYmY5NC02MGRk MGM4YmViNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJEBst83DRXi70WHLnsG7+z1S/UJ1YYm+1ht6FVK+iHdqyhTj+JgXoi etiFeziuQ0X9zIBdNDka0ObjqwHav5T4DqESrYG/yJioKT5syF2Uz0dh6eosEYYP 0+rroqFAxr1W2/kb1Io64L4DRjkov9ceFss7e2x+LAaHhFZsnKb0/EsK5i9OXGNN w9WPQbM28OanIcmIg5XS7KPey9uQfBw1Xqs1VdDzwmGsCMFe/Ew50jwoNr2fe2jr 59b9baBkJFfnH1Slm0Nc8eyL/ZNCu3aBrlJW3beHN4HGVP6wVBpaT81F72iQKgHX wAaJfeqLdnBOCdr/+Qrjvo8IUXT6TTw= -----END CERTIFICATE-----Generated at Sun Sep 27 01:53:39 2026 by rpki-client