$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/8939cf99-d2a4-3b47-bae2-c177892d33b7.roa File: 8939cf99-d2a4-3b47-bae2-c177892d33b7.roa (raw, json) Hash identifier: jglTBOOJFS3F2lzyIuu7hdQZhkYx6yTNrbVCrmE4amY= Subject key identifier: 1A:3A:AF:A6:B7:54:25:B4:9D:F2:98:FF:45:0E:26:DD:FC:90:95:73 Certificate issuer: /CN=c39c90a0-ee66-4964-918e-0296541e3ad8 Certificate serial: 010D0C9F4328584EF44CCACA822C73B26E2B3F80 Authority key identifier: C4:E2:8A:79:21:38:3E:E7:EB:2E:97:C7:D7:1E:04:29:97:E1:02:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/8939cf99-d2a4-3b47-bae2-c177892d33b7.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 5650 IP address blocks: 208.79.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c39c90a0-ee66-4964-918e-0296541e3ad8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c39c90a0-ee66-4964-918e-0296541e3ad8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:ca:ca:82:2c:73:b2:6e:2b:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c39c90a0-ee66-4964-918e-0296541e3ad8 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=633af634-50f9-4027-b9e1-d5fd6869f35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:31:e3:3c:ac:72:49:c8:b9:4a:48:b1:0d:c1: 03:78:2a:df:b3:9a:5c:81:34:17:8f:ec:d6:2e:85: 7d:87:90:df:a9:1b:d9:99:5b:ad:4e:28:78:3a:49: 20:10:36:d1:88:02:a6:dc:fd:85:5d:98:e7:f0:19: c3:da:45:61:a3:74:92:4f:63:19:c7:6d:01:b7:46: e2:b9:f5:13:36:81:1e:e7:c7:50:a1:36:fc:21:49: 12:45:80:f7:59:23:26:98:be:78:4b:65:70:5f:53: 75:65:8c:6b:87:26:f7:b2:d0:b5:f7:5f:76:4b:ec: 38:5a:bc:50:42:c9:7d:bc:fe:78:cf:ab:9c:99:30: ce:f7:a0:f8:b1:e2:9e:e6:15:1e:60:ab:d2:5d:b0: a2:ca:7b:9e:44:7f:fd:11:73:ba:8d:b2:85:b1:be: 89:9c:59:6d:51:2d:e9:39:81:a9:d4:64:7d:ec:d6: 2d:ef:35:42:3c:ed:44:7c:c1:f1:91:82:b0:ef:ad: 31:73:e2:24:33:18:78:55:35:d3:58:19:43:8d:90: e8:a3:bb:d3:36:af:de:c3:bb:a2:3b:b9:70:23:b1: 62:b9:52:0d:df:3a:06:c2:b1:46:8a:dd:dc:36:e9: 95:89:e0:b0:88:50:cb:0a:ef:f1:58:dc:26:13:e9: b3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:3A:AF:A6:B7:54:25:B4:9D:F2:98:FF:45:0E:26:DD:FC:90:95:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/8939cf99-d2a4-3b47-bae2-c177892d33b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c39c90a0-ee66-4964-918e-0296541e3ad8.crl X509v3 Authority Key Identifier: keyid:C4:E2:8A:79:21:38:3E:E7:EB:2E:97:C7:D7:1E:04:29:97:E1:02:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8.cer sbgp-ipAddrBlock: critical IPv4: 208.79.