$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3ea35b96-597f-3b36-948c-33ee92db08a6.roa File: 3ea35b96-597f-3b36-948c-33ee92db08a6.roa (raw, json) Hash identifier: VWGsz4oKd72XldIyP/lSLvoMA7v37PWBZUI5ByllHF0= Subject key identifier: FD:2C:10:5F:07:5E:BF:B0:B9:52:03:29:0C:21:3A:7B:0F:56:0A:5F Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1037A5C18F52F9E393C6D0C0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3ea35b96-597f-3b36-948c-33ee92db08a6.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 152.69.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:a5:c1:8f:52:f9:e3:93:c6:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=fe0af3db-ccd5-4bf0-ab39-be2cceca83a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:70:bd:77:f3:ac:da:2b:c9:b2:56:6f:d0:22: 03:72:fa:56:be:bb:38:fe:0f:cb:91:d1:f6:83:d6: 9f:1f:ca:a9:71:d8:bc:04:fc:42:8d:b9:ca:57:ad: 5d:9c:ee:fd:50:b4:4d:ad:74:01:57:4e:59:78:9d: f5:08:46:d6:e2:01:37:f5:e7:db:20:b3:a9:89:34: 3d:2a:ad:bf:7c:d7:23:1b:78:0b:cf:86:51:c6:0a: 5d:d5:d9:a2:5a:c1:e6:80:65:25:cd:2a:19:f6:28: c8:cb:db:c5:04:19:1e:c0:4f:e5:64:c1:ae:3e:d2: ca:aa:17:38:12:c7:ef:0e:a0:37:56:fc:9b:c1:84: 93:e4:48:04:5b:95:72:0d:2b:f3:db:51:cb:44:d7: 34:89:e3:10:70:ba:7d:71:b1:a8:e6:ff:ee:0f:c6: 42:43:46:96:13:d8:79:0f:2b:71:69:7f:1a:2c:96: 9f:f2:59:4b:e1:5c:27:d3:b3:28:bc:f5:99:31:ae: e4:c8:93:c5:51:c7:58:d2:cb:d9:7f:10:91:e3:f4: 0f:36:65:fb:cf:67:3f:9f:46:51:87:cd:43:f0:bb: b5:08:94:37:f4:62:f5:59:f1:60:d0:fc:49:e9:fa: f7:74:86:d3:ad:93:c2:82:f0:76:d3:56:78:a2:d2: 18:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2C:10:5F:07:5E:BF:B0:B9:52:03:29:0C:21:3A:7B:0F:56:0A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3ea35b96-597f-3b36-948c-33ee92db08a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 152.69.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ae:fb:f3:49:2b:fd:22:0f:ca:11:4a:d8:9f:f4:b2:25:a4: a9:26:28:c2:9b:51:ae:34:49:42:7d:44:5c:6f:a5:53:d8:a2: c8:62:c2:38:68:76:ca:bb:84:af:2b:2a:70:13:70:0b:4b:f1: b9:c4:0b:65:5c:c7:69:8c:64:ea:ef:14:32:c8:a1:e6:98:e8: 32:02:f3:08:a0:6e:07:bd:46:8d:a7:a3:fd:03:3c:b8:91:93: 83:29:05:d0:71:61:0f:ea:c7:66:31:ad:2d:e1:81:4f:5c:20: 05:64:7e:84:87:31:09:c9:bc:26:d5:73:d7:42:21:4e:93:77: 1e:d4:82:1d:ef:5d:8c:fc:4d:4c:c3:0b:3d:ca:6e:34:8e:02: d2:1f:23:eb:05:0c:0f:c7:af:6a:5c:ce:a7:e3:02:1a:9f:08: cb:c7:3c:f1:65:16:b2:98:db:9c:cd:7c:56:99:8f:aa:f6:ac: 4c:3a:b6:6a:4c:14:42:35:70:fb:ed:da:33:87:d9:09:2c:8c: 2b:04:fd:5a:a0:b7:2b:df:54:57:0d:86:4a:69:bf:b3:b2:36: d7:27:29:27:e5:e0:1a:ec:ed:77:42:77:9c:d4:1f:82:0b:8c: 42:c3:db:32:d8:4a:3e:a0:74:cc:cf:fe:09:d0:2b:4c:64:07: 7a:23:c9:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN6XBj1L545PG0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk ZmUwYWYzZGItY2NkNS00YmYwLWFiMzktYmUyY2NlY2E4M2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnC9d/Os2ivJslZv0CIDcvpWvrs4/g/LkdH2 g9afH8qpcdi8BPxCjbnKV61dnO79ULRNrXQBV05ZeJ31CEbW4gE39efbILOpiTQ9 Kq2/fNcjG3gLz4ZRxgpd1dmiWsHmgGUlzSoZ9ijIy9vFBBkewE/lZMGuPtLKqhc4 EsfvDqA3VvybwYST5EgEW5VyDSvz21HLRNc0ieMQcLp9cbGo5v/uD8ZCQ0aWE9h5 DytxaX8aLJaf8llL4Vwn07MovPWZMa7kyJPFUcdY0svZfxCR4/QPNmX7z2c/n0ZR h81D8Lu1CJQ39GL1WfFg0PxJ6fr3dIbTrZPCgvB201Z4otIY5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0sEF8HXr+wuVIDKQwhOnsPVgpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvM2VhMzViOTYtNTk3Zi0z YjM2LTk0OGMtMzNlZTkyZGIwOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCu+/NJK/0iD8oRStif9LIlpKkmKMKbUa40SUJ9RFxvpVPYoshiwjho dsq7hK8rKnATcAtL8bnEC2Vcx2mMZOrvFDLIoeaY6DIC8wigbge9Ro2no/0DPLiR k4MpBdBxYQ/qx2YxrS3hgU9cIAVkfoSHMQnJvCbVc9dCIU6Tdx7Ugh3vXYz8TUzD Cz3KbjSOAtIfI+sFDA/Hr2pczqfjAhqfCMvHPPFlFrKY25zNfFaZj6r2rEw6tmpM FEI1cPvt2jOH2QksjCsE/VqgtyvfVFcNhkppv7OyNtcnKSfl4Brs7XdCd5zUH4IL jELD2zLYSj6gdMzP/gnQK0xkB3ojyck= -----END CERTIFICATE-----Generated at Tue Sep 22 22:08:47 2026 by rpki-client