$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/a35beaeb-d085-3fe9-9a04-c3ef32b701a0.roa File: a35beaeb-d085-3fe9-9a04-c3ef32b701a0.roa (raw, json) Hash identifier: Wo8la4OB94AD5DxnEUKiM6WAnfka6afylY4bnSeKZUk= Subject key identifier: 2D:9F:BF:AA:E2:44:CB:70:2A:14:C6:DF:D1:BC:FB:00:AC:94:72:27 Certificate issuer: /CN=9e68f8b3-59fb-41e8-bea3-cc7286a43ecc Certificate serial: 010D0C9F4328584F2D87DF3546690076B0DCEE00 Authority key identifier: FE:E9:50:EE:EF:CE:D9:1E:8C:68:5E:F5:3F:97:A7:39:D3:14:BC:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/a35beaeb-d085-3fe9-9a04-c3ef32b701a0.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 394711 IP address blocks: 208.94.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:df:35:46:69:00:76:b0:dc:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e68f8b3-59fb-41e8-bea3-cc7286a43ecc Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=11239db9-94c2-4643-84da-392666bf2292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:42:e4:01:e3:1c:b1:28:45:7b:39:aa:15:48: 7d:d8:04:d2:52:3a:cc:e9:02:ae:8b:37:0f:19:90: 43:e1:6d:85:bf:f2:b1:b1:84:37:59:3c:fc:e9:4f: ed:77:5b:d3:b3:05:ef:d6:d9:4f:15:82:a9:1d:53: b2:92:66:ed:56:f4:99:af:66:2c:92:48:33:49:2b: f4:10:05:1e:65:d7:e9:6a:4a:28:99:73:59:fc:68: 76:69:12:9a:3e:e4:ce:d4:94:6a:e8:34:29:0b:2d: 71:76:8f:a4:f9:1e:8f:ee:f0:a0:c8:93:4d:c1:c4: c0:ce:62:bc:28:2a:17:f6:61:44:0b:4e:cb:fd:a4: 29:3a:ef:ae:57:c8:7e:ee:27:3f:31:75:2a:a9:94: f4:b5:52:30:5c:3e:46:c6:ce:72:ea:af:c5:75:b8: 57:15:2e:02:d0:e8:57:72:49:17:58:9d:1c:63:c8: bd:d4:27:9f:9f:d1:2f:a4:89:a9:8f:30:d3:16:f0: 1c:47:47:a4:b7:0e:43:9e:f3:84:e8:b9:e0:79:dd: f7:7b:8d:f4:e3:39:a1:6d:93:a9:7e:e0:1b:c1:29: e9:8d:a9:55:4d:63:3f:dd:53:34:37:df:b0:d8:a5: 59:5f:9f:e1:59:ae:e8:2e:17:59:d6:cf:3f:b5:91: 8f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9F:BF:AA:E2:44:CB:70:2A:14:C6:DF:D1:BC:FB:00:AC:94:72:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/a35beaeb-d085-3fe9-9a04-c3ef32b701a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.crl X509v3 Authority Key Identifier: keyid:FE:E9:50:EE:EF:CE:D9:1E:8C:68:5E:F5:3F:97:A7:39:D3:14:BC:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.cer sbgp-ipAddrBlock: critical IPv4: 208.94.