$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa File: 2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa (raw, json) Hash identifier: cHOGZzXYn6OL5tWX/t90NR0zn8EBq9rOzACbSGgSg/E= Subject key identifier: 16:DA:D9:2B:04:B2:71:F6:EA:AE:57:A6:EB:FE:72:97:CE:12:9B:38 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584F4976D631C9E946FC02002400 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398420 IP address blocks: 208.89.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:d6:31:c9:e9:46:fc:02:00:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=129090cf-859c-42c0-b6e7-7a5ec02058ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ea:3f:9f:ac:88:11:6b:de:d4:70:25:af:f2: 70:2f:8a:a4:1e:09:c9:09:ff:a6:15:03:65:fe:92: bb:6b:83:76:2c:3a:18:64:13:56:39:40:ff:33:3b: f0:c7:f7:c4:b6:6b:22:d4:04:67:d2:13:56:fe:ba: a1:b0:53:06:fa:f6:0c:7b:47:4c:21:d8:09:96:12: a5:9a:57:42:80:c5:bd:9e:96:93:08:5a:71:08:34: 31:1e:44:7a:7a:b1:f2:5b:a8:6a:99:d8:4b:ea:81: 32:7f:f1:18:02:3e:8b:c1:29:9b:00:16:cb:71:23: 04:21:5b:56:ec:0c:fd:68:24:d3:93:27:55:fa:97: 03:57:31:18:87:2d:46:10:38:74:3a:f8:b0:76:07: a4:38:bb:7a:77:ce:98:c2:e4:6a:04:f9:fd:81:7d: 8b:e3:0e:b6:11:26:f8:01:08:c5:68:08:2c:17:21: 7b:0f:35:0e:f2:f1:cd:8e:5f:9b:f7:ae:4e:b9:24: 6b:87:27:05:c9:97:d3:90:ca:69:da:0b:0b:94:b9: 0e:ef:9c:cc:f4:b9:b0:2b:d6:3e:f0:ef:83:06:c3: 92:ef:56:b0:f5:af:95:ae:3d:98:2a:3f:de:37:06: f7:94:49:93:2c:9c:74:5d:41:19:48:d6:4a:52:66: 92:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DA:D9:2B:04:B2:71:F6:EA:AE:57:A6:EB:FE:72:97:CE:12:9B:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/2333b7d8-3fbe-3875-ad74-81579d6f5e87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 208.89.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ed:9a:09:a0:f3:ea:2f:da:94:62:65:45:e2:90:f4:f1:e6: 1f:ce:fc:d4:f8:3d:57:fb:93:b0:68:40:99:f8:0d:53:eb:ef: 59:d9:05:f5:68:08:40:3b:48:cd:fc:27:6d:54:ad:d7:94:12: 00:f5:aa:84:03:d7:68:36:e9:9c:42:78:48:98:68:85:2b:81: 63:69:22:6b:9b:f2:c6:0c:98:80:7f:51:4f:98:5a:61:6e:6c: fa:e6:95:d5:83:fa:41:9f:5c:c1:54:33:4c:b5:4d:c2:5e:a7: a8:a0:64:56:ec:a1:bb:76:93:84:e0:5e:0f:e3:8d:fe:3b:45: 4f:5d:28:ee:6d:fa:b7:d4:9c:9e:6f:22:50:a3:cd:00:6c:c1: 6c:ea:c9:c2:e5:2c:a1:db:11:19:eb:53:a9:4d:d9:03:c6:66: 8e:ea:75:b4:23:ea:3d:2e:c1:d2:08:ae:fe:f7:c5:20:c3:20: 06:c5:2f:aa:a0:79:50:3e:2b:09:46:5f:8f:91:eb:b7:e2:d3: 00:12:9d:2a:48:34:80:7a:26:87:1f:cb:50:13:3c:54:29:9b: fe:53:30:ee:b4:fc:b3:71:2e:97:ee:25:f5:b7:43:ff:d0:c2: 50:a4:4f:29:21:2d:b9:b4:0c:f9:c9:3a:e8:09:23:f7:43:d7: b9:8c:8f:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdtYxyelG/AIAJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTI5MDkwY2YtODU5Yy00MmMwLWI2ZTctN2E1ZWMwMjA1OGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeo/n6yIEWve1HAlr/JwL4qkHgnJCf+mFQNl /pK7a4N2LDoYZBNWOUD/Mzvwx/fEtmsi1ARn0hNW/rqhsFMG+vYMe0dMIdgJlhKl mldCgMW9npaTCFpxCDQxHkR6erHyW6hqmdhL6oEyf/EYAj6LwSmbABbLcSMEIVtW 7Az9aCTTkydV+pcDVzEYhy1GEDh0OviwdgekOLt6d86YwuRqBPn9gX2L4w62ESb4 AQjFaAgsFyF7DzUO8vHNjl+b965OuSRrhycFyZfTkMpp2gsLlLkO75zM9LmwK9Y+ 8O+DBsOS71aw9a+Vrj2YKj/eNwb3lEmTLJx0XUEZSNZKUmaSywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBba2SsEsnH26q5Xpuv+cpfOEps4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMjMzM2I3ZDgtM2ZiZS0z ODc1LWFkNzQtODE1NzlkNmY1ZTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Fk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvtmgmg8+ov2pRiZUXikPTx5h/O/NT4PVf7k7BoQJn4DVPr71nZBfVo CEA7SM38J21UrdeUEgD1qoQD12g26ZxCeEiYaIUrgWNpImub8sYMmIB/UU+YWmFu bPrmldWD+kGfXMFUM0y1TcJep6igZFbsobt2k4TgXg/jjf47RU9dKO5t+rfUnJ5v IlCjzQBswWzqycLlLKHbERnrU6lN2QPGZo7qdbQj6j0uwdIIrv73xSDDIAbFL6qg eVA+KwlGX4+R67fi0wASnSpINIB6Jocfy1ATPFQpm/5TMO60/LNxLpfuJfW3Q//Q wlCkTykhLbm0DPnJOugJI/dD17mMj6s= -----END CERTIFICATE-----Generated at Thu Oct 8 16:48:11 2026 by rpki-client