$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/9c6f5e16-b5f7-3115-bb49-7bbc1ef160f9.roa File: 9c6f5e16-b5f7-3115-bb49-7bbc1ef160f9.roa (raw, json) Hash identifier: maWc0UUkm5JRZTFCs9P5SSWy56k78+OTbOAgDCTLawU= Subject key identifier: B9:96:4E:05:53:F0:4A:0D:31:C3:26:D0:8E:68:09:B4:8C:D8:A2:4B Certificate issuer: /CN=023d0fc7-7b66-4e52-a96e-e85dab7d2566 Certificate serial: 010D0C9F4328584F2D87B324AD6ED2DC5FE43438 Authority key identifier: 42:53:F1:86:AD:3F:72:A6:70:94:E8:E6:0A:60:D7:E2:E7:43:49:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/9c6f5e16-b5f7-3115-bb49-7bbc1ef160f9.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 14430 IP address blocks: 208.68.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:b3:24:ad:6e:d2:dc:5f:e4:34:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023d0fc7-7b66-4e52-a96e-e85dab7d2566 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=2b0988b2-8692-4779-b539-5a22d96c684b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:c2:30:93:b4:24:05:47:a0:39:3d:93:c7: 9d:9e:ca:5b:19:17:8e:f0:b8:eb:03:a4:67:bd:1c: 79:1c:b3:99:d3:e3:22:20:a4:05:ec:64:5d:1b:63: 36:4f:76:e3:bc:56:d0:cc:f9:c8:cc:06:67:66:a2: 65:f4:5f:f6:bf:b9:a2:63:68:06:9c:f3:6c:02:ed: 33:12:f0:a9:c6:6f:74:35:3c:1e:cb:4a:8d:b8:d6: 51:ae:c8:77:8e:81:b2:61:83:8b:15:e2:3f:29:38: e6:bc:ec:e0:b9:7c:77:c7:30:1d:31:72:b6:43:20: c0:e3:16:a1:97:4c:26:f1:c6:6b:b6:a6:d6:46:45: 03:43:f6:fc:8b:13:35:d2:06:22:cb:81:0d:4f:32: d5:8c:94:0b:b6:02:f6:19:98:08:30:66:a1:51:56: b9:01:fb:14:11:17:43:e4:92:9b:05:9a:3c:c9:4c: f1:1c:cc:3c:a4:f9:d9:b2:09:29:c4:55:0a:be:13: 6e:11:ee:48:ad:b7:c1:25:94:e3:14:7e:74:67:e9: bf:be:b3:05:8a:0e:a7:b9:b6:44:26:9d:84:e7:e3: 10:bf:58:e4:67:f9:f4:d0:02:69:5f:03:3d:76:75: af:9e:8f:8c:62:0f:a5:5a:55:99:e9:31:dd:31:c0: 21:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:96:4E:05:53:F0:4A:0D:31:C3:26:D0:8E:68:09:B4:8C:D8:A2:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/9c6f5e16-b5f7-3115-bb49-7bbc1ef160f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.crl X509v3 Authority Key Identifier: keyid:42:53:F1:86:AD:3F:72:A6:70:94:E8:E6:0A:60:D7:E2:E7:43:49:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer sbgp-ipAddrBlock: critical IPv4: 208.68.