$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa File: 9a864864-8b89-3c24-892f-a08a1af18543.roa (raw, json) Hash identifier: aCsCEmKX2NiF6VMKKyCKW7NaBYWeH0jIV0SaW0stO24= Subject key identifier: 89:DE:14:8C:78:56:AA:5D:04:6C:31:30:F9:F6:E1:E4:30:DB:D3:C0 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584F4984ED30E59B0419B98829A0 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 208.68.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:ed:30:e5:9b:04:19:b9:88:29:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=51cd24c7-cf2e-41ad-9de9-f1e8140a0d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9e:3d:70:89:37:ca:3d:1a:67:6c:bc:54:28: 05:4f:b7:b6:c2:a7:da:0a:83:66:02:9d:ae:1d:89: ad:17:ca:8e:f6:4d:42:48:ab:f8:1e:df:ea:0b:4d: 86:39:23:cc:a6:fd:5f:a0:35:b0:6d:9a:f5:4a:c8: 12:6e:fe:d0:53:9e:80:e6:6e:2c:39:0a:35:d9:3c: 0a:f0:76:cf:e5:33:5a:e1:16:59:bb:73:fb:fb:9a: 4f:15:8b:45:c2:88:84:98:9c:91:47:79:f8:21:5d: fe:6d:56:9f:b3:2f:71:b3:52:a9:13:d6:45:00:79: f7:02:e7:69:8b:db:1b:77:d7:5b:8b:99:32:83:09: c1:ad:43:3e:97:4f:92:47:c4:f7:f2:5b:ae:8f:25: 9e:70:0a:53:0f:23:de:72:40:5f:91:46:ff:92:a7: 95:ea:e4:82:35:3f:9d:2c:e3:e7:63:1a:62:77:d5: c1:30:33:52:81:4a:16:71:58:2c:93:53:f4:05:51: 5f:9a:be:a1:8e:2b:be:57:ce:59:1a:15:27:4e:34: 3c:68:fb:4d:40:06:19:68:81:70:53:fc:2b:11:2e: b1:36:ab:91:2d:be:01:db:54:8a:47:ab:ba:e4:1a: 78:ac:55:8f:4d:03:9b:3b:3c:44:d4:84:3d:81:18: d9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DE:14:8C:78:56:AA:5D:04:6C:31:30:F9:F6:E1:E4:30:DB:D3:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:e9:7c:07:8b:4e:06:e5:6d:ac:51:77:76:4b:1e:95:ed:12: 31:fe:d5:3a:d0:76:3e:e2:a1:52:0c:ee:85:2c:06:d8:ca:f5: ea:1d:d8:10:1a:0b:e2:5f:78:97:b9:39:a1:78:c5:23:17:4c: 80:e0:5d:a0:5d:77:8b:8e:38:f1:0d:87:23:9d:e6:fd:6b:95: e7:57:48:76:4f:26:81:65:8d:31:52:b0:a6:de:c0:ee:d6:94: 8a:97:1d:c8:4f:78:15:df:c1:55:c3:37:c8:6e:ce:9f:5f:85: 4c:a7:bf:1f:a7:cf:68:5f:a6:10:be:93:34:9f:be:69:58:93: de:cf:89:da:89:9e:6f:e9:a1:3c:ad:32:2c:51:91:fe:cb:fe: 63:6a:be:42:44:ef:46:d2:fb:c0:ee:a5:19:df:74:33:d8:46: d7:03:dc:23:fa:3e:3e:21:f1:8a:5d:69:90:9f:0f:0b:a1:c0: 49:da:35:11:a3:c4:2f:09:04:89:63:9e:9c:bc:57:65:bc:fa: 98:d5:34:4d:8a:67:1b:4e:24:40:cb:ce:c2:6a:d5:83:bb:f5: 07:8e:c9:bb:07:39:f3:80:23:fc:9e:d5:8d:71:da:6c:3a:42: 71:f4:10:3c:36:dc:92:8e:99:88:c4:3e:a0:80:ac:89:80:95: 07:71:bd:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhO0w5ZsEGbmIKaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTFjZDI0YzctY2YyZS00MWFkLTlkZTktZjFlODE0MGEwZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp49cIk3yj0aZ2y8VCgFT7e2wqfaCoNmAp2u HYmtF8qO9k1CSKv4Ht/qC02GOSPMpv1foDWwbZr1SsgSbv7QU56A5m4sOQo12TwK 8HbP5TNa4RZZu3P7+5pPFYtFwoiEmJyRR3n4IV3+bVafsy9xs1KpE9ZFAHn3Audp i9sbd9dbi5kygwnBrUM+l0+SR8T38luujyWecApTDyPeckBfkUb/kqeV6uSCNT+d LOPnYxpid9XBMDNSgUoWcVgsk1P0BVFfmr6hjiu+V85ZGhUnTjQ8aPtNQAYZaIFw U/wrES6xNquRLb4B21SKR6u65Bp4rFWPTQObOzxE1IQ9gRjZPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIneFIx4VqpdBGwxMPn24eQw29PAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWE4NjQ4NjQtOGI4OS0z YzI0LTg5MmYtYTA4YTFhZjE4NTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTpfAeLTgblbaxRd3ZLHpXtEjH+1TrQdj7ioVIM7oUsBtjK9eod2BAa C+JfeJe5OaF4xSMXTIDgXaBdd4uOOPENhyOd5v1rledXSHZPJoFljTFSsKbewO7W lIqXHchPeBXfwVXDN8huzp9fhUynvx+nz2hfphC+kzSfvmlYk97PidqJnm/poTyt MixRkf7L/mNqvkJE70bS+8DupRnfdDPYRtcD3CP6Pj4h8YpdaZCfDwuhwEnaNRGj xC8JBIljnpy8V2W8+pjVNE2KZxtOJEDLzsJq1YO79QeOybsHOfOAI/ye1Y1x2mw6 QnH0EDw23JKOmYjEPqCArImAlQdxvXU= -----END CERTIFICATE-----Generated at Fri Sep 25 19:57:18 2026 by rpki-client