$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa File: 7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa (raw, json) Hash identifier: /przwnJ6JPHjB6TwkDNJnalqAqOq4TdNadvpESWDhpI= Subject key identifier: 04:0D:69:05:A7:3A:0E:ED:C0:AA:9D:D7:3D:A7:8F:AE:98:2F:FA:17 Certificate issuer: /CN=db859a2a-df82-4532-a984-71176499699e Certificate serial: 010D0C9F4328584EF182070AFFA273E4343AB000 Authority key identifier: FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 208.83.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:07:0a:ff:a2:73:e4:34:3a:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db859a2a-df82-4532-a984-71176499699e Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=d9f08a75-c992-4b24-8c30-22b27ca19400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:e1:28:73:58:5c:d3:5d:08:2d:16:1b:c9: be:13:e3:c8:fc:6b:c3:20:ba:b2:04:a6:dc:6c:a5: 9a:e6:67:64:a9:f5:be:ba:fd:72:9b:55:7a:c7:27: cb:8f:78:72:88:3c:5a:6e:ba:f7:34:68:ae:74:14: d0:2d:3e:5f:6b:aa:10:a9:13:51:5b:26:a0:2c:e2: 6d:5c:81:1d:26:5a:29:c0:20:2e:09:4f:f4:dc:65: 47:3c:9e:fc:06:dc:6d:65:c2:58:63:3c:c3:be:56: 4d:83:eb:86:b8:18:ee:57:ee:c2:24:e3:f8:a9:17: 44:89:99:c8:ab:3f:64:c2:31:c3:6f:95:37:d9:ef: a8:b3:eb:fe:ed:46:09:66:ac:5e:a0:ce:cc:03:c3: 4c:18:9d:c5:b2:ff:d9:90:cd:5a:50:66:26:2b:b2: 04:c5:a0:44:c9:dc:40:23:94:81:b2:dd:2d:e3:61: b4:42:5e:fb:ac:8b:f1:d7:9f:03:47:57:8f:3e:d9: 67:f7:78:ba:55:db:d7:33:d3:2b:27:e1:3c:1f:9d: 11:e9:6e:11:43:f2:a6:f9:45:d6:9a:db:0f:f9:7f: 78:a0:7e:91:23:86:3f:5b:82:5a:9b:e2:68:83:46: e8:ae:f0:77:f5:64:42:eb:6c:d8:d9:41:35:24:9e: 43:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0D:69:05:A7:3A:0E:ED:C0:AA:9D:D7:3D:A7:8F:AE:98:2F:FA:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/7a3be63b-63c3-3a1f-ab52-434a39d75c95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl X509v3 Authority Key Identifier: keyid:FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer sbgp-ipAddrBlock: critical IPv4: 208.83.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:6a:17:7d:b7:4a:f3:d6:b3:e1:11:91:8a:54:49:a1:14:dc: ac:f2:de:ec:4f:c0:fd:0a:88:e7:b5:24:43:b8:88:56:7a:81: e2:09:31:3a:98:e0:7e:9d:9b:53:63:d2:23:9b:1f:08:9b:00: b4:f1:ff:93:7b:a6:59:d9:79:a4:18:1d:8c:74:c7:65:90:6b: 21:03:a4:61:f8:52:1f:1e:b3:7a:b0:76:78:f3:2e:b0:c0:92: f7:20:1d:45:17:af:7e:b9:55:a3:fd:b7:0d:e2:9c:6a:a5:41: 23:77:40:c7:d9:90:e9:8b:eb:e1:36:7e:81:d6:f2:80:f8:d4: 53:ce:7b:02:2a:22:61:24:b5:fd:10:9c:12:9e:55:55:b5:fb: f8:8a:49:ed:b0:0c:3d:01:c2:8b:f6:23:27:d9:0e:0c:b1:22: f2:ae:67:42:86:be:ca:ab:a4:37:fe:e4:b4:78:48:9d:28:cb: 8e:ee:df:2e:c5:29:48:e7:e8:42:4a:01:c5:df:aa:04:cf:39: 11:d0:7b:d6:4f:5f:b5:62:3c:9a:33:26:cd:ee:78:9f:38:89: cc:71:c3:cb:07:da:ed:0b:7d:7a:84:c2:57:d9:e7:35:64:b9: af:56:d8:4c:f7:e9:64:02:17:05:e4:e1:95:a5:e3:f3:35:32: 8b:dd:fa:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xggcK/6Jz5DQ6sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI4NTlhMmEtZGY4Mi00NTMyLWE5ODQtNzExNzY0OTk2 OTllMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZDlmMDhhNzUtYzk5Mi00YjI0LThjMzAtMjJiMjdjYTE5NDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2THhKHNYXNNdCC0WG8m+E+PI/GvDILqyBKbc bKWa5mdkqfW+uv1ym1V6xyfLj3hyiDxabrr3NGiudBTQLT5fa6oQqRNRWyagLOJt XIEdJlopwCAuCU/03GVHPJ78BtxtZcJYYzzDvlZNg+uGuBjuV+7CJOP4qRdEiZnI qz9kwjHDb5U32e+os+v+7UYJZqxeoM7MA8NMGJ3Fsv/ZkM1aUGYmK7IExaBEydxA I5SBst0t42G0Ql77rIvx158DR1ePPtln93i6VdvXM9MrJ+E8H50R6W4RQ/Km+UXW mtsP+X94oH6RI4Y/W4Jam+Jog0borvB39WRC62zY2UE1JJ5DQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQNaQWnOg7twKqd1z2nj66YL/oXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYjg1 OWEyYS1kZjgyLTQ1MzItYTk4NC03MTE3NjQ5OTY5OWUvN2EzYmU2M2ItNjNjMy0z YTFmLWFiNTItNDM0YTM5ZDc1Yzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGI4NTlhMmEtZGY4Mi00NTMyLWE5 ODQtNzExNzY0OTk2OTllL2RiODU5YTJhLWRmODItNDUzMi1hOTg0LTcxMTc2NDk5 Njk5ZS5jcmwwHwYDVR0jBBgwFoAU/0GuHKgSjWDMIT5f7WFJYq02iV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYjg1OWEyYS1kZjgyLTQ1MzItYTk4NC03MTE3 NjQ5OTY5OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FMPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNqF323SvPWs+ERkYpUSaEU3Kzy3uxPwP0KiOe1JEO4iFZ6geIJMTqY 4H6dm1Nj0iObHwibALTx/5N7plnZeaQYHYx0x2WQayEDpGH4Uh8es3qwdnjzLrDA kvcgHUUXr365VaP9tw3inGqlQSN3QMfZkOmL6+E2foHW8oD41FPOewIqImEktf0Q nBKeVVW1+/iKSe2wDD0Bwov2IyfZDgyxIvKuZ0KGvsqrpDf+5LR4SJ0oy47u3y7F KUjn6EJKAcXfqgTPORHQe9ZPX7ViPJozJs3ueJ84icxxw8sH2u0LfXqEwlfZ5zVk ua9W2Ez36WQCFwXk4ZWl4/M1Movd+nM= -----END CERTIFICATE-----Generated at Wed Sep 30 19:35:56 2026 by rpki-client