$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/25742bec-3680-3006-9f66-dea23bf8fa9c.roa File: 25742bec-3680-3006-9f66-dea23bf8fa9c.roa (raw, json) Hash identifier: BsOdGp+w9LoDnyx9BI6XUPg29QRon+ouvB9hgpMMVq0= Subject key identifier: 2F:49:ED:FF:1B:17:73:8C:AB:EE:EF:73:49:B5:7A:4B:2F:E4:B7:9A Certificate issuer: /CN=5937a29a-1b30-48a0-ad3c-37d4a97ffe18 Certificate serial: 010D0C9F4328584F093CD8C31F9C47931544AF40 Authority key identifier: 83:9F:E5:51:A0:D2:09:AB:21:3E:8D:4D:B5:CD:63:25:6C:B1:B4:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/25742bec-3680-3006-9f66-dea23bf8fa9c.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 208.93.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d8:c3:1f:9c:47:93:15:44:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5937a29a-1b30-48a0-ad3c-37d4a97ffe18 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=ea875242-f4f8-4fd8-86ef-2bbe76c7a639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:36:e3:a4:88:ad:99:b0:61:1d:60:ae:10:c7: 1c:20:5a:e9:ff:29:36:ca:f5:58:40:49:18:f3:06: 1f:29:94:7f:be:ab:bf:e8:a0:1f:c5:54:69:43:20: db:b7:48:6e:3c:22:d3:fa:2a:dc:e0:41:07:e3:83: 5c:50:de:8f:86:4c:4a:a7:b6:02:3a:77:8d:bb:be: a1:04:01:3d:8d:6d:69:95:d7:fb:19:86:0d:07:2c: db:9d:fc:c7:45:e8:42:9e:59:f9:37:b8:1c:aa:f8: ab:f0:4d:21:e5:1e:38:fd:ff:4d:de:01:88:e2:2c: 6b:42:21:d9:6a:a8:05:2a:47:1a:c4:49:0f:e1:2e: df:35:ed:5a:fa:68:d0:22:b1:1b:d6:74:cd:6f:9d: 00:f0:95:38:ca:de:d0:c3:7b:84:fb:6e:27:1c:39: f7:5d:63:ba:41:79:ab:56:08:c1:34:8d:c6:67:df: 49:80:b2:2c:c2:59:9f:ea:88:93:73:9c:bc:ea:9a: 8b:34:65:5f:b3:4c:ea:0d:b3:1d:3c:eb:35:9f:07: a4:e2:78:30:f2:40:2b:60:f9:e9:37:3e:c7:2e:8f: 10:28:54:9c:0c:86:d8:91:79:00:d5:87:39:5e:71: ad:fc:10:97:57:eb:61:5a:00:58:1e:a0:aa:40:76: 6b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:49:ED:FF:1B:17:73:8C:AB:EE:EF:73:49:B5:7A:4B:2F:E4:B7:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/25742bec-3680-3006-9f66-dea23bf8fa9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.crl X509v3 Authority Key Identifier: keyid:83:9F:E5:51:A0:D2:09:AB:21:3E:8D:4D:B5:CD:63:25:6C:B1:B4:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer sbgp-ipAddrBlock: critical IPv4: 208.93.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c7:b5:8a:42:44:70:32:a4:97:bb:9f:e7:85:c8:09:ab:46: 30:f3:b5:5b:49:aa:47:5b:9e:62:0a:00:ae:de:2e:e5:d3:72: 17:ed:72:ae:71:4a:ad:85:56:29:b3:8b:a3:4a:2c:e2:26:e7: 83:61:b6:cf:63:29:1e:f9:04:d3:e7:cf:80:ff:b4:66:d0:54: 77:01:52:48:70:e9:72:4d:b8:ef:a7:a6:be:55:6e:24:79:28: 4f:06:13:81:e0:10:c9:d6:c0:9e:0f:eb:7c:4e:b2:c7:a3:fd: aa:63:fb:04:e6:06:0d:3d:8c:97:5a:dd:19:54:23:c5:e0:56: a1:55:92:18:71:b3:10:52:78:8a:d4:c9:7e:8d:a5:fa:21:65: 67:93:2c:0d:cb:96:aa:58:a2:e8:0f:e9:ac:6a:18:55:0e:60: 94:48:88:e6:99:41:4a:0a:ba:40:a9:80:d9:12:f0:21:d0:00: bf:7b:f6:3b:87:ec:50:9b:f3:b3:17:04:97:c8:0f:dc:00:fd: 3d:9c:1d:7c:02:52:2d:58:bb:54:e9:a5:2b:8a:ea:86:42:49: c4:95:ba:ec:28:e1:73:b6:86:c0:3f:41:91:c4:19:28:8c:90: b8:ac:38:8e:ab:12:16:52:eb:d0:11:ac:8e:ef:d6:5f:6b:7c: b4:3a:91:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNjDH5xHkxVEr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzN2EyOWEtMWIzMC00OGEwLWFkM2MtMzdkNGE5N2Zm ZTE4MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZWE4NzUyNDItZjRmOC00ZmQ4LTg2ZWYtMmJiZTc2YzdhNjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjbjpIitmbBhHWCuEMccIFrp/yk2yvVYQEkY 8wYfKZR/vqu/6KAfxVRpQyDbt0huPCLT+irc4EEH44NcUN6PhkxKp7YCOneNu76h BAE9jW1pldf7GYYNByzbnfzHRehCnln5N7gcqvir8E0h5R44/f9N3gGI4ixrQiHZ aqgFKkcaxEkP4S7fNe1a+mjQIrEb1nTNb50A8JU4yt7Qw3uE+24nHDn3XWO6QXmr VgjBNI3GZ99JgLIswlmf6oiTc5y86pqLNGVfs0zqDbMdPOs1nwek4ngw8kArYPnp Nz7HLo8QKFScDIbYkXkA1Yc5XnGt/BCXV+thWgBYHqCqQHZrcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9J7f8bF3OMq+7vc0m1eksv5LeaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTM3 YTI5YS0xYjMwLTQ4YTAtYWQzYy0zN2Q0YTk3ZmZlMTgvMjU3NDJiZWMtMzY4MC0z MDA2LTlmNjYtZGVhMjNiZjhmYTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzN2EyOWEtMWIzMC00OGEwLWFk M2MtMzdkNGE5N2ZmZTE4LzU5MzdhMjlhLTFiMzAtNDhhMC1hZDNjLTM3ZDRhOTdm ZmUxOC5jcmwwHwYDVR0jBBgwFoAUg5/lUaDSCashPo1Ntc1jJWyxtNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTM3YTI5YS0xYjMwLTQ4YTAtYWQzYy0zN2Q0 YTk3ZmZlMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/HtYpCRHAypJe7n+eFyAmrRjDztVtJqkdbnmIKAK7eLuXTchftcq5x Sq2FVimzi6NKLOIm54Nhts9jKR75BNPnz4D/tGbQVHcBUkhw6XJNuO+npr5VbiR5 KE8GE4HgEMnWwJ4P63xOssej/apj+wTmBg09jJda3RlUI8XgVqFVkhhxsxBSeIrU yX6NpfohZWeTLA3LlqpYougP6axqGFUOYJRIiOaZQUoKukCpgNkS8CHQAL979juH 7FCb87MXBJfID9wA/T2cHXwCUi1Yu1TppSuK6oZCScSVuuwo4XO2hsA/QZHEGSiM kLisOI6rEhZS69ARrI7v1l9rfLQ6kaw= -----END CERTIFICATE-----Generated at Tue Sep 22 21:30:45 2026 by rpki-client