$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa File: dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa (raw, json) Hash identifier: uxkrnXF7VywxGIjZcw5lF2qC/8ielZGBIdC/IVhh/mk= Subject key identifier: 47:3F:6B:FB:D5:FD:18:27:D8:0F:DF:B5:46:9E:65:CE:E3:1C:D0:8C Certificate issuer: /CN=4ee37184-86de-48c9-af35-5d102d140fa6 Certificate serial: 010D0C9F4328584F1B6254FDE429805342C3635C Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 214022 IP address blocks: 208.70.219.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:54:fd:e4:29:80:53:42:c3:63:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=ad00f887-8289-4c9d-9d28-9787af379a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:4b:c7:d2:0b:1e:86:92:af:8f:2a:ae:05: f9:d3:e5:9d:7f:a6:3d:75:bb:75:93:2f:36:11:2e: c6:a0:0b:c3:75:02:a4:ad:c8:b6:cb:f6:c1:87:03: 40:42:39:98:57:b3:4c:8c:c3:d6:03:e4:c1:21:db: e2:e4:6e:c7:5b:4b:fb:f4:f8:37:ee:7a:d5:fb:27: 13:da:0b:74:43:43:15:32:70:47:45:92:85:7c:85: 4d:f6:8b:57:7e:a8:0f:e3:c5:c0:a3:fa:e5:aa:ea: 05:1c:1c:cc:f6:4f:4d:bb:65:8e:9c:df:2f:c8:f1: cc:23:07:a4:6b:40:ca:2f:62:c5:7f:d9:ca:32:46: ef:6b:ca:56:c6:2f:64:17:bd:9f:b5:a5:95:fc:e9: ec:70:89:dc:57:75:8a:07:99:9d:d1:ac:2e:2d:cc: 9d:b2:03:b2:64:43:8d:ce:ab:80:47:11:9a:11:eb: 25:68:aa:80:d4:75:df:64:d0:52:52:08:a2:2b:d0: 45:d5:40:c5:d0:92:29:74:37:39:68:c9:18:c2:f5: 31:8b:75:a2:07:6f:2e:af:d1:89:28:be:e8:fd:d7: 43:92:5c:b1:1d:16:fa:ca:97:44:6d:67:8f:7c:d2: 46:e1:17:a7:28:b2:9c:71:2f:4a:23:de:61:48:32: 78:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3F:6B:FB:D5:FD:18:27:D8:0F:DF:B5:46:9E:65:CE:E3:1C:D0:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/dd53b9f8-69b7-34f8-b86e-af660a530d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl X509v3 Authority Key Identifier: keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer sbgp-ipAddrBlock: critical IPv4: 208.70.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:81:04:8a:b5:82:9d:4e:33:83:d9:08:a6:31:b9:8a:b5:67: 51:2d:ff:cc:dc:ea:2a:b8:f4:cb:51:4c:48:17:29:d6:b1:fc: 20:67:b2:4e:05:3f:3b:4b:44:2f:46:c0:d6:a3:1e:e7:ec:17: 3f:56:83:17:97:c2:21:63:3e:4e:64:f8:af:1f:4c:35:80:1a: f6:f3:b6:5b:6d:97:82:7e:b6:77:41:e3:49:ba:4d:48:2f:e3: c8:54:ee:26:ee:b5:aa:ce:c5:ee:c6:8c:9d:23:38:86:ed:43: bc:3e:8f:9a:73:94:46:5a:e5:ac:da:7f:44:01:e9:94:3b:93: b6:af:8e:31:cc:3f:b7:29:32:75:93:2f:0a:e4:cd:fc:cf:38: fb:7b:7b:ac:ab:1f:f9:69:11:9a:22:07:74:83:e6:0b:16:0f: fc:c8:a1:2f:9f:6d:2e:b0:da:f3:f7:72:b6:95:48:49:74:10: a3:2e:5c:e1:04:54:72:1e:21:07:81:58:52:9b:44:66:c2:ec: 6e:a7:d0:8e:ad:bf:08:c1:69:ef:f5:ae:f7:f2:52:27:b6:a0: 91:bb:81:d3:b0:34:17:63:93:62:91:7d:53:f4:6b:75:72:7c: a8:d3:54:7d:8d:c8:0f:e1:5b:51:6c:0d:ae:e2:61:7b:87:10: 48:6b:e8:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlT95CmAU0LDY1wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVlMzcxODQtODZkZS00OGM5LWFmMzUtNWQxMDJkMTQw ZmE2MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YWQwMGY4ODctODI4OS00YzlkLTlkMjgtOTc4N2FmMzc5YTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwpLx9ILHoaSr48qrgX50+Wdf6Y9dbt1ky82 ES7GoAvDdQKkrci2y/bBhwNAQjmYV7NMjMPWA+TBIdvi5G7HW0v79Pg37nrV+ycT 2gt0Q0MVMnBHRZKFfIVN9otXfqgP48XAo/rlquoFHBzM9k9Nu2WOnN8vyPHMIwek a0DKL2LFf9nKMkbva8pWxi9kF72ftaWV/OnscIncV3WKB5md0awuLcydsgOyZEON zquARxGaEeslaKqA1HXfZNBSUgiiK9BF1UDF0JIpdDc5aMkYwvUxi3WiB28ur9GJ KL7o/ddDklyxHRb6ypdEbWePfNJG4RenKLKccS9KI95hSDJ4JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEc/a/vV/Rgn2A/ftUaeZc7jHNCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZWUz NzE4NC04NmRlLTQ4YzktYWYzNS01ZDEwMmQxNDBmYTYvZGQ1M2I5ZjgtNjliNy0z NGY4LWI4NmUtYWY2NjBhNTMwZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGVlMzcxODQtODZkZS00OGM5LWFm MzUtNWQxMDJkMTQwZmE2LzRlZTM3MTg0LTg2ZGUtNDhjOS1hZjM1LTVkMTAyZDE0 MGZhNi5jcmwwHwYDVR0jBBgwFoAUzO2fuO7Sl7dYq+gKqtPIy9hM0Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZWUzNzE4NC04NmRlLTQ4YzktYWYzNS01ZDEw MmQxNDBmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKBBIq1gp1OM4PZCKYxuYq1Z1Et/8zc6iq49MtRTEgXKdax/CBnsk4F PztLRC9GwNajHufsFz9WgxeXwiFjPk5k+K8fTDWAGvbztlttl4J+tndB40m6TUgv 48hU7ibutarOxe7GjJ0jOIbtQ7w+j5pzlEZa5azaf0QB6ZQ7k7avjjHMP7cpMnWT LwrkzfzPOPt7e6yrH/lpEZoiB3SD5gsWD/zIoS+fbS6w2vP3craVSEl0EKMuXOEE VHIeIQeBWFKbRGbC7G6n0I6tvwjBae/1rvfyUie2oJG7gdOwNBdjk2KRfVP0a3Vy fKjTVH2NyA/hW1FsDa7iYXuHEEhr6AU= -----END CERTIFICATE-----Generated at Tue Sep 22 10:25:02 2026 by rpki-client