$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3571203b-fff5-31a1-883b-805878116375.roa File: 3571203b-fff5-31a1-883b-805878116375.roa (raw, json) Hash identifier: z+jjUYoI5Bm+0E4sykrgNHCUfFanrKcKhEGpUmRNCCI= Subject key identifier: 32:8D:35:2B:C5:B3:F7:18:A0:E2:60:D0:DC:88:5D:5E:A8:4E:DF:08 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F562377912E5EAFB1B65B5C00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3571203b-fff5-31a1-883b-805878116375.roa Signing time: Tue 29 Sep 2026 14:06:26 +0000 ROA not before: Tue 29 Sep 2026 14:06:26 +0000 ROA not after: Mon 28 Dec 2026 15:06:26 +0000 asID: 62904 IP address blocks: 208.89.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:23:77:91:2e:5e:af:b1:b6:5b:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 14:06:26 2026 GMT Not After : Dec 28 15:06:26 2026 GMT Subject: CN=8bae6200-7835-4eb9-a15b-5589d9b5c3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b5:ec:ee:28:de:cf:71:e0:64:1f:6f:ba:db: 8c:8a:ff:59:aa:0b:20:78:6b:f7:28:ca:37:05:89: db:ea:1b:10:fa:4b:45:a3:b3:8a:96:4a:b8:f1:83: 6d:97:bc:d1:88:5f:06:e6:70:b2:9d:d8:76:4f:f1: d0:67:a6:9b:ba:35:af:dd:af:06:c8:2e:30:47:d6: f6:ee:b6:9b:a3:87:c4:d3:f2:bf:de:0f:09:cb:b1: 69:9c:ba:34:3f:32:1f:0d:e3:24:34:4e:07:f2:a2: 4d:e1:97:63:34:6a:44:98:02:85:87:91:d8:d4:87: 02:57:36:cf:30:01:18:98:6b:ea:65:0b:56:60:e6: 3f:a1:fb:8a:7a:16:3b:32:2e:cc:2f:c9:11:fb:25: 85:42:10:a4:c8:3c:d6:f8:21:ad:7c:51:ae:f4:ae: bc:01:11:04:6f:f4:be:13:b3:d3:27:65:28:d7:2d: 30:26:9d:eb:7c:9e:d1:ee:ce:0b:ba:2b:0c:f0:57: 40:42:7a:a4:37:8c:7d:08:46:da:3c:9a:e5:fd:3d: f1:30:e0:39:eb:09:79:f6:7c:06:3b:64:58:bd:90: b9:03:0d:30:f3:18:51:93:08:dd:00:27:af:e3:a2: d0:8b:8b:c4:96:79:cc:3d:44:eb:4f:bd:2b:86:11: c1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8D:35:2B:C5:B3:F7:18:A0:E2:60:D0:DC:88:5D:5E:A8:4E:DF:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3571203b-fff5-31a1-883b-805878116375.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 208.89.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:40:75:b1:51:03:0e:e3:e5:e5:91:c7:33:34:48:c2:e3:38: ff:28:18:a9:c7:f7:74:3f:af:ae:05:4e:86:ce:30:d9:11:62: 2a:4f:05:b1:4f:0d:46:26:a0:48:53:c8:ab:49:6d:bc:a0:18: 0a:cf:be:44:a7:9e:3f:75:41:27:d7:b5:ce:c2:1c:33:c6:3e: 03:17:8a:91:74:fc:cd:3f:13:19:bf:00:b9:c6:b3:9b:9f:4b: 1e:df:b3:52:bf:a8:d6:32:b9:c2:b4:e4:d7:61:b9:55:02:a6: 66:9f:85:3c:23:60:16:f5:8c:10:ef:d4:57:c7:64:00:c5:a0: b9:72:2e:28:12:37:3d:71:cc:be:2a:85:8d:16:29:64:32:17: cd:df:54:a6:ba:d5:10:59:e3:00:18:8b:54:86:d3:df:ba:21: 7c:dc:52:3d:c0:fe:35:1c:50:1c:b9:2b:06:34:c6:dd:ee:59: e7:a1:f5:bd:4e:34:55:06:85:58:cb:e9:f0:3e:06:9f:df:81: 4e:e6:03:7a:01:3d:8d:ba:c6:4c:db:89:e2:8b:c5:94:05:dc: 46:9d:51:18:88:e5:64:1a:56:1b:22:2c:27:fb:87:bf:a0:76: 48:a7:b3:32:4e:be:79:13:dc:b2:15:63:6a:6b:bd:7c:30:74: a5:80:bf:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WI3eRLl6vsbZbXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTE0MDYyNloXDTI2MTIyODE1MDYyNlowLzEtMCsGA1UEAxMk OGJhZTYyMDAtNzgzNS00ZWI5LWExNWItNTU4OWQ5YjVjM2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLXs7ijez3HgZB9vutuMiv9ZqgsgeGv3KMo3 BYnb6hsQ+ktFo7OKlkq48YNtl7zRiF8G5nCyndh2T/HQZ6abujWv3a8GyC4wR9b2 7rabo4fE0/K/3g8Jy7FpnLo0PzIfDeMkNE4H8qJN4ZdjNGpEmAKFh5HY1IcCVzbP MAEYmGvqZQtWYOY/ofuKehY7Mi7ML8kR+yWFQhCkyDzW+CGtfFGu9K68AREEb/S+ E7PTJ2Uo1y0wJp3rfJ7R7s4LuisM8FdAQnqkN4x9CEbaPJrl/T3xMOA56wl59nwG O2RYvZC5Aw0w8xhRkwjdACev46LQi4vElnnMPUTrT70rhhHBmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKNNSvFs/cYoOJg0NyIXV6oTt8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzU3MTIwM2ItZmZmNS0z MWExLTg4M2ItODA1ODc4MTE2Mzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FndMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9AdbFRAw7j5eWRxzM0SMLjOP8oGKnH93Q/r64FTobOMNkRYipPBbFP DUYmoEhTyKtJbbygGArPvkSnnj91QSfXtc7CHDPGPgMXipF0/M0/Exm/ALnGs5uf Sx7fs1K/qNYyucK05NdhuVUCpmafhTwjYBb1jBDv1FfHZADFoLlyLigSNz1xzL4q hY0WKWQyF83fVKa61RBZ4wAYi1SG09+6IXzcUj3A/jUcUBy5KwY0xt3uWeeh9b1O NFUGhVjL6fA+Bp/fgU7mA3oBPY26xkzbieKLxZQF3EadURiI5WQaVhsiLCf7h7+g dkinszJOvnkT3LIVY2prvXwwdKWAv1k= -----END CERTIFICATE-----Generated at Sun Oct 11 07:48:38 2026 by rpki-client