$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa File: 0436a35f-9148-3f28-8e51-98ce1b0011b0.roa (raw, json) Hash identifier: WMb9trEFUSIQ2S3ylTTF4NDxjX82zTED39X1MVQ/oZI= Subject key identifier: 16:C4:90:A5:52:9B:AA:EC:A8:50:9C:40:18:FE:85:C2:2B:0A:52:6D Certificate issuer: /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890 Certificate serial: 010D0C9F4328584F119CF4B081E0AED687AC3AC0 Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 13335 IP address blocks: 67.231.0.0/20 maxlen: 24 208.94.156.0/22 maxlen: 24 216.82.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f4:b0:81:e0:ae:d6:87:ac:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=c579192e-9e6b-4f32-bb13-e42485e85ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:7b:62:f0:ed:2b:99:f5:f5:d7:aa:63:b5: 88:2a:1b:27:b1:55:c8:e5:c6:ab:bd:76:1e:43:3c: 5a:8b:fb:02:1d:44:92:c6:1d:2d:8d:0f:06:ef:99: 8d:9e:68:92:c6:7d:91:e9:7d:00:a0:a8:51:e3:39: 29:b9:ea:64:0a:ae:89:c4:ec:86:fb:0b:70:65:b6: ab:7a:50:95:33:e1:9e:31:bf:ac:42:fb:49:19:b6: 88:71:94:8c:81:e7:7a:f3:01:23:d8:14:04:73:13: d4:e9:40:f2:77:48:f2:38:9b:68:6f:a6:8f:c3:24: 7f:c7:da:52:83:1e:0b:42:30:33:c3:b9:ed:ee:ba: 35:4c:43:c1:a9:a8:54:df:29:a7:b0:60:cc:ca:5d: 2f:cc:0a:7f:d3:32:64:2c:db:86:57:58:74:81:8c: 97:62:56:a0:32:c2:de:d6:3c:96:dd:22:e4:3d:cd: c3:f8:4c:71:3c:cb:f9:5f:e4:b3:89:a2:66:67:93: 72:f5:34:4d:53:38:3f:13:ba:ff:f8:74:ae:cf:87: a7:e7:fd:4c:93:66:7f:ac:dd:26:4e:41:10:f9:d9: 0e:9b:af:64:9d:0e:75:0b:5c:53:d2:5f:1c:94:ed: f4:28:3d:08:04:67:6b:c2:f2:d8:d9:ba:f0:d9:66: 9f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C4:90:A5:52:9B:AA:EC:A8:50:9C:40:18:FE:85:C2:2B:0A:52:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl X509v3 Authority Key Identifier: keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer sbgp-ipAddrBlock: critical IPv4: 67.231.0.0/20 208.94.156.0/22 216.82.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:96:99:62:36:5c:c5:b2:86:bc:c7:74:32:da:d0:35:98:10: 47:29:18:fd:75:75:8c:eb:e0:8a:13:64:ab:66:1a:71:44:ce: c5:00:f9:2f:98:44:83:11:2e:ae:5a:f0:af:0e:d5:73:72:c5: 9b:40:26:5e:60:94:be:53:bf:19:be:d9:c4:cc:38:33:6c:a1: e7:ce:e4:0e:03:25:a8:81:03:21:b5:dc:70:c6:08:3c:af:4f: db:59:4e:d4:2f:88:e1:bd:c3:c1:33:75:7b:7a:6e:63:78:1e: fa:4a:45:16:d7:e1:30:52:2d:2b:c1:5a:51:69:ca:d5:0e:85: cf:1c:ca:11:dc:91:73:6e:0d:11:a5:cf:fd:97:30:62:49:08: 7f:2c:85:53:00:c2:2e:99:12:e9:16:10:27:10:cd:b6:6a:4d: f7:fa:d2:30:7e:0a:f3:fa:a0:8f:93:ba:16:a6:7a:86:02:71: c0:2d:e2:55:54:82:12:b7:91:30:09:ed:49:7f:7a:5e:91:86: c0:99:07:17:5b:ef:79:f2:73:bf:ae:31:59:0e:5a:12:0a:9b: 7b:7e:a8:e8:69:48:2a:9a:7c:51:d9:c8:f0:d6:fe:5b:64:4b: a8:37:14:44:db:0f:04:01:37:d8:30:db:db:bc:25:b3:f6:88: fc:95:2a:55 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8RnPSwgeCu1oesOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGRiZTVlMmQtYjdmOC00ZGJhLWI5N2ItOGI2MTY0ZTgz ODkwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YzU3OTE5MmUtOWU2Yi00ZjMyLWJiMTMtZTQyNDg1ZTg1ZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo97YvDtK5n19deqY7WIKhsnsVXI5carvXYe Qzxai/sCHUSSxh0tjQ8G75mNnmiSxn2R6X0AoKhR4zkpuepkCq6JxOyG+wtwZbar elCVM+GeMb+sQvtJGbaIcZSMged68wEj2BQEcxPU6UDyd0jyOJtob6aPwyR/x9pS gx4LQjAzw7nt7ro1TEPBqahU3ymnsGDMyl0vzAp/0zJkLNuGV1h0gYyXYlagMsLe 1jyW3SLkPc3D+ExxPMv5X+SziaJmZ5Ny9TRNUzg/E7r/+HSuz4en5/1Mk2Z/rN0m TkEQ+dkOm69knQ51C1xT0l8clO30KD0IBGdrwvLY2brw2WaftwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBbEkKVSm6rsqFCcQBj+hcIrClJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJl NWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYxNjRlODM4OTAvMDQzNmEzNWYtOTE0OC0z ZjI4LThlNTEtOThjZTFiMDAxMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGRiZTVlMmQtYjdmOC00ZGJhLWI5 N2ItOGI2MTY0ZTgzODkwLzhkYmU1ZTJkLWI3ZjgtNGRiYS1iOTdiLThiNjE2NGU4 Mzg5MC5jcmwwHwYDVR0jBBgwFoAUzLDLOqY6j/oqVO/oyOtafTNgXAUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJlNWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYx NjRlODM4OTAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEQ+cAAwQC 0F6cAwQE2FLgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAI6WmWI2XMWyhrzHdDLa0DWYEEcpGP11dYzr4IoT ZKtmGnFEzsUA+S+YRIMRLq5a8K8O1XNyxZtAJl5glL5Tvxm+2cTMODNsoefO5A4D JaiBAyG13HDGCDyvT9tZTtQviOG9w8EzdXt6bmN4HvpKRRbX4TBSLSvBWlFpytUO hc8cyhHckXNuDRGlz/2XMGJJCH8shVMAwi6ZEukWECcQzbZqTff60jB+CvP6oI+T uhameoYCccAt4lVUghK3kTAJ7Ul/el6RhsCZBxdb73nyc7+uMVkOWhIKm3t+qOhp SCqafFHZyPDW/ltkS6g3FETbDwQBN9gw29u8JbP2iPyVKlU= -----END CERTIFICATE-----Generated at Mon Sep 21 14:20:12 2026 by rpki-client