$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/2e712cbf-a526-3fa2-94d8-52657449f5ef.roa File: 2e712cbf-a526-3fa2-94d8-52657449f5ef.roa (raw, json) Hash identifier: Fk13VkIJkvtLFoK0FISIVuVeJvU3fu+E/DkMUYKMDyo= Subject key identifier: B4:DA:6F:8F:EE:4F:5C:9A:EF:5B:52:8B:B1:B0:1B:2E:9A:00:88:53 Certificate issuer: /CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Certificate serial: 010D0C9F4328584F498C0ECFD5BF79BBC3104600 Authority key identifier: E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/2e712cbf-a526-3fa2-94d8-52657449f5ef.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394500 IP address blocks: 208.96.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:0e:cf:d5:bf:79:bb:c3:10:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256d2a2e-9ac7-4d29-bd15-75874d49df66 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=39b60d83-7df2-46d0-919d-ed33a5f99069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:ca:5a:d5:5e:ef:17:d6:fb:80:00:c6:92: 51:04:1e:95:f2:82:b5:b8:90:9a:44:3b:a5:25:b2: 71:cf:cd:e0:0a:00:8f:74:16:fd:80:7d:b6:d6:fb: 2b:ad:be:b0:70:31:84:06:45:3a:c0:4c:ff:2b:c6: 37:e5:b9:8c:7f:76:64:22:d1:6e:63:78:fb:e5:a1: 84:aa:76:f0:d8:86:a2:8e:33:99:cc:7d:6e:a0:1f: 79:d2:9e:06:5e:3c:66:0f:47:8b:a5:c4:c1:f9:54: 39:63:31:bf:6e:0e:56:8e:d0:e9:05:33:8c:1f:3d: 0f:32:21:9c:31:38:a9:a5:de:c2:2b:30:2f:87:ba: e8:f6:c0:a8:59:99:e8:c1:a2:45:55:cb:f4:f5:32: ad:f8:ab:da:e6:20:cb:8f:26:6f:5a:6a:23:f8:ba: fb:59:af:59:dc:b1:b9:1c:82:c8:c5:0a:e6:f7:77: ed:46:5a:1d:83:e4:12:ff:f1:29:e5:09:57:13:20: 51:e9:5d:df:df:44:63:d2:28:5e:e3:6b:f9:b1:57: bf:98:38:92:1f:8f:86:c9:e5:a1:e2:09:b8:14:08: be:22:1f:25:38:06:3a:b9:e6:30:be:22:2b:25:18: 0a:84:e1:64:6c:ca:2a:f1:f4:af:ea:a2:b6:24:15: 61:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DA:6F:8F:EE:4F:5C:9A:EF:5B:52:8B:B1:B0:1B:2E:9A:00:88:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/2e712cbf-a526-3fa2-94d8-52657449f5ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66/256d2a2e-9ac7-4d29-bd15-75874d49df66.crl X509v3 Authority Key Identifier: keyid:E7:4C:09:96:E8:84:50:C0:CF:D5:86:D5:46:2F:70:EE:D2:57:95:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/256d2a2e-9ac7-4d29-bd15-75874d49df66.cer sbgp-ipAddrBlock: critical IPv4: 208.96.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:f6:2d:bc:63:22:6f:29:02:dc:c1:13:6d:c9:f8:ed:33:b3: 7d:fb:1b:7f:83:f0:dc:68:9e:25:f0:e6:81:ea:8a:5e:59:dd: ad:be:38:71:8a:64:d7:0f:c7:20:55:d5:b5:b8:ac:d7:ba:32: e4:b7:ac:79:bc:32:50:64:ef:9b:5e:b1:7a:53:72:4f:dc:e7: e4:72:9f:c7:45:e6:3c:2d:7a:40:d1:13:7c:dc:37:2b:6b:be: 2a:5e:2d:1c:c0:b6:cf:3e:ed:87:22:f0:d3:11:5c:ef:40:ae: ce:66:04:40:c4:60:f2:63:a9:15:2f:83:dd:fa:dd:50:07:c8: 86:e9:07:f1:15:be:bf:a8:c1:de:36:80:5f:da:bf:30:04:c4: 26:8b:78:33:32:1d:5c:9b:7f:5b:26:a0:c5:39:29:2d:e7:c4: e1:6a:49:28:91:63:5d:f0:b0:1c:00:7a:a3:c3:d0:f2:e1:c6: fb:11:fd:85:ce:ea:aa:8a:a4:b9:34:f0:38:87:e0:07:78:aa: bc:2c:69:09:f6:b9:f3:57:b3:18:5f:c4:b7:ce:d3:45:7b:9f: 1d:90:b2:4d:23:84:0a:1c:5f:e6:be:78:f1:84:31:9a:b4:b1: 8d:57:06:16:64:e7:4f:c2:30:b3:ac:67:e6:3c:34:13:52:6c: 4d:62:b3:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjA7P1b95u8MQRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjU2ZDJhMmUtOWFjNy00ZDI5LWJkMTUtNzU4NzRkNDlk ZjY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzliNjBkODMtN2RmMi00NmQwLTkxOWQtZWQzM2E1Zjk5MDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO3KWtVe7xfW+4AAxpJRBB6V8oK1uJCaRDul JbJxz83gCgCPdBb9gH221vsrrb6wcDGEBkU6wEz/K8Y35bmMf3ZkItFuY3j75aGE qnbw2IaijjOZzH1uoB950p4GXjxmD0eLpcTB+VQ5YzG/bg5WjtDpBTOMHz0PMiGc MTippd7CKzAvh7ro9sCoWZnowaJFVcv09TKt+Kva5iDLjyZvWmoj+Lr7Wa9Z3LG5 HILIxQrm93ftRlodg+QS//Ep5QlXEyBR6V3f30Rj0ihe42v5sVe/mDiSH4+GyeWh 4gm4FAi+Ih8lOAY6ueYwviIrJRgKhOFkbMoq8fSv6qK2JBVhHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTab4/uT1ya71tSi7GwGy6aAIhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yNTZk MmEyZS05YWM3LTRkMjktYmQxNS03NTg3NGQ0OWRmNjYvMmU3MTJjYmYtYTUyNi0z ZmEyLTk0ZDgtNTI2NTc0NDlmNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjU2ZDJhMmUtOWFjNy00ZDI5LWJk MTUtNzU4NzRkNDlkZjY2LzI1NmQyYTJlLTlhYzctNGQyOS1iZDE1LTc1ODc0ZDQ5 ZGY2Ni5jcmwwHwYDVR0jBBgwFoAU50wJluiEUMDP1YbVRi9w7tJXlQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yNTZkMmEyZS05YWM3LTRkMjktYmQxNS03NTg3 NGQ0OWRmNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0GC8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT2LbxjIm8pAtzBE23J+O0zs337G3+D8NxoniXw5oHqil5Z3a2+OHGK ZNcPxyBV1bW4rNe6MuS3rHm8MlBk75tesXpTck/c5+Ryn8dF5jwtekDRE3zcNytr vipeLRzAts8+7Yci8NMRXO9Ars5mBEDEYPJjqRUvg9363VAHyIbpB/EVvr+owd42 gF/avzAExCaLeDMyHVybf1smoMU5KS3nxOFqSSiRY13wsBwAeqPD0PLhxvsR/YXO 6qqKpLk08DiH4Ad4qrwsaQn2ufNXsxhfxLfO00V7nx2Qsk0jhAocX+a+ePGEMZq0 sY1XBhZk50/CMLOsZ+Y8NBNSbE1iszg= -----END CERTIFICATE-----Generated at Fri Sep 25 22:25:01 2026 by rpki-client