$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/aee9cb14-f5a6-3e54-b8b7-d3a0fd0ae45e.roa File: aee9cb14-f5a6-3e54-b8b7-d3a0fd0ae45e.roa (raw, json) Hash identifier: pYtU6+xBF8Wi9wxiwnwynxnzCcUHlfFdlG/8UoX6TAc= Subject key identifier: C9:EC:A8:93:C7:4F:89:7E:B9:CF:5E:B7:88:94:58:B8:3B:DF:49:4C Certificate issuer: /CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1 Certificate serial: 010D0C9F4328584FB0BDEAC5AA02831718E83C00 Authority key identifier: 86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/aee9cb14-f5a6-3e54-b8b7-d3a0fd0ae45e.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 16509 IP address blocks: 208.75.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:ea:c5:aa:02:83:17:18:e8:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ed81a66-f49e-4a16-a647-f709e55cbdb1 Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=93f89390-ea3c-4458-a6ec-06b020b0a7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:61:64:29:ab:d5:df:90:34:8d:10:5a:51:e6: de:57:b4:e2:62:6f:ff:dd:58:d7:15:05:65:9e:6e: b8:e3:f9:24:99:36:f2:73:3e:1b:61:12:f9:9c:ac: 20:17:a4:d6:12:e4:5d:df:8e:1c:69:d5:80:85:cf: 37:4a:ec:96:39:12:57:b6:24:ec:82:f4:b5:07:f7: a8:97:6f:e8:c9:0f:aa:0e:df:c3:87:33:08:88:04: 90:4c:03:f2:70:1a:30:7a:9b:86:e8:f5:da:02:3a: 47:47:83:7a:e8:90:7f:1f:30:69:86:4a:54:d1:c9: d4:66:7d:6e:62:00:04:da:80:c5:ca:f6:16:a0:4f: b1:33:0f:33:2a:5d:2f:20:cf:c1:de:78:99:c1:7a: 1c:dd:a8:84:65:18:27:5a:5d:d4:d1:32:1d:62:15: b9:8f:e8:3e:76:9a:3f:23:37:ca:32:78:3c:eb:7e: dc:e0:fb:91:10:f4:fd:a8:89:ca:7a:f7:3a:38:12: cb:82:75:e0:f0:ba:a1:e5:39:56:b1:f4:2a:c8:14: 9e:d6:54:d2:f9:82:01:0b:1b:0c:52:ae:af:90:90: e4:bf:8e:d9:1c:67:ac:c6:17:24:f5:d7:a5:e9:5e: 34:b0:86:a0:8c:2b:a9:39:3f:69:2d:76:0f:d5:d8: 28:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EC:A8:93:C7:4F:89:7E:B9:CF:5E:B7:88:94:58:B8:3B:DF:49:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/aee9cb14-f5a6-3e54-b8b7-d3a0fd0ae45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1/5ed81a66-f49e-4a16-a647-f709e55cbdb1.crl X509v3 Authority Key Identifier: keyid:86:5D:86:6E:B5:5E:BD:C7:1C:18:46:FE:2D:C8:68:25:00:B0:9F:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ed81a66-f49e-4a16-a647-f709e55cbdb1.cer sbgp-ipAddrBlock: critical IPv4: 208.75.