$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/5326f44f-a6e8-36d2-ad7f-ab52de78efe1.roa File: 5326f44f-a6e8-36d2-ad7f-ab52de78efe1.roa (raw, json) Hash identifier: 5jg9TGU3qoHvaW4eBu8YWLu9Rlv8lsrUvB7CmnZ82I0= Subject key identifier: D2:E0:4C:34:CB:D7:01:01:35:9C:C6:C7:A3:E4:E1:BF:4B:5E:B1:1F Certificate issuer: /CN=69ae5b34-c59f-40db-9452-6e21ecb81731 Certificate serial: 010D0C9F4328584F6C581AC4726640C49415C640 Authority key identifier: 08:DA:6D:A9:1C:44:80:F0:1C:84:A7:EB:5D:A4:C3:F0:D8:75:1A:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/5326f44f-a6e8-36d2-ad7f-ab52de78efe1.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 29802 IP address blocks: 208.66.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:1a:c4:72:66:40:c4:94:15:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69ae5b34-c59f-40db-9452-6e21ecb81731 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=e5c6429e-cfed-49b2-95ae-cf712ea03c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:ce:f7:3e:70:5d:2b:e1:da:ec:35:91:e2: dd:7a:43:c9:95:21:a6:74:46:b3:2a:af:80:19:94: 80:68:7d:32:da:ed:fe:42:e7:28:17:1c:33:bf:52: 3c:57:3e:7e:25:5b:26:38:71:73:d6:26:08:e5:fa: 27:9c:24:73:3a:cb:47:1b:50:42:77:b4:6c:b3:06: a1:9c:60:c8:aa:9f:d3:14:82:eb:fb:0e:30:c3:e1: 0a:4c:35:71:71:dc:01:d8:69:23:f4:5a:92:5c:44: e4:04:c6:c2:6e:97:6c:c9:aa:86:ee:a9:30:8c:98: c0:9f:86:71:33:cc:b3:88:a7:1a:50:83:56:f7:ca: df:6b:24:d2:48:69:94:5e:6c:29:27:96:76:21:89: 26:b9:75:d9:bb:93:01:31:34:32:83:74:b2:7f:e8: eb:38:f2:1a:fc:b3:5b:43:c5:f2:7c:04:c7:fc:e1: 85:75:f7:7d:84:fb:7e:fd:d6:5c:72:f7:01:4b:30: a7:94:a2:02:5e:05:e9:b6:31:09:0d:63:31:20:50: b1:77:7a:99:26:20:1b:75:e7:21:3c:d9:b8:19:1b: 06:05:3f:1c:60:c8:04:ed:78:8b:25:83:d4:8d:51: 53:83:c7:98:65:13:5b:d3:7b:32:63:c6:74:e8:e8: bd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E0:4C:34:CB:D7:01:01:35:9C:C6:C7:A3:E4:E1:BF:4B:5E:B1:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/5326f44f-a6e8-36d2-ad7f-ab52de78efe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731/69ae5b34-c59f-40db-9452-6e21ecb81731.crl X509v3 Authority Key Identifier: keyid:08:DA:6D:A9:1C:44:80:F0:1C:84:A7:EB:5D:A4:C3:F0:D8:75:1A:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69ae5b34-c59f-40db-9452-6e21ecb81731.cer sbgp-ipAddrBlock: critical IPv4: 208.66.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d4:01:21:07:b7:57:48:89:d1:bb:97:a6:f2:f6:c5:52:e5: 31:c1:12:62:53:39:f3:91:b4:f4:42:54:5d:fd:f8:99:2a:65: 86:40:88:21:fa:2f:26:ba:d7:c7:d0:dd:b9:80:c9:57:83:f3: 0a:54:ca:e0:21:d7:ab:78:7b:53:e8:af:22:22:ef:86:eb:8e: 61:ce:5c:26:a2:fc:5e:c1:fd:60:2f:6b:fc:70:46:bf:1e:07: 6f:4a:84:49:3a:34:d1:d0:96:33:9e:61:1f:a0:dd:de:af:6d: 81:4e:ac:97:38:44:32:43:5b:a6:9d:10:7d:9c:7e:97:c8:fe: d3:12:0d:0c:b4:51:1b:06:35:65:49:22:e4:0c:f0:9d:78:6c: b5:7a:19:08:d9:a4:bf:59:3c:e6:a1:4a:d5:60:c5:9e:fc:cc: d5:c3:86:97:04:5a:18:a4:f4:14:66:46:8d:0e:3c:04:7c:f3: 42:c9:63:3e:1e:10:34:77:0f:66:81:c0:71:55:2b:3a:5b:8a: f3:55:11:07:8a:95:70:ed:7c:79:e2:5d:d5:0d:ee:32:53:da: c8:8d:94:80:27:53:55:2e:19:43:97:83:a9:8f:66:ef:76:cc: 02:5b:a0:4e:ea:de:ff:86:73:d1:1d:92:dc:9a:ab:2e:a0:ab: 48:d3:39:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWBrEcmZAxJQVxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhZTViMzQtYzU5Zi00MGRiLTk0NTItNmUyMWVjYjgx NzMxMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ZTVjNjQyOWUtY2ZlZC00OWIyLTk1YWUtY2Y3MTJlYTAzYzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv67O9z5wXSvh2uw1keLdekPJlSGmdEazKq+A GZSAaH0y2u3+QucoFxwzv1I8Vz5+JVsmOHFz1iYI5fonnCRzOstHG1BCd7Rsswah nGDIqp/TFILr+w4ww+EKTDVxcdwB2Gkj9FqSXETkBMbCbpdsyaqG7qkwjJjAn4Zx M8yziKcaUINW98rfayTSSGmUXmwpJ5Z2IYkmuXXZu5MBMTQyg3Syf+jrOPIa/LNb Q8XyfATH/OGFdfd9hPt+/dZccvcBSzCnlKICXgXptjEJDWMxIFCxd3qZJiAbdech PNm4GRsGBT8cYMgE7XiLJYPUjVFTg8eYZRNb03syY8Z06Oi9twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLgTDTL1wEBNZzGx6Pk4b9LXrEfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OWFl NWIzNC1jNTlmLTQwZGItOTQ1Mi02ZTIxZWNiODE3MzEvNTMyNmY0NGYtYTZlOC0z NmQyLWFkN2YtYWI1MmRlNzhlZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjlhZTViMzQtYzU5Zi00MGRiLTk0 NTItNmUyMWVjYjgxNzMxLzY5YWU1YjM0LWM1OWYtNDBkYi05NDUyLTZlMjFlY2I4 MTczMS5jcmwwHwYDVR0jBBgwFoAUCNptqRxEgPAchKfrXaTD8Nh1GjAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82OWFlNWIzNC1jNTlmLTQwZGItOTQ1Mi02ZTIx ZWNiODE3MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7UASEHt1dIidG7l6by9sVS5THBEmJTOfORtPRCVF39+JkqZYZAiCH6 Lya618fQ3bmAyVeD8wpUyuAh16t4e1PoryIi74brjmHOXCai/F7B/WAva/xwRr8e B29KhEk6NNHQljOeYR+g3d6vbYFOrJc4RDJDW6adEH2cfpfI/tMSDQy0URsGNWVJ IuQM8J14bLV6GQjZpL9ZPOahStVgxZ78zNXDhpcEWhik9BRmRo0OPAR880LJYz4e EDR3D2aBwHFVKzpbivNVEQeKlXDtfHniXdUN7jJT2siNlIAnU1UuGUOXg6mPZu92 zAJboE7q3v+Gc9Edktyaqy6gq0jTOas= -----END CERTIFICATE-----Generated at Thu Oct 8 03:43:09 2026 by rpki-client