$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/47f8100e-69ee-3c05-88f7-b63e731e370a.roa File: 47f8100e-69ee-3c05-88f7-b63e731e370a.roa (raw, json) Hash identifier: JYkVPHO3BJz/SRoyxWs/XD716OJ4QM5I4ZQqPOr7Z6Q= Subject key identifier: 37:FF:36:67:EC:5E:4F:8F:71:80:E7:0F:76:F9:97:23:47:2A:D7:D3 Certificate issuer: /CN=d416e28d-79e4-4432-b727-97e9702afe09 Certificate serial: 010D0C9F4328584F948163E29728ECAAF1C3D500 Authority key identifier: AC:C0:26:32:04:53:92:DE:62:BB:D8:A7:6C:D2:76:DB:05:52:3A:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/47f8100e-69ee-3c05-88f7-b63e731e370a.roa Signing time: Wed 21 Oct 2026 22:15:47 +0000 ROA not before: Wed 21 Oct 2026 22:15:47 +0000 ROA not after: Tue 19 Jan 2027 23:15:47 +0000 asID: 174 IP address blocks: 208.73.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:81:63:e2:97:28:ec:aa:f1:c3:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d416e28d-79e4-4432-b727-97e9702afe09 Validity Not Before: Oct 21 22:15:47 2026 GMT Not After : Jan 19 23:15:47 2027 GMT Subject: CN=0dc81384-f28a-4ead-b69a-4a6a7f13f55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:31:3d:3d:ce:5b:07:be:95:cc:b5:82:79:b2: f1:98:93:2c:ae:c0:95:a0:f2:80:15:18:3d:ca:51: 2d:eb:0e:a4:7a:9c:bc:d5:44:c8:51:84:99:46:33: 48:b5:8a:b6:fc:d0:2c:6e:91:f9:28:67:f5:18:a1: b4:96:48:01:5a:87:3c:6f:3f:8f:e9:d0:a6:8b:08: 18:e5:3e:af:43:25:83:9e:58:f1:11:89:06:51:cb: 9a:cc:e7:84:2d:02:e6:8f:9b:7a:54:95:cf:3a:b1: c9:7f:38:ac:a6:01:9b:dc:ee:dd:8c:88:0d:69:b9: 14:f0:0e:15:28:b5:9d:8e:ea:78:eb:2d:8e:67:a8: 75:9a:9f:88:e1:cf:7f:3d:68:68:8c:ba:8c:f3:c6: 19:0d:ac:2c:b6:cc:40:a6:9e:5d:3a:8c:57:bc:3d: 87:60:c3:fb:d3:96:9f:fe:49:46:d8:10:2a:85:7f: 5e:0d:40:97:73:6c:8f:8c:7f:dd:b7:c8:35:7b:38: 7b:58:d4:0b:1d:6c:05:20:5c:3c:93:e4:b9:a7:e9: f1:d5:e0:63:9f:c4:4a:7d:1b:ad:6a:cc:a2:99:0b: c3:b2:04:a1:43:cb:9f:2e:f8:d4:29:d2:19:71:69: 04:8e:e8:df:20:23:2b:74:e1:ea:28:43:10:6e:4b: 78:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:FF:36:67:EC:5E:4F:8F:71:80:E7:0F:76:F9:97:23:47:2A:D7:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/47f8100e-69ee-3c05-88f7-b63e731e370a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.crl X509v3 Authority Key Identifier: keyid:AC:C0:26:32:04:53:92:DE:62:BB:D8:A7:6C:D2:76:DB:05:52:3A:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer sbgp-ipAddrBlock: critical IPv4: 208.73.