$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa File: 78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa (raw, json) Hash identifier: cjuSHFmNO/4BdEg7WXkyVllkWa74GiPH3ap5JdpSqmc= Subject key identifier: 31:0C:6D:42:3B:CE:30:01:0F:A1:E9:33:EE:DD:2F:53:CA:68:D8:0B Certificate issuer: /CN=22a89d78-807f-48bb-8913-4e15f4878bfb Certificate serial: 010D0C9F4328584F119CEF4D6B3711980B729880 Authority key identifier: 41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 13786 IP address blocks: 207.135.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:ef:4d:6b:37:11:98:0b:72:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a89d78-807f-48bb-8913-4e15f4878bfb Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=828c8904-7540-4578-b670-b4cbd1237544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:e6:1e:f3:da:99:ae:14:f0:8f:e9:26:ed: 07:65:b3:ec:dc:54:5e:2c:9b:7b:8a:10:d2:7b:5e: cc:5a:69:4a:98:5c:8a:46:d5:9e:76:cd:2d:8b:f4: 04:ab:da:30:be:22:30:8b:04:d4:91:34:44:6c:b2: c4:b7:38:64:35:14:c0:6d:8a:b7:1c:01:b1:ef:3c: 45:eb:d1:2b:81:5c:cc:e4:82:d5:77:ec:31:5a:04: af:06:66:5f:68:60:a3:22:c0:86:72:88:fc:e4:0b: e6:14:c4:20:3e:c2:62:ee:b4:61:6e:f7:59:6c:4a: 3e:ae:84:ab:54:fd:d5:03:f8:e3:5d:8e:66:92:4d: 4f:be:8a:e8:2f:a1:62:1e:69:4a:67:21:e0:7a:53: fc:ff:9b:aa:46:4c:a5:4a:80:78:a6:f7:cc:b5:5f: dc:59:3c:96:9c:a1:78:e2:74:e9:b1:64:08:8a:5b: 89:cd:8f:6d:45:27:3a:32:27:86:c5:87:1f:39:ca: ff:76:37:74:a7:52:5a:eb:cb:bd:52:56:fd:bb:86: 52:e0:23:64:66:0f:44:cc:dc:57:5e:e3:72:6d:bb: a8:de:14:28:1d:32:f8:ff:24:55:6b:30:54:55:62: 96:49:87:29:5a:f4:c6:23:5b:51:fa:fe:2c:9b:b6: 9c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0C:6D:42:3B:CE:30:01:0F:A1:E9:33:EE:DD:2F:53:CA:68:D8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/78f1ad8c-30d4-3987-a88c-0b2e3312b96d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb/22a89d78-807f-48bb-8913-4e15f4878bfb.crl X509v3 Authority Key Identifier: keyid:41:26:61:4E:B6:7D:B9:81:05:C1:90:B7:DD:5F:F9:0D:32:E4:20:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22a89d78-807f-48bb-8913-4e15f4878bfb.cer sbgp-ipAddrBlock: critical IPv4: 207.135.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:90:f4:51:fd:c5:06:71:33:92:94:63:25:53:7d:f8:09:15: 35:a9:13:cc:54:40:1f:1b:05:4b:37:d8:bf:a8:c7:a7:65:b5: cd:bb:23:ab:24:7a:a5:a9:eb:59:8e:b0:a1:30:1d:5b:13:a5: d9:82:cf:0d:08:53:22:b6:33:81:e8:bb:5a:1f:1d:ed:23:28: 4a:8c:bb:11:a4:15:4f:96:a1:ed:de:8e:28:23:58:fe:4e:9a: cd:d1:21:51:4c:25:12:0e:38:59:a5:77:8e:9b:d7:5d:de:ce: 65:47:a4:75:5c:18:38:7a:05:f6:93:dd:ab:4e:43:8d:b0:42: 50:cf:73:c6:7b:a3:01:0b:28:e9:d7:50:ae:e5:40:4e:bb:87: 36:94:4b:1f:30:c3:ae:a9:c4:bf:2a:dd:dd:18:d9:50:df:cd: 61:70:04:ab:a4:a3:8b:38:b1:6b:c6:6a:1a:a7:6f:81:81:3f: 1f:97:64:e3:14:c6:83:af:7b:bb:10:ea:90:33:cd:7b:07:1d: a3:2e:1e:64:5e:62:00:dd:5e:9c:c2:29:ff:26:b9:31:77:e3: 02:8a:4e:3b:b3:b4:5f:49:da:d0:4d:89:6f:d2:06:b1:33:cc: 31:26:6d:90:25:d5:3a:48:05:8c:55:4f:cc:28:3a:5b:1d:2a: 12:3a:56:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnO9NazcRmAtymIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJhODlkNzgtODA3Zi00OGJiLTg5MTMtNGUxNWY0ODc4 YmZiMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ODI4Yzg5MDQtNzU0MC00NTc4LWI2NzAtYjRjYmQxMjM3NTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD7mHvPama4U8I/pJu0HZbPs3FReLJt7ihDS e17MWmlKmFyKRtWeds0ti/QEq9owviIwiwTUkTREbLLEtzhkNRTAbYq3HAGx7zxF 69ErgVzM5ILVd+wxWgSvBmZfaGCjIsCGcoj85AvmFMQgPsJi7rRhbvdZbEo+roSr VP3VA/jjXY5mkk1PvoroL6FiHmlKZyHgelP8/5uqRkylSoB4pvfMtV/cWTyWnKF4 4nTpsWQIiluJzY9tRSc6MieGxYcfOcr/djd0p1Ja68u9Ulb9u4ZS4CNkZg9EzNxX XuNybbuo3hQoHTL4/yRVazBUVWKWSYcpWvTGI1tR+v4sm7acZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEMbUI7zjABD6HpM+7dL1PKaNgLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMmE4 OWQ3OC04MDdmLTQ4YmItODkxMy00ZTE1ZjQ4NzhiZmIvNzhmMWFkOGMtMzBkNC0z OTg3LWE4OGMtMGIyZTMzMTJiOTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjJhODlkNzgtODA3Zi00OGJiLTg5 MTMtNGUxNWY0ODc4YmZiLzIyYTg5ZDc4LTgwN2YtNDhiYi04OTEzLTRlMTVmNDg3 OGJmYi5jcmwwHwYDVR0jBBgwFoAUQSZhTrZ9uYEFwZC33V/5DTLkICMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMmE4OWQ3OC04MDdmLTQ4YmItODkxMy00ZTE1 ZjQ4NzhiZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz4fQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaQ9FH9xQZxM5KUYyVTffgJFTWpE8xUQB8bBUs32L+ox6dltc27I6sk eqWp61mOsKEwHVsTpdmCzw0IUyK2M4Hou1ofHe0jKEqMuxGkFU+Woe3ejigjWP5O ms3RIVFMJRIOOFmld46b113ezmVHpHVcGDh6BfaT3atOQ42wQlDPc8Z7owELKOnX UK7lQE67hzaUSx8ww66pxL8q3d0Y2VDfzWFwBKuko4s4sWvGahqnb4GBPx+XZOMU xoOve7sQ6pAzzXsHHaMuHmReYgDdXpzCKf8muTF34wKKTjuztF9J2tBNiW/SBrEz zDEmbZAl1TpIBYxVT8woOlsdKhI6VqM= -----END CERTIFICATE-----Generated at Mon Sep 21 18:19:43 2026 by rpki-client