$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa File: 529eec86-aabc-3d34-8797-dab3f5a00262.roa (raw, json) Hash identifier: AIrSZgRK/buBEHViS9UvUkzBRQx0fTdw8RLDQiPd5aQ= Subject key identifier: 61:67:54:F8:F0:81:02:C7:1C:6F:90:E0:C8:D9:9E:DB:56:BF:62:92 Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624 Certificate serial: 010D0C9F4328584EF7176C85C29CB6AB3FD2A280 Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3565 IP address blocks: 208.68.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:6c:85:c2:9c:b6:ab:3f:d2:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=00c1b994-c50e-4378-b26e-cefcbfdf3fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d1:02:7e:e2:7f:c5:39:5d:fe:1e:fc:36:a4: 52:92:6c:b9:29:b9:36:6a:b9:b9:b7:18:be:49:ba: 4b:95:14:84:13:cd:30:a0:00:52:98:3a:80:91:cd: b3:5f:54:47:1e:0c:03:3a:c5:5d:eb:47:58:c9:3c: 3c:bb:5b:0e:f0:81:12:dd:ca:05:8e:aa:42:04:bb: 6d:05:54:d4:4d:35:47:13:7f:e9:48:10:0f:b8:11: 63:d5:87:54:6b:28:fa:d6:18:68:90:dc:cd:4b:36: ba:56:6e:0d:6f:4a:fa:1f:b4:b3:3d:88:1c:54:de: db:fe:27:b8:a2:5d:0f:52:d9:45:41:62:94:55:f6: 64:05:80:af:f9:dd:08:84:d9:ae:a4:e0:15:22:42: e2:18:67:52:41:7a:ff:03:64:74:b1:1c:17:ac:b9: 21:65:2f:ee:ea:c9:98:a8:11:3b:b7:bf:cb:ae:96: e7:12:43:dd:44:0e:11:4b:7b:61:5d:fb:01:72:c4: 0e:39:da:9d:f4:2a:f4:6e:27:f3:14:b1:2b:3d:f1: c6:cf:57:dc:f1:35:24:81:b8:dc:99:82:cd:3c:66: 61:e4:ff:c0:1e:2d:89:06:40:d0:98:96:b7:bd:73: 4d:00:c5:4c:9c:d9:2e:83:a3:c4:29:f7:64:40:3c: 7c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:67:54:F8:F0:81:02:C7:1C:6F:90:E0:C8:D9:9E:DB:56:BF:62:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/529eec86-aabc-3d34-8797-dab3f5a00262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl X509v3 Authority Key Identifier: keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer sbgp-ipAddrBlock: critical IPv4: 208.68.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:83:5b:9a:96:ae:01:88:dd:ec:4d:05:3e:9b:7f:ed:df:fa: 73:da:6e:f9:7a:ea:b2:24:aa:e0:8c:9d:ed:4f:e1:1f:e7:a7: bc:9f:b9:5a:6a:69:1f:77:a7:cd:0c:55:3a:0f:fc:e2:b9:45: 9a:0e:b9:63:6f:70:8a:37:81:e7:6c:5b:29:16:f8:d3:00:07: 16:52:c9:0f:df:6b:1a:c1:fe:88:dc:7c:69:16:a9:76:ec:57: 32:d3:c4:b0:45:6b:d6:a7:79:06:8b:f7:e2:99:01:65:c5:db: 1a:d1:d4:6e:5d:9f:19:1a:30:dd:8b:01:29:ae:63:3c:7a:da: 37:09:fd:ef:61:0d:f6:e8:ed:1a:c9:8b:ca:1a:9d:d2:b4:ad: 68:17:b2:ba:a8:84:e6:e7:01:4b:3e:80:c9:5f:07:48:2d:51: 1d:be:be:49:37:3d:b6:e7:1a:f0:b5:e3:f3:44:d2:c4:20:80: 85:81:b9:bf:f9:2d:cc:65:65:5a:1a:be:18:d3:6b:d5:63:22: e8:7d:51:64:0c:da:a9:7c:75:4f:09:fa:72:aa:e9:e8:5d:dd: 0a:ed:96:76:ed:91:68:a4:5c:94:7e:ba:96:59:08:53:de:62: 4e:ae:eb:d7:12:ab:23:a9:7a:4d:5d:c5:7d:85:4e:b6:4b:0e: 7a:70:d7:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2yFwpy2qz/SooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzNjc1NmUtZTQzMy00NzMyLWE3MDctYTlmYTEzOTY1 NjI0MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MDBjMWI5OTQtYzUwZS00Mzc4LWIyNmUtY2VmY2JmZGYzZmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tECfuJ/xTld/h78NqRSkmy5Kbk2arm5txi+ SbpLlRSEE80woABSmDqAkc2zX1RHHgwDOsVd60dYyTw8u1sO8IES3coFjqpCBLtt BVTUTTVHE3/pSBAPuBFj1YdUayj61hhokNzNSza6Vm4Nb0r6H7SzPYgcVN7b/ie4 ol0PUtlFQWKUVfZkBYCv+d0IhNmupOAVIkLiGGdSQXr/A2R0sRwXrLkhZS/u6smY qBE7t7/LrpbnEkPdRA4RS3thXfsBcsQOOdqd9Cr0bifzFLErPfHGz1fc8TUkgbjc mYLNPGZh5P/AHi2JBkDQmJa3vXNNAMVMnNkug6PEKfdkQDx8EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFnVPjwgQLHHG+Q4MjZnttWv2KSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjM2 NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZhMTM5NjU2MjQvNTI5ZWVjODYtYWFiYy0z ZDM0LTg3OTctZGFiM2Y1YTAwMjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWIzNjc1NmUtZTQzMy00NzMyLWE3 MDctYTlmYTEzOTY1NjI0L2ViMzY3NTZlLWU0MzMtNDczMi1hNzA3LWE5ZmExMzk2 NTYyNC5jcmwwHwYDVR0jBBgwFoAUiA349Y8cCk5qFJhNT4/nj8QP0TIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYjM2NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZh MTM5NjU2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0ETcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeDW5qWrgGI3exNBT6bf+3f+nPabvl66rIkquCMne1P4R/np7yfuVpq aR93p80MVToP/OK5RZoOuWNvcIo3gedsWykW+NMABxZSyQ/faxrB/ojcfGkWqXbs VzLTxLBFa9aneQaL9+KZAWXF2xrR1G5dnxkaMN2LASmuYzx62jcJ/e9hDfbo7RrJ i8oandK0rWgXsrqohObnAUs+gMlfB0gtUR2+vkk3PbbnGvC14/NE0sQggIWBub/5 LcxlZVoavhjTa9VjIuh9UWQM2ql8dU8J+nKq6ehd3QrtlnbtkWikXJR+upZZCFPe Yk6u69cSqyOpek1dxX2FTrZLDnpw1wk= -----END CERTIFICATE-----Generated at Mon Sep 21 14:48:58 2026 by rpki-client