$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa File: 0f9a93b5-1896-3553-add4-16df12179fd0.roa (raw, json) Hash identifier: EauuI65ftK7NhMMC+DiUpBSrV/bs1N4a1gUE8tqlhIw= Subject key identifier: BC:95:59:77:AF:65:1F:77:58:47:B9:1D:E5:8B:C4:58:7C:F7:AD:C1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F71EDBF558656512C2B8B7480 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 208.214.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:bf:55:86:56:51:2c:2b:8b:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=784c3753-7c76-485c-a0ff-cfdb8af95203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c9:b3:f3:60:a9:11:6f:6a:93:66:8f:1a:b5: 43:ef:c0:dd:64:e8:1a:a1:ce:88:01:2f:df:04:74: 4b:4b:ad:7d:b8:f6:15:99:73:79:05:36:8c:97:2f: 46:19:b0:7b:f7:e5:85:0e:94:37:e8:df:23:c1:96: 05:a2:0f:b4:64:20:fd:4f:b7:11:e3:74:a8:f3:6b: 6d:97:24:f4:18:7e:f4:87:27:28:51:df:48:94:51: 9f:f1:c3:12:de:e2:11:4f:76:4c:05:f6:d6:6e:52: 6d:5c:5f:66:68:b0:33:00:6a:28:4e:9d:6b:3e:9e: 66:f4:31:b1:28:3c:3e:c5:a9:8a:25:54:6a:53:f6: f8:25:5a:e5:73:81:1c:97:42:dc:4b:72:ac:0b:78: 07:1c:60:1c:dc:3d:45:fc:00:73:2a:e1:91:cd:07: cc:50:5e:01:85:4b:fe:c5:f0:f4:81:33:72:20:03: 53:1e:3c:82:d3:0f:0b:e9:cf:54:c3:de:9b:5c:6a: 91:7c:60:47:cc:db:96:61:ee:82:4a:6d:65:b3:69: 21:28:64:5c:26:ca:d0:f6:37:2c:5c:fe:67:e1:0c: 9d:67:92:07:99:4b:2e:68:26:93:fa:aa:1e:da:fa: 2b:c9:9d:40:43:e4:ce:97:bf:4d:de:22:6f:06:09: fd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:95:59:77:AF:65:1F:77:58:47:B9:1D:E5:8B:C4:58:7C:F7:AD:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f9a93b5-1896-3553-add4-16df12179fd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.214.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:30:74:e1:62:7c:51:0f:2d:bf:bc:eb:80:a5:f3:d8:9e:c7: 81:11:f0:01:f8:b7:c2:fd:d3:9c:6c:b4:df:73:38:9b:ea:37: 9f:de:02:18:98:9a:02:92:1e:14:45:44:83:de:a8:6f:92:7f: d6:93:d5:0b:f6:79:de:5b:d2:1b:2a:93:39:70:ba:58:2e:e7: e7:c7:ed:90:7b:65:59:3d:8d:b3:e8:e9:df:24:e2:59:ef:61: d3:94:19:75:af:27:2b:52:3f:ea:9d:a5:de:63:6b:ec:ee:01: 41:87:2f:84:cf:17:0e:9a:c5:fb:0e:dc:4e:9c:cc:0d:8a:e9: d2:de:dc:61:0f:16:01:b4:db:a4:c0:86:5e:68:a6:64:75:d6: 4a:b3:a4:48:af:02:17:70:7f:cc:81:f4:27:9a:6a:e1:9c:71: 41:97:b9:cd:7e:8a:5a:b7:b3:83:c5:54:c8:57:09:d9:d7:72: b8:f9:0f:13:fd:81:bc:5f:a8:fd:ac:3c:be:59:c5:e4:d4:78: a5:0c:c0:85:5a:70:ea:7b:ec:db:b7:5c:06:6c:3b:b0:98:2d: f4:a8:e3:db:22:5f:2e:08:19:d1:4d:62:19:74:da:dc:cf:59: 2d:30:4a:8a:19:e5:73:00:23:f7:08:3a:d3:25:6f:84:03:92: c7:ba:18:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7b9VhlZRLCuLdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk Nzg0YzM3NTMtN2M3Ni00ODVjLWEwZmYtY2ZkYjhhZjk1MjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMmz82CpEW9qk2aPGrVD78DdZOgaoc6IAS/f BHRLS619uPYVmXN5BTaMly9GGbB79+WFDpQ36N8jwZYFog+0ZCD9T7cR43So82tt lyT0GH70hycoUd9IlFGf8cMS3uIRT3ZMBfbWblJtXF9maLAzAGooTp1rPp5m9DGx KDw+xamKJVRqU/b4JVrlc4Ecl0LcS3KsC3gHHGAc3D1F/ABzKuGRzQfMUF4BhUv+ xfD0gTNyIANTHjyC0w8L6c9Uw96bXGqRfGBHzNuWYe6CSm1ls2khKGRcJsrQ9jcs XP5n4QydZ5IHmUsuaCaT+qoe2voryZ1AQ+TOl79N3iJvBgn9iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyVWXevZR93WEe5HeWLxFh8963BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMGY5YTkzYjUtMTg5Ni0z NTUzLWFkZDQtMTZkZjEyMTc5ZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0NbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAwdOFifFEPLb+864Cl89iex4ER8AH4t8L905xstN9zOJvqN5/eAhiY mgKSHhRFRIPeqG+Sf9aT1Qv2ed5b0hsqkzlwulgu5+fH7ZB7ZVk9jbPo6d8k4lnv YdOUGXWvJytSP+qdpd5ja+zuAUGHL4TPFw6axfsO3E6czA2K6dLe3GEPFgG026TA hl5opmR11kqzpEivAhdwf8yB9CeaauGccUGXuc1+ilq3s4PFVMhXCdnXcrj5DxP9 gbxfqP2sPL5ZxeTUeKUMwIVacOp77Nu3XAZsO7CYLfSo49siXy4IGdFNYhl02tzP WS0wSooZ5XMAI/cIOtMlb4QDkse6GJQ= -----END CERTIFICATE-----Generated at Sun Oct 11 15:24:14 2026 by rpki-client