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:8c:f7:01:9f:ef:8e:c5:8b:97:b9:99:cb:4e:ef:94:2c:51: ef:7e:75:2e:22:33:98:4f:2e:94:28:f1:f2:c9:f0:ec:02:75: 75:a2:42:28:cd:a3:e1:60:3e:9e:65:8b:70:e8:b9:68:f5:9c: cc:65:b7:af:91:36:b8:2a:fd:04:e9:9a:0e:f2:ea:f2:86:ec: a9:20:71:a4:12:c5:fd:fa:f8:b6:70:0f:08:2d:ff:01:2a:da: 5c:92:bf:5a:a2:53:67:2d:60:36:97:c1:e0:46:6e:ef:8e:b3: 12:c8:cd:2a:05:94:95:88:13:2b:41:a1:36:00:e0:0f:0a:25: bd:65:d5:b5:5c:df:5e:aa:3d:4a:d0:0d:e3:87:fc:38:7b:0a: fa:69:74:08:a9:78:46:a9:7a:2c:c1:ea:0c:cc:8d:43:ae:db: cd:b9:31:bb:1d:56:86:1a:01:f9:0e:a3:0a:71:ab:9c:d0:aa: c9:67:36:8e:8c:02:a0:70:db:6f:62:8d:4c:fc:eb:da:23:89: 4c:80:53:f4:57:79:14:87:60:9f:90:65:72:6f:8c:e9:7b:cd: 8c:1f:e7:bc:92:77:8d:58:86:8b:6f:3e:ac:7f:ed:13:11:e1: 9b:52:d6:18:9b:83:66:bf:00:bb:f5:1d:81:a6:23:36:20:ad: ab:9f:06:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th981RmkAdrDc7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU2OGY4YjMtNTlmYi00MWU4LWJlYTMtY2M3Mjg2YTQz ZWNjMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk MTEyMzlkYjktOTRjMi00NjQzLTg0ZGEtMzkyNjY2YmYyMjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskLkAeMcsShFezmqFUh92ATSUjrM6QKuizcP GZBD4W2Fv/KxsYQ3WTz86U/td1vTswXv1tlPFYKpHVOykmbtVvSZr2YskkgzSSv0 EAUeZdfpakoomXNZ/Gh2aRKaPuTO1JRq6DQpCy1xdo+k+R6P7vCgyJNNwcTAzmK8 KCoX9mFEC07L/aQpOu+uV8h+7ic/MXUqqZT0tVIwXD5Gxs5y6q/FdbhXFS4C0OhX ckkXWJ0cY8i91Cefn9EvpImpjzDTFvAcR0ektw5DnvOE6Lnged33e4304zmhbZOp fuAbwSnpjalVTWM/3VM0N9+w2KVZX5/hWa7oLhdZ1s8/tZGPrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2fv6riRMtwKhTG39G8+wCslHInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85ZTY4 ZjhiMy01OWZiLTQxZTgtYmVhMy1jYzcyODZhNDNlY2MvYTM1YmVhZWItZDA4NS0z ZmU5LTlhMDQtYzNlZjMyYjcwMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWU2OGY4YjMtNTlmYi00MWU4LWJl YTMtY2M3Mjg2YTQzZWNjLzllNjhmOGIzLTU5ZmItNDFlOC1iZWEzLWNjNzI4NmE0 M2VjYy5jcmwwHwYDVR0jBBgwFoAU/ulQ7u/O2R6MaF71P5enOdMUvDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85ZTY4ZjhiMy01OWZiLTQxZTgtYmVhMy1jYzcy ODZhNDNlY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuM9wGf747Fi5e5mctO75QsUe9+dS4iM5hPLpQo8fLJ8OwCdXWiQijN o+FgPp5li3DouWj1nMxlt6+RNrgq/QTpmg7y6vKG7KkgcaQSxf36+LZwDwgt/wEq 2lySv1qiU2ctYDaXweBGbu+OsxLIzSoFlJWIEytBoTYA4A8KJb1l1bVc316qPUrQ DeOH/Dh7CvppdAipeEapeizB6gzMjUOu2825MbsdVoYaAfkOowpxq5zQqslnNo6M AqBw229ijUz869ojiUyAU/RXeRSHYJ+QZXJvjOl7zYwf57ySd41YhotvPqx/7RMR 4ZtS1hibg2a/ALv1HYGmIzYgraufBkc= -----END CERTIFICATE-----Generated at Mon Sep 21 23:27:58 2026 by rpki-client