$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/086fcbca-0d5c-365f-8c76-572841aa4b98.roa File: 086fcbca-0d5c-365f-8c76-572841aa4b98.roa (raw, json) Hash identifier: zNa9w00Oq50fwD7WTw4NJI7oPWwWq1JYJO5ds5V3uvs= Subject key identifier: 5F:F1:F2:A6:5D:93:70:EA:E5:99:21:76:14:8D:5D:11:C9:B9:CC:69 Certificate issuer: /CN=cdd2a959-79e8-4909-9586-6fe85194182f Certificate serial: 010D0C9F4328584F498A6BE6A465974B2571C0A0 Authority key identifier: C9:B4:1A:82:3F:22:73:D2:BB:BD:21:8C:DF:6A:D8:E9:EC:08:D9:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/086fcbca-0d5c-365f-8c76-572841aa4b98.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 208.71.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/cdd2a959-79e8-4909-9586-6fe85194182f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/cdd2a959-79e8-4909-9586-6fe85194182f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:6b:e6:a4:65:97:4b:25:71:c0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdd2a959-79e8-4909-9586-6fe85194182f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=32059fa9-621d-4f76-98a2-0c30b7c844c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:72:5c:9d:a1:67:7a:2e:7d:02:0f:cc:3f:28: 74:2d:62:54:a1:26:f7:0d:b7:10:cd:da:f9:0b:1a: af:05:b6:c3:59:2d:4f:fa:f9:56:be:9e:33:b1:66: 7e:78:75:31:51:18:20:f0:30:2e:2f:06:04:c6:42: e3:2d:87:8a:23:1e:2e:5f:6b:26:1e:1e:9a:3c:f3: 99:2f:bd:9e:b8:b6:87:ea:89:c8:7f:65:a2:62:3e: f0:a3:ae:54:17:0f:92:46:3b:ea:50:35:17:a8:ae: 2c:ec:03:3b:da:26:17:f6:61:91:f1:33:74:e5:18: 83:67:ce:96:eb:53:fd:e5:29:bd:8d:6e:00:69:61: e4:ff:a6:0b:1c:f6:bf:77:03:3e:24:7b:2b:8b:34: 24:eb:4f:fa:a8:3c:ed:6b:dc:f3:45:98:9b:04:13: f0:ce:07:5f:0c:69:bb:ec:eb:53:08:a8:66:3f:e0: e2:c9:07:7f:a1:18:90:96:3f:af:e4:c5:dc:19:d6: 7d:6e:ec:31:c0:1a:2f:25:bb:b0:00:cd:7c:2a:90: dc:fb:94:ce:10:57:34:2e:c2:be:98:3a:46:41:5d: 85:78:d5:17:1e:4b:c1:6f:b5:f8:79:84:fa:59:b6: 4c:90:72:2e:80:16:a7:8e:26:9b:17:72:c6:f0:d4: 79:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F1:F2:A6:5D:93:70:EA:E5:99:21:76:14:8D:5D:11:C9:B9:CC:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/086fcbca-0d5c-365f-8c76-572841aa4b98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f/cdd2a959-79e8-4909-9586-6fe85194182f.crl X509v3 Authority Key Identifier: keyid:C9:B4:1A:82:3F:22:73:D2:BB:BD:21:8C:DF:6A:D8:E9:EC:08:D9:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cdd2a959-79e8-4909-9586-6fe85194182f.cer sbgp-ipAddrBlock: critical IPv4: 208.71.