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:7d:06:4d:74:66:cc:46:f5:07:b9:94:10:a0:a7:e6:d9:f8: a0:94:59:b3:76:f0:5a:04:bf:4a:3d:54:6c:52:62:5b:02:5a: d6:95:87:09:ce:20:0e:f9:0d:22:e1:d2:40:66:8c:68:db:65: 86:eb:f1:49:6e:25:c8:59:f4:18:28:29:a6:79:7b:20:1f:77: 18:bd:15:d7:e7:16:25:91:ff:27:bf:88:45:f5:61:4d:b8:79: 0e:a9:58:31:23:9d:90:fb:59:35:7e:05:dc:b7:e1:74:27:9c: cd:97:3d:db:90:2d:4d:d2:93:19:da:5d:e7:15:01:8d:b2:c0: d9:c3:28:c9:c7:15:a0:1f:f9:54:e6:42:24:f6:cf:15:30:4d: e1:ba:31:3a:79:2a:c6:b5:48:b1:c1:4b:de:50:f5:70:49:29: a7:0f:c9:bd:c1:5a:5a:ee:72:c3:9a:99:78:37:60:2f:5f:38: 18:d7:a2:a6:36:7d:3c:47:b3:7f:ee:34:7c:c7:99:18:26:4c: 1e:ad:07:fa:13:e1:20:2e:36:6b:f2:cc:a0:e9:f2:ce:f0:fa: eb:0e:2e:7b:65:73:bd:d6:96:56:7f:d7:5f:75:9a:ac:f8:c4: 5a:7c:04:c4:21:a2:8c:87:70:ba:23:2c:3b:4d:27:d2:9d:e9: 3c:1b:ab:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wverFqgKDFxjoPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWVkODFhNjYtZjQ5ZS00YTE2LWE2NDctZjcwOWU1NWNi ZGIxMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk OTNmODkzOTAtZWEzYy00NDU4LWE2ZWMtMDZiMDIwYjBhN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmFkKavV35A0jRBaUebeV7TiYm//3VjXFQVl nm644/kkmTbycz4bYRL5nKwgF6TWEuRd344cadWAhc83SuyWORJXtiTsgvS1B/eo l2/oyQ+qDt/DhzMIiASQTAPycBowepuG6PXaAjpHR4N66JB/HzBphkpU0cnUZn1u YgAE2oDFyvYWoE+xMw8zKl0vIM/B3niZwXoc3aiEZRgnWl3U0TIdYhW5j+g+dpo/ IzfKMng8637c4PuREPT9qInKevc6OBLLgnXg8Lqh5TlWsfQqyBSe1lTS+YIBCxsM Uq6vkJDkv47ZHGesxhck9del6V40sIagjCupOT9pLXYP1dgovQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnsqJPHT4l+uc9et4iUWLg730lMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZWQ4 MWE2Ni1mNDllLTRhMTYtYTY0Ny1mNzA5ZTU1Y2JkYjEvYWVlOWNiMTQtZjVhNi0z ZTU0LWI4YjctZDNhMGZkMGFlNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWVkODFhNjYtZjQ5ZS00YTE2LWE2 NDctZjcwOWU1NWNiZGIxLzVlZDgxYTY2LWY0OWUtNGExNi1hNjQ3LWY3MDllNTVj YmRiMS5jcmwwHwYDVR0jBBgwFoAUhl2GbrVevcccGEb+LchoJQCwn44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZWQ4MWE2Ni1mNDllLTRhMTYtYTY0Ny1mNzA5 ZTU1Y2JkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0Es6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAER9Bk10ZsxG9Qe5lBCgp+bZ+KCUWbN28FoEv0o9VGxSYlsCWtaVhwnO IA75DSLh0kBmjGjbZYbr8UluJchZ9BgoKaZ5eyAfdxi9FdfnFiWR/ye/iEX1YU24 eQ6pWDEjnZD7WTV+Bdy34XQnnM2XPduQLU3SkxnaXecVAY2ywNnDKMnHFaAf+VTm QiT2zxUwTeG6MTp5Ksa1SLHBS95Q9XBJKacPyb3BWlrucsOamXg3YC9fOBjXoqY2 fTxHs3/uNHzHmRgmTB6tB/oT4SAuNmvyzKDp8s7w+usOLntlc73WllZ/1191mqz4 xFp8BMQhooyHcLojLDtNJ9Kd6Twbq4g= -----END CERTIFICATE-----Generated at Sun Nov 1 03:14:40 2026 by rpki-client