$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa File: 2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa (raw, json) Hash identifier: 0sM8XXuxsOOb8QbYFnSxc1DGxV2cSTBJdmaiTxRi2a8= Subject key identifier: 97:66:7F:4A:6F:50:68:96:D1:3B:D7:2E:DC:01:80:F2:9E:CE:F8:42 Certificate issuer: /CN=0c71d09c-b853-44b9-8b34-8d5283774a5a Certificate serial: 010D0C9F4328584F49754E71145696338B392680 Authority key identifier: 32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14721 IP address blocks: 208.86.116.0/22 maxlen: 24 208.91.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:4e:71:14:56:96:33:8b:39:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c71d09c-b853-44b9-8b34-8d5283774a5a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e14a8c1b-4c41-4ac0-bca3-2c21cc723911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:bd:ed:ec:d5:37:f4:43:49:a5:94:aa:89: 76:a5:76:4b:f1:d8:b5:58:49:cd:cf:d2:47:74:55: 89:a3:f1:72:f9:40:35:58:88:0f:ea:c3:b8:dd:f3: 9b:8d:ea:98:40:da:a6:91:7c:48:2e:25:54:77:fc: f5:92:90:e7:65:db:41:9c:79:13:52:23:62:72:f9: e9:dd:2a:6d:fe:37:88:db:62:e4:ca:29:74:56:72: 78:08:fd:49:c9:81:59:8a:55:fe:c7:c1:a3:a7:80: 3f:53:82:d8:c3:b0:bd:d8:23:8a:9d:fe:e8:4b:c2: 9d:c0:19:b9:87:f9:d9:67:70:a4:8c:de:82:0e:73: f5:d1:06:70:79:e0:83:0a:dd:92:b1:e0:de:f3:e5: e7:97:7a:f0:23:be:bf:0c:d1:91:58:22:ca:c1:80: ba:95:b6:d7:7b:9c:86:5a:5b:b1:fe:a3:71:b3:78: 7a:11:5d:7a:dd:c9:b9:a0:02:f9:88:84:5a:da:8d: 59:e8:0b:35:bb:ca:36:be:b9:8f:1b:ce:c3:3c:18: e9:88:dc:14:b9:9c:8f:5d:72:a8:50:88:03:b7:c6: 9e:42:ba:a0:84:0b:9c:f1:1a:3c:1a:99:04:5e:25: da:f0:44:8e:a5:88:71:f5:76:7b:81:e9:c5:d0:85: b6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:66:7F:4A:6F:50:68:96:D1:3B:D7:2E:DC:01:80:F2:9E:CE:F8:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl X509v3 Authority Key Identifier: keyid:32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer sbgp-ipAddrBlock: critical IPv4: 208.86.116.0/22 208.91.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:7a:17:35:72:a7:2a:b5:dc:ac:c8:6a:44:16:d4:43:f3:60: 94:66:c4:50:f5:f1:0a:e6:fa:db:fa:75:44:a6:32:41:41:87: aa:cd:07:3a:5a:2f:57:77:8c:fb:25:e5:8b:ad:7f:c7:92:46: 57:9b:90:20:58:1d:8e:e8:14:bd:74:00:12:54:94:30:96:16: c7:47:11:a5:59:8c:45:8e:c0:be:f0:be:46:9d:91:3c:e3:ce: d5:e9:5e:13:59:b1:29:52:c6:30:06:03:ca:53:1c:9f:1d:ef: e7:89:eb:0b:a0:45:98:41:ad:5f:39:96:1e:c7:a3:34:a5:e6: 07:1e:98:56:68:ab:4b:b5:09:c8:11:e3:fe:1c:4d:0e:d8:81: c0:da:d9:a5:6d:fb:94:24:6c:a3:17:6c:17:d7:31:d3:2a:e3: 49:23:5d:a0:68:7f:f7:7e:bf:5b:16:49:2f:e4:7a:bd:1a:b5: 0e:0f:0a:2b:7f:44:d3:20:df:75:f6:d5:de:19:c6:ca:af:71: ee:7e:4b:9c:f5:6f:44:9c:6c:22:fe:72:fa:7b:39:35:99:8c: 84:ef:bb:38:94:b0:46:f3:b2:c1:1b:0b:a5:60:d0:74:ae:ad: 9d:1a:2d:70:f1:5b:4c:5e:e4:05:cb:4f:f2:39:52:d7:d3:a9: 7f:45:3b:81 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JdU5xFFaWM4s5JoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM3MWQwOWMtYjg1My00NGI5LThiMzQtOGQ1MjgzNzc0 YTVhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTE0YThjMWItNGM0MS00YWMwLWJjYTMtMmMyMWNjNzIzOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIe97ezVN/RDSaWUqol2pXZL8di1WEnNz9JH dFWJo/Fy+UA1WIgP6sO43fObjeqYQNqmkXxILiVUd/z1kpDnZdtBnHkTUiNicvnp 3Spt/jeI22Lkyil0VnJ4CP1JyYFZilX+x8Gjp4A/U4LYw7C92COKnf7oS8KdwBm5 h/nZZ3CkjN6CDnP10QZweeCDCt2SseDe8+Xnl3rwI76/DNGRWCLKwYC6lbbXe5yG Wlux/qNxs3h6EV163cm5oAL5iIRa2o1Z6As1u8o2vrmPG87DPBjpiNwUuZyPXXKo UIgDt8aeQrqghAuc8Ro8GpkEXiXa8ESOpYhx9XZ7genF0IW21wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJdmf0pvUGiW0TvXLtwBgPKezvhCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcx ZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUyODM3NzRhNWEvMmEyZjA1OWQtZTE4MS0z M2JmLThiYmQtMmM0YTVkMDkwODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGM3MWQwOWMtYjg1My00NGI5LThi MzQtOGQ1MjgzNzc0YTVhLzBjNzFkMDljLWI4NTMtNDRiOS04YjM0LThkNTI4Mzc3 NGE1YS5jcmwwHwYDVR0jBBgwFoAUMjrJJt0I/JfknfYqpMDA+iarQNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzcxZDA5Yy1iODUzLTQ0YjktOGIzNC04ZDUy ODM3NzRhNWEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC0FZ0AwQC 0FuYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGB6FzVypyq13KzIakQW1EPzYJRmxFD18Qrm+tv6dUSmMkFB h6rNBzpaL1d3jPsl5Yutf8eSRlebkCBYHY7oFL10ABJUlDCWFsdHEaVZjEWOwL7w vkadkTzjztXpXhNZsSlSxjAGA8pTHJ8d7+eJ6wugRZhBrV85lh7HozSl5gcemFZo q0u1CcgR4/4cTQ7YgcDa2aVt+5QkbKMXbBfXMdMq40kjXaBof/d+v1sWSS/ker0a tQ4PCit/RNMg33X21d4Zxsqvce5+S5z1b0ScbCL+cvp7OTWZjITvuziUsEbzssEb C6Vg0HSurZ0aLXDxW0xe5AXLT/I5UtfTqX9FO4E= -----END CERTIFICATE-----Generated at Mon Sep 28 22:48:17 2026 by rpki-client