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:6b:05:a6:f0:fd:f4:f0:17:f1:bf:c3:08:9c:e8:d1:eb:ea: e5:4f:7c:f4:01:56:6a:c0:62:1d:5a:9b:45:99:b9:31:9f:5b: 8f:ce:7a:a1:df:b6:f0:85:9a:1f:95:67:a0:a3:1f:d3:79:f1: 6c:34:db:60:fd:3c:f9:7e:dd:98:e3:d3:3b:54:78:22:1a:e9: e3:81:14:47:0d:1c:99:47:84:54:8b:64:5f:31:72:c1:ac:0c: 0b:d1:0b:14:51:8f:be:6e:cd:b1:30:34:b1:a1:f4:d3:32:d0: da:6c:de:7c:60:31:d2:89:dd:73:94:66:6b:ea:41:fd:88:24: 0c:c5:81:f6:69:92:a7:b5:16:e3:0c:ff:53:fe:90:ad:09:ec: b5:b7:14:ec:dd:ee:20:2a:20:30:10:d2:ec:3d:93:cf:1a:95: 73:03:bf:06:9a:af:33:b8:c1:03:46:ca:e0:f7:f5:4e:45:3f: 99:48:d4:f7:77:cf:04:b0:da:ee:0e:43:d6:c0:ae:8b:cb:ba: 56:5c:40:55:ce:88:3c:9b:86:10:10:fc:d6:c3:12:46:16:4c: 42:09:59:e2:0f:3d:c8:41:52:a7:64:4e:f3:a8:a7:f3:71:52: 21:c2:04:e8:5f:64:45:f6:ed:e4:67:df:d7:38:78:63:23:f6: bd:e9:26:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JimvmpGWXSyVxwKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RkMmE5NTktNzllOC00OTA5LTk1ODYtNmZlODUxOTQx ODJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzIwNTlmYTktNjIxZC00Zjc2LTk4YTItMGMzMGI3Yzg0NGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHJcnaFnei59Ag/MPyh0LWJUoSb3DbcQzdr5 CxqvBbbDWS1P+vlWvp4zsWZ+eHUxURgg8DAuLwYExkLjLYeKIx4uX2smHh6aPPOZ L72euLaH6onIf2WiYj7wo65UFw+SRjvqUDUXqK4s7AM72iYX9mGR8TN05RiDZ86W 61P95Sm9jW4AaWHk/6YLHPa/dwM+JHsrizQk60/6qDzta9zzRZibBBPwzgdfDGm7 7OtTCKhmP+DiyQd/oRiQlj+v5MXcGdZ9buwxwBovJbuwAM18KpDc+5TOEFc0LsK+ mDpGQV2FeNUXHkvBb7X4eYT6WbZMkHIugBanjiabF3LG8NR5TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/x8qZdk3Dq5ZkhdhSNXRHJucxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jZGQy YTk1OS03OWU4LTQ5MDktOTU4Ni02ZmU4NTE5NDE4MmYvMDg2ZmNiY2EtMGQ1Yy0z NjVmLThjNzYtNTcyODQxYWE0Yjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2RkMmE5NTktNzllOC00OTA5LTk1 ODYtNmZlODUxOTQxODJmL2NkZDJhOTU5LTc5ZTgtNDkwOS05NTg2LTZmZTg1MTk0 MTgyZi5jcmwwHwYDVR0jBBgwFoAUybQagj8ic9K7vSGM32rY6ewI2c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jZGQyYTk1OS03OWU4LTQ5MDktOTU4Ni02ZmU4 NTE5NDE4MmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Ef4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJrBabw/fTwF/G/wwic6NHr6uVPfPQBVmrAYh1am0WZuTGfW4/OeqHf tvCFmh+VZ6CjH9N58Ww022D9PPl+3Zjj0ztUeCIa6eOBFEcNHJlHhFSLZF8xcsGs DAvRCxRRj75uzbEwNLGh9NMy0Nps3nxgMdKJ3XOUZmvqQf2IJAzFgfZpkqe1FuMM /1P+kK0J7LW3FOzd7iAqIDAQ0uw9k88alXMDvwaarzO4wQNGyuD39U5FP5lI1Pd3 zwSw2u4OQ9bArovLulZcQFXOiDybhhAQ/NbDEkYWTEIJWeIPPchBUqdkTvOop/Nx UiHCBOhfZEX27eRn39c4eGMj9r3pJrw= -----END CERTIFICATE-----Generated at Wed Oct 7 08:42:24 2026 by rpki-client