$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/bb80b968-9b90-3ffb-9cc9-aaa28c611e97.roa File: bb80b968-9b90-3ffb-9cc9-aaa28c611e97.roa (raw, json) Hash identifier: l7sjEuCHtm3L4znxkk97eoVw8W0FzRxKW9Ibc8+IZIU= Subject key identifier: 31:7F:33:56:62:2B:75:77:E6:E0:87:1A:E5:D3:DC:97:B7:37:CA:A8 Certificate issuer: /CN=48416e40-8d51-4528-a6af-36dd93cf14ee Certificate serial: 010D0C9F4328584F49737FE082FD32845134FA00 Authority key identifier: 58:AC:61:1D:B9:A7:A5:FA:3D:50:CF:48:51:9B:FC:14:FA:A4:C6:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/bb80b968-9b90-3ffb-9cc9-aaa28c611e97.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30625 IP address blocks: 208.66.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:7f:e0:82:fd:32:84:51:34:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48416e40-8d51-4528-a6af-36dd93cf14ee Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2a03c361-bebb-4457-9296-1d909d943603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:42:53:a9:16:20:6a:e3:48:cf:4c:cd:39:15: 64:50:d7:0b:98:38:18:12:36:fe:5f:be:64:30:e4: ec:83:42:ca:45:61:84:6f:63:c2:7e:92:d6:9c:a5: 20:91:9b:b5:b1:ac:8a:df:2d:47:e1:d0:a9:7a:e1: 0f:be:1e:ce:e6:6b:54:2a:92:2e:90:44:cd:5a:57: 3e:27:2b:bf:bb:27:ce:d5:e2:a3:1e:4b:3a:02:e4: 6b:45:7e:2e:c7:27:1f:63:55:c8:47:45:cd:e3:2e: 6c:b2:6e:46:b6:ac:f2:92:5b:f4:a2:ce:03:df:c7: 5e:fa:27:23:4e:98:4d:ba:66:18:ce:3a:52:98:aa: cd:80:9d:f2:cb:07:8f:92:df:28:12:34:dd:f0:45: 9d:08:91:f6:a7:e9:5d:a4:f9:7a:54:af:2e:c5:e6: 06:32:7b:da:ae:97:b1:2a:38:a3:16:42:24:92:94: 45:98:17:5a:93:ac:d0:bb:09:56:a1:b8:9d:13:bf: 5c:07:37:83:68:25:56:9d:f2:5f:6a:05:d3:a7:d3: 93:67:e1:d2:69:97:c6:c9:49:b3:87:f5:0e:9e:7a: 63:1c:65:e1:d1:d0:a4:4c:7a:2c:03:44:83:6a:e4: f9:52:2e:f7:2b:1d:e7:a2:c6:62:80:ec:5f:3a:6a: 67:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7F:33:56:62:2B:75:77:E6:E0:87:1A:E5:D3:DC:97:B7:37:CA:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/bb80b968-9b90-3ffb-9cc9-aaa28c611e97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee/48416e40-8d51-4528-a6af-36dd93cf14ee.crl X509v3 Authority Key Identifier: keyid:58:AC:61:1D:B9:A7:A5:FA:3D:50:CF:48:51:9B:FC:14:FA:A4:C6:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48416e40-8d51-4528-a6af-36dd93cf14ee.cer sbgp-ipAddrBlock: critical IPv4: 208.66.