$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/fd3bf4b9-05eb-3f49-bf29-aa2ec061e71a.roa File: fd3bf4b9-05eb-3f49-bf29-aa2ec061e71a.roa (raw, json) Hash identifier: XiTCaQlWvooS5NNP7NFPm+WGzbf61CDMHY0ZeXz4h1c= Subject key identifier: 27:3C:EC:3A:3F:83:37:8E:A9:61:3D:18:E8:0F:AD:ED:F9:1C:A4:A6 Certificate issuer: /CN=2e06fcf2-dda2-4ce0-8a33-46133120abec Certificate serial: 010D0C9F4328584F2EED13CD024D8D5A46D9181C Authority key identifier: 41:0C:10:D1:1F:D3:4F:C8:5D:4B:DD:55:92:B3:76:1E:FD:41:34:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/fd3bf4b9-05eb-3f49-bf29-aa2ec061e71a.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 999 IP address blocks: 208.89.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/2e06fcf2-dda2-4ce0-8a33-46133120abec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/2e06fcf2-dda2-4ce0-8a33-46133120abec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:13:cd:02:4d:8d:5a:46:d9:18:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e06fcf2-dda2-4ce0-8a33-46133120abec Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=2e6e5293-4b7e-42d1-9b1e-5bb2907b5412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5f:5d:88:15:fe:94:93:e7:26:f4:9c:14:3f: cc:0c:cd:65:77:38:fc:2c:47:39:c0:c6:30:97:46: 19:e3:28:3f:f5:ac:03:1d:61:3d:6d:62:1a:a6:9f: 8c:c0:e6:d9:2e:d1:89:b9:f0:f2:0e:c5:57:a7:ac: 0b:d5:23:59:ad:3a:fc:fb:c3:cc:87:ab:e8:6c:3e: 30:6a:05:bb:e7:40:f7:34:e5:fe:63:08:ed:fd:b0: b2:d9:3d:ed:a2:14:31:b0:ff:56:67:ff:83:5b:f9: ef:58:c3:09:87:a3:8e:83:f0:db:6d:56:ed:28:ca: 73:a7:21:71:5e:71:50:de:d9:bf:02:af:cb:bb:7c: 5d:ec:58:0c:46:97:46:7c:54:cc:c3:1e:ce:ac:36: 55:55:b5:e1:12:61:5e:03:d0:b8:e9:7a:25:34:bb: 91:7f:ce:c4:20:4b:f2:6f:26:48:e6:d1:89:02:f8: 6d:8b:bc:22:65:12:5b:d4:4a:0b:5f:6d:d1:7e:30: ed:31:10:e7:95:6f:01:11:01:63:f2:cb:4e:9f:0f: 1b:a2:8c:10:66:66:45:96:48:e4:ac:a6:ea:57:f0: 1c:84:2b:78:29:fc:df:b1:52:00:a5:49:5e:65:c8: 1a:b9:df:74:16:16:c9:b4:20:5b:d6:be:08:72:62: df:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3C:EC:3A:3F:83:37:8E:A9:61:3D:18:E8:0F:AD:ED:F9:1C:A4:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/fd3bf4b9-05eb-3f49-bf29-aa2ec061e71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/2e06fcf2-dda2-4ce0-8a33-46133120abec.crl X509v3 Authority Key Identifier: keyid:41:0C:10:D1:1F:D3:4F:C8:5D:4B:DD:55:92:B3:76:1E:FD:41:34:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer sbgp-ipAddrBlock: critical IPv4: 208.89.