$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a777915e-d287-484e-9466-87521951e22f/39acc8dd-6ab9-3757-997f-694d0f7e7349.roa File: 39acc8dd-6ab9-3757-997f-694d0f7e7349.roa (raw, json) Hash identifier: 3fATqYfhsuR3u9qBK5ONsGBHT3t2YqQx4oBQu64Ly4A= Subject key identifier: 48:6D:EE:D1:A3:35:43:5C:9E:B2:B6:34:14:3E:C5:86:B8:F6:E8:42 Certificate issuer: /CN=a777915e-d287-484e-9466-87521951e22f Certificate serial: 010D0C9F4328584F4ACE8CC4D60405C188F0B420 Authority key identifier: E7:83:86:C6:62:E1:5E:F0:CF:1F:6E:1D:D0:C2:B0:FD:D8:3B:D3:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a777915e-d287-484e-9466-87521951e22f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a777915e-d287-484e-9466-87521951e22f/39acc8dd-6ab9-3757-997f-694d0f7e7349.roa Signing time: Fri 25 Sep 2026 12:41:26 +0000 ROA not before: Fri 25 Sep 2026 12:41:26 +0000 ROA not after: Tue 24 Nov 2026 17:04:31 +0000 asID: 46413 IP address blocks: 208.99.51.0/24 maxlen: 24 216.21.8.0/22 maxlen: 22 2607:1240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a777915e-d287-484e-9466-87521951e22f/a777915e-d287-484e-9466-87521951e22f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a777915e-d287-484e-9466-87521951e22f/a777915e-d287-484e-9466-87521951e22f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a777915e-d287-484e-9466-87521951e22f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:ce:8c:c4:d6:04:05:c1:88:f0:b4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a777915e-d287-484e-9466-87521951e22f Validity Not Before: Sep 25 12:41:26 2026 GMT Not After : Nov 24 17:04:31 2026 GMT Subject: CN=ff7dc7c0-5c9e-4081-8179-372c186f6442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0c:b5:23:8c:f3:11:6d:6f:c9:6c:e8:09:8e: 9b:05:ea:05:ca:a8:0a:10:e7:82:89:b6:92:db:10: a5:09:ad:8d:f4:fe:ae:9a:93:63:b4:74:a3:84:f4: 92:dc:78:30:65:a5:9c:7a:c0:13:bd:7d:99:b9:3a: d2:46:7a:93:b3:7b:9a:2b:38:ab:f2:e7:c8:da:09: c3:43:1d:ee:99:e8:83:d3:89:1c:09:3a:86:df:72: 0c:76:ed:9e:c5:68:60:9e:94:03:ed:99:fc:58:85: ad:c5:c7:73:88:e9:21:31:ea:55:28:01:8d:3b:85: d2:b8:99:d2:0e:ce:80:ac:57:cc:18:66:5d:5e:9e: de:06:f1:e8:ad:bd:45:60:f7:1c:2d:a7:e5:a7:22: 62:ed:80:67:4d:e5:b3:ad:94:a5:5a:b2:4d:e5:75: ad:49:6c:6d:b7:12:46:88:b1:86:6b:f1:1d:57:a7: 1f:df:d7:1b:cf:04:8d:10:2d:9f:ca:ca:82:d3:6f: 35:c3:46:c9:5d:44:df:86:d7:55:75:7d:1a:d0:c0: 39:a0:44:fc:b3:54:2e:27:c5:3e:d8:ff:22:9c:77: c3:08:25:22:f6:5a:6c:d6:f4:77:bf:06:4f:5f:b8: 4b:ff:4d:a8:9c:b0:24:3a:cb:b5:69:ff:6d:5f:8f: 5f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6D:EE:D1:A3:35:43:5C:9E:B2:B6:34:14:3E:C5:86:B8:F6:E8:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a777915e-d287-484e-9466-87521951e22f/39acc8dd-6ab9-3757-997f-694d0f7e7349.