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:51:8c:97:6d:a7:b3:5f:03:95:be:bc:f0:fa:c7:9e:f9:cc: 3c:94:3a:20:10:5c:fb:ca:86:3a:e0:3c:3f:92:29:ba:33:07: 9b:35:84:f8:14:fb:a8:a4:4c:5f:64:6e:0f:81:73:12:30:23: a7:cb:e3:5e:4d:61:73:04:e5:23:68:56:94:f8:3b:6f:32:34: e9:35:78:c4:37:18:77:5a:9e:60:e9:42:a3:fe:18:84:ce:65: ae:79:03:8d:4a:f8:da:b6:b5:0c:b9:66:c8:6e:34:e2:64:59: cc:c9:03:65:c9:ca:86:88:a1:48:4c:6b:fe:8a:6e:b3:49:d6: 9a:9d:ca:57:55:f4:b9:92:b4:ef:42:97:88:00:86:bb:f9:f8: 75:58:ae:70:b9:14:8d:e0:0f:dc:fe:c5:7e:03:02:bc:87:5c: 4e:ba:fe:5b:d4:a5:f3:53:e2:ec:07:28:bb:41:94:60:3e:10: a4:2a:13:8d:93:18:0b:d5:06:df:a0:ce:9c:37:a9:c6:98:e3: c6:db:de:81:00:c6:fc:46:e7:fc:30:de:09:58:a9:34:98:e5: 51:52:54:b3:e8:e3:10:24:ce:3e:84:ab:8f:c6:a7:5f:62:c0: 8b:88:2a:f6:c9:73:62:e0:66:df:4d:18:57:eb:8d:63:45:a5: e5:e7:ea:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+UgWPilyjsqvHD1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQxNmUyOGQtNzllNC00NDMyLWI3MjctOTdlOTcwMmFm ZTA5MB4XDTI2MTAyMTIyMTU0N1oXDTI3MDExOTIzMTU0N1owLzEtMCsGA1UEAxMk MGRjODEzODQtZjI4YS00ZWFkLWI2OWEtNGE2YTdmMTNmNTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTE9Pc5bB76VzLWCebLxmJMsrsCVoPKAFRg9 ylEt6w6kepy81UTIUYSZRjNItYq2/NAsbpH5KGf1GKG0lkgBWoc8bz+P6dCmiwgY 5T6vQyWDnljxEYkGUcuazOeELQLmj5t6VJXPOrHJfzispgGb3O7djIgNabkU8A4V KLWdjup46y2OZ6h1mp+I4c9/PWhojLqM88YZDawstsxApp5dOoxXvD2HYMP705af /klG2BAqhX9eDUCXc2yPjH/dt8g1ezh7WNQLHWwFIFw8k+S5p+nx1eBjn8RKfRut asyimQvDsgShQ8ufLvjUKdIZcWkEjujfICMrdOHqKEMQbkt4CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDf/NmfsXk+PcYDnD3b5lyNHKtfTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDE2 ZTI4ZC03OWU0LTQ0MzItYjcyNy05N2U5NzAyYWZlMDkvNDdmODEwMGUtNjllZS0z YzA1LTg4ZjctYjYzZTczMWUzNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQxNmUyOGQtNzllNC00NDMyLWI3 MjctOTdlOTcwMmFmZTA5L2Q0MTZlMjhkLTc5ZTQtNDQzMi1iNzI3LTk3ZTk3MDJh ZmUwOS5jcmwwHwYDVR0jBBgwFoAUrMAmMgRTkt5iu9inbNJ22wVSOrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNDE2ZTI4ZC03OWU0LTQ0MzItYjcyNy05N2U5 NzAyYWZlMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExRjJdtp7NfA5W+vPD6x575zDyUOiAQXPvKhjrgPD+SKbozB5s1hPgU +6ikTF9kbg+BcxIwI6fL415NYXME5SNoVpT4O28yNOk1eMQ3GHdanmDpQqP+GITO Za55A41K+Nq2tQy5ZshuNOJkWczJA2XJyoaIoUhMa/6KbrNJ1pqdyldV9LmStO9C l4gAhrv5+HVYrnC5FI3gD9z+xX4DAryHXE66/lvUpfNT4uwHKLtBlGA+EKQqE42T GAvVBt+gzpw3qcaY48bb3oEAxvxG5/ww3glYqTSY5VFSVLPo4xAkzj6Eq4/Gp19i wIuIKvbJc2LgZt9NGFfrjWNFpeXn6jE= -----END CERTIFICATE-----Generated at Thu Nov 5 07:01:38 2026 by rpki-client