$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f16af19d-d86f-3da1-8a01-99cec2d7c5f8.roa File: f16af19d-d86f-3da1-8a01-99cec2d7c5f8.roa (raw, json) Hash identifier: +0sCFrAnnr01Zh0cA2whEXJhpS/eQFr81Nxmmgt5DtA= Subject key identifier: 2D:17:E3:03:76:80:DF:39:1E:D0:FC:55:9D:74:C2:39:47:96:5D:65 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584F497D269D6C75B5110855A4C0 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f16af19d-d86f-3da1-8a01-99cec2d7c5f8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36040 IP address blocks: 208.117.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7d:26:9d:6c:75:b5:11:08:55:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8b265ee5-344a-46cf-a6b7-6cdf9add8c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7d:22:85:5c:29:ce:2e:e4:3c:ab:87:ea:99: 17:1b:da:ba:60:39:b5:c0:11:3b:d5:a1:30:9a:e3: 71:9b:35:40:7b:eb:fd:22:95:db:a8:9d:70:fa:b2: e0:c7:0d:c6:55:d9:d8:a4:20:fb:72:ed:d9:cf:44: d4:8c:6d:db:c0:0e:2d:9e:da:83:eb:30:9a:eb:94: 7d:03:ac:96:6c:a0:34:96:9c:5e:bb:ab:a6:a3:35: 51:f5:c1:7f:12:06:39:d7:11:15:e5:c1:1a:09:a1: f5:4d:08:76:19:1b:50:05:77:ff:62:3e:e6:c5:21: db:51:c7:65:a2:a1:2b:b6:6a:ce:c0:93:a5:93:a9: 70:cc:6d:f6:02:2c:d5:13:2b:66:30:b9:14:5d:b9: 6f:ad:fc:6c:6d:be:3b:f9:5b:23:7b:f9:43:22:a7: fb:46:96:bf:7d:44:af:73:1f:81:18:5f:a1:7d:e0: cb:b4:3c:cf:11:03:15:06:80:f5:9a:95:75:b3:48: 9e:26:91:54:a4:b3:50:04:04:c4:3f:9d:ce:93:80: 97:bc:66:c9:96:33:f9:70:4b:43:6a:a8:32:f1:b6: 2f:ce:5c:63:3d:1f:81:46:67:5f:ed:67:4e:fd:34: 41:02:ad:ab:db:96:34:a8:e5:af:27:8e:28:25:55: 39:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:17:E3:03:76:80:DF:39:1E:D0:FC:55:9D:74:C2:39:47:96:5D:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f16af19d-d86f-3da1-8a01-99cec2d7c5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:2e:53:8e:cc:77:be:a5:ed:ed:8f:2c:1f:54:26:44:8e:13: 7e:4b:b4:10:a2:6a:41:fe:66:ad:7c:6a:94:81:41:e1:af:14: 85:f2:e2:6d:9c:79:57:6a:ed:cd:d1:8c:5c:eb:29:32:f6:a6: 64:45:0f:d8:9f:9b:e5:cd:c9:c7:64:5c:56:46:c4:9d:f0:cb: f1:ce:bc:22:b5:2e:79:91:29:cf:1b:f4:7d:82:18:a9:54:69: ef:54:51:42:d5:b0:f0:77:af:9a:34:8c:ee:3f:3c:a4:07:a7: d4:e8:03:f9:6e:5e:16:63:cf:17:72:1b:ee:69:b3:d5:3f:d6: 11:da:a2:1e:1e:f7:55:0d:0c:64:fe:3c:ec:3f:e5:bf:6c:45: f8:97:2c:83:33:44:ad:97:83:80:d9:72:7b:71:09:de:ad:1b: b5:19:0d:8d:54:56:36:63:76:b7:be:e9:07:38:94:e6:fa:b2: 55:3e:7d:08:bd:9a:c0:39:21:01:c5:c2:0b:ed:7c:36:cd:2e: 3b:69:f3:2d:cb:e9:3d:bb:12:46:0f:d0:29:ac:72:da:96:a4: 43:dc:05:55:32:de:03:63:12:dc:65:e9:a0:e3:77:e0:08:04: c6:d1:07:01:6d:2e:89:36:3a:82:d0:b1:63:51:fe:42:6b:73: a2:00:4d:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfSadbHW1EQhVpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGIyNjVlZTUtMzQ0YS00NmNmLWE2YjctNmNkZjlhZGQ4YzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA030ihVwpzi7kPKuH6pkXG9q6YDm1wBE71aEw muNxmzVAe+v9IpXbqJ1w+rLgxw3GVdnYpCD7cu3Zz0TUjG3bwA4tntqD6zCa65R9 A6yWbKA0lpxeu6umozVR9cF/EgY51xEV5cEaCaH1TQh2GRtQBXf/Yj7mxSHbUcdl oqErtmrOwJOlk6lwzG32AizVEytmMLkUXblvrfxsbb47+Vsje/lDIqf7Rpa/fUSv cx+BGF+hfeDLtDzPEQMVBoD1mpV1s0ieJpFUpLNQBATEP53Ok4CXvGbJljP5cEtD aqgy8bYvzlxjPR+BRmdf7WdO/TRBAq2r25Y0qOWvJ44oJVU5AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0X4wN2gN85HtD8VZ10wjlHll1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZjE2YWYxOWQtZDg2Zi0z ZGExLThhMDEtOTljZWMyZDdjNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0HXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQuU47Md76l7e2PLB9UJkSOE35LtBCiakH+Zq18apSBQeGvFIXy4m2c eVdq7c3RjFzrKTL2pmRFD9ifm+XNycdkXFZGxJ3wy/HOvCK1LnmRKc8b9H2CGKlU ae9UUULVsPB3r5o0jO4/PKQHp9ToA/luXhZjzxdyG+5ps9U/1hHaoh4e91UNDGT+ POw/5b9sRfiXLIMzRK2Xg4DZcntxCd6tG7UZDY1UVjZjdre+6Qc4lOb6slU+fQi9 msA5IQHFwgvtfDbNLjtp8y3L6T27EkYP0CmsctqWpEPcBVUy3gNjEtxl6aDjd+AI BMbRBwFtLok2OoLQsWNR/kJrc6IATYE= -----END CERTIFICATE-----Generated at Sun Oct 11 09:08:45 2026 by rpki-client