$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa File: a665e37a-2264-3b19-b8a4-ae270c10d73a.roa (raw, json) Hash identifier: 5ZS8v4yufxYylDetG0M/TCqjIkA+NF+xdem7zj4Hn2E= Subject key identifier: AE:00:74:70:44:95:FB:24:36:14:73:4F:8A:96:07:A3:82:57:12:CC Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624 Certificate serial: 010D0C9F4328584EF71778B47712533A40077400 Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 3565 IP address blocks: 208.68.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:78:b4:77:12:53:3a:40:07:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=d5026cbd-e59a-4e8c-84a6-50ba3aaf2859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:a9:e1:3b:47:91:f6:a6:36:3e:e2:12:18: 20:9b:5b:aa:93:dc:ab:da:a7:7d:ca:d1:aa:f7:37: 9f:52:87:64:da:77:70:e1:41:0e:3f:f8:da:0c:da: 16:d9:2f:be:1d:14:00:2b:f4:9f:9a:ec:55:a7:53: 8c:c6:5d:c3:9a:ab:9f:28:32:9a:b9:f9:fb:aa:c4: f0:c6:06:f1:72:3c:b7:d4:c1:7e:1c:92:3d:93:1d: 9e:80:be:9d:c7:f1:01:fd:67:42:1d:29:c3:56:aa: 13:ba:67:2c:a8:5e:75:48:34:10:9d:9b:af:e8:1d: 39:6e:b3:54:57:e3:bc:b3:8a:ae:09:13:c8:ca:96: ff:d5:87:01:24:6e:9b:b9:c9:a4:b3:b4:3f:f7:88: d9:d6:35:dd:2c:b6:e1:42:56:b9:b0:1e:57:a3:b1: e1:22:18:5b:6f:dd:64:97:57:cd:cd:86:5b:d7:ca: e9:76:7f:42:b7:7d:58:79:bc:58:80:05:e1:92:c7: 4a:0a:50:f9:af:f0:06:6e:22:fe:b9:bd:27:63:23: 08:7c:bc:32:9f:78:06:ac:28:64:11:ba:8e:4a:0d: 8f:51:b2:01:20:8d:92:be:27:d8:b8:25:70:6f:36: 51:e1:8d:29:45:ea:3c:dc:c0:02:02:07:84:9a:54: e4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:00:74:70:44:95:FB:24:36:14:73:4F:8A:96:07:A3:82:57:12:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl X509v3 Authority Key Identifier: keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer sbgp-ipAddrBlock: critical IPv4: 208.68.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:82:bd:f8:43:6e:7d:4a:aa:65:b4:72:3d:47:b0:33:e2:7f: 03:87:da:08:60:58:d3:73:75:1c:96:fb:0e:6c:d9:ed:96:da: 58:56:d6:33:d3:ce:e0:14:02:8c:c6:a7:cc:bd:37:60:d9:9d: 91:f6:0a:a2:ad:88:3c:51:fb:6b:12:af:b6:29:88:92:11:ff: 6e:97:9a:f5:d7:bd:a5:8c:63:68:75:a0:0c:75:3f:39:35:9d: ac:91:d6:67:31:ee:4a:57:a2:f8:87:d1:8a:c2:c7:5a:4a:38: 6b:27:ad:11:ea:5b:cf:73:aa:d9:c8:1b:df:95:5e:6e:29:d6: 69:3f:e5:cd:d3:45:ee:4e:de:70:64:e8:dc:82:55:6e:0b:3d: 3d:bb:3c:a4:81:94:1e:bd:31:60:29:62:5f:53:b2:3d:13:8a: cf:d5:12:75:48:b8:9e:e2:26:14:d9:f8:58:00:21:18:50:fa: f9:3f:b3:ef:b7:40:8e:c3:e0:36:96:52:28:76:9b:66:0c:cc: 3c:97:43:71:a4:5a:8d:91:6b:bd:6a:9b:61:64:5e:07:3a:8c: 0d:db:fa:c7:8f:48:e9:6c:62:3a:2a:b7:f8:a6:13:b2:5c:23: 16:d5:6b:b4:48:6b:91:1b:03:38:89:de:fd:1e:b8:59:7f:4b: 7d:35:3e:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F3i0dxJTOkAHdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWIzNjc1NmUtZTQzMy00NzMyLWE3MDctYTlmYTEzOTY1 NjI0MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZDUwMjZjYmQtZTU5YS00ZThjLTg0YTYtNTBiYTNhYWYyODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLyp4TtHkfamNj7iEhggm1uqk9yr2qd9ytGq 9zefUodk2ndw4UEOP/jaDNoW2S++HRQAK/SfmuxVp1OMxl3DmqufKDKaufn7qsTw xgbxcjy31MF+HJI9kx2egL6dx/EB/WdCHSnDVqoTumcsqF51SDQQnZuv6B05brNU V+O8s4quCRPIypb/1YcBJG6bucmks7Q/94jZ1jXdLLbhQla5sB5Xo7HhIhhbb91k l1fNzYZb18rpdn9Ct31YebxYgAXhksdKClD5r/AGbiL+ub0nYyMIfLwyn3gGrChk EbqOSg2PUbIBII2SvifYuCVwbzZR4Y0pReo83MACAgeEmlTkhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4AdHBElfskNhRzT4qWB6OCVxLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lYjM2 NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZhMTM5NjU2MjQvYTY2NWUzN2EtMjI2NC0z YjE5LWI4YTQtYWUyNzBjMTBkNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZWIzNjc1NmUtZTQzMy00NzMyLWE3 MDctYTlmYTEzOTY1NjI0L2ViMzY3NTZlLWU0MzMtNDczMi1hNzA3LWE5ZmExMzk2 NTYyNC5jcmwwHwYDVR0jBBgwFoAUiA349Y8cCk5qFJhNT4/nj8QP0TIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9lYjM2NzU2ZS1lNDMzLTQ3MzItYTcwNy1hOWZh MTM5NjU2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ETcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqCvfhDbn1KqmW0cj1HsDPifwOH2ghgWNNzdRyW+w5s2e2W2lhW1jPT zuAUAozGp8y9N2DZnZH2CqKtiDxR+2sSr7YpiJIR/26XmvXXvaWMY2h1oAx1Pzk1 nayR1mcx7kpXoviH0YrCx1pKOGsnrRHqW89zqtnIG9+VXm4p1mk/5c3TRe5O3nBk 6NyCVW4LPT27PKSBlB69MWApYl9Tsj0Tis/VEnVIuJ7iJhTZ+FgAIRhQ+vk/s++3 QI7D4DaWUih2m2YMzDyXQ3GkWo2Ra71qm2FkXgc6jA3b+sePSOlsYjoqt/imE7Jc IxbVa7RIa5EbAziJ3v0euFl/S301PqY= -----END CERTIFICATE-----Generated at Mon Sep 21 14:49:26 2026 by rpki-client