$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/1f0c515d-1f17-3523-bca8-dbb774a467b1.roa File: 1f0c515d-1f17-3523-bca8-dbb774a467b1.roa (raw, json) Hash identifier: FK3HluXPX3tJVYU0dyvXYYg89+4gda/QdUgK/FTxZmE= Subject key identifier: E4:48:83:F5:25:18:DD:56:5B:41:7B:29:7C:A2:A8:7D:7A:5F:61:28 Certificate issuer: /CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Certificate serial: 010D0C9F4328584F0ED2426836DBD28ED05E9D80 Authority key identifier: 84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/1f0c515d-1f17-3523-bca8-dbb774a467b1.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 194 IP address blocks: 128.117.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:42:68:36:db:d2:8e:d0:5e:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b414afc1-d8ed-4d3f-8f5b-ff72e57f699c Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=e2b3faed-e800-4864-a546-567ab7442274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c7:cb:e2:35:91:df:20:93:a8:71:f0:09:1b: 3d:75:be:f1:3b:7b:88:59:26:fb:f1:a1:c5:60:b6: cc:ae:ac:b0:bc:24:b6:51:9e:c5:a5:2f:28:56:21: 7d:ae:df:9b:69:81:a6:5c:35:dd:a2:93:9e:d6:65: d7:4c:13:4f:2b:58:a9:ab:56:f2:48:ba:f8:07:ac: c5:91:4e:4d:58:cc:1a:a9:1a:20:42:c1:04:5c:d5: 09:f8:78:2c:68:af:32:5e:9f:f0:45:78:76:66:ed: b8:bf:5c:97:d4:8b:bd:aa:94:60:75:36:5e:e5:25: 52:88:a0:79:bd:31:c7:1c:21:eb:d7:27:fa:59:37: f3:30:c9:fe:71:27:1a:ee:79:0e:55:b1:fb:b7:12: 17:23:7e:12:fd:3a:49:e7:be:bd:5e:19:05:84:77: 75:8e:3c:c7:9d:dd:6c:ea:07:ac:92:0e:1a:0f:cf: 54:3c:19:15:a5:0d:08:84:cd:a6:e6:dc:2f:71:b8: 42:d1:f8:ab:ea:d6:1b:6d:06:18:9a:e2:1b:39:26: ec:08:ad:f3:a2:1f:82:6a:a5:e1:22:86:37:67:20: 74:61:c6:f5:f9:bd:a9:5d:20:d1:34:0b:6b:27:bb: 5a:9e:50:0f:9a:31:c4:9f:c2:8f:02:ef:24:c4:1d: a5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:48:83:F5:25:18:DD:56:5B:41:7B:29:7C:A2:A8:7D:7A:5F:61:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/1f0c515d-1f17-3523-bca8-dbb774a467b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.crl X509v3 Authority Key Identifier: keyid:84:18:2E:63:63:C3:F9:7A:FD:FC:D9:56:B9:F2:6A:9E:82:CB:58:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b414afc1-d8ed-4d3f-8f5b-ff72e57f699c.cer sbgp-ipAddrBlock: critical IPv4: 128.117.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ba:f8:45:6a:7d:d0:e8:aa:2d:05:3d:14:de:49:a2:96:6d: b1:4d:54:dc:78:4a:e8:86:2c:3a:51:5b:f0:ff:32:38:d1:85: b6:9f:de:39:bf:0c:9d:c4:c7:6b:eb:2a:15:dd:fe:61:dc:20: 85:88:d9:8e:7a:35:5c:0b:e5:4c:40:13:38:98:d3:4b:b7:1b: 9a:98:d4:2a:fd:6d:94:3e:94:23:48:d5:17:bf:74:37:ec:f2: 55:24:52:86:94:09:c5:76:96:b1:64:dc:2c:fd:7e:11:f4:31: db:05:5a:1e:ed:f7:86:48:5e:e1:f8:0c:e6:76:99:fe:9f:18: 8e:c4:e7:d4:3f:52:8f:d9:68:00:9d:bf:fc:08:3b:4e:31:af: 95:3e:3f:2b:16:91:c8:54:f6:f9:c3:28:84:21:8e:b8:c5:3c: f9:58:50:d6:ca:7f:f0:2e:12:7a:f7:a4:ae:b9:b3:a8:51:57: 07:0a:24:1e:e0:09:09:d4:63:6e:74:0a:5e:47:bd:fc:b6:97: 4f:77:a9:49:eb:b3:ec:95:ee:da:0e:83:82:3e:13:d9:bf:cb: 74:22:1c:a7:83:a1:c0:fa:fa:03:6b:a7:25:1f:e3:1f:0b:20: 39:03:13:ce:08:b6:6b:8d:79:93:79:69:51:5c:4e:24:3b:78: df:0c:d6:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0kJoNtvSjtBenYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQxNGFmYzEtZDhlZC00ZDNmLThmNWItZmY3MmU1N2Y2 OTljMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk ZTJiM2ZhZWQtZTgwMC00ODY0LWE1NDYtNTY3YWI3NDQyMjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsfL4jWR3yCTqHHwCRs9db7xO3uIWSb78aHF YLbMrqywvCS2UZ7FpS8oViF9rt+baYGmXDXdopOe1mXXTBNPK1ipq1bySLr4B6zF kU5NWMwaqRogQsEEXNUJ+HgsaK8yXp/wRXh2Zu24v1yX1Iu9qpRgdTZe5SVSiKB5 vTHHHCHr1yf6WTfzMMn+cSca7nkOVbH7txIXI34S/TpJ5769XhkFhHd1jjzHnd1s 6geskg4aD89UPBkVpQ0IhM2m5twvcbhC0fir6tYbbQYYmuIbOSbsCK3zoh+CaqXh IoY3ZyB0Ycb1+b2pXSDRNAtrJ7tanlAPmjHEn8KPAu8kxB2lFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORIg/UlGN1WW0F7KXyiqH16X2EoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0 YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcyZTU3ZjY5OWMvMWYwYzUxNWQtMWYxNy0z NTIzLWJjYTgtZGJiNzc0YTQ2N2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjQxNGFmYzEtZDhlZC00ZDNmLThm NWItZmY3MmU1N2Y2OTljL2I0MTRhZmMxLWQ4ZWQtNGQzZi04ZjViLWZmNzJlNTdm Njk5Yy5jcmwwHwYDVR0jBBgwFoAUhBguY2PD+Xr9/NlWufJqnoLLWNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNDE0YWZjMS1kOGVkLTRkM2YtOGY1Yi1mZjcy ZTU3ZjY5OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgHXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq6+EVqfdDoqi0FPRTeSaKWbbFNVNx4SuiGLDpRW/D/MjjRhbaf3jm/ DJ3Ex2vrKhXd/mHcIIWI2Y56NVwL5UxAEziY00u3G5qY1Cr9bZQ+lCNI1Re/dDfs 8lUkUoaUCcV2lrFk3Cz9fhH0MdsFWh7t94ZIXuH4DOZ2mf6fGI7E59Q/Uo/ZaACd v/wIO04xr5U+PysWkchU9vnDKIQhjrjFPPlYUNbKf/AuEnr3pK65s6hRVwcKJB7g CQnUY250Cl5Hvfy2l093qUnrs+yV7toOg4I+E9m/y3QiHKeDocD6+gNrpyUf4x8L IDkDE84ItmuNeZN5aVFcTiQ7eN8M1jg= -----END CERTIFICATE-----Generated at Sun Sep 20 22:24:43 2026 by rpki-client