$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa File: 933424d9-7724-3d56-928c-ad8645ab2fa2.roa (raw, json) Hash identifier: 1oYwGuHRPQ1PurTddmQ2WZlyFVUKC3YQV5xo9dKbW3k= Subject key identifier: 59:3C:CB:39:3E:A8:0B:C2:27:69:49:09:19:93:90:9B:86:5A:06:C1 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584F4984F13A2C7576A2D99AC900 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 208.117.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:f1:3a:2c:75:76:a2:d9:9a:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ed6b86d7-0cc0-4fd8-ba3c-792876a8367d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:08:e3:53:94:b6:e6:7f:23:b0:f2:c2:de: ee:fc:7d:47:29:bf:7c:f2:a5:ec:8b:5a:11:72:be: 4a:41:14:bd:29:3a:46:a7:c1:26:c2:54:d9:95:54: 4e:45:a1:0d:c1:fb:4f:b1:13:41:6a:89:1b:e7:c2: 0f:a1:ec:e6:27:47:90:58:93:5c:23:72:72:f3:e3: e8:51:5d:fc:f7:4c:bf:2d:8f:ce:d5:ca:07:2c:d5: f9:d9:7f:d6:7e:cf:5d:53:c2:fb:01:dc:46:f7:20: 0b:3a:e6:a6:19:ca:52:e1:95:d5:a6:00:07:bf:b5: 64:29:78:48:a0:a1:87:4b:44:a1:8b:f2:fe:5b:c2: b4:d8:50:68:30:d1:1c:e0:1e:98:ec:47:da:7a:38: a1:64:85:66:7d:5f:7c:c4:cb:44:07:cc:a6:ed:a7: 6d:52:00:b4:a3:d8:28:0b:74:69:83:51:a9:c9:f4: 58:ba:61:a9:df:fb:6e:71:5a:68:e9:c4:40:37:33: ac:fa:8b:42:67:b5:02:73:a9:98:19:af:f7:b3:39: 16:fc:6c:d3:ff:1d:55:2a:8b:03:ff:51:54:85:24: 1d:fd:4f:44:99:ee:06:9d:f8:d3:58:86:27:e4:b6: ec:4d:1b:92:29:52:31:e6:93:5c:cd:29:10:58:ea: 26:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3C:CB:39:3E:A8:0B:C2:27:69:49:09:19:93:90:9B:86:5A:06:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:65:cd:8b:19:49:b8:fe:f9:81:b2:82:2b:f1:6c:1a:e2:18: 64:a6:43:b4:af:e1:46:3d:16:17:b6:8b:36:b6:45:6c:73:21: ab:e3:77:d4:81:3f:9e:c7:99:c7:3d:4c:6b:43:c0:9f:ef:e4: ba:29:9f:b9:f1:eb:01:22:57:60:d3:48:66:d9:41:0f:3e:b8: 63:99:21:86:a9:3c:32:a7:e4:69:b4:d6:93:8d:1d:e8:09:ec: 4a:52:a8:b2:3f:22:e3:40:7a:ff:37:33:9c:57:90:99:bf:0b: d2:ce:e9:44:26:69:5e:b3:00:b5:cc:20:a2:fe:03:48:4c:58: 9f:f9:13:d1:2f:58:4f:13:4d:83:c1:94:af:2b:5e:13:51:34: 32:88:3a:de:ae:76:63:6e:be:b9:ec:e6:d9:49:f9:ee:1a:f8: 2e:d3:37:da:e0:3c:49:e6:8d:6f:bf:5a:42:5f:d0:ce:bd:82: ed:9c:bc:de:64:d3:2f:10:f8:6d:cd:6b:68:1b:ef:04:90:ed: c6:2c:ee:39:e9:f5:31:c0:ad:77:c7:e3:85:0f:ab:86:80:23: 96:98:12:b0:85:04:06:9c:20:ed:81:f4:3d:06:a0:1a:26:77: f7:6f:f2:d1:49:91:ec:70:92:b0:75:34:54:fb:8a:ae:29:76: ea:de:c1:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPE6LHV2otmayQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWQ2Yjg2ZDctMGNjMC00ZmQ4LWJhM2MtNzkyODc2YTgzNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7wI41OUtuZ/I7Dywt7u/H1HKb988qXsi1oR cr5KQRS9KTpGp8EmwlTZlVRORaENwftPsRNBaokb58IPoezmJ0eQWJNcI3Jy8+Po UV3890y/LY/O1coHLNX52X/Wfs9dU8L7AdxG9yALOuamGcpS4ZXVpgAHv7VkKXhI oKGHS0Shi/L+W8K02FBoMNEc4B6Y7EfaejihZIVmfV98xMtEB8ym7adtUgC0o9go C3Rpg1GpyfRYumGp3/tucVpo6cRANzOs+otCZ7UCc6mYGa/3szkW/GzT/x1VKosD /1FUhSQd/U9Eme4GnfjTWIYn5LbsTRuSKVIx5pNczSkQWOomRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFk8yzk+qAvCJ2lJCRmTkJuGWgbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvOTMzNDI0ZDktNzcyNC0z ZDU2LTkyOGMtYWQ4NjQ1YWIyZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HXyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1lzYsZSbj++YGygivxbBriGGSmQ7Sv4UY9Fhe2iza2RWxzIavjd9SB P57Hmcc9TGtDwJ/v5Lopn7nx6wEiV2DTSGbZQQ8+uGOZIYapPDKn5Gm01pONHegJ 7EpSqLI/IuNAev83M5xXkJm/C9LO6UQmaV6zALXMIKL+A0hMWJ/5E9EvWE8TTYPB lK8rXhNRNDKIOt6udmNuvrns5tlJ+e4a+C7TN9rgPEnmjW+/WkJf0M69gu2cvN5k 0y8Q+G3Na2gb7wSQ7cYs7jnp9THArXfH44UPq4aAI5aYErCFBAacIO2B9D0GoBom d/dv8tFJkexwkrB1NFT7iq4pdurewdI= -----END CERTIFICATE-----Generated at Sun Oct 11 23:22:48 2026 by rpki-client