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:02:cd:b6:1f:8a:26:d5:83:59:39:a2:50:dc:21:86:1c:fe: 58:93:11:1b:bc:64:03:06:7a:4f:cb:8e:dc:6e:79:c5:ca:2c: 1d:11:44:23:b3:8d:eb:ea:2d:ac:d4:dc:66:89:df:14:48:64: d1:4c:ca:84:59:11:44:fd:7d:8b:42:53:70:07:81:93:9f:94: 22:3b:be:c0:b0:0f:99:70:d2:87:87:5f:82:22:ee:74:14:1d: 2e:44:41:7a:f2:ee:fa:25:5f:ed:6d:73:4a:d6:22:05:bb:7a: c7:79:d7:65:f4:6a:f9:b5:45:f2:2f:96:24:00:53:4e:70:49: 2d:20:11:f0:af:fe:c9:69:dd:bb:19:09:ee:c3:5e:83:45:ea: 6b:a8:c6:c1:5c:e9:6d:9c:7d:2b:18:ce:b8:5d:63:f6:46:54: a8:0d:28:8e:63:9d:e9:e6:00:14:42:59:59:2c:2a:8c:fc:eb: 6e:b1:47:bb:84:17:ac:20:f2:b4:37:56:98:8d:48:68:91:f7: 54:23:df:81:47:b4:47:b7:45:d4:84:52:a0:b4:95:31:30:76: 3d:f6:59:86:8a:91:1d:ae:48:9a:b2:c1:2c:60:2d:0e:a3:0e: 9d:21:6b:52:9d:c2:37:9b:60:74:7e:ed:d4:66:3a:c4:43:21: c1:8a:4a:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th7MkrW7S3F/kNDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDIzZDBmYzctN2I2Ni00ZTUyLWE5NmUtZTg1ZGFiN2Qy NTY2MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk MmIwOTg4YjItODY5Mi00Nzc5LWI1MzktNWEyMmQ5NmM2ODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeDCMJO0JAVHoDk9k8ednspbGReO8LjrA6Rn vRx5HLOZ0+MiIKQF7GRdG2M2T3bjvFbQzPnIzAZnZqJl9F/2v7miY2gGnPNsAu0z EvCpxm90NTwey0qNuNZRrsh3joGyYYOLFeI/KTjmvOzguXx3xzAdMXK2QyDA4xah l0wm8cZrtqbWRkUDQ/b8ixM10gYiy4ENTzLVjJQLtgL2GZgIMGahUVa5AfsUERdD 5JKbBZo8yUzxHMw8pPnZsgkpxFUKvhNuEe5IrbfBJZTjFH50Z+m/vrMFig6nubZE Jp2E5+MQv1jkZ/n00AJpXwM9dnWvno+MYg+lWlWZ6THdMcAhewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmWTgVT8EoNMcMm0I5oCbSM2KJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMjNk MGZjNy03YjY2LTRlNTItYTk2ZS1lODVkYWI3ZDI1NjYvOWM2ZjVlMTYtYjVmNy0z MTE1LWJiNDktN2JiYzFlZjE2MGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDIzZDBmYzctN2I2Ni00ZTUyLWE5 NmUtZTg1ZGFiN2QyNTY2LzAyM2QwZmM3LTdiNjYtNGU1Mi1hOTZlLWU4NWRhYjdk MjU2Ni5jcmwwHwYDVR0jBBgwFoAUQlPxhq0/cqZwlOjmCmDX4udDSSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMjNkMGZjNy03YjY2LTRlNTItYTk2ZS1lODVk YWI3ZDI1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0ER4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYCzbYfiibVg1k5olDcIYYc/liTERu8ZAMGek/LjtxuecXKLB0RRCOz jevqLazU3GaJ3xRIZNFMyoRZEUT9fYtCU3AHgZOflCI7vsCwD5lw0oeHX4Ii7nQU HS5EQXry7volX+1tc0rWIgW7esd512X0avm1RfIvliQAU05wSS0gEfCv/slp3bsZ Ce7DXoNF6muoxsFc6W2cfSsYzrhdY/ZGVKgNKI5jnenmABRCWVksKoz8626xR7uE F6wg8rQ3VpiNSGiR91Qj34FHtEe3RdSEUqC0lTEwdj32WYaKkR2uSJqywSxgLQ6j Dp0ha1KdwjebYHR+7dRmOsRDIcGKStc= -----END CERTIFICATE-----Generated at Tue Sep 22 22:28:28 2026 by rpki-client