$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa File: 0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa (raw, json) Hash identifier: ek1C7YGrFkWPt9YT9xUj5+NKqPJkRHPBtSzTvH9e/iQ= Subject key identifier: E2:1F:D2:AC:FA:9C:DE:8F:D6:6B:C9:A9:84:87:32:84:22:75:36:F8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F00DCCB8BB4453614B10343C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 64.237.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:cb:8b:b4:45:36:14:b1:03:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=86ee7851-413f-4eb3-a971-299269fe82c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fa:81:7f:e4:9c:61:6c:c3:f6:e8:e2:61:d9: 96:94:d8:6f:d0:eb:52:52:80:a5:d5:bc:c4:35:ca: 22:b0:63:19:8a:f1:80:4d:6d:ac:37:c0:42:c6:93: 0a:af:8d:cb:16:dc:30:2f:c