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a777915e-d287-484e-9466-87521951e22f/a777915e-d287-484e-9466-87521951e22f.crl X509v3 Authority Key Identifier: keyid:E7:83:86:C6:62:E1:5E:F0:CF:1F:6E:1D:D0:C2:B0:FD:D8:3B:D3:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a777915e-d287-484e-9466-87521951e22f.cer sbgp-ipAddrBlock: critical IPv4: 208.99.51.0/24 216.21.8.0/22 IPv6: 2607:1240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:ba:6d:19:91:22:10:d5:66:e0:95:8f:ed:fc:6b:e2:fb:ea: 27:1e:76:cf:cf:14:c0:27:a0:12:cf:21:65:66:07:be:f2:b3: db:9d:85:35:ba:39:04:79:06:94:a2:19:af:fd:ff:73:99:0d: b1:c5:e8:cb:32:b6:51:fb:55:1d:5f:c3:f4:bb:f0:38:14:97: 0e:da:26:8d:9e:74:46:6b:5b:c3:ab:33:97:13:da:15:17:93: bf:41:ef:0b:19:12:fd:64:5e:4b:f5:e3:d0:8d:e8:fc:8e:e5: 3f:f3:cf:be:83:d1:27:ae:fc:4d:c0:c4:b3:84:69:c1:28:db: db:60:c0:ed:1f:bc:02:cb:03:47:e7:ba:05:a6:6e:25:cd:2b: e7:af:7d:67:43:99:1a:ae:56:3a:0d:64:8c:38:a5:e9:68:7d: 17:0e:28:fd:d1:44:46:3e:65:ad:59:ac:3d:32:37:6d:59:df: 4d:68:61:bb:08:40:be:87:55:b8:52:70:4a:db:56:a8:6a:4c: b0:fc:e9:78:26:2f:f7:de:a7:dc:6b:ac:81:a1:1a:1a:e4:d6: f6:cd:81:b9:fd:cc:d3:ef:95:a8:60:f2:18:f3:67:c5:6c:3f: e0:3a:2f:8d:39:6c:31:6c:98:32:e1:4d:a1:5b:26:30:9b:75: fa:d3:48:31 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE9KzozE1gQFwYjwtCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3NzkxNWUtZDI4Ny00ODRlLTk0NjYtODc1MjE5NTFl MjJmMB4XDTI2MDkyNTEyNDEyNloXDTI2MTEyNDE3MDQzMVowLzEtMCsGA1UEAxMk ZmY3ZGM3YzAtNWM5ZS00MDgxLTgxNzktMzcyYzE4NmY2NDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Qy1I4zzEW1vyWzoCY6bBeoFyqgKEOeCibaS 2xClCa2N9P6umpNjtHSjhPSS3HgwZaWcesATvX2ZuTrSRnqTs3uaKzir8ufI2gnD Qx3umeiD04kcCTqG33IMdu2exWhgnpQD7Zn8WIWtxcdziOkhMepVKAGNO4XSuJnS Ds6ArFfMGGZdXp7eBvHorb1FYPccLaflpyJi7YBnTeWzrZSlWrJN5XWtSWxttxJG iLGGa/EdV6cf39cbzwSNEC2fysqC0281w0bJXUTfhtdVdX0a0MA5oET8s1QuJ8U+ 2P8inHfDCCUi9lps1vR3vwZPX7hL/02onLAkOsu1af9tX49fywIDAQABo4IDajCC A2YwHQYDVR0OBBYEFEht7tGjNUNcnrK2NBQ+xYa49uhCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9hNzc3 OTE1ZS1kMjg3LTQ4NGUtOTQ2Ni04NzUyMTk1MWUyMmYvMzlhY2M4ZGQtNmFiOS0z NzU3LTk5N2YtNjk0ZDBmN2U3MzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYTc3NzkxNWUtZDI4Ny00ODRlLTk0 NjYtODc1MjE5NTFlMjJmL2E3Nzc5MTVlLWQyODctNDg0ZS05NDY2LTg3NTIxOTUx ZTIyZi5jcmwwHwYDVR0jBBgwFoAU54OGxmLhXvDPH24d0MKw/dg70wgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9hNzc3OTE1ZS1kMjg3LTQ4NGUtOTQ2Ni04NzUy MTk1MWUyMmYuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQA0GMzAwQC 2BUIMA0EAgACMAcDBQAmBxJAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBALm6bRmRIhDVZuCVj+38a+L76ice ds/PFMAnoBLPIWVmB77ys9udhTW6OQR5BpSiGa/9/3OZDbHF6MsytlH7VR1fw/S7 8DgUlw7aJo2edEZrW8OrM5cT2hUXk79B7wsZEv1kXkv149CN6PyO5T/zz76D0Seu /E3AxLOEacEo29tgwO0fvALLA0fnugWmbiXNK+evfWdDmRquVjoNZIw4pelofRcO KP3RREY+Za1ZrD0yN21Z301oYbsIQL6HVbhScErbVqhqTLD86XgmL/fep9xrrIGh Ghrk1vbNgbn9zNPvlahg8hjzZ8VsP+A6L405bDFsmDLhTaFbJjCbdfrTSDE= -----END CERTIFICATE-----Generated at Sat Oct 3 11:30:30 2026 by rpki-client