$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/a0a1273c-2f6d-300c-a5ce-7d83dce91f71.roa File: a0a1273c-2f6d-300c-a5ce-7d83dce91f71.roa (raw, json) Hash identifier: NOO+nZV3UMqOSlt6wYfGyxK5nJOvS9aeYGK6ztiG/Uc= Subject key identifier: AD:EB:57:C1:62:C3:FC:82:58:E7:32:4D:1B:87:B4:7A:78:CE:CB:0E Certificate issuer: /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Certificate serial: 010D0C9F4328584F02422E7337E99FBCE27A2D80 Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/a0a1273c-2f6d-300c-a5ce-7d83dce91f71.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 6509 IP address blocks: 208.75.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:2e:73:37:e9:9f:bc:e2:7a:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=3931f3ef-f549-4aa3-be5e-8de4eab663ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:d4:19:91:47:c7:7f:dd:38:ba:d8:18:70: fb:56:22:6f:04:98:0c:54:74:51:7b:14:49:f6:9d: 3f:e6:ab:35:da:e7:af:af:11:4e:4b:61:36:3b:83: 14:b8:bf:4a:93:bf:8f:4d:d2:6d:6e:5a:eb:00:bf: 2b:80:db:69:3b:92:66:4f:ff:e8:f0:27:16:18:14: c7:b7:ad:b7:17:e5:d3:d4:45:15:93:97:f4:05:09: ec:70:f0:dc:d4:5d:a9:e1:81:39:3f:c2:1a:25:d4: 28:90:65:5b:62:ee:1a:82:b9:e7:ce:8c:55:f7:9e: 72:86:9d:a6:ec:4d:8e:06:09:71:4f:52:1c:f7:7a: 10:cf:22:b6:6b:2b:54:77:74:d6:1d:13:e4:4b:ea: 7d:b4:df:90:96:c8:50:3b:7e:cc:af:33:c1:57:1f: 1c:08:fd:c4:bf:b4:54:c8:e5:09:62:9b:d2:1a:f4: dd:06:87:ee:1f:27:31:0e:02:80:f3:13:87:23:b8: fc:8c:57:e1:c6:da:16:a9:12:b9:93:63:da:53:8c: 44:33:5c:c7:49:53:b7:f4:55:6b:fd:19:9d:af:83: 8d:2f:d9:cd:38:82:b8:e7:ca:13:2d:09:b3:d8:7e: b6:7a:3c:9a:8d:32:9d:c3:3e:97:0c:08:06:af:32: 95:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:EB:57:C1:62:C3:FC:82:58:E7:32:4D:1B:87:B4:7A:78:CE:CB:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/a0a1273c-2f6d-300c-a5ce-7d83dce91f71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl X509v3 Authority Key Identifier: keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer sbgp-ipAddrBlock: critical IPv4: 208.75.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c4:1f:34:3e:5d:db:8d:d8:fa:e6:20:99:85:35:94:21:d4: 6f:96:2c:8d:28:2e:6f:20:68:f4:80:13:99:68:0b:77:26:2f: 86:89:49:df:0e:cf:b1:34:82:1b:36:2a:d0:e7:b9:cd:69:f0: 49:fd:99:89:57:eb:f7:31:87:e8:3e:50:6c:4f:8b:c3:66:56: e0:25:01:46:a5:9a:2f:8b:e1:db:0b:fa:97:07:e9:c9:08:77: dd:c8:33:c0:26:f2:f4:31:04:79:38:e5:87:fe:fb:79:40:90: 9b:e7:ee:f1:35:3e:1e:58:74:d9:bf:97:cd:11:52:95:3f:fe: e4:3c:3a:92:1a:e9:cb:ac:ce:c5:97:84:be:47:c7:b1:a9:4d: b8:7c:6b:24:e8:26:10:e7:85:fc:3f:65:30:f4:0a:af:60:14: 12:8b:75:c8:dd:23:1d:5f:a1:39:ac:85:02:6e:1f:62:67:96: 94:fb:53:a7:d8:ea:1d:d2:2d:ea:01:84:ac:c7:0e:80:fb:18: 3c:53:3d:ed:1b:af:a4:9b:28:79:ce:8e:66:a8:46:08:e2:33: b7:b5:c7:5e:d8:f3:0a:1a:dc:7e:09:4c:19:02:50:be:0f:e8: f9:83:fb:b0:a6:61:1e:2a:9b:b7:67:2d:fb:0a:bd:4d:ca:0b: 56:16:09:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQi5zN+mfvOJ6LYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5ZjUzYzctZTY0ZC00ZjE0LWE1ZTEtYzE0ZThiMWUz OGI1MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MzkzMWYzZWYtZjU0OS00YWEzLWJlNWUtOGRlNGVhYjY2M2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArznUGZFHx3/dOLrYGHD7ViJvBJgMVHRRexRJ 9p0/5qs12uevrxFOS2E2O4MUuL9Kk7+PTdJtblrrAL8rgNtpO5JmT//o8CcWGBTH t623F+XT1EUVk5f0BQnscPDc1F2p4YE5P8IaJdQokGVbYu4agrnnzoxV955yhp2m 7E2OBglxT1Ic93oQzyK2aytUd3TWHRPkS+p9tN+QlshQO37MrzPBVx8cCP3Ev7RU yOUJYpvSGvTdBofuHycxDgKA8xOHI7j8jFfhxtoWqRK5k2PaU4xEM1zHSVO39FVr /Rmdr4ONL9nNOIK458oTLQmz2H62ejyajTKdwz6XDAgGrzKV+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3rV8Fiw/yCWOcyTRuHtHp4zssOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Yzlm NTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRlOGIxZTM4YjUvYTBhMTI3M2MtMmY2ZC0z MDBjLWE1Y2UtN2Q4M2RjZTkxZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGM5ZjUzYzctZTY0ZC00ZjE0LWE1 ZTEtYzE0ZThiMWUzOGI1LzhjOWY1M2M3LWU2NGQtNGYxNC1hNWUxLWMxNGU4YjFl MzhiNS5jcmwwHwYDVR0jBBgwFoAUkgQ6o8r4DzyNRaFJtV9LrfXD2Q4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YzlmNTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRl OGIxZTM4YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EtLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnEHzQ+XduN2PrmIJmFNZQh1G+WLI0oLm8gaPSAE5loC3cmL4aJSd8O z7E0ghs2KtDnuc1p8En9mYlX6/cxh+g+UGxPi8NmVuAlAUalmi+L4dsL+pcH6ckI d93IM8Am8vQxBHk45Yf++3lAkJvn7vE1Ph5YdNm/l80RUpU//uQ8OpIa6cuszsWX hL5Hx7GpTbh8ayToJhDnhfw/ZTD0Cq9gFBKLdcjdIx1foTmshQJuH2JnlpT7U6fY 6h3SLeoBhKzHDoD7GDxTPe0br6SbKHnOjmaoRgjiM7e1x17Y8woa3H4JTBkCUL4P 6PmD+7CmYR4qm7dnLfsKvU3KC1YWCVU= -----END CERTIFICATE-----Generated at Tue Sep 22 17:36:10 2026 by rpki-client