$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/43c9ea79-5e0a-398e-bcc1-8ce8a9ace6f4.roa File: 43c9ea79-5e0a-398e-bcc1-8ce8a9ace6f4.roa (raw, json) Hash identifier: BdK/n2EJSqdQdOA1lz13vmqmmcnG43IPfGkKZulp/XY= Subject key identifier: 57:B0:0B:3D:1B:8C:A0:E2:B7:6C:8A:85:04:A0:99:BD:9B:22:C4:5C Certificate issuer: /CN=187ea578-167a-4040-baae-c4022f6738f1 Certificate serial: 010D0C9F4328584EE921F323A1ACD8000B257D00 Authority key identifier: 13:79:70:F8:E5:2B:42:94:84:41:6E:74:81:05:D7:B7:F9:50:CF:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/43c9ea79-5e0a-398e-bcc1-8ce8a9ace6f4.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 22789 IP address blocks: 208.69.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/187ea578-167a-4040-baae-c4022f6738f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/187ea578-167a-4040-baae-c4022f6738f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:f3:23:a1:ac:d8:00:0b:25:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=187ea578-167a-4040-baae-c4022f6738f1 Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=0eccc003-576a-481d-82e7-768bd5cd4913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0c:dd:ef:f1:dd:10:59:c3:21:e2:7f:08:ad: 7f:f6:40:38:1b:35:70:7b:33:1d:ba:84:37:47:76: 0b:85:ba:28:b5:03:33:0f:76:b3:0a:9b:41:0b:f0: 2c:3c:6f:10:35:85:2f:07:e9:a2:8e:bd:ca:a0:ca: e6:00:cc:64:50:94:84:8e:15:a0:c9:be:7e:7c:ef: 74:7a:b0:34:dd:55:b5:42:c9:b6:03:b0:83:c7:3e: d4:e3:77:9e:8b:03:60:4e:01:02:f6:be:3a:b0:c9: b1:3d:42:83:4b:02:3b:9b:d0:44:6b:4a:02:23:28: d7:dd:f9:c8:ac:d7:d8:a2:c3:e1:77:90:b0:a7:43: 8c:1d:94:41:13:e7:4f:fe:59:03:d5:01:74:af:40: 2e:54:21:67:d7:c8:72:c6:50:5c:3f:c9:d1:84:c7: ca:25:fc:a3:4d:e5:e3:5f:cf:50:7d:bf:13:55:de: ea:da:c6:f9:53:8c:fe:f1:e1:84:2a:92:90:31:de: 5d:6f:8c:d5:f9:31:50:cf:37:d2:3b:07:2f:aa:00: ab:d3:d0:a7:fc:e0:7f:0e:b5:80:4d:ce:0e:e4:58: 08:39:9e:7e:ad:90:3f:a0:99:54:f5:d5:8a:7a:c6: c0:b4:47:42:67:76:b2:72:f8:35:38:dd:5c:7b:86: 8c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B0:0B:3D:1B:8C:A0:E2:B7:6C:8A:85:04:A0:99:BD:9B:22:C4:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/43c9ea79-5e0a-398e-bcc1-8ce8a9ace6f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1/187ea578-167a-4040-baae-c4022f6738f1.crl X509v3 Authority Key Identifier: keyid:13:79:70:F8:E5:2B:42:94:84:41:6E:74:81:05:D7:B7:F9:50:CF:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/187ea578-167a-4040-baae-c4022f6738f1.cer sbgp-ipAddrBlock: critical IPv4: 208.69.