$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/0116482f-4344-303c-8e57-f8e40b8d46aa.roa File: 0116482f-4344-303c-8e57-f8e40b8d46aa.roa (raw, json) Hash identifier: Ep/yFSvsBsvmezn3x2tbwQTIwXk5qDIA5gkvo2WkNzU= Subject key identifier: CC:D8:60:1C:BB:13:38:1A:07:69:7E:72:D2:B1:57:C5:7A:82:58:6D Certificate issuer: /CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f Certificate serial: 010D0C9F4328584EDC91FE4DE448AE0FF10E9980 Authority key identifier: DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/0116482f-4344-303c-8e57-f8e40b8d46aa.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 20259 IP address blocks: 209.71.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:91:fe:4d:e4:48:ae:0f:f1:0e:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=54f877e3-3901-4a1d-a8bd-cc02f4cbd50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1e:e7:9b:76:94:89:a0:a5:4b:14:33:97:7d: 00:89:4f:5b:cb:09:54:a4:c4:15:e8:a4:6b:f2:45: 91:c1:2a:82:34:7c:fc:fd:09:d8:f5:96:c0:0a:57: dd:27:52:88:05:5f:98:d7:92:e6:f9:75:b3:1e:73: 04:fe:59:52:b3:40:16:0f:73:bd:d8:f5:8d:5a:7d: 80:90:de:83:44:d9:52:46:2f:65:37:cf:d8:bb:13: b6:0b:72:09:56:71:fc:48:66:5b:ae:80:7f:52:ea: 8c:b4:cc:ed:76:6c:15:9e:7e:45:3e:07:bd:1f:d9: 0e:be:26:7a:35:6c:ff:3e:2f:25:bc:1d:e1:4e:83: aa:bd:ac:90:ee:31:0e:80:a1:0a:00:25:9b:c7:c5: b4:ed:a7:c2:ef:94:52:5e:ef:ef:a5:3a:7e:e8:e2: 2b:f1:55:3a:3c:da:69:ee:ab:23:0d:ef:56:07:fe: fd:a2:a2:da:33:f8:80:8f:4a:31:bb:28:63:f1:b4: 49:76:67:d6:c7:50:67:a6:58:3f:74:63:81:70:94: ae:4c:8f:8a:60:b7:eb:8f:b3:92:c7:51:70:d5:4d: 6a:c2:57:55:d4:42:0a:7d:c0:fb:45:a9:76:51:6e: 83:26:9a:3d:78:76:20:3d:ad:84:1e:c8:10:0d:55: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D8:60:1C:BB:13:38:1A:07:69:7E:72:D2:B1:57:C5:7A:82:58:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/0116482f-4344-303c-8e57-f8e40b8d46aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl X509v3 Authority Key Identifier: keyid:DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer sbgp-ipAddrBlock: critical IPv4: 209.71.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:84:03:69:99:84:70:f2:65:d2:89:62:f3:40:dc:47:fd:2e: d5:74:04:85:d3:9c:0d:da:99:4a:86:44:2f:80:43:2d:f0:07: 35:7e:1c:86:69:eb:5d:e6:1a:a6:70:27:35:ce:1b:36:81:fe: 2c:0d:ec:55:2a:32:b2:71:3f:82:d3:76:8e:6e:25:58:09:ad: 87:69:b9:bb:f2:58:ca:91:67:ff:df:45:6f:f1:e2:9f:31:93: 00:88:cd:a1:eb:ad:d1:b5:02:48:a8:b2:d8:90:08:58:b2:ac: ac:e1:78:e6:5f:7b:6f:76:27:39:70:e5:a2:79:a3:d0:1f:27: 61:97:ef:2f:d4:91:88:5b:58:4e:39:ce:ab:45:93:f4:d7:9b: 75:f2:36:40:55:68:13:1a:8a:90:c2:62:8b:ec:2e:f5:31:59: 55:72:5d:96:a3:87:6a:6e:25:60:57:01:6d:55:55:ee:5b:fc: f5:e1:d9:c9:38:8d:c6:38:80:8a:14:17:cb:e5:c4:1d:e2:1a: 38:eb:d3:55:ec:d9:28:64:cb:1a:87:d2:eb:16:04:7c:a9:70: eb:c2:3d:be:d9:cf:f0:19:5c:22:c0:81:b2:27:6f:7a:d2:f2: f4:7f:46:7d:24:21:e6:56:a2:44:ff:89:0e:c9:25:e3:b0:69: e8:bd:04:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckf5N5EiuD/EOmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVlZjg3NWEtYzlhNC00NWUwLTliODAtM2VhMTBiZWNh ZDlmMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk NTRmODc3ZTMtMzkwMS00YTFkLWE4YmQtY2MwMmY0Y2JkNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR7nm3aUiaClSxQzl30AiU9bywlUpMQV6KRr 8kWRwSqCNHz8/QnY9ZbAClfdJ1KIBV+Y15Lm+XWzHnME/llSs0AWD3O92PWNWn2A kN6DRNlSRi9lN8/YuxO2C3IJVnH8SGZbroB/UuqMtMztdmwVnn5FPge9H9kOviZ6 NWz/Pi8lvB3hToOqvayQ7jEOgKEKACWbx8W07afC75RSXu/vpTp+6OIr8VU6PNpp 7qsjDe9WB/79oqLaM/iAj0oxuyhj8bRJdmfWx1Bnplg/dGOBcJSuTI+KYLfrj7OS x1Fw1U1qwldV1EIKfcD7Ral2UW6DJpo9eHYgPa2EHsgQDVWchwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzYYBy7EzgaB2l+ctKxV8V6glhtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZWVm ODc1YS1jOWE0LTQ1ZTAtOWI4MC0zZWExMGJlY2FkOWYvMDExNjQ4MmYtNDM0NC0z MDNjLThlNTctZjhlNDBiOGQ0NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGVlZjg3NWEtYzlhNC00NWUwLTli ODAtM2VhMTBiZWNhZDlmLzhlZWY4NzVhLWM5YTQtNDVlMC05YjgwLTNlYTEwYmVj YWQ5Zi5jcmwwHwYDVR0jBBgwFoAU2hd1uxE+8mvw+V5uiVzDDuCoynIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZWVmODc1YS1jOWE0LTQ1ZTAtOWI4MC0zZWEx MGJlY2FkOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0UcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqEA2mZhHDyZdKJYvNA3Ef9LtV0BIXTnA3amUqGRC+AQy3wBzV+HIZp 613mGqZwJzXOGzaB/iwN7FUqMrJxP4LTdo5uJVgJrYdpubvyWMqRZ//fRW/x4p8x kwCIzaHrrdG1AkiostiQCFiyrKzheOZfe292Jzlw5aJ5o9AfJ2GX7y/UkYhbWE45 zqtFk/TXm3XyNkBVaBMaipDCYovsLvUxWVVyXZajh2puJWBXAW1VVe5b/PXh2ck4 jcY4gIoUF8vlxB3iGjjr01Xs2ShkyxqH0usWBHypcOvCPb7Zz/AZXCLAgbInb3rS 8vR/Rn0kIeZWokT/iQ7JJeOwaei9BIQ= -----END CERTIFICATE-----Generated at Fri Sep 25 03:36:58 2026 by rpki-client