$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa File: 90a9dec8-a24a-3de0-9901-58e74af63e3e.roa (raw, json) Hash identifier: LLzfDSgNd+Ns4l7m2JZ6g8GqJ9+ZRmnjVXcf5/HyQ7o= Subject key identifier: 1D:B8:D0:49:F5:4B:68:E7:B8:62:6F:51:1E:8F:01:0D:89:40:B2:4D Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584F6F230758CCEB5B32910E9B00 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 22147 IP address blocks: 208.118.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:07:58:cc:eb:5b:32:91:0e:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=8ee06070-f8bd-408d-8d25-dfa6d282eb86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3c:c5:3d:93:16:7c:3d:53:a3:25:f6:32:a2: 13:aa:49:d4:22:3f:df:28:98:81:1c:c0:ee:c0:e2: 70:5d:fb:6d:7e:c7:8b:ad:6d:4c:80:dc:d5:b4:b4: d5:35:f7:24:bb:9c:a2:8e:52:9a:2d:bf:06:f2:bb: 4e:59:23:a9:fb:cc:ad:62:59:5e:8e:e9:5c:5e:fc: 74:fb:5a:a2:f4:40:6e:80:1e:04:85:8f:b9:1b:94: 7b:06:60:e9:5b:81:81:61:27:33:94:a4:fc:17:1a: fb:16:97:14:59:a6:42:be:70:c9:df:a1:32:d5:90: 63:6d:11:7f:f9:1c:2a:0f:57:3f:0b:ec:c6:b3:90: db:f5:3d:02:dd:33:fa:45:60:6c:16:78:f8:74:d9: 24:3f:fb:15:60:34:a0:0f:a5:24:0d:a3:e6:ba:c5: 4d:54:9c:5a:c3:66:63:39:02:8e:2f:1b:69:ad:c8: 23:23:6d:dc:26:8d:47:91:6b:ae:a8:be:8e:0b:92: 5a:c1:dd:5e:67:c7:8b:0d:f1:04:72:8d:65:08:7e: a7:dc:73:77:a3:28:89:35:c6:b3:b5:da:52:13:d1: c5:30:bb:82:67:d8:73:0e:3c:8c:70:78:b8:fe:6b: 4c:49:56:3e:7a:89:a2:a1:a5:fa:4e:77:62:17:95: 75:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B8:D0:49:F5:4B:68:E7:B8:62:6F:51:1E:8F:01:0D:89:40:B2:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d1:a7:90:95:42:46:09:93:3e:ea:40:5a:8c:8f:79:bf:f2: 32:9b:08:ae:06:0d:88:ed:3a:91:bb:ac:e9:5a:9b:b7:0e:7a: d5:90:f9:8f:13:81:64:05:4d:df:f5:1c:d7:cf:5b:2d:69:92: aa:84:b6:0a:bf:f9:b1:22:ff:3d:5a:ff:dc:a3:0d:b5:02:0c: 4a:0a:ec:49:1e:7f:fd:3c:f8:7a:a6:73:02:fa:37:c3:6a:45: 55:05:a7:29:63:4b:bf:5b:72:52:2b:6f:5c:b2:f7:3d:f2:23: 15:d9:52:8a:43:2d:23:ee:43:c7:74:4c:57:a8:57:1b:f3:58: 00:ea:eb:a4:7c:56:0f:1d:98:0a:0f:04:98:ab:7a:4b:4d:34: f3:e9:54:8f:91:d3:25:00:bb:60:ba:74:b9:f6:71:04:b4:4a: 46:37:6e:37:9a:bd:31:8a:cb:b3:c2:9b:2b:a5:2e:8e:d1:81: 90:25:dd:a6:5d:bc:7a:f1:ed:f5:21:e9:b0:16:0e:32:de:d9: f4:84:a7:f6:59:78:63:15:79:75:d1:1f:73:9d:5a:4b:7c:44: 62:0a:5b:09:49:14:09:17:2a:2b:5c:ce:a5:89:8b:80:84:d7: e7:36:09:51:a2:40:be:25:98:3e:92:db:d6:84:0f:48:4b:f9: a5:21:ec:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIwdYzOtbMpEOmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk OGVlMDYwNzAtZjhiZC00MDhkLThkMjUtZGZhNmQyODJlYjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjzFPZMWfD1ToyX2MqITqknUIj/fKJiBHMDu wOJwXfttfseLrW1MgNzVtLTVNfcku5yijlKaLb8G8rtOWSOp+8ytYllejulcXvx0 +1qi9EBugB4EhY+5G5R7BmDpW4GBYSczlKT8Fxr7FpcUWaZCvnDJ36Ey1ZBjbRF/ +RwqD1c/C+zGs5Db9T0C3TP6RWBsFnj4dNkkP/sVYDSgD6UkDaPmusVNVJxaw2Zj OQKOLxtprcgjI23cJo1HkWuuqL6OC5Jawd1eZ8eLDfEEco1lCH6n3HN3oyiJNcaz tdpSE9HFMLuCZ9hzDjyMcHi4/mtMSVY+eomioaX6TndiF5V11QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB240En1S2jnuGJvUR6PAQ2JQLJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvOTBhOWRlYzgtYTI0YS0z ZGUwLTk5MDEtNThlNzRhZjYzZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HbuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnRp5CVQkYJkz7qQFqMj3m/8jKbCK4GDYjtOpG7rOlam7cOetWQ+Y8T gWQFTd/1HNfPWy1pkqqEtgq/+bEi/z1a/9yjDbUCDEoK7Ekef/08+HqmcwL6N8Nq RVUFpyljS79bclIrb1yy9z3yIxXZUopDLSPuQ8d0TFeoVxvzWADq66R8Vg8dmAoP BJirektNNPPpVI+R0yUAu2C6dLn2cQS0SkY3bjeavTGKy7PCmyulLo7RgZAl3aZd vHrx7fUh6bAWDjLe2fSEp/ZZeGMVeXXRH3OdWkt8RGIKWwlJFAkXKitczqWJi4CE 1+c2CVGiQL4lmD6S29aED0hL+aUh7PQ= -----END CERTIFICATE-----Generated at Sun Oct 11 23:47:32 2026 by rpki-client