$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/2feed830-0e4a-3f68-b470-863b018e6b9f.roa File: 2feed830-0e4a-3f68-b470-863b018e6b9f.roa (raw, json) Hash identifier: cKbLw5iNi0tGc9wmNhpi0XuRs4KpTUn1jIeLKpvJ7lY= Subject key identifier: 53:FF:2C:46:F1:C4:1C:06:B7:ED:C1:6A:0C:87:BD:80:47:3C:F4:C4 Certificate issuer: /CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Certificate serial: 010D0C9F4328584F093CDE2754C28F2406530600 Authority key identifier: 38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/2feed830-0e4a-3f68-b470-863b018e6b9f.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 398125 IP address blocks: 208.71.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:de:27:54:c2:8f:24:06:53:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=645e6c24-8c0c-4f4b-942c-6d39b3a1f283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:8b:50:44:8a:60:0a:8d:12:2c:3e:4d:0f:8e: b1:5a:b9:dc:bf:b4:10:db:6a:7e:29:85:f7:73:32: 6b:da:29:7b:d5:a5:82:80:78:0d:d1:1e:8e:43:e1: 27:c6:a8:11:da:85:e6:d4:fd:b8:4c:23:ff:00:92: c3:91:e5:14:50:29:ce:38:c2:f4:54:f5:0f:b9:f3: af:50:b2:10:46:f3:31:5d:67:47:26:66:5b:c0:38: e1:82:28:bb:58:de:35:9e:71:31:63:30:f3:89:ce: 25:6b:02:4d:82:eb:23:7e:3d:5d:e1:8e:bc:e1:e8: 69:68:bd:06:3b:92:46:e8:0f:49:37:cf:39:19:8e: 32:e2:a4:71:77:c7:6b:33:62:be:5b:ef:ec:0a:bb: f4:72:7d:db:71:68:a3:2c:44:f9:79:15:e8:22:3f: c7:c1:1f:c8:1f:c0:25:44:9c:6e:97:97:2d:c5:b5: cb:19:9a:04:80:1c:0e:d9:d0:ef:d4:02:e1:1f:ab: ba:13:59:d6:a8:e2:54:23:f3:3f:3e:b8:e0:7c:c7: d4:e2:5c:a0:c1:45:fb:19:bf:36:ec:76:6c:a9:ad: 4b:e6:11:ba:b2:57:e7:2f:44:72:fb:06:ce:cc:d6: c2:3b:a7:d8:cb:65:17:66:03:ef:38:c7:17:ee:61: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FF:2C:46:F1:C4:1C:06:B7:ED:C1:6A:0C:87:BD:80:47:3C:F4:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/2feed830-0e4a-3f68-b470-863b018e6b9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl X509v3 Authority Key Identifier: keyid:38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer sbgp-ipAddrBlock: critical IPv4: 208.71.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:f6:78:6c:f2:99:98:8f:ba:a8:b5:f7:15:9f:53:a6:46:fe: 19:a2:15:3a:7b:33:af:f4:01:8a:5d:09:ac:26:aa:3e:89:b7: 8f:71:59:f2:3e:ec:0c:07:94:67:68:77:40:9d:1e:1c:17:57: 0c:60:b5:04:29:23:63:0a:ae:50:ea:84:64:52:37:0a:8b:ec: 80:6e:42:03:f8:34:88:3c:01:87:86:bc:fa:00:08:7a:4c:de: 3e:60:77:44:a5:be:1a:16:6c:0c:67:44:70:8b:bd:11:d3:83: 31:42:a0:9b:3c:22:25:6d:2d:d1:a3:ff:b2:3a:cc:e1:8a:31: 4f:c8:f1:8f:04:6a:ca:84:7f:95:d4:d2:d3:e4:53:7c:2b:77: 5c:f3:8b:cf:24:cf:90:b1:d7:9a:93:07:f2:54:1f:ac:82:ca: ad:03:73:6b:a0:a5:d3:65:b9:18:25:ac:d3:4e:5f:e3:ba:fa: 7f:fe:c2:52:cd:bb:81:39:99:18:43:43:35:ba:1c:01:56:80: 46:d6:f6:2c:15:ef:69:f4:3c:b7:ce:84:68:b2:4f:b1:97:95: 71:0b:37:76:cf:95:e2:57:f7:b3:b0:47:28:23:58:ec:ab:d2: d5:8a:cb:66:9d:e3:0b:02:2f:84:c8:71:62:c6:87:1c:25:d2: 29:87:16:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPN4nVMKPJAZTBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjNjVjYmItNDBhOC00YmU4LTljMzUtNDE5ZjlkYzM2 ZDcxMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NjQ1ZTZjMjQtOGMwYy00ZjRiLTk0MmMtNmQzOWIzYTFmMjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ItQRIpgCo0SLD5ND46xWrncv7QQ22p+KYX3 czJr2il71aWCgHgN0R6OQ+EnxqgR2oXm1P24TCP/AJLDkeUUUCnOOML0VPUPufOv ULIQRvMxXWdHJmZbwDjhgii7WN41nnExYzDzic4lawJNgusjfj1d4Y684ehpaL0G O5JG6A9JN885GY4y4qRxd8drM2K+W+/sCrv0cn3bcWijLET5eRXoIj/HwR/IH8Al RJxul5ctxbXLGZoEgBwO2dDv1ALhH6u6E1nWqOJUI/M/PrjgfMfU4lygwUX7Gb82 7HZsqa1L5hG6slfnL0Ry+wbOzNbCO6fYy2UXZgPvOMcX7mE0ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFP/LEbxxBwGt+3BagyHvYBHPPTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2 NWNiYi00MGE4LTRiZTgtOWMzNS00MTlmOWRjMzZkNzEvMmZlZWQ4MzAtMGU0YS0z ZjY4LWI0NzAtODYzYjAxOGU2YjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjNjVjYmItNDBhOC00YmU4LTlj MzUtNDE5ZjlkYzM2ZDcxLzNiYzY1Y2JiLTQwYTgtNGJlOC05YzM1LTQxOWY5ZGMz NmQ3MS5jcmwwHwYDVR0jBBgwFoAUOBhgLEnhhtTnYbFpKTFGPpNKPqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2NWNiYi00MGE4LTRiZTgtOWMzNS00MTlm OWRjMzZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EduMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG72eGzymZiPuqi19xWfU6ZG/hmiFTp7M6/0AYpdCawmqj6Jt49xWfI+ 7AwHlGdod0CdHhwXVwxgtQQpI2MKrlDqhGRSNwqL7IBuQgP4NIg8AYeGvPoACHpM 3j5gd0SlvhoWbAxnRHCLvRHTgzFCoJs8IiVtLdGj/7I6zOGKMU/I8Y8EasqEf5XU 0tPkU3wrd1zzi88kz5Cx15qTB/JUH6yCyq0Dc2ugpdNluRglrNNOX+O6+n/+wlLN u4E5mRhDQzW6HAFWgEbW9iwV72n0PLfOhGiyT7GXlXELN3bPleJX97OwRygjWOyr 0tWKy2ad4wsCL4TIcWLGhxwl0imHFmk= -----END CERTIFICATE-----Generated at Thu Sep 24 10:14:00 2026 by rpki-client