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:61:40:9a:13:c0:91:f3:06:37:59:84:11:b4:ec:d3:4c:38: d3:4a:76:62:2f:3b:e3:83:c1:de:ef:be:04:ff:32:a4:d2:63: a6:a8:10:66:b6:2f:00:76:e8:99:93:0b:52:68:cc:2d:31:16: 79:06:91:9f:88:ab:11:4e:2e:91:4e:02:2b:fe:a4:ab:20:a8: 9c:ab:51:42:22:8f:9e:18:6c:7f:46:d4:10:e4:f6:c6:b9:8c: c0:e0:2c:95:b6:1d:5a:21:4f:25:24:a9:21:4d:ae:fb:30:0a: 2c:aa:bc:0f:b7:2f:5b:c5:8f:37:b9:05:f2:38:84:4a:09:8d: a5:79:0d:0f:61:9d:f2:df:b9:89:ff:48:c4:83:87:60:72:cf: 82:cb:b8:fc:25:90:95:af:6d:d9:ee:9d:98:20:61:f9:f0:01: 43:2f:1f:ca:24:66:da:19:3a:8f:94:6c:2d:21:6c:4d:91:77: 8d:c4:03:a2:7d:4b:d7:e8:4a:e0:64:e8:e8:93:cc:dd:da:c9: ce:a7:13:fa:20:0e:bc:d5:f6:12:8c:bc:94:e6:55:4a:0f:d7: ca:1e:e5:60:e2:07:1d:fb:e5:ef:7f:56:64:65:8b:93:be:54: f1:61:6c:97:e0:a5:98:77:8c:14:fa:52:b2:0e:52:63:95:87: 26:b2:65:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TMrKgixzsm4rP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzM5YzkwYTAtZWU2Ni00OTY0LTkxOGUtMDI5NjU0MWUz YWQ4MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk NjMzYWY2MzQtNTBmOS00MDI3LWI5ZTEtZDVmZDY4NjlmMzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDHjPKxySci5SkixDcEDeCrfs5pcgTQXj+zW LoV9h5DfqRvZmVutTih4OkkgEDbRiAKm3P2FXZjn8BnD2kVho3SST2MZx20Bt0bi ufUTNoEe58dQoTb8IUkSRYD3WSMmmL54S2VwX1N1ZYxrhyb3stC19192S+w4WrxQ Qsl9vP54z6ucmTDO96D4seKe5hUeYKvSXbCiynueRH/9EXO6jbKFsb6JnFltUS3p OYGp1GR97NYt7zVCPO1EfMHxkYKw760xc+IkMxh4VTXTWBlDjZDoo7vTNq/ew7ui O7lwI7FiuVIN3zoGwrFGit3cNumVieCwiFDLCu/xWNwmE+mzwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBo6r6a3VCW0nfKY/0UOJt38kJVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMzlj OTBhMC1lZTY2LTQ5NjQtOTE4ZS0wMjk2NTQxZTNhZDgvODkzOWNmOTktZDJhNC0z YjQ3LWJhZTItYzE3Nzg5MmQzM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzM5YzkwYTAtZWU2Ni00OTY0LTkx OGUtMDI5NjU0MWUzYWQ4L2MzOWM5MGEwLWVlNjYtNDk2NC05MThlLTAyOTY1NDFl M2FkOC5jcmwwHwYDVR0jBBgwFoAUxOKKeSE4PufrLpfH1x4EKZfhAmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMzljOTBhMC1lZTY2LTQ5NjQtOTE4ZS0wMjk2 NTQxZTNhZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhhQJoTwJHzBjdZhBG07NNMONNKdmIvO+ODwd7vvgT/MqTSY6aoEGa2 LwB26JmTC1JozC0xFnkGkZ+IqxFOLpFOAiv+pKsgqJyrUUIij54YbH9G1BDk9sa5 jMDgLJW2HVohTyUkqSFNrvswCiyqvA+3L1vFjze5BfI4hEoJjaV5DQ9hnfLfuYn/ SMSDh2Byz4LLuPwlkJWvbdnunZggYfnwAUMvH8okZtoZOo+UbC0hbE2Rd43EA6J9 S9foSuBk6OiTzN3ayc6nE/ogDrzV9hKMvJTmVUoP18oe5WDiBx375e9/VmRli5O+ VPFhbJfgpZh3jBT6UrIOUmOVhyayZXk= -----END CERTIFICATE-----Generated at Sun Sep 27 17:13:57 2026 by rpki-client