$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9ddbd721-8ac8-32a2-952d-7d47676e7d47.roa File: 9ddbd721-8ac8-32a2-952d-7d47676e7d47.roa (raw, json) Hash identifier: Rvr+h8UAIMhaimiGqKbW9Xwl+TPXuvIw5vTis8wDRX0= Subject key identifier: EA:50:09:01:65:5C:0C:71:56:35:82:76:9F:49:34:F0:95:A2:DB:9F Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F5623D2D16F1448DCDD569400 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9ddbd721-8ac8-32a2-952d-7d47676e7d47.roa Signing time: Tue 29 Sep 2026 14:07:09 +0000 ROA not before: Tue 29 Sep 2026 14:07:09 +0000 ROA not after: Mon 28 Dec 2026 15:07:09 +0000 asID: 62904 IP address blocks: 208.89.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:56:23:d2:d1:6f:14:48:dc:dd:56:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 14:07:09 2026 GMT Not After : Dec 28 15:07:09 2026 GMT Subject: CN=394c1ac1-c7e9-48ed-8b48-a8bd642a8abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4b:9b:56:2a:c3:d1:ef:7d:8b:12:04:52:77: c2:f5:19:36:3c:45:79:6a:cd:84:0c:b5:8c:11:4d: 2b:99:9f:99:b5:59:e9:99:79:99:e8:cc:5f:b2:18: 0e:96:9d:81:64:da:b6:65:c4:64:ae:a7:41:48:d6: e1:40:50:ba:f0:7c:35:d3:20:69:e3:34:b1:78:3c: 40:3d:68:72:e9:84:49:32:98:a5:8e:cb:af:de:af: 2b:1a:c6:89:28:53:d0:8a:66:0d:dd:f0:6a:41:2a: fa:b4:a4:b0:51:6f:6a:7c:49:93:e2:58:f0:94:e5: 00:d1:2f:68:75:e8:cd:69:4a:06:bf:54:3a:b0:07: c6:95:ae:85:b2:a0:35:4d:21:b0:81:91:75:79:4f: c7:8e:95:0a:57:3d:19:b5:a6:e6:12:1e:a4:d8:32: fa:4d:b9:1d:79:a5:ed:f7:fe:9d:6f:28:6e:67:5c: 6d:98:04:be:96:20:b4:16:c9:31:39:ba:73:66:2a: 9d:61:14:71:ef:ec:7f:43:9b:3b:b8:e1:3b:a8:79: a5:64:97:e1:58:a4:51:0b:d9:cd:a2:da:6e:69:7f: c4:dd:65:75:75:a1:9c:52:da:bf:1f:4c:20:e5:42: 6e:d1:ed:83:f1:60:3e:0b:84:2f:63:3a:bd:6e:ae: 94:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:50:09:01:65:5C:0C:71:56:35:82:76:9F:49:34:F0:95:A2:DB:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9ddbd721-8ac8-32a2-952d-7d47676e7d47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 208.89.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:e7:e6:0a:0c:0e:0b:78:7b:07:e6:68:34:b6:51:54:88:2e: 36:26:a4:49:5a:0b:54:da:94:dd:ef:31:a0:7d:27:6a:59:d5: 78:2d:97:72:1b:26:4f:4f:39:d3:50:35:23:91:ac:ff:66:7b: a4:85:b5:a9:1a:ee:b8:eb:58:29:10:c0:a7:df:19:5a:2f:01: 4a:b8:e1:13:39:59:6d:fa:8d:e2:7b:0f:86:34:82:3d:78:78: 8b:62:31:a7:45:c6:5b:f8:55:73:14:ae:2a:e0:f0:8f:ec:4b: 67:1d:71:6b:ff:7b:dc:8d:ce:57:4a:41:1e:0e:1d:9a:3d:18: da:3d:8e:4b:0d:9f:da:88:43:98:ba:85:8f:e5:51:0e:74:a8: 75:63:a4:a7:e6:03:e6:51:19:80:68:47:31:2b:94:0a:e0:2e: 1d:05:4f:58:52:cf:de:14:87:f1:43:d6:8a:1c:59:d3:02:81: 66:04:57:83:c0:8a:23:a0:9f:48:89:81:ff:c7:90:da:19:ed: 0d:56:42:09:5b:19:ce:61:bd:88:52:c1:cc:01:13:18:e2:db: 32:d7:95:1a:98:fe:67:ea:58:1f:91:be:50:63:db:23:7b:74: 4c:75:90:55:31:7d:8a:71:24:29:4f:ea:af:70:17:d6:82:c6: 03:10:5b:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9WI9LRbxRI3N1WlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTE0MDcwOVoXDTI2MTIyODE1MDcwOVowLzEtMCsGA1UEAxMk Mzk0YzFhYzEtYzdlOS00OGVkLThiNDgtYThiZDY0MmE4YWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00ubVirD0e99ixIEUnfC9Rk2PEV5as2EDLWM EU0rmZ+ZtVnpmXmZ6MxfshgOlp2BZNq2ZcRkrqdBSNbhQFC68Hw10yBp4zSxeDxA PWhy6YRJMpiljsuv3q8rGsaJKFPQimYN3fBqQSr6tKSwUW9qfEmT4ljwlOUA0S9o dejNaUoGv1Q6sAfGla6FsqA1TSGwgZF1eU/HjpUKVz0ZtabmEh6k2DL6TbkdeaXt 9/6dbyhuZ1xtmAS+liC0FskxObpzZiqdYRRx7+x/Q5s7uOE7qHmlZJfhWKRRC9nN otpuaX/E3WV1daGcUtq/H0wg5UJu0e2D8WA+C4QvYzq9bq6UfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpQCQFlXAxxVjWCdp9JNPCVotufMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOWRkYmQ3MjEtOGFjOC0z MmEyLTk1MmQtN2Q0NzY3NmU3ZDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzn5goMDgt4ewfmaDS2UVSILjYmpElaC1TalN3vMaB9J2pZ1Xgtl3Ib Jk9POdNQNSORrP9me6SFtaka7rjrWCkQwKffGVovAUq44RM5WW36jeJ7D4Y0gj14 eItiMadFxlv4VXMUrirg8I/sS2cdcWv/e9yNzldKQR4OHZo9GNo9jksNn9qIQ5i6 hY/lUQ50qHVjpKfmA+ZRGYBoRzErlArgLh0FT1hSz94Uh/FD1oocWdMCgWYEV4PA iiOgn0iJgf/HkNoZ7Q1WQglbGc5hvYhSwcwBExji2zLXlRqY/mfqWB+RvlBj2yN7 dEx1kFUxfYpxJClP6q9wF9aCxgMQW+k= -----END CERTIFICATE-----Generated at Sun Oct 11 10:11:13 2026 by rpki-client