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c2:f0:dd:2a:5f:09:4e:40:bd:5c:16:e2:7d:a2:a3:c7:42: 2c:88:ff:16:66:e5:1e:93:f9:29:57:ec:c7:1f:d4:b9:32:c9: 0c:c2:93:5f:a5:1c:c1:cd:50:df:7c:fc:06:a9:ab:e9:b8:9a: 1e:d2:0a:78:aa:76:c4:1b:ec:52:3d:cd:ca:ff:b6:86:40:bc: cc:da:7c:5c:6b:3f:25:7c:d2:fc:c1:ce:c0:26:f3:94:b4:15: 4a:72:e9:c8:18:46:b2:bb:bc:6f:37:7c:6d:21:03:31:23:9b: 0a:b3:bd:63:eb:c8:a2:58:90:12:f9:55:6c:d8:be:3f:b1:0a: 7b:8f:5a:0b:f4:c6:cc:95:47:50:a3:56:dd:64:e3:b0:11:27: de:f7:1a:61:d4:d4:65:83:4f:5b:d8:48:15:e6:1d:35:31:48: cc:d4:f0:e2:c5:a6:3a:26:7b:51:c1:95:97:0d:9a:7f:bf:80: 33:c7:47:37:ff:af:fb:b3:53:a7:a8:25:51:af:f7:13:ca:72: 0d:9e:b5:39:47:71:16:57:16:a4:eb:75:04:35:4b:c5:ec:05: da:a7:d0:cb:03:80:d3:9c:65:0c:9c:8f:fc:01:c8:44:21:b3: e5:99:fb:5d:de:ca:0d:a8:18:67:40:2c:c6:3f:03:91:89:6d: f7:bd:c4:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pIfMjoazYAAslfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg3ZWE1NzgtMTY3YS00MDQwLWJhYWUtYzQwMjJmNjcz OGYxMB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk MGVjY2MwMDMtNTc2YS00ODFkLTgyZTctNzY4YmQ1Y2Q0OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAzd7/HdEFnDIeJ/CK1/9kA4GzVwezMduoQ3 R3YLhbootQMzD3azCptBC/AsPG8QNYUvB+mijr3KoMrmAMxkUJSEjhWgyb5+fO90 erA03VW1Qsm2A7CDxz7U43eeiwNgTgEC9r46sMmxPUKDSwI7m9BEa0oCIyjX3fnI rNfYosPhd5Cwp0OMHZRBE+dP/lkD1QF0r0AuVCFn18hyxlBcP8nRhMfKJfyjTeXj X89Qfb8TVd7q2sb5U4z+8eGEKpKQMd5db4zV+TFQzzfSOwcvqgCr09Cn/OB/DrWA Tc4O5FgIOZ5+rZA/oJlU9dWKesbAtEdCZ3aycvg1ON1ce4aM8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFewCz0bjKDit2yKhQSgmb2bIsRcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xODdl YTU3OC0xNjdhLTQwNDAtYmFhZS1jNDAyMmY2NzM4ZjEvNDNjOWVhNzktNWUwYS0z OThlLWJjYzEtOGNlOGE5YWNlNmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMTg3ZWE1NzgtMTY3YS00MDQwLWJh YWUtYzQwMjJmNjczOGYxLzE4N2VhNTc4LTE2N2EtNDA0MC1iYWFlLWM0MDIyZjY3 MzhmMS5jcmwwHwYDVR0jBBgwFoAUE3lw+OUrQpSEQW50gQXXt/lQz60wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xODdlYTU3OC0xNjdhLTQwNDAtYmFhZS1jNDAy MmY2NzM4ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EXrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfC8N0qXwlOQL1cFuJ9oqPHQiyI/xZm5R6T+SlX7Mcf1LkyyQzCk1+l HMHNUN98/Aapq+m4mh7SCniqdsQb7FI9zcr/toZAvMzafFxrPyV80vzBzsAm85S0 FUpy6cgYRrK7vG83fG0hAzEjmwqzvWPryKJYkBL5VWzYvj+xCnuPWgv0xsyVR1Cj Vt1k47ARJ973GmHU1GWDT1vYSBXmHTUxSMzU8OLFpjome1HBlZcNmn+/gDPHRzf/ r/uzU6eoJVGv9xPKcg2etTlHcRZXFqTrdQQ1S8XsBdqn0MsDgNOcZQycj/wByEQh s+WZ+13eyg2oGGdALMY/A5GJbfe9xIA= -----END CERTIFICATE-----Generated at Fri Oct 9 22:58:55 2026 by rpki-client