$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa File: a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa (raw, json) Hash identifier: TP5bWjMYMPabwHjx1JKHDAGuZyzB2PhbJ/c1aI8M6AM= Subject key identifier: D3:7F:5B:44:53:F9:93:FE:40:CF:BC:5F:DF:04:D5:E0:69:32:C2:82 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584F4973D7413A37A90D402FDD80 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40948 IP address blocks: 208.95.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d7:41:3a:37:a9:0d:40:2f:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bb0d08f6-6394-4bda-96a6-8991bb5c9e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3a:49:77:45:24:cc:25:21:44:17:d8:83:4f: 3b:4f:f8:0c:8d:c4:77:c5:f9:3b:4e:e4:79:5d:ea: bb:c0:83:1f:bf:0d:d2:04:95:d7:6a:39:3d:0f:ec: d4:95:eb:52:45:1b:1d:a5:75:c2:93:a1:b3:30:9c: ad:60:2e:a5:ab:6b:ff:5d:cc:e2:7d:2a:bd:75:f3: 76:16:4d:56:8d:91:ea:9a:0e:19:00:cd:09:93:41: d3:2b:ef:82:c5:96:af:91:f4:64:41:17:5a:c9:9b: 4a:e3:82:17:50:cc:b5:81:9d:5c:31:53:eb:b8:87: 6b:05:28:8d:48:64:2d:e0:fb:63:3d:4c:d5:ee:d6: 21:e0:f1:dd:9f:27:4f:f9:6e:05:f6:a7:a2:66:76: 57:ef:2f:9a:41:53:84:35:0f:5d:bd:d2:75:22:6f: 4a:ac:b5:c7:52:21:81:34:97:72:02:e3:6e:7a:8b: b1:15:ab:9a:0a:2e:13:73:08:c6:c7:8e:da:f6:8a: 27:c2:6d:ce:b6:59:ef:dc:0a:11:7b:5e:2d:cf:14: 57:dc:2a:66:fd:3a:31:f8:c1:58:f7:e6:19:4d:a6: 30:10:0b:ab:14:fc:ab:bc:ec:bd:23:38:e8:29:a5: 9a:3b:d5:db:96:df:5f:ca:7a:1c:14:33:32:e6:0e: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7F:5B:44:53:F9:93:FE:40:CF:BC:5F:DF:04:D5:E0:69:32:C2:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/a51f50e4-d7c7-39e0-8681-0097fd2c84c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 208.95.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:2e:4c:09:79:07:8b:7c:66:b9:62:21:07:bc:d5:06:49:49: d0:ea:86:bd:d7:ac:70:7b:48:08:ce:2e:c6:f0:4f:40:11:7a: 67:1e:9b:29:4e:e8:db:11:37:14:ea:13:03:04:81:9b:57:75: 62:24:62:5d:ec:88:3c:d3:8d:2a:f3:d8:f8:a6:c0:b7:d2:93: 1c:9f:ad:e2:dd:4f:87:02:c8:c9:13:35:d5:2a:23:c0:8d:dc: be:c4:6f:39:fd:78:1d:05:54:14:2c:9d:d4:3a:d8:e5:18:1a: bf:7d:5b:35:f3:7d:81:21:6b:7a:2f:fb:51:a5:d1:20:bf:46: 31:66:2f:5a:c8:98:56:3a:74:69:8e:e9:c5:4e:bd:ff:28:6b: b9:c7:9d:60:b8:04:d4:ca:1a:47:20:d6:34:7a:6d:1d:db:52: 24:82:95:c7:2b:c9:3a:63:f0:f8:1e:66:55:81:92:2d:3a:a6: bc:98:12:0b:98:0a:82:34:95:7f:e3:d0:b2:de:3a:ac:f4:aa: d7:db:8f:26:87:61:ce:09:99:1e:58:b8:b4:d1:eb:52:5a:38: 4d:15:d4:75:c4:84:3e:e2:7c:5c:f2:46:cf:11:b7:12:73:5f: 7c:5b:ee:29:4e:4d:ea:5d:d5:9a:e8:e0:6c:c9:f7:17:fc:78: bb:c9:6f:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc9dBOjepDUAv3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmIwZDA4ZjYtNjM5NC00YmRhLTk2YTYtODk5MWJiNWM5ZThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzpJd0UkzCUhRBfYg087T/gMjcR3xfk7TuR5 Xeq7wIMfvw3SBJXXajk9D+zUletSRRsdpXXCk6GzMJytYC6lq2v/XczifSq9dfN2 Fk1WjZHqmg4ZAM0Jk0HTK++CxZavkfRkQRdayZtK44IXUMy1gZ1cMVPruIdrBSiN SGQt4PtjPUzV7tYh4PHdnydP+W4F9qeiZnZX7y+aQVOENQ9dvdJ1Im9KrLXHUiGB NJdyAuNueouxFauaCi4TcwjGx47a9oonwm3Otlnv3AoRe14tzxRX3Cpm/Tox+MFY 9+YZTaYwEAurFPyrvOy9IzjoKaWaO9Xblt9fynocFDMy5g4zmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNN/W0RT+ZP+QM+8X98E1eBpMsKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvYTUxZjUwZTQtZDdjNy0z OWUwLTg2ODEtMDA5N2ZkMmM4NGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0F/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkuTAl5B4t8ZrliIQe81QZJSdDqhr3XrHB7SAjOLsbwT0ARemcemylO 6NsRNxTqEwMEgZtXdWIkYl3siDzTjSrz2PimwLfSkxyfreLdT4cCyMkTNdUqI8CN 3L7Ebzn9eB0FVBQsndQ62OUYGr99WzXzfYEha3ov+1Gl0SC/RjFmL1rImFY6dGmO 6cVOvf8oa7nHnWC4BNTKGkcg1jR6bR3bUiSClccryTpj8PgeZlWBki06pryYEguY CoI0lX/j0LLeOqz0qtfbjyaHYc4JmR5YuLTR61JaOE0V1HXEhD7ifFzyRs8RtxJz X3xb7ilOTepd1Zro4GzJ9xf8eLvJbxA= -----END CERTIFICATE-----Generated at Sun Sep 27 00:12:54 2026 by rpki-client