$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecab1085-d2e2-3c76-b39e-35a918304703.roa File: ecab1085-d2e2-3c76-b39e-35a918304703.roa (raw, json) Hash identifier: tpvLiL+5kdLErLVEQhLJkpLnDgAFblu+egX1sXUoCQ8= Subject key identifier: 7A:46:29:A1:A9:FB:E9:4A:76:08:9A:C8:82:68:79:3E:99:85:B0:53 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584EFE122F9A990BACC5473BB840 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecab1085-d2e2-3c76-b39e-35a918304703.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 216.108.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:2f:9a:99:0b:ac:c5:47:3b:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=e5a6023c-98d4-4617-96e6-883bce9927f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bf:23:72:e0:bb:64:54:e4:2b:1f:a6:4f:a5: 5e:84:3c:b9:fa:a8:1d:f8:14:82:8b:e0:27:12:7f: 79:93:33:67:9b:e4:34:67:08:37:55:a0:9e:2c:c1: ec:71:2a:88:4b:3c:23:38:4e:12:ae:0d:b9:46:e4: 7e:9a:a5:f5:a7:14:f7:75:23:b5:5b:ed:ac:ec:3a: 3c:e7:d9:d5:ec:06:8a:c2:7f:62:af:51:64:8c:f8: 1a:ef:fc:44:ac:3a:02:63:a0:6b:83:99:57:58:00: 3b:78:3a:8b:55:e2:bd:de:15:a5:c6:40:0f:a9:ec: cf:42:a2:7d:d9:b1:36:ef:21:ba:c7:3a:cb:7e:69: b0:f7:70:ff:1f:49:cf:6f:29:e7:ad:b5:e3:ae:19: d5:11:a2:be:21:24:1e:72:58:42:04:51:eb:e6:33: 4a:4d:c5:4a:06:6a:19:fa:07:12:e5:90:f3:6c:54: d6:c6:22:f0:ce:ef:1d:94:7d:f2:96:f7:45:aa:54: 70:c9:e4:c5:27:a7:25:c8:67:16:97:d4:33:e8:c6: 71:bc:d6:8f:7f:fb:35:57:e6:04:9c:0d:d7:63:58: 9c:67:8e:e1:54:28:32:1b:6a:00:51:01:3d:70:71: 13:ef:cb:8d:40:8b:ad:b4:c5:18:31:1e:d9:9c:c6: b3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:46:29:A1:A9:FB:E9:4A:76:08:9A:C8:82:68:79:3E:99:85:B0:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecab1085-d2e2-3c76-b39e-35a918304703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 216.108.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:82:e0:fe:b1:8d:1d:ce:2c:00:d9:0f:74:46:f3:6f:dd:66: f0:99:6d:9a:01:ee:4f:57:dd:82:bd:65:ff:70:12:48:e0:9d: 93:ad:bb:02:3c:d1:a0:a0:48:0e:f4:65:82:7e:ca:03:f4:64: 19:12:18:88:88:69:02:67:cf:ad:ed:89:1f:95:73:dd:ec:e8: 31:2f:99:19:7a:40:6d:15:5f:02:74:ef:3b:ac:9c:35:40:67: 50:2d:38:4d:1d:bc:dc:10:b8:44:85:db:c8:fb:61:68:be:0d: 33:3f:cd:eb:6b:82:84:0a:da:35:36:a9:af:2d:55:e2:dc:06: 06:fa:c4:bc:cc:42:8b:8b:1f:11:41:86:ed:31:32:8e:42:8b: dd:5e:81:02:71:d3:ea:68:f8:b7:40:e9:91:40:b2:ee:92:85: 19:3f:4a:4e:13:da:9c:03:26:5c:dc:e4:34:a3:25:51:32:31: ab:6b:bc:99:39:ff:0a:9b:ab:a3:3f:e0:50:be:5e:c6:b6:b4: 9b:90:47:03:cd:45:a6:c6:f5:a7:58:30:ec:52:15:43:cf:6a: 6e:99:16:0e:e3:53:6b:32:70:a2:42:10:98:24:28:23:fc:0c: 59:bd:17:93:40:57:5e:d7:99:fe:1a:a5:fe:41:de:9b:64:02: c9:04:43:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+Ei+amQusxUc7uEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk ZTVhNjAyM2MtOThkNC00NjE3LTk2ZTYtODgzYmNlOTkyN2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL8jcuC7ZFTkKx+mT6VehDy5+qgd+BSCi+An En95kzNnm+Q0Zwg3VaCeLMHscSqISzwjOE4Srg25RuR+mqX1pxT3dSO1W+2s7Do8 59nV7AaKwn9ir1FkjPga7/xErDoCY6Brg5lXWAA7eDqLVeK93hWlxkAPqezPQqJ9 2bE27yG6xzrLfmmw93D/H0nPbynnrbXjrhnVEaK+ISQeclhCBFHr5jNKTcVKBmoZ +gcS5ZDzbFTWxiLwzu8dlH3ylvdFqlRwyeTFJ6clyGcWl9Qz6MZxvNaPf/s1V+YE nA3XY1icZ47hVCgyG2oAUQE9cHET78uNQIuttMUYMR7ZnMazIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpGKaGp++lKdgiayIJoeT6ZhbBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWNhYjEwODUtZDJlMi0z Yzc2LWIzOWUtMzVhOTE4MzA0NzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeC4P6xjR3OLADZD3RG82/dZvCZbZoB7k9X3YK9Zf9wEkjgnZOtuwI8 0aCgSA70ZYJ+ygP0ZBkSGIiIaQJnz63tiR+Vc93s6DEvmRl6QG0VXwJ07zusnDVA Z1AtOE0dvNwQuESF28j7YWi+DTM/zetrgoQK2jU2qa8tVeLcBgb6xLzMQouLHxFB hu0xMo5Ci91egQJx0+po+LdA6ZFAsu6ShRk/Sk4T2pwDJlzc5DSjJVEyMatrvJk5 /wqbq6M/4FC+Xsa2tJuQRwPNRabG9adYMOxSFUPPam6ZFg7jU2sycKJCEJgkKCP8 DFm9F5NAV17Xmf4apf5B3ptkAskEQ14= -----END CERTIFICATE-----Generated at Tue Sep 22 00:56:45 2026 by rpki-client