$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa File: f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa (raw, json) Hash identifier: ZwhfiRrMVAPuTstiYw7f/hDoP4VRXZjvrVfNmBSaAnQ= Subject key identifier: FD:EA:C0:13:F5:22:96:37:70:82:DA:93:8F:59:90:CD:2C:64:9B:42 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584E8C8A40458BC923022C6BF9C0 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 22267 IP address blocks: 208.118.228.128/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:40:45:8b:c9:23:02:2c:6b:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=46604566-9c94-484f-b2b2-6fc874385291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:da:e9:7b:21:5b:e8:1f:37:d6:25:f7:b5: 0d:5d:42:91:2d:24:30:d6:9b:51:88:ce:66:4c:cf: 0a:b2:5a:b1:f9:74:fb:0a:1c:f1:57:5f:0e:7c:1a: de:30:19:d9:51:06:20:2b:94:bb:fb:42:fe:94:5a: 80:46:ae:8a:79:db:ad:11:1c:f8:ca:7d:07:04:bf: cf:33:2f:6a:2b:ef:a0:6d:4b:d7:fc:47:59:7b:d0: 2a:d4:77:45:93:50:b9:d5:f3:96:8c:94:f3:08:e1: fe:81:47:ea:7a:2b:3d:ce:bf:f0:90:d9:d6:b8:70: 50:7e:b4:db:df:77:50:3d:f4:56:85:c9:b3:02:03: f9:4f:60:71:ac:e9:24:b6:18:2d:4b:cc:76:36:59: 28:81:98:65:13:24:17:b4:75:85:43:a4:7f:f9:7a: f2:2a:06:c5:8e:bb:d7:ae:f7:58:3c:ca:8d:f2:b6: a7:a8:77:89:f1:17:6c:0c:9f:1e:3b:64:be:b2:14: 8a:5b:59:7e:26:1f:2e:44:e6:03:52:a8:11:68:b3: 08:4a:2f:47:b9:da:d7:08:3c:85:ce:d9:28:1f:99: 7b:ff:ea:b3:a6:35:ab:e9:dc:6a:42:6c:2a:ff:f4: 48:ca:8f:47:af:e7:75:99:20:fb:40:70:26:c1:04: 4e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EA:C0:13:F5:22:96:37:70:82:DA:93:8F:59:90:CD:2C:64:9B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/f9e7e933-128d-38a2-b25e-e0a196d59e4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.228.128/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:08:2f:bd:27:ab:40:e6:b3:d3:80:1c:c4:a6:5a:ff:b5:f8: d7:59:45:fc:0b:ce:c8:96:8b:e1:8f:d7:2f:d4:41:5c:a6:39: 89:bc:20:7d:38:6b:98:d9:c4:fe:64:28:8a:fd:a9:05:c0:e4: 71:e0:75:30:f8:e7:35:d7:11:39:82:75:4a:85:cf:6e:05:49: 11:a1:3d:2c:71:2e:d0:e6:74:9e:0e:f2:59:66:e6:b3:ac:6a: 1b:b6:d5:fc:42:25:7c:d1:77:7b:dd:57:e1:49:50:61:80:e3: c8:47:96:d4:b5:ba:57:33:23:d0:43:73:c5:b1:e6:5f:ed:9f: ea:40:1b:8f:9d:9e:52:9b:84:53:e2:fe:f7:11:ea:08:86:d0: e3:4f:32:78:61:a5:30:93:7e:e7:73:2d:7f:6a:97:50:ab:b7: 72:b5:1e:44:f3:31:0c:7b:ad:ce:03:9a:b2:70:ee:9b:fc:3f: 4b:4d:c3:42:25:5e:e3:13:1a:2c:1c:15:b0:6d:05:00:c5:cd: 3c:46:f0:c4:0b:55:86:33:6a:d6:57:0d:bf:6d:5a:19:0d:96: 7b:1b:c8:d2:db:31:59:6f:1e:9e:81:5f:cb:c2:6b:8b:ef:48: 53:b9:81:92:50:61:79:d3:b6:49:f2:83:40:9b:53:1c:3d:08: c6:94:a8:5e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6MikBFi8kjAixr+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk NDY2MDQ1NjYtOWM5NC00ODRmLWIyYjItNmZjODc0Mzg1MjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpXa6XshW+gfN9Yl97UNXUKRLSQw1ptRiM5m TM8Kslqx+XT7ChzxV18OfBreMBnZUQYgK5S7+0L+lFqARq6KedutERz4yn0HBL/P My9qK++gbUvX/EdZe9Aq1HdFk1C51fOWjJTzCOH+gUfqeis9zr/wkNnWuHBQfrTb 33dQPfRWhcmzAgP5T2BxrOkkthgtS8x2NlkogZhlEyQXtHWFQ6R/+XryKgbFjrvX rvdYPMqN8ranqHeJ8RdsDJ8eO2S+shSKW1l+Jh8uROYDUqgRaLMISi9HudrXCDyF ztkoH5l7/+qzpjWr6dxqQmwq//RIyo9Hr+d1mSD7QHAmwQROLwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP3qwBP1IpY3cILak49ZkM0sZJtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvZjllN2U5MzMtMTI4ZC0z OGEyLWIyNWUtZTBhMTk2ZDU5ZTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUE0HbkgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA6CC+9J6tA5rPTgBzEplr/tfjXWUX8C87Ilovhj9cv1EFcpjmJvCB9 OGuY2cT+ZCiK/akFwORx4HUw+Oc11xE5gnVKhc9uBUkRoT0scS7Q5nSeDvJZZuaz rGobttX8QiV80Xd73VfhSVBhgOPIR5bUtbpXMyPQQ3PFseZf7Z/qQBuPnZ5Sm4RT 4v73EeoIhtDjTzJ4YaUwk37ncy1/apdQq7dytR5E8zEMe63OA5qycO6b/D9LTcNC JV7jExosHBWwbQUAxc08RvDEC1WGM2rWVw2/bVoZDZZ7G8jS2zFZbx6egV/LwmuL 70hTuYGSUGF507ZJ8oNAm1McPQjGlKhe -----END CERTIFICATE-----Generated at Fri Jul 24 19:03:10 2026 by rpki-client