$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3cad8533-e32e-3054-ba93-3b327624a170.roa File: 3cad8533-e32e-3054-ba93-3b327624a170.roa (raw, json) Hash identifier: gBk5ezF7q4pMqo7uI2PZOKC1NYezH4WFFCrxXJtxit0= Subject key identifier: AF:D7:33:82:07:CF:14:58:94:F5:00:AD:D6:F3:96:C3:93:6B:D8:C0 Certificate issuer: /CN=3d1c553d-7b57-40d6-a02c-deff888b678d Certificate serial: 010D0C9F4328584F4973E78E50E52DD979D82300 Authority key identifier: C3:50:10:57:56:61:51:2F:FA:51:AD:FB:AC:E7:E9:57:3C:D5:7D:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3cad8533-e32e-3054-ba93-3b327624a170.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 64.65.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:e7:8e:50:e5:2d:d9:79:d8:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d1c553d-7b57-40d6-a02c-deff888b678d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c98c84c2-3045-4614-8e68-e71f47d19c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d2:5d:52:12:c5:31:e6:14:3d:bb:03:42:65: 8c:cc:bb:d8:5a:34:e5:e9:3a:55:e0:3b:c7:40:8b: 70:b3:a7:e7:23:f7:66:d7:0d:8a:f5:10:25:5d:d0: e7:cb:dd:91:c0:39:77:b0:8a:ec:4f:07:ed:5f:e7: 66:69:75:f3:64:29:79:09:63:c3:6b:80:aa:6f:b5: 4f:be:12:03:ae:d2:77:e9:28:2d:4c:e4:fe:e3:51: 25:7f:ae:fe:0d:00:bb:af:48:33:e2:9f:49:9b:85: 91:70:b5:8e:8e:54:65:28:56:53:06:c8:35:84:e4: be:d8:90:7b:32:d0:55:fe:ce:68:d1:d4:d8:be:79: 59:36:85:68:b7:3f:6c:9e:73:da:3a:d2:b3:20:f7: 20:73:a8:be:90:b7:5f:22:9c:32:25:20:03:af:b5: d6:ca:96:e8:e7:8b:e0:6c:17:bd:e8:eb:f2:c9:e5: d3:22:d7:51:95:d0:36:1f:93:06:87:6c:e9:30:31: 5f:b8:13:4d:2b:66:44:e4:68:88:bd:9b:b5:c8:a1: 14:28:6d:d4:3e:f8:08:6f:37:69:3d:6d:71:04:4e: 67:4b:09:04:27:81:cf:50:cc:51:94:e9:aa:d7:93: d7:a4:08:62:44:ef:33:f9:cd:07:0a:9e:bd:43:56: 58:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D7:33:82:07:CF:14:58:94:F5:00:AD:D6:F3:96:C3:93:6B:D8:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3cad8533-e32e-3054-ba93-3b327624a170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.crl X509v3 Authority Key Identifier: keyid:C3:50:10:57:56:61:51:2F:FA:51:AD:FB:AC:E7:E9:57:3C:D5:7D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer sbgp-ipAddrBlock: critical IPv4: 64.65.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e5:da:4f:d9:9d:51:f0:1a:87:bd:14:dd:6b:57:d2:a3:ec: c7:11:36:28:13:10:9a:9e:5a:0c:35:8a:53:29:9b:0a:87:30: cb:8b:b1:11:a5:af:6c:a5:b3:c4:f9:4a:eb:82:ad:a2:a6:e5: a1:6f:1b:64:cf:71:4e:30:71:2e:b0:1d:36:31:d7:02:35:19: 4a:6d:4f:bf:41:d7:51:b0:47:c5:48:1c:47:bc:18:e9:19:68: a6:51:b5:56:97:bc:b7:ec:7e:39:4c:55:d3:94:dc:41:9e:b0: 02:e5:d2:53:42:47:92:4d:40:13:e6:cf:36:f7:fe:66:79:32: 00:a1:34:76:72:49:09:53:a5:74:41:e1:8e:b3:b7:e0:e7:b2: eb:ca:7b:c3:6b:f0:57:53:39:a1:cc:e7:05:70:eb:7a:c6:44: d3:81:c3:2f:56:81:9b:90:48:2e:3f:9d:2b:98:6f:06:55:b0: 3e:76:06:5a:2c:48:9c:b2:52:af:41:7f:58:c2:f6:75:9c:a6: 17:f7:18:de:82:df:4f:99:19:dd:2b:4c:cd:ba:5b:f7:58:6b: a6:1c:cd:81:59:51:1e:b3:6c:b7:00:d3:d3:28:75:a4:a2:67: 37:08:47:6f:ef:bf:9c:28:0f:84:1d:b6:60:f2:9e:71:4a:92: 1d:fe:e0:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+eOUOUt2XnYIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxYzU1M2QtN2I1Ny00MGQ2LWEwMmMtZGVmZjg4OGI2 NzhkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzk4Yzg0YzItMzA0NS00NjE0LThlNjgtZTcxZjQ3ZDE5YzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdJdUhLFMeYUPbsDQmWMzLvYWjTl6TpV4DvH QItws6fnI/dm1w2K9RAlXdDny92RwDl3sIrsTwftX+dmaXXzZCl5CWPDa4Cqb7VP vhIDrtJ36SgtTOT+41Elf67+DQC7r0gz4p9Jm4WRcLWOjlRlKFZTBsg1hOS+2JB7 MtBV/s5o0dTYvnlZNoVotz9snnPaOtKzIPcgc6i+kLdfIpwyJSADr7XWypbo54vg bBe96OvyyeXTItdRldA2H5MGh2zpMDFfuBNNK2ZE5GiIvZu1yKEUKG3UPvgIbzdp PW1xBE5nSwkEJ4HPUMxRlOmq15PXpAhiRO8z+c0HCp69Q1ZYawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/XM4IHzxRYlPUArdbzlsOTa9jAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zZDFj NTUzZC03YjU3LTQwZDYtYTAyYy1kZWZmODg4YjY3OGQvM2NhZDg1MzMtZTMyZS0z MDU0LWJhOTMtM2IzMjc2MjRhMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2QxYzU1M2QtN2I1Ny00MGQ2LWEw MmMtZGVmZjg4OGI2NzhkLzNkMWM1NTNkLTdiNTctNDBkNi1hMDJjLWRlZmY4ODhi Njc4ZC5jcmwwHwYDVR0jBBgwFoAUw1AQV1ZhUS/6Ua37rOfpVzzVfZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zZDFjNTUzZC03YjU3LTQwZDYtYTAyYy1kZWZm ODg4YjY3OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEE9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/l2k/ZnVHwGoe9FN1rV9Kj7McRNigTEJqeWgw1ilMpmwqHMMuLsRGl r2yls8T5SuuCraKm5aFvG2TPcU4wcS6wHTYx1wI1GUptT79B11GwR8VIHEe8GOkZ aKZRtVaXvLfsfjlMVdOU3EGesALl0lNCR5JNQBPmzzb3/mZ5MgChNHZySQlTpXRB 4Y6zt+DnsuvKe8Nr8FdTOaHM5wVw63rGRNOBwy9WgZuQSC4/nSuYbwZVsD52Blos SJyyUq9Bf1jC9nWcphf3GN6C30+ZGd0rTM26W/dYa6YczYFZUR6zbLcA09ModaSi ZzcIR2/vv5woD4QdtmDynnFKkh3+4Bc= -----END CERTIFICATE-----Generated at Sat Oct 3 11:33:57 2026 by rpki-client