$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/d96a92b9-f5d6-3797-955a-ff7ae9b3444e.roa File: d96a92b9-f5d6-3797-955a-ff7ae9b3444e.roa (raw, json) Hash identifier: Ny04l+VPXDewMLiPhyTXrcLJQdHe37JSOPeVhfv7quk= Subject key identifier: 2A:83:B9:CC:E7:5D:48:42:EA:1A:82:AC:27:0B:33:78:1C:E7:CB:63 Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F4328584EFA7DC94D343A71B5BEC84D00 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/d96a92b9-f5d6-3797-955a-ff7ae9b3444e.roa Signing time: Thu 27 Aug 2026 18:14:03 +0000 ROA not before: Thu 27 Aug 2026 18:14:03 +0000 ROA not after: Wed 25 Nov 2026 19:14:03 +0000 asID: 13629 IP address blocks: 208.94.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fa:7d:c9:4d:34:3a:71:b5:be:c8:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: Aug 27 18:14:03 2026 GMT Not After : Nov 25 19:14:03 2026 GMT Subject: CN=00158733-a6ea-4c22-a533-0d1551f7fded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:42:73:60:12:74:dd:de:4b:58:c9:b4:88: a2:e6:6f:c6:90:dd:b0:4a:3b:a2:fa:a8:cb:dc:27: af:4b:97:6f:ee:50:41:a6:f5:30:72:b4:fa:16:cb: ae:7c:a3:b3:d8:2a:a5:ef:bf:ed:d3:69:a7:61:b1: a4:11:a9:dc:8e:01:4d:6b:8f:e6:87:fc:d1:c6:77: f1:4b:39:7d:48:53:d3:74:81:c1:a2:d6:97:17:5f: 20:51:86:dc:b7:13:76:ad:0e:aa:30:37:a6:62:18: 95:c2:36:a4:c9:50:e3:36:53:16:fc:2b:f4:7a:81: 98:8c:e2:e3:af:b9:45:79:31:ef:73:0e:fa:1c:fb: 6f:a2:06:fc:08:4c:56:aa:94:58:3c:7d:21:d6:0b: 55:71:2c:84:97:09:69:7e:e3:4e:04:1f:b0:5f:d1: 2c:f5:4a:a1:08:3c:72:ab:80:0e:9d:83:c9:f0:fe: 4d:f8:51:f1:5c:20:3e:7b:38:3a:64:d2:e5:f2:52: f2:05:1f:25:18:c6:e0:2d:85:d6:91:7b:28:68:72: 12:f4:b1:d4:bf:af:c0:0f:ce:fb:41:ae:07:d1:4a: 82:39:2f:34:ec:da:06:52:81:03:97:c1:88:40:2a: e9:eb:4b:55:e9:4d:e9:6a:33:84:8e:d9:aa:c8:94: 76:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:83:B9:CC:E7:5D:48:42:EA:1A:82:AC:27:0B:33:78:1C:E7:CB:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/d96a92b9-f5d6-3797-955a-ff7ae9b3444e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b7:fa:bc:52:24:35:65:0d:38:be:a1:32:59:e9:91:77:b2: a2:ba:f7:89:fa:04:57:e4:f3:15:0c:39:af:75:84:b9:c7:32: 43:8f:93:31:d6:fc:68:66:54:6f:18:04:a2:c2:e3:dc:f8:bb: 4c:58:31:46:41:8b:d0:e4:ff:50:07:48:ac:dd:47:46:f7:33: bc:2b:ef:a2:20:4e:c8:6b:e3:b6:7d:7a:be:a4:c8:42:c6:d0: db:73:81:23:dd:29:ad:69:72:77:6a:f9:a0:fa:09:8f:29:24: bf:c4:34:eb:4a:f1:4e:68:94:6c:01:7b:3a:89:5b:ab:2e:92: 69:27:91:b5:34:e4:04:77:88:ef:f0:a3:dc:ea:30:5a:96:6e: 7c:29:70:e0:c4:14:8d:c2:4d:4e:12:a0:bc:e1:fc:cd:29:1a: 3a:aa:99:71:35:3c:cf:22:45:b0:d0:a8:f7:98:86:e2:59:19: 23:ee:fc:65:b6:e5:85:90:c0:5d:9b:1e:eb:37:e2:b3:46:7d: 6f:52:61:3f:c1:ae:2c:98:ce:e1:bd:62:c2:58:ff:66:0b:63: 7d:9f:ae:75:17:c4:e5:d7:e8:60:25:9b:9b:2e:c3:e8:0d:4a: 20:42:e9:6a:80:de:d0:a9:c2:6d:0b:fa:53:48:f2:09:40:f3: 74:b8:d0:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE76fclNNDpxtb7ITQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI2MDgyNzE4MTQwM1oXDTI2MTEyNTE5MTQwM1owLzEtMCsGA1UEAxMk MDAxNTg3MzMtYTZlYS00YzIyLWE1MzMtMGQxNTUxZjdmZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCFCc2ASdN3eS1jJtIii5m/GkN2wSjui+qjL 3CevS5dv7lBBpvUwcrT6FsuufKOz2Cql77/t02mnYbGkEancjgFNa4/mh/zRxnfx Szl9SFPTdIHBotaXF18gUYbctxN2rQ6qMDemYhiVwjakyVDjNlMW/Cv0eoGYjOLj r7lFeTHvcw76HPtvogb8CExWqpRYPH0h1gtVcSyElwlpfuNOBB+wX9Es9UqhCDxy q4AOnYPJ8P5N+FHxXCA+ezg6ZNLl8lLyBR8lGMbgLYXWkXsoaHIS9LHUv6/AD877 Qa4H0UqCOS807NoGUoEDl8GIQCrp60tV6U3pajOEjtmqyJR2BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqDucznXUhC6hqCrCcLM3gc58tjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvZDk2YTkyYjktZjVkNi0z Nzk3LTk1NWEtZmY3YWU5YjM0NDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK3+rxSJDVlDTi+oTJZ6ZF3sqK694n6BFfk8xUMOa91hLnHMkOPkzHW /GhmVG8YBKLC49z4u0xYMUZBi9Dk/1AHSKzdR0b3M7wr76IgTshr47Z9er6kyELG 0NtzgSPdKa1pcndq+aD6CY8pJL/ENOtK8U5olGwBezqJW6sukmknkbU05AR3iO/w o9zqMFqWbnwpcODEFI3CTU4SoLzh/M0pGjqqmXE1PM8iRbDQqPeYhuJZGSPu/GW2 5YWQwF2bHus34rNGfW9SYT/BriyYzuG9YsJY/2YLY32frnUXxOXX6GAlm5suw+gN SiBC6WqA3tCpwm0L+lNI8glA83S40I0= -----END CERTIFICATE-----Generated at Tue Sep 22 08:03:36 2026 by rpki-client