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e7:f5:f5:f9:37:fd:36:4d:a4:9a:68:5c:0e:76:6d:6e:d5: 08:b5:e7:a1:30:ef:bc:3f:01:53:75:35:f9:8e:88:ad:3c:d4: 45:0b:e6:54:68:f6:91:2b:69:0d:1d:85:7d:3d:b5:86:47:ac: 89:ed:d7:c0:ca:92:40:5b:10:e0:45:f2:cc:a7:46:17:bf:36: 2b:13:fb:8e:67:b5:e3:0e:af:c4:a5:40:44:5a:43:da:96:27: 2d:b8:54:29:6a:24:c5:fd:46:dc:c3:b8:eb:10:28:9d:48:e0: 77:22:84:0a:b1:2f:97:b6:8a:07:b9:f0:3d:dd:7f:94:02:c6: 5a:c6:07:ed:fc:87:47:04:75:2c:07:8b:b6:40:43:18:4c:a3: 6c:c4:c5:4a:05:1f:79:33:60:db:39:de:f3:fc:c7:60:18:da: 0b:80:58:c5:9d:6f:bf:7f:5c:55:2e:c6:b1:1a:88:44:ed:22: c4:55:b3:86:ed:83:47:7a:97:0b:bd:cd:fc:67:69:68:f0:23: fc:29:03:e5:ba:a1:0e:7d:e0:6e:72:be:ea:f1:c9:83:51:81: c2:c6:86:08:52:38:8e:4e:05:77:06:fe:9c:c5:c6:47:ff:33: 0b:2b:3c:06:1a:b9:8d:b3:b2:a9:cc:9b:7b:29:fa:b8:11:43: 93:64:f3:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc3/ggv0yhFE0+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg0MTZlNDAtOGQ1MS00NTI4LWE2YWYtMzZkZDkzY2Yx NGVlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmEwM2MzNjEtYmViYi00NDU3LTkyOTYtMWQ5MDlkOTQzNjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUJTqRYgauNIz0zNORVkUNcLmDgYEjb+X75k MOTsg0LKRWGEb2PCfpLWnKUgkZu1sayK3y1H4dCpeuEPvh7O5mtUKpIukETNWlc+ Jyu/uyfO1eKjHks6AuRrRX4uxycfY1XIR0XN4y5ssm5Gtqzyklv0os4D38de+icj TphNumYYzjpSmKrNgJ3yywePkt8oEjTd8EWdCJH2p+ldpPl6VK8uxeYGMnvarpex KjijFkIkkpRFmBdak6zQuwlWobidE79cBzeDaCVWnfJfagXTp9OTZ+HSaZfGyUmz h/UOnnpjHGXh0dCkTHosA0SDauT5Ui73Kx3nosZigOxfOmpn8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDF/M1ZiK3V35uCHGuXT3Je3N8qoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80ODQx NmU0MC04ZDUxLTQ1MjgtYTZhZi0zNmRkOTNjZjE0ZWUvYmI4MGI5NjgtOWI5MC0z ZmZiLTljYzktYWFhMjhjNjExZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDg0MTZlNDAtOGQ1MS00NTI4LWE2 YWYtMzZkZDkzY2YxNGVlLzQ4NDE2ZTQwLThkNTEtNDUyOC1hNmFmLTM2ZGQ5M2Nm MTRlZS5jcmwwHwYDVR0jBBgwFoAUWKxhHbmnpfo9UM9IUZv8FPqkxv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80ODQxNmU0MC04ZDUxLTQ1MjgtYTZhZi0zNmRk OTNjZjE0ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjn9fX5N/02TaSaaFwOdm1u1Qi156Ew77w/AVN1NfmOiK081EUL5lRo 9pEraQ0dhX09tYZHrInt18DKkkBbEOBF8synRhe/NisT+45nteMOr8SlQERaQ9qW Jy24VClqJMX9RtzDuOsQKJ1I4HcihAqxL5e2ige58D3df5QCxlrGB+38h0cEdSwH i7ZAQxhMo2zExUoFH3kzYNs53vP8x2AY2guAWMWdb79/XFUuxrEaiETtIsRVs4bt g0d6lwu9zfxnaWjwI/wpA+W6oQ594G5yvurxyYNRgcLGhghSOI5OBXcG/pzFxkf/ MwsrPAYauY2zsqnMm3sp+rgRQ5Nk85E= -----END CERTIFICATE-----Generated at Sun Oct 4 08:38:29 2026 by rpki-client