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:45:cd:94:00:7d:31:8b:d9:e8:d5:19:2b:ff:75:05:db:12: c7:c3:f1:6e:dd:f7:77:38:c4:e3:1b:69:aa:fa:7b:c2:ef:8e: 3d:95:f7:ee:3a:00:24:48:39:b5:0d:d0:ff:79:a4:ee:26:62: 4c:7c:c7:cd:24:e3:e8:12:b2:72:54:46:b2:0b:79:08:a6:3d: ff:b6:32:ab:2c:df:53:28:87:50:8c:c3:26:ed:a7:75:88:3d: fd:0f:63:2d:48:17:d3:4b:c4:47:55:8d:c7:9a:a9:75:d2:1e: 90:63:4e:64:91:59:01:71:f7:ef:a9:4a:cb:c4:84:70:ca:1f: 64:ba:93:99:72:6d:d1:a5:44:e1:69:4a:d6:93:18:d7:c5:37: 92:40:8f:45:b1:45:c5:df:e5:b7:f1:fd:94:fe:b6:04:8d:ee: 2f:08:0f:f4:3c:d3:78:63:74:7a:71:41:1d:bd:4e:ed:49:c5: 3a:d4:13:2b:68:82:ae:f1:91:18:b5:43:79:5f:9d:d9:13:32: 2e:1a:1e:78:3b:15:83:d3:00:cf:6f:99:f7:a0:c9:da:a3:8e: 2e:87:65:89:e4:78:f6:0b:e7:04:36:17:08:5f:44:30:48:ee: 1c:96:41:6a:01:e6:e3:42:e2:96:f9:1b:a4:c5:a2:a3:a5:91: fa:7c:19:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RPNAk2NWkbZGBwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUwNmZjZjItZGRhMi00Y2UwLThhMzMtNDYxMzMxMjBh YmVjMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MmU2ZTUyOTMtNGI3ZS00MmQxLTliMWUtNWJiMjkwN2I1NDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF9diBX+lJPnJvScFD/MDM1ldzj8LEc5wMYw l0YZ4yg/9awDHWE9bWIapp+MwObZLtGJufDyDsVXp6wL1SNZrTr8+8PMh6vobD4w agW750D3NOX+Ywjt/bCy2T3tohQxsP9WZ/+DW/nvWMMJh6OOg/DbbVbtKMpzpyFx XnFQ3tm/Aq/Lu3xd7FgMRpdGfFTMwx7OrDZVVbXhEmFeA9C46XolNLuRf87EIEvy byZI5tGJAvhti7wiZRJb1EoLX23RfjDtMRDnlW8BEQFj8stOnw8boowQZmZFlkjk rKbqV/AchCt4KfzfsVIApUleZcgaud90FhbJtCBb1r4IcmLf/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCc87Do/gzeOqWE9GOgPre35HKSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZTA2 ZmNmMi1kZGEyLTRjZTAtOGEzMy00NjEzMzEyMGFiZWMvZmQzYmY0YjktMDVlYi0z ZjQ5LWJmMjktYWEyZWMwNjFlNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmUwNmZjZjItZGRhMi00Y2UwLThh MzMtNDYxMzMxMjBhYmVjLzJlMDZmY2YyLWRkYTItNGNlMC04YTMzLTQ2MTMzMTIw YWJlYy5jcmwwHwYDVR0jBBgwFoAUQQwQ0R/TT8hdS91VkrN2Hv1BNH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZTA2ZmNmMi1kZGEyLTRjZTAtOGEzMy00NjEz MzEyMGFiZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FlJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtFzZQAfTGL2ejVGSv/dQXbEsfD8W7d93c4xOMbaar6e8Lvjj2V9+46 ACRIObUN0P95pO4mYkx8x80k4+gSsnJURrILeQimPf+2Mqss31Moh1CMwybtp3WI Pf0PYy1IF9NLxEdVjceaqXXSHpBjTmSRWQFx9++pSsvEhHDKH2S6k5lybdGlROFp StaTGNfFN5JAj0WxRcXf5bfx/ZT+tgSN7i8ID/Q803hjdHpxQR29Tu1JxTrUEyto gq7xkRi1Q3lfndkTMi4aHng7FYPTAM9vmfegydqjji6HZYnkePYL5wQ2FwhfRDBI 7hyWQWoB5uNC4pb5G6TFoqOlkfp8GZk= -----END CERTIFICATE-----Generated at Tue Sep 22 00:19:10 2026 by rpki-client