$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/25a2c4b8-2eaa-3c8f-b7f3-a1ec9547056a.roa File: 25a2c4b8-2eaa-3c8f-b7f3-a1ec9547056a.roa (raw, json) Hash identifier: BStUfhUZvxXfuEE2ceNWNUQjw0ASWAQqkX3UGoxl2iM= Subject key identifier: 7F:12:62:93:FD:0D:BB:3C:AB:B5:26:4E:AC:DD:8D:93:41:E7:CD:87 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584F4542821ECFE4D64691FD7150 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/25a2c4b8-2eaa-3c8f-b7f3-a1ec9547056a.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 64249 IP address blocks: 208.118.228.160/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:82:1e:cf:e4:d6:46:91:fd:71:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=6083f23c-9bab-4191-85f4-4a16d9cfc090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:24:25:59:b6:04:3e:34:cf:8a:d1:a2:d2:38: d0:99:f3:1b:f2:62:62:7d:bc:a7:31:1e:b0:cc:0d: e8:e0:83:bc:03:7d:c2:17:e5:4a:cf:7f:53:0b:08: 66:2b:75:7b:e7:e9:7d:3a:af:05:7b:1e:5e:75:2a: dc:b5:c3:3c:a7:91:94:1f:19:98:ee:80:c5:5e:e7: 5c:05:9c:bb:ee:bb:25:c0:ed:b6:17:2d:f1:5b:b4: ad:06:0d:fb:cb:0c:41:36:08:1a:3e:95:1e:43:9c: fe:8e:8b:5c:9e:63:39:da:a8:ee:21:ac:de:af:26: 98:18:75:ad:7c:f0:e5:41:02:ea:de:34:e8:4e:85: 1a:0c:7f:53:bf:1d:4b:90:a8:f2:d7:aa:f4:42:91: ce:95:a7:65:4f:1b:1f:83:d3:e6:31:a8:99:f0:46: 4d:82:81:96:e7:66:7e:94:4c:1f:95:00:44:eb:7f: 17:da:dc:8c:1c:ad:71:9e:bc:31:8d:2e:e4:88:9c: 10:3c:41:28:3d:81:fc:7a:40:e3:8c:10:f6:fa:68: 67:b6:00:58:7e:0e:3c:c3:00:58:24:19:73:aa:1d: 9e:02:28:35:07:41:05:9e:a8:47:3f:16:73:04:e9: 24:66:2b:e2:d3:50:8c:87:f8:a5:fc:f3:10:de:75: 9a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:12:62:93:FD:0D:BB:3C:AB:B5:26:4E:AC:DD:8D:93:41:E7:CD:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/25a2c4b8-2eaa-3c8f-b7f3-a1ec9547056a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.228.160/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:58:11:d5:8c:42:84:4c:64:25:8e:59:c2:08:eb:b3:44:4b: e5:80:35:ca:45:54:52:ed:86:a4:5f:9c:27:d0:1f:ad:b3:d3: 6d:e6:a5:66:45:65:cf:92:df:a1:58:87:01:e1:a9:42:e7:db: 42:80:fb:a8:66:90:4e:e8:d8:20:c9:4a:22:1f:9e:e3:22:b7: e8:15:8b:b2:7c:3d:0a:00:f1:79:8b:e3:92:44:c8:e7:c7:7a: 74:4a:4c:f4:1a:b4:94:e0:57:61:3c:18:1f:12:80:27:71:06: e1:fb:91:a8:91:43:a9:f5:d7:fe:8d:c6:af:73:5b:b3:ea:31: 32:f0:9a:f4:37:35:8a:be:26:78:a5:ea:ca:bb:14:07:ca:de: 40:c8:bc:7c:53:0c:14:a1:38:1c:7e:85:c2:de:ac:de:7d:95: 67:cb:93:11:fc:07:d2:3e:c6:78:e0:9d:96:2b:27:17:bf:e3: bf:81:1e:57:9f:d1:8b:76:75:40:81:9d:1e:7a:35:ed:fe:1f: 00:e9:39:b6:d2:1d:45:45:f7:14:fc:54:92:d0:a3:2a:99:23: 30:fe:bd:d9:06:fd:48:1a:55:f1:72:9a:ec:71:8d:2a:82:bc: 2c:9f:fd:bd:0c:04:25:ac:77:7e:d2:73:25:bb:44:2f:71:a9: b0:19:99:40 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9FQoIez+TWRpH9cVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk NjA4M2YyM2MtOWJhYi00MTkxLTg1ZjQtNGExNmQ5Y2ZjMDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCQlWbYEPjTPitGi0jjQmfMb8mJifbynMR6w zA3o4IO8A33CF+VKz39TCwhmK3V75+l9Oq8Fex5edSrctcM8p5GUHxmY7oDFXudc BZy77rslwO22Fy3xW7StBg37ywxBNggaPpUeQ5z+jotcnmM52qjuIazeryaYGHWt fPDlQQLq3jToToUaDH9Tvx1LkKjy16r0QpHOladlTxsfg9PmMaiZ8EZNgoGW52Z+ lEwflQBE638X2tyMHK1xnrwxjS7kiJwQPEEoPYH8ekDjjBD2+mhntgBYfg48wwBY JBlzqh2eAig1B0EFnqhHPxZzBOkkZivi01CMh/il/PMQ3nWa4QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFH8SYpP9Dbs8q7UmTqzdjZNB582HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvMjVhMmM0YjgtMmVhYS0z YzhmLWI3ZjMtYTFlYzk1NDcwNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0HbkoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCYWBHVjEKETGQljlnCCOuzREvlgDXKRVRS7YakX5wn0B+ts9Nt5qVm RWXPkt+hWIcB4alC59tCgPuoZpBO6NggyUoiH57jIrfoFYuyfD0KAPF5i+OSRMjn x3p0Skz0GrSU4FdhPBgfEoAncQbh+5GokUOp9df+jcavc1uz6jEy8Jr0NzWKviZ4 perKuxQHyt5AyLx8UwwUoTgcfoXC3qzefZVny5MR/AfSPsZ44J2WKycXv+O/gR5X n9GLdnVAgZ0eejXt/h8A6Tm20h1FRfcU/FSS0KMqmSMw/r3ZBv1IGlXxcprscY0q grwsn/29DAQlrHd+0nMlu0QvcamwGZlA -----END CERTIFICATE-----Generated at Fri Sep 25 00:46:39 2026 by rpki-client