$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa File: 977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa (raw, json) Hash identifier: G2yUQAoWNaIevtAuvk1TsjXyjfcWhK3B0XCN87mIWas= Subject key identifier: D2:E5:41:45:B1:69:54:CF:35:20:94:8C:94:E8:4B:B7:F2:3F:A6:85 Certificate issuer: /CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Certificate serial: 010D0C9F4328584F2957BB9AE2009EFB22A7FC80 Authority key identifier: E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 14270 IP address blocks: 208.70.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:bb:9a:e2:00:9e:fb:22:a7:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=cf5dd5cc-1424-4b46-99af-232f21147c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:43:3a:43:bb:d3:3a:d3:15:19:97:34:b6:83: 68:44:6d:b5:85:33:98:a6:80:16:41:ab:0f:ad:49: 69:19:59:7c:26:c5:85:ed:d6:ed:45:df:bc:07:08: c0:a8:58:10:81:92:ce:04:60:82:7e:69:50:d7:69: 9b:31:65:6c:98:8e:20:bb:6c:75:b1:a0:e9:e6:8b: ed:28:91:ab:0a:b9:9c:4d:e3:1f:5e:ef:dd:3d:2f: 56:91:7c:c4:15:4e:d0:a5:88:5b:f4:f3:7b:4c:d9: 1d:43:1d:64:a4:02:1f:41:7f:2e:96:63:60:fa:00: 55:3a:1f:5b:3f:fb:f5:35:cd:d2:c0:f3:69:e6:47: 4b:7f:4d:89:3c:4f:f5:71:7c:93:e2:34:8d:9d:6e: 74:0e:d5:41:ed:3a:ce:25:89:af:2a:7f:66:65:c2: 62:a2:6e:70:e0:4c:64:25:32:af:e4:0a:5b:70:42: a2:bf:f0:0b:93:15:db:64:14:11:fb:99:d7:17:63: 6b:ac:41:f8:bd:5d:fe:25:42:d8:82:bf:e4:69:eb: 78:a5:d5:12:b7:1b:91:e6:84:e3:70:1d:7a:45:0f: 0a:69:22:f7:02:07:33:7b:24:93:c3:50:06:77:27: 1d:d0:64:65:12:81:14:97:1d:51:80:04:e8:0d:4e: d0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E5:41:45:B1:69:54:CF:35:20:94:8C:94:E8:4B:B7:F2:3F:A6:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl X509v3 Authority Key Identifier: keyid:E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer sbgp-ipAddrBlock: critical IPv4: 208.70.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:62:8e:4d:7f:34:c0:08:97:cd:a3:f8:42:8d:74:bb:4e:37: d6:24:ff:a0:c2:4f:ae:9a:5b:12:1a:ca:0f:7c:23:54:e6:5e: 2e:55:48:99:8d:57:de:0b:2e:34:37:76:ce:8c:1f:b5:5b:b1: 63:98:f5:3b:e1:71:de:0c:42:fe:d5:0c:f2:78:e7:fa:59:fb: 8e:02:f8:20:0e:73:85:07:63:32:db:b1:c6:3c:6c:5d:ad:85: 27:7d:9c:38:6b:67:13:7d:22:ee:1e:8b:ae:9d:a6:9c:28:db: 18:d2:27:01:0b:14:48:08:df:c1:33:ca:76:70:ac:56:a3:2b: 70:47:8e:4f:af:e4:9b:61:ea:69:3d:c0:ec:a2:37:36:da:e5: 8c:0c:58:ac:cb:40:b3:8a:de:23:b9:c4:ee:3c:71:bd:2b:e8: c3:5f:3b:df:8f:69:ea:77:ba:62:8c:fc:5b:1c:83:04:88:f1: c8:03:f8:63:05:1f:b7:bc:9e:13:23:6e:3a:b3:ab:44:6a:17: d8:f3:ce:9f:9b:3e:fa:ed:a1:38:3f:19:cc:4f:02:19:77:d7: 7d:83:6f:2d:5f:dc:74:08:31:6b:2d:76:3b:db:53:cb:bb:a0: 5e:ae:ee:7d:27:52:0e:5a:27:75:37:39:98:3e:dd:55:8e:b7: f6:0c:31:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7ua4gCe+yKn/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUzMDZkOTAtMGYzNy00OWE4LWIwMGUtMDY4YThlNGZm MzA3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk Y2Y1ZGQ1Y2MtMTQyNC00YjQ2LTk5YWYtMjMyZjIxMTQ3YzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0M6Q7vTOtMVGZc0toNoRG21hTOYpoAWQasP rUlpGVl8JsWF7dbtRd+8BwjAqFgQgZLOBGCCfmlQ12mbMWVsmI4gu2x1saDp5ovt KJGrCrmcTeMfXu/dPS9WkXzEFU7QpYhb9PN7TNkdQx1kpAIfQX8ulmNg+gBVOh9b P/v1Nc3SwPNp5kdLf02JPE/1cXyT4jSNnW50DtVB7TrOJYmvKn9mZcJiom5w4Exk JTKv5ApbcEKiv/ALkxXbZBQR+5nXF2NrrEH4vV3+JULYgr/kaet4pdUStxuR5oTj cB16RQ8KaSL3AgczeySTw1AGdycd0GRlEoEUlx1RgAToDU7QHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLlQUWxaVTPNSCUjJToS7fyP6aFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMw NmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhhOGU0ZmYzMDcvOTc3ZmFhZjAtNzljMy0z ZGRkLThiYmQtODNhMWFhNzcyMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODUzMDZkOTAtMGYzNy00OWE4LWIw MGUtMDY4YThlNGZmMzA3Lzg1MzA2ZDkwLTBmMzctNDlhOC1iMDBlLTA2OGE4ZTRm ZjMwNy5jcmwwHwYDVR0jBBgwFoAU6W+vjk/ijY/2WK04zp8PXNFY//gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMwNmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhh OGU0ZmYzMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhijk1/NMAIl82j+EKNdLtON9Yk/6DCT66aWxIayg98I1TmXi5VSJmN V94LLjQ3ds6MH7VbsWOY9Tvhcd4MQv7VDPJ45/pZ+44C+CAOc4UHYzLbscY8bF2t hSd9nDhrZxN9Iu4ei66dppwo2xjSJwELFEgI38EzynZwrFajK3BHjk+v5Jth6mk9 wOyiNzba5YwMWKzLQLOK3iO5xO48cb0r6MNfO9+Paep3umKM/FscgwSI8cgD+GMF H7e8nhMjbjqzq0RqF9jzzp+bPvrtoTg/GcxPAhl3132Dby1f3HQIMWstdjvbU8u7 oF6u7n0nUg5aJ3U3OZg+3VWOt/YMMeg= -----END CERTIFICATE-----Generated at Tue Sep 22 10:16:09 2026 by rpki-client