$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa File: a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa (raw, json) Hash identifier: grMGnJU/fzyQ/DABC9Rj/ePQ9hw7Gp9V6+HLbqgB2s0= Subject key identifier: A2:18:69:E5:45:71:0D:88:2C:D7:C3:BB:95:51:03:D0:57:64:17:70 Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584F119E7A42D5843AC547B8C600 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 398465 IP address blocks: 208.58.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9e:7a:42:d5:84:3a:c5:47:b8:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=078434a2-ce21-4b21-a82d-53fcd61b5cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:47:9c:72:70:a9:08:a9:96:bd:77:bf:45: 15:5f:44:2d:46:e0:ac:8c:93:b4:5b:85:5f:ce:89: 8c:c1:b9:25:d6:11:47:a7:d9:56:8e:54:f7:7c:12: 6b:fb:2a:a0:45:4f:8b:a6:5b:3b:05:4f:24:58:51: 5f:1c:f4:6b:48:42:ea:88:74:df:96:93:c6:90:eb: c4:63:3a:5c:89:3c:70:9b:87:e2:16:ba:87:97:e2: 2a:14:2e:f4:75:0e:72:a5:67:d0:cf:ba:05:76:16: 02:16:39:d4:9b:c5:a5:2b:39:c3:c4:76:57:6a:bf: 04:df:10:79:e0:11:dd:85:47:08:47:5d:dd:39:34: f9:06:8e:db:a1:42:38:bc:e7:75:70:d7:cd:bf:e7: 2e:b9:41:ae:c6:90:3b:1f:10:6d:ea:88:6c:2a:4a: 48:1b:30:a4:e9:8b:cb:7d:3a:e6:b8:73:ce:38:4f: db:45:15:a0:a4:8b:1d:31:20:60:e1:e5:af:f3:e9: 56:cb:f2:ca:32:7a:5b:a5:87:a9:a1:e4:2a:c1:42: 34:09:95:69:c3:20:35:87:94:32:95:13:ab:70:f6: 57:39:2a:3f:41:8d:e8:a3:49:56:f4:c0:86:c5:a9: 3c:ea:23:da:9a:34:dc:6f:ad:53:0c:0b:51:be:ff: f8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:18:69:E5:45:71:0D:88:2C:D7:C3:BB:95:51:03:D0:57:64:17:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7cb4149-ea8b-3d0e-8072-1e5fce27c6eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 208.58.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:04:23:83:37:6a:1d:f0:90:87:7f:9f:e5:38:49:27:2d:d3: 20:2e:fa:20:62:23:80:ce:f5:99:fd:0d:20:ef:af:b1:2b:a4: 11:92:83:dd:a5:22:7a:6f:b1:2b:26:82:dc:c8:59:1d:50:b9: 87:e5:f8:46:d8:b7:03:8d:d1:f3:5e:80:f5:2b:17:21:3e:f4: 93:e4:7b:8b:6e:35:42:5e:19:92:28:9b:b8:d1:ec:4c:13:a8: d3:d9:b1:51:9b:13:47:a8:7e:2d:c3:53:87:83:20:79:be:9a: cc:0e:1b:07:8a:bd:99:74:c9:bf:4c:fd:19:db:ad:86:30:ca: d6:97:aa:b2:f8:2c:e9:a6:83:bc:6d:0f:d4:fc:b6:53:49:10: 44:28:0c:e4:00:b3:2e:47:20:ee:4d:7e:04:06:6c:bf:83:d7: 04:1e:a4:c7:ac:88:0c:60:c8:cc:27:48:2d:08:cd:19:30:ac: 13:dd:b9:29:bf:0a:af:87:0c:5d:3b:39:31:bf:64:f4:fc:28: 20:60:d2:b5:b0:ff:b7:9c:1e:5a:dc:76:83:5d:33:f6:b5:63: ff:f7:d0:c1:69:80:7f:b5:80:c9:5f:c4:58:f6:1f:1e:a5:1a: dc:3f:d6:d5:6c:1e:08:fb:8f:33:1c:d3:f7:38:bf:9e:b0:29: 39:76:dd:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnnpC1YQ6xUe4xgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MDc4NDM0YTItY2UyMS00YjIxLWE4MmQtNTNmY2Q2MWI1Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjhHnHJwqQiplr13v0UVX0QtRuCsjJO0W4Vf zomMwbkl1hFHp9lWjlT3fBJr+yqgRU+Lpls7BU8kWFFfHPRrSELqiHTflpPGkOvE YzpciTxwm4fiFrqHl+IqFC70dQ5ypWfQz7oFdhYCFjnUm8WlKznDxHZXar8E3xB5 4BHdhUcIR13dOTT5Bo7boUI4vOd1cNfNv+cuuUGuxpA7HxBt6ohsKkpIGzCk6YvL fTrmuHPOOE/bRRWgpIsdMSBg4eWv8+lWy/LKMnpbpYepoeQqwUI0CZVpwyA1h5Qy lROrcPZXOSo/QY3oo0lW9MCGxak86iPamjTcb61TDAtRvv/4pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIYaeVFcQ2ILNfDu5VRA9BXZBdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYTdjYjQxNDktZWE4Yi0z ZDBlLTgwNzItMWU1ZmNlMjdjNmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DoCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgEI4M3ah3wkId/n+U4SSct0yAu+iBiI4DO9Zn9DSDvr7ErpBGSg92l InpvsSsmgtzIWR1QuYfl+EbYtwON0fNegPUrFyE+9JPke4tuNUJeGZIom7jR7EwT qNPZsVGbE0eofi3DU4eDIHm+mswOGweKvZl0yb9M/RnbrYYwytaXqrL4LOmmg7xt D9T8tlNJEEQoDOQAsy5HIO5NfgQGbL+D1wQepMesiAxgyMwnSC0IzRkwrBPduSm/ Cq+HDF07OTG/ZPT8KCBg0rWw/7ecHlrcdoNdM/a1Y//30MFpgH+1gMlfxFj2Hx6l Gtw/1tVsHgj7jzMc0/c4v56wKTl23V0= -----END CERTIFICATE-----Generated at Sun Sep 20 18:40:52 2026 by rpki-client