$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa File: 80176c29-2db4-33cf-b400-b52a4a80cd03.roa (raw, json) Hash identifier: gNa1kK+K20WrfOBamTj2X3cqy7Mgqg0Z/fHhTeY7T4Q= Subject key identifier: 45:34:3D:EA:39:99:B3:46:5C:22:37:56:01:B0:D8:4B:81:2D:BB:46 Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Certificate serial: 010D0C9F4328584F093CDBD8FE3E664D24B1D580 Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 208.71.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:db:d8:fe:3e:66:4d:24:b1:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=ebd6b16f-9b5f-4079-bd95-7bfdfc3be17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:53:21:f6:f1:dd:04:cc:16:42:dc:22:b8:c1: 6c:d2:13:20:1c:63:1e:4f:1f:0f:64:3d:ef:d0:50: 88:fd:5b:82:c1:35:6f:d6:42:59:08:23:8d:06:23: f6:22:a8:e4:4a:a8:56:ee:ed:89:5d:46:2f:d7:21: b9:fe:85:9e:fe:40:25:3b:6e:02:c2:8f:8e:91:ce: 38:51:84:64:c7:d1:d3:dd:65:71:61:bf:e0:c3:62: 0f:6b:d5:c3:88:78:1c:16:86:ad:4c:87:7d:51:49: b5:be:75:a2:1f:5c:06:c1:63:c2:4f:e3:3a:68:92: 83:4a:7b:1d:b3:b5:26:fc:c0:fe:8a:e3:67:c5:a4: b4:a4:d1:fe:c9:ec:2c:05:55:06:57:4d:01:18:82: 68:39:a2:1c:d7:83:d7:c3:aa:ed:8d:e9:f4:2d:b7: 52:75:5d:36:9d:bd:8d:17:2c:fc:d8:91:04:71:ac: 05:90:cd:6a:cd:ea:95:63:1d:44:f8:68:31:ed:fd: f2:bc:34:8a:7b:3b:18:41:28:92:99:7c:a7:ca:bf: cd:6e:d3:e9:31:1c:b1:bc:01:74:ba:48:80:6d:89: 8e:12:d7:76:39:9c:f6:79:8f:ee:3e:5a:ae:c9:15: fe:a9:11:6e:0b:91:e3:52:c7:e6:4d:64:77:42:15: ea:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:34:3D:EA:39:99:B3:46:5C:22:37:56:01:B0:D8:4B:81:2D:BB:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl X509v3 Authority Key Identifier: keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer sbgp-ipAddrBlock: critical IPv4: 208.71.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:25:7e:9b:9d:33:65:fa:a4:c5:0f:0b:e6:b7:32:e9:fe:d4: ec:b9:78:2f:48:ad:d6:f1:b4:2e:a5:9f:d8:10:95:bf:68:7c: ff:d9:33:43:4a:a5:1f:1d:1f:d8:6c:44:60:9a:2d:7a:ea:ad: 3b:e5:39:75:8b:3a:87:5b:ba:75:48:8c:07:b3:70:25:03:da: c8:e3:69:a1:0b:8a:54:65:46:8c:c7:a1:ce:56:3f:4d:50:b6: 1f:2e:c3:ee:e1:62:b6:0d:d5:0e:33:9a:27:25:d7:5b:7e:11: 2e:de:4d:51:3f:25:bb:80:a5:a9:f5:cd:c6:21:2c:c7:75:66: b5:c8:39:ec:01:e9:6b:56:d7:aa:56:38:54:b9:24:9b:cf:e3: 33:a5:32:b5:1f:9e:93:3a:ba:9b:09:fc:b5:a6:ee:c0:d6:de: e4:bd:14:23:aa:ef:08:63:a1:7b:49:f8:38:c9:29:df:6b:75: 59:7c:6e:77:f7:3f:59:8e:56:75:d9:bc:7f:c8:fb:1a:8f:b0: 53:f3:df:4f:7c:c3:28:da:66:b9:03:c6:e6:d8:dc:42:d6:de: 31:f4:53:1e:99:6a:66:8c:7f:60:83:44:9b:4b:2b:50:27:9b: 37:84:b1:38:e7:3f:48:b5:53:70:d0:59:f7:46:66:20:db:c6: ee:64:69:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNvY/j5mTSSx1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYw NTdhMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZWJkNmIxNmYtOWI1Zi00MDc5LWJkOTUtN2JmZGZjM2JlMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FMh9vHdBMwWQtwiuMFs0hMgHGMeTx8PZD3v 0FCI/VuCwTVv1kJZCCONBiP2IqjkSqhW7u2JXUYv1yG5/oWe/kAlO24Cwo+Okc44 UYRkx9HT3WVxYb/gw2IPa9XDiHgcFoatTId9UUm1vnWiH1wGwWPCT+M6aJKDSnsd s7Um/MD+iuNnxaS0pNH+yewsBVUGV00BGIJoOaIc14PXw6rtjen0LbdSdV02nb2N Fyz82JEEcawFkM1qzeqVYx1E+Ggx7f3yvDSKezsYQSiSmXynyr/NbtPpMRyxvAF0 ukiAbYmOEtd2OZz2eY/uPlquyRX+qRFuC5HjUsfmTWR3QhXqbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEU0Peo5mbNGXCI3VgGw2EuBLbtGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZl MzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvODAxNzZjMjktMmRiNC0z M2NmLWI0MDAtYjUyYTRhODBjZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JmZTMzYTgtNjFiOC00ZTNkLWFj NzUtNmEzY2RlMmYwNTdhL2NiZmUzM2E4LTYxYjgtNGUzZC1hYzc1LTZhM2NkZTJm MDU3YS5jcmwwHwYDVR0jBBgwFoAUBj/6j7Ngvw6CCzIXp8vTb1pEE6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNj ZGUyZjA1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EcWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFslfpudM2X6pMUPC+a3Mun+1Oy5eC9IrdbxtC6ln9gQlb9ofP/ZM0NK pR8dH9hsRGCaLXrqrTvlOXWLOodbunVIjAezcCUD2sjjaaELilRlRozHoc5WP01Q th8uw+7hYrYN1Q4zmicl11t+ES7eTVE/JbuApan1zcYhLMd1ZrXIOewB6WtW16pW OFS5JJvP4zOlMrUfnpM6upsJ/LWm7sDW3uS9FCOq7whjoXtJ+DjJKd9rdVl8bnf3 P1mOVnXZvH/I+xqPsFPz3098wyjaZrkDxubY3ELW3jH0Ux6ZamaMf2CDRJtLK1An mzeEsTjnP0i1U3DQWfdGZiDbxu5kaYU= -----END CERTIFICATE-----Generated at Wed Sep 23 02:13:27 2026 by rpki-client