$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/de98df6b-6564-3a5b-810b-1d3750e05855.roa File: de98df6b-6564-3a5b-810b-1d3750e05855.roa (raw, json) Hash identifier: JQHXNV1n1OfbiKIopYQNJVCcnaAi5mGlZNmo5YzpegA= Subject key identifier: D0:20:AB:53:6A:37:12:59:02:D9:AA:78:DC:18:2D:12:AC:08:C0:34 Certificate issuer: /CN=c6830b98-b6ce-461c-8849-244186a13d62 Certificate serial: 010D0C9F4328584F119D0B4604912F6D6D4EB840 Authority key identifier: F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/de98df6b-6564-3a5b-810b-1d3750e05855.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 7018 IP address blocks: 208.73.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:0b:46:04:91:2f:6d:6d:4e:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6830b98-b6ce-461c-8849-244186a13d62 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=df1b897a-a79a-4238-badc-f0cd038ee1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:aa:36:9e:08:4d:e2:23:b5:25:5c:3d:2b:dc: e3:39:87:0d:b8:7b:03:20:de:c3:85:f1:cd:7f:15: a0:41:1c:b1:75:a2:8c:da:82:ba:6b:2e:46:66:40: 85:8e:ee:6e:46:fe:be:04:7e:90:7f:23:3f:98:6f: 7a:4a:ea:e4:13:af:ff:6c:59:7c:29:98:25:0b:12: a9:6e:6b:2b:43:6a:4b:b2:d1:55:50:ad:10:b5:75: 3d:4a:a4:a3:8f:74:e0:1d:de:24:72:e0:18:6d:17: c0:b5:95:ad:50:b5:d1:d8:3e:fc:e6:61:b0:39:e4: 72:ba:fb:c3:b2:b0:a7:8a:4f:74:29:c4:df:44:16: ab:bb:9f:f5:2f:55:6e:86:16:6c:5b:7a:67:0e:7c: 81:e7:33:5b:83:0f:17:c1:ef:5d:a2:96:26:d2:4a: 2a:0c:fa:c5:e5:3a:81:6b:31:27:06:78:8d:57:ae: fd:e4:20:81:d1:55:b0:a4:81:99:e7:d5:a7:58:dc: 23:b2:10:d6:a8:3a:f0:24:b5:f1:ce:0a:95:f7:61: 77:b3:66:05:d6:4e:3d:a7:1e:6d:df:f0:66:9f:80: 0f:d2:eb:ef:6d:cc:3e:e5:96:6d:21:46:83:36:21: 70:5c:ca:9b:90:f7:3d:ac:61:99:e6:3e:bd:1f:de: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:20:AB:53:6A:37:12:59:02:D9:AA:78:DC:18:2D:12:AC:08:C0:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/de98df6b-6564-3a5b-810b-1d3750e05855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62/c6830b98-b6ce-461c-8849-244186a13d62.crl X509v3 Authority Key Identifier: keyid:F2:9F:00:B6:E4:BF:76:05:6A:00:05:2E:85:74:E4:F9:EE:9B:69:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c6830b98-b6ce-461c-8849-244186a13d62.cer sbgp-ipAddrBlock: critical IPv4: 208.73.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:43:17:fb:23:6a:81:bd:e1:b6:d0:f4:76:37:8b:ae:9d:cc: e9:91:23:e6:74:46:ac:81:fa:c8:74:b7:e2:b8:91:80:00:93: 2e:0f:f9:87:0c:b3:de:18:45:11:b3:5f:e8:11:d1:9e:63:88: 75:58:e8:4a:19:cb:2b:08:de:04:6b:14:a2:66:1e:b4:61:a1: bf:25:e7:e9:b7:df:91:46:68:3d:ba:b0:02:56:0a:d7:b1:7d: a3:29:69:e1:13:b8:dc:03:84:2a:9e:96:20:c1:d4:63:14:d4: 14:e5:c2:ba:92:a2:a5:4b:fe:ce:2c:41:71:94:87:b1:af:4f: 8c:1a:d1:04:26:df:e2:54:e6:74:78:f9:2d:32:e6:bc:d4:f4: ba:ea:87:b0:4f:3a:79:07:06:e0:8d:b6:87:9b:6d:02:5c:87: 6d:40:d4:28:de:a1:96:86:fc:ae:21:11:0d:b1:43:56:42:26: a4:08:4b:8e:d6:0c:fc:cf:54:d7:32:18:60:e8:12:5e:9b:06: e4:d8:46:b0:69:02:8a:0c:4a:11:fe:04:74:fd:a3:0f:04:a3: ad:fa:66:d0:2b:30:0a:ef:21:af:07:d2:7d:bf:f2:99:9b:76: f2:fd:90:86:1b:46:20:20:a7:8c:86:87:b5:4f:f0:ff:ac:a1: 4b:f5:d0:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQtGBJEvbW1OuEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY4MzBiOTgtYjZjZS00NjFjLTg4NDktMjQ0MTg2YTEz ZDYyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGYxYjg5N2EtYTc5YS00MjM4LWJhZGMtZjBjZDAzOGVlMWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ko2nghN4iO1JVw9K9zjOYcNuHsDIN7DhfHN fxWgQRyxdaKM2oK6ay5GZkCFju5uRv6+BH6QfyM/mG96SurkE6//bFl8KZglCxKp bmsrQ2pLstFVUK0QtXU9SqSjj3TgHd4kcuAYbRfAtZWtULXR2D785mGwOeRyuvvD srCnik90KcTfRBaru5/1L1VuhhZsW3pnDnyB5zNbgw8Xwe9dopYm0koqDPrF5TqB azEnBniNV6795CCB0VWwpIGZ59WnWNwjshDWqDrwJLXxzgqV92F3s2YF1k49px5t 3/Bmn4AP0uvvbcw+5ZZtIUaDNiFwXMqbkPc9rGGZ5j69H97HrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAgq1NqNxJZAtmqeNwYLRKsCMA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNjgz MGI5OC1iNmNlLTQ2MWMtODg0OS0yNDQxODZhMTNkNjIvZGU5OGRmNmItNjU2NC0z YTViLTgxMGItMWQzNzUwZTA1ODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzY4MzBiOTgtYjZjZS00NjFjLTg4 NDktMjQ0MTg2YTEzZDYyL2M2ODMwYjk4LWI2Y2UtNDYxYy04ODQ5LTI0NDE4NmEx M2Q2Mi5jcmwwHwYDVR0jBBgwFoAU8p8AtuS/dgVqAAUuhXTk+e6bacwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNjgzMGI5OC1iNmNlLTQ2MWMtODg0OS0yNDQx ODZhMTNkNjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1DF/sjaoG94bbQ9HY3i66dzOmRI+Z0RqyB+sh0t+K4kYAAky4P+YcM s94YRRGzX+gR0Z5jiHVY6EoZyysI3gRrFKJmHrRhob8l5+m335FGaD26sAJWCtex faMpaeETuNwDhCqeliDB1GMU1BTlwrqSoqVL/s4sQXGUh7GvT4wa0QQm3+JU5nR4 +S0y5rzU9Lrqh7BPOnkHBuCNtoebbQJch21A1CjeoZaG/K4hEQ2xQ1ZCJqQIS47W DPzPVNcyGGDoEl6bBuTYRrBpAooMShH+BHT9ow8Eo636ZtArMArvIa8H0n2/8pmb dvL9kIYbRiAgp4yGh7VP8P+soUv10HE= -----END CERTIFICATE-----Generated at Sun Sep 20 15:56:43 2026 by rpki-client