$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf557a1b-b35f-3730-86da-add464e3d46c.roa File: cf557a1b-b35f-3730-86da-add464e3d46c.roa (raw, json) Hash identifier: obQvvJBFdMF53dp+yyoZ2+jqub2keVv+eSFsADxIdxA= Subject key identifier: B5:24:CD:8D:55:7A:57:52:28:60:A8:1D:AA:DD:9B:D6:49:E0:D6:B8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F3FAD44FD4667D4064629DD80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf557a1b-b35f-3730-86da-add464e3d46c.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 14717 IP address blocks: 208.231.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:44:fd:46:67:d4:06:46:29:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=eae64bf0-ba65-40d8-b132-34e423c9ebfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:60:3f:0f:55:34:35:c7:eb:ce:48:ac:cb:fb: 23:4d:d7:8a:23:0a:d8:c6:54:c8:60:23:ad:db:d7: b0:8c:21:dd:27:35:b7:da:a3:2c:cf:07:2d:81:ad: 1c:13:13:5f:ed:bf:70:ac:89:0b:e5:eb:b9:77:3a: 95:13:42:9c:46:25:c6:33:27:74:53:42:c0:58:da: 64:63:15:5e:6f:eb:7b:68:5f:79:40:f5:8a:2f:a4: e0:69:bf:06:9d:7b:70:81:e4:91:cb:de:06:9b:64: 87:89:13:b8:43:d7:52:4e:8f:3e:2e:95:ef:cc:6d: 96:36:66:22:23:9c:33:1c:3d:18:d0:99:6b:82:30: 78:04:b6:d2:e4:20:df:dd:66:48:26:03:ef:a4:21: 5b:84:11:7c:17:b9:ef:c9:31:39:cc:85:7f:cb:eb: 61:22:d8:ab:38:0e:7e:f5:cf:b8:bf:f3:3c:4d:b1: 8f:13:aa:96:cc:92:6f:38:72:00:6e:7d:c6:a8:01: 0c:d9:b7:3e:28:3b:b6:00:1a:15:fc:e0:e4:43:16: 6d:2a:b0:c5:43:35:74:8a:ea:2f:2c:9c:fa:31:e6: b0:48:64:6f:5d:af:51:0a:2e:ca:0c:bd:5c:22:32: 28:84:d3:6c:b3:fc:dd:ee:1d:2e:1d:26:cd:3f:7e: b1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:24:CD:8D:55:7A:57:52:28:60:A8:1D:AA:DD:9B:D6:49:E0:D6:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf557a1b-b35f-3730-86da-add464e3d46c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.231.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:14:d1:08:58:d0:74:31:ee:78:3a:58:ac:ec:f3:fa:bf:3d: 0f:64:e2:4b:b4:52:fa:8a:04:a0:3e:e0:ce:54:1a:5b:2d:7e: 70:03:4e:18:ec:a4:c4:27:92:73:e8:9c:98:af:e6:f3:87:e3: 76:bd:db:4d:1d:6d:5f:00:60:eb:ab:20:34:03:86:e9:a4:62: 96:53:b1:de:b2:2e:0c:8c:60:18:ae:0f:95:79:a2:e0:96:6f: 6e:09:b8:72:5d:13:12:da:b4:e5:a9:a3:65:29:0b:51:80:be: e1:88:b1:ca:cf:90:7c:62:82:ee:52:3a:80:7c:6c:22:47:06: 96:60:83:03:e9:d1:9b:42:63:4b:07:86:f1:0f:b2:ce:df:39: 8d:3d:39:7c:a6:25:88:52:e8:9f:57:63:b9:45:2e:f4:46:8f: 55:db:a5:14:a6:41:6e:3c:ad:94:42:5d:8e:84:6f:5f:04:d9: 8a:4d:f1:0a:06:b4:f6:4e:bf:6d:70:69:08:c5:fd:5b:75:a0: 7f:2f:9f:2f:8f:78:a1:6c:0c:50:c5:ee:85:47:7f:d0:29:9a: 47:dc:e6:a4:fe:1a:cc:2f:23:ed:53:3f:69:fa:33:48:22:df: 8b:44:c7:c3:80:14:cb:19:5f:f2:82:ad:82:21:d2:b9:ce:12: 0d:60:3d:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUT9RmfUBkYp3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZWFlNjRiZjAtYmE2NS00MGQ4LWIxMzItMzRlNDIzYzllYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWA/D1U0Ncfrzkisy/sjTdeKIwrYxlTIYCOt 29ewjCHdJzW32qMszwctga0cExNf7b9wrIkL5eu5dzqVE0KcRiXGMyd0U0LAWNpk YxVeb+t7aF95QPWKL6Tgab8GnXtwgeSRy94Gm2SHiRO4Q9dSTo8+LpXvzG2WNmYi I5wzHD0Y0JlrgjB4BLbS5CDf3WZIJgPvpCFbhBF8F7nvyTE5zIV/y+thItirOA5+ 9c+4v/M8TbGPE6qWzJJvOHIAbn3GqAEM2bc+KDu2ABoV/ODkQxZtKrDFQzV0iuov LJz6MeawSGRvXa9RCi7KDL1cIjIohNNss/zd7h0uHSbNP36xcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUkzY1VeldSKGCoHardm9ZJ4Na4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2Y1NTdhMWItYjM1Zi0z NzMwLTg2ZGEtYWRkNDY0ZTNkNDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0OfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALcU0QhY0HQx7ng6WKzs8/q/PQ9k4ku0UvqKBKA+4M5UGlstfnADThjs pMQnknPonJiv5vOH43a9200dbV8AYOurIDQDhumkYpZTsd6yLgyMYBiuD5V5ouCW b24JuHJdExLatOWpo2UpC1GAvuGIscrPkHxigu5SOoB8bCJHBpZggwPp0ZtCY0sH hvEPss7fOY09OXymJYhS6J9XY7lFLvRGj1XbpRSmQW48rZRCXY6Eb18E2YpN8QoG tPZOv21waQjF/Vt1oH8vny+PeKFsDFDF7oVHf9Apmkfc5qT+GswvI+1TP2n6M0gi 34tEx8OAFMsZX/KCrYIh0rnOEg1gPQM= -----END CERTIFICATE-----Generated at Sun Sep 27 03:03:44 2026 by rpki-client