$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/8008f8ed-620d-3847-b19a-1d027971a2c4.roa File: 8008f8ed-620d-3847-b19a-1d027971a2c4.roa (raw, json) Hash identifier: Z+33pxCle2tL6r3Sn2MC5Lt35AldTaaZlcCMCBPHTSc= Subject key identifier: AB:6E:4C:13:B6:36:4B:0A:DF:82:6D:84:4D:88:47:C6:5D:E4:F6:CB Certificate issuer: /CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c Certificate serial: 010D0C9F4328584F3A17C66C34491624715C5EC0 Authority key identifier: 8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/8008f8ed-620d-3847-b19a-1d027971a2c4.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 26695 IP address blocks: 23.138.208.0/24 maxlen: 24 2605:8bc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:c6:6c:34:49:16:24:71:5c:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=06b2c934-5878-44ca-855d-2a9fb788471d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:15:9a:65:10:d8:0f:1a:be:da:36:5b:8b:3d: 2a:02:50:33:fb:78:02:ef:82:85:2f:f1:35:f0:a9: ef:63:65:3e:b2:79:19:96:2e:aa:66:85:2a:96:b7: 9d:55:cd:93:f3:6c:d4:98:b8:c2:4d:4e:a5:85:bd: e5:a6:a3:86:f0:fb:a8:01:72:45:01:2d:7f:a1:d0: 49:17:39:5b:22:33:86:3c:ca:4c:91:a0:66:34:ce: 56:35:48:98:19:bb:b5:fb:8b:c3:b8:11:4a:01:60: 60:db:7f:99:ef:9e:68:26:f6:2f:7b:f6:86:09:a2: 45:2d:97:e3:b4:62:6e:94:13:24:2d:e5:0a:87:61: 56:e7:2c:2c:b3:83:05:ef:c4:4d:d9:89:28:93:25: b9:e8:b4:c3:0e:88:8c:1f:68:29:8b:54:6a:1b:f6: fa:35:bd:38:45:c2:cc:01:92:7f:51:36:37:6f:62: 2e:2a:bd:93:44:35:57:61:14:a8:c1:13:38:4c:57: 56:ba:a8:f8:25:87:ab:ad:49:e9:6b:82:8a:d8:ad: 9d:45:08:35:fc:30:16:ad:cf:de:58:14:67:f8:55: 0b:e4:00:d8:e5:ed:eb:89:9b:67:60:b4:63:e0:28: 5d:e3:34:f6:3d:d0:c5:6e:59:93:76:9d:0e:b5:b0: 7a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6E:4C:13:B6:36:4B:0A:DF:82:6D:84:4D:88:47:C6:5D:E4:F6:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/8008f8ed-620d-3847-b19a-1d027971a2c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.crl X509v3 Authority Key Identifier: keyid:8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer sbgp-ipAddrBlock: critical IPv4: 23.138.208.0/24 IPv6: 2605:8bc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:80:f7:77:51:5d:85:2f:e4:62:78:d7:75:80:9b:2b:61:94: 1d:2a:94:70:c0:0e:f9:38:f8:30:29:ea:92:de:94:44:46:d3: a6:ac:f0:f9:9e:c9:4a:f2:dc:99:3b:60:ff:02:87:9d:05:f4: 79:46:10:26:eb:e3:3e:ca:dc:53:9d:5e:5b:c6:ac:cb:14:63: c3:e6:cf:4b:33:eb:a6:6d:12:fd:a2:7e:17:53:ff:7a:1d:1d: 8a:1e:58:f5:fe:2d:43:59:89:aa:7f:09:09:c1:6e:2d:c9:06: 70:48:98:9a:57:6e:a2:0d:4d:ed:ae:ea:89:c8:08:a0:65:96: 34:4f:84:14:f5:a9:7b:55:95:53:71:fe:65:6b:00:a5:ea:8a: 6e:2b:17:29:3e:4e:1b:dc:e6:8a:0c:01:0a:ad:10:e7:88:75: 7c:0e:cf:f5:52:4d:cd:23:ce:6a:45:c9:a1:90:97:9d:37:df: b2:58:5a:81:6a:09:9f:bb:6f:20:88:bf:87:39:6b:2f:c1:b5: 76:c2:1d:ba:5f:82:3b:2c:e1:b2:ac:29:d6:b0:a4:14:a6:5d: 1e:1a:d6:49:75:f6:82:7e:03:92:81:41:a7:ae:e9:6c:c8:5a: c9:2e:76:54:42:7a:64:63:9d:f0:ae:56:b7:e7:0f:0f:f2:88: 6e:9a:3d:58 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE86F8ZsNEkWJHFcXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZkOWUwZmMtM2E3ZS00MGM4LWE5MzUtYjU4YzZiOTky YzNjMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MDZiMmM5MzQtNTg3OC00NGNhLTg1NWQtMmE5ZmI3ODg0NzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhWaZRDYDxq+2jZbiz0qAlAz+3gC74KFL/E1 8KnvY2U+snkZli6qZoUqlredVc2T82zUmLjCTU6lhb3lpqOG8PuoAXJFAS1/odBJ FzlbIjOGPMpMkaBmNM5WNUiYGbu1+4vDuBFKAWBg23+Z755oJvYve/aGCaJFLZfj tGJulBMkLeUKh2FW5ywss4MF78RN2YkokyW56LTDDoiMH2gpi1RqG/b6Nb04RcLM AZJ/UTY3b2IuKr2TRDVXYRSowRM4TFdWuqj4JYerrUnpa4KK2K2dRQg1/DAWrc/e WBRn+FUL5ADY5e3riZtnYLRj4Chd4zT2PdDFblmTdp0OtbB6gwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFKtuTBO2NksK34JthE2IR8Zd5PbLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZmQ5 ZTBmYy0zYTdlLTQwYzgtYTkzNS1iNThjNmI5OTJjM2MvODAwOGY4ZWQtNjIwZC0z ODQ3LWIxOWEtMWQwMjc5NzFhMmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWZkOWUwZmMtM2E3ZS00MGM4LWE5 MzUtYjU4YzZiOTkyYzNjLzFmZDllMGZjLTNhN2UtNDBjOC1hOTM1LWI1OGM2Yjk5 MmMzYy5jcmwwHwYDVR0jBBgwFoAUjhwc1ljAGCpSFPAoHuDxFEJiW7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xZmQ5ZTBmYy0zYTdlLTQwYzgtYTkzNS1iNThj NmI5OTJjM2MuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4rQMA0E AgACMAcDBQAmBYvAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAGiA93dRXYUv5GJ413WAmythlB0qlHDADvk4 +DAp6pLelERG06as8PmeyUry3Jk7YP8Ch50F9HlGECbr4z7K3FOdXlvGrMsUY8Pm z0sz66ZtEv2ifhdT/3odHYoeWPX+LUNZiap/CQnBbi3JBnBImJpXbqINTe2u6onI CKBlljRPhBT1qXtVlVNx/mVrAKXqim4rFyk+Thvc5ooMAQqtEOeIdXwOz/VSTc0j zmpFyaGQl50337JYWoFqCZ+7byCIv4c5ay/BtXbCHbpfgjss4bKsKdawpBSmXR4a 1kl19oJ+A5KBQaeu6WzIWskudlRCemRjnfCuVrfnDw/yiG6aPVg= -----END CERTIFICATE-----Generated at Fri Sep 25 22:33:17 2026 by rpki-client