$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8b90aae1-d30f-3d2a-a082-6f0cd473e493.roa File: 8b90aae1-d30f-3d2a-a082-6f0cd473e493.roa (raw, json) Hash identifier: /8jCAOThORZKak3my5XudvpJsM+GY78fn6CAxyNf5Ok= Subject key identifier: 88:C5:12:8A:62:CD:81:6D:CE:E3:6D:3A:3D:A1:63:35:EC:EC:C3:7A Certificate issuer: /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f Certificate serial: 010D0C9F4328584F1467A2021705D2D6CA2AE480 Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8b90aae1-d30f-3d2a-a082-6f0cd473e493.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 13213 IP address blocks: 198.105.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a2:02:17:05:d2:d6:ca:2a:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=29ba7332-b435-481a-a75a-8ffec5bd40e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ad:1e:f9:b8:9f:b7:8e:60:25:30:81:8a:14: 53:a3:3c:96:1b:2f:69:86:5c:d2:31:de:f4:c1:0a: 50:b3:b0:8c:34:5d:12:6d:80:08:71:93:fe:a5:37: 07:b5:1e:e2:74:82:de:50:18:af:98:c5:92:a7:83: 72:b5:8a:83:3f:8d:bd:26:1c:0c:60:99:42:9c:19: c3:7d:5d:94:ca:01:a1:34:b0:26:a5:5e:50:da:61: fa:48:d1:81:ad:68:ad:8e:22:4d:59:25:ab:40:5f: 37:82:44:ee:d5:44:fc:49:b8:67:b9:0b:1f:50:d6: 56:ba:97:55:74:b5:a9:c5:fe:76:5e:00:6e:bd:a9: 2d:61:48:f6:78:56:23:b1:e4:b2:85:a1:b1:f3:82: c5:47:75:89:42:fb:25:1a:f6:b0:da:0f:70:2d:e7: b5:08:a0:d4:9e:dc:25:2b:42:1a:33:0f:b9:7a:6d: 55:07:14:42:ac:f4:bb:1c:c0:85:a1:c8:b1:91:81: 75:08:6b:f8:da:01:39:51:81:3f:50:ee:a8:b8:4e: f2:66:e6:a2:ed:59:4b:88:cd:b7:e5:7f:f1:c2:d1: 27:d8:3b:20:89:25:6d:8b:3e:11:48:19:b5:ad:b9: 54:66:b9:ee:30:47:6c:85:dd:02:22:14:92:72:8d: 23:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C5:12:8A:62:CD:81:6D:CE:E3:6D:3A:3D:A1:63:35:EC:EC:C3:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/8b90aae1-d30f-3d2a-a082-6f0cd473e493.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl X509v3 Authority Key Identifier: keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer sbgp-ipAddrBlock: critical IPv4: 198.105.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:24:d2:74:04:7e:79:5a:54:24:52:34:2f:67:d1:dd:55:9f: f1:05:79:19:52:ce:ae:c8:6f:f0:00:aa:02:ea:fc:36:fe:ce: de:c0:70:e3:1a:dc:89:fb:59:45:98:90:e3:18:53:3f:04:6a: da:54:4e:61:43:be:da:0d:ed:54:8b:4d:e4:4f:ff:3d:b0:3e: 54:09:3b:28:0c:35:25:8f:f4:9d:e5:48:e8:1a:12:94:25:fa: 5e:65:96:66:65:b4:fb:1d:9d:cd:26:94:a3:fb:04:49:ba:d6: 0f:63:a7:57:4a:50:e9:d5:ef:30:3e:0a:43:1e:7a:6a:63:27: 30:5f:6f:02:0b:e2:93:2f:5f:22:7f:6c:ce:8f:8c:ff:69:2c: d5:4a:8f:b7:20:71:d9:9b:2c:b2:8a:59:ef:f9:ac:61:69:e6: 38:b5:7c:f5:b0:ec:60:bb:ab:14:d5:45:bd:18:a9:2f:86:d7: d9:bd:df:8a:d9:b3:0f:2b:1d:f7:57:80:8e:b8:5d:2f:4a:66: 49:46:63:7f:0a:09:f6:96:90:54:8a:64:b2:57:06:5a:f4:0c: 52:92:78:80:09:1c:5b:6d:79:db:b6:5c:fb:14:8a:b1:1c:ff: c3:26:b2:98:50:85:36:96:97:2e:4b:27:45:65:54:29:17:b8: 53:1d:1e:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6ICFwXS1soq5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi MDNmMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MjliYTczMzItYjQzNS00ODFhLWE3NWEtOGZmZWM1YmQ0MGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq0e+bift45gJTCBihRTozyWGy9phlzSMd70 wQpQs7CMNF0SbYAIcZP+pTcHtR7idILeUBivmMWSp4NytYqDP429JhwMYJlCnBnD fV2UygGhNLAmpV5Q2mH6SNGBrWitjiJNWSWrQF83gkTu1UT8SbhnuQsfUNZWupdV dLWpxf52XgBuvaktYUj2eFYjseSyhaGx84LFR3WJQvslGvaw2g9wLee1CKDUntwl K0IaMw+5em1VBxRCrPS7HMCFocixkYF1CGv42gE5UYE/UO6ouE7yZuai7VlLiM23 5X/xwtEn2DsgiSVtiz4RSBm1rblUZrnuMEdshd0CIhSSco0j/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjFEopizYFtzuNtOj2hYzXs7MN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvOGI5MGFhZTEtZDMwZi0z ZDJhLWEwODItNmYwY2Q0NzNlNDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh Yzc1ZWIwM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExmnQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABok0nQEfnlaVCRSNC9n0d1Vn/EFeRlSzq7Ib/AAqgLq/Db+zt7AcOMa 3In7WUWYkOMYUz8EatpUTmFDvtoN7VSLTeRP/z2wPlQJOygMNSWP9J3lSOgaEpQl +l5llmZltPsdnc0mlKP7BEm61g9jp1dKUOnV7zA+CkMeempjJzBfbwIL4pMvXyJ/ bM6PjP9pLNVKj7cgcdmbLLKKWe/5rGFp5ji1fPWw7GC7qxTVRb0YqS+G19m934rZ sw8rHfdXgI64XS9KZklGY38KCfaWkFSKZLJXBlr0DFKSeIAJHFttedu2XPsUirEc /8MmsphQhTaWly5LJ0VlVCkXuFMdHgA= -----END CERTIFICATE-----Generated at Wed Sep 23 02:45:40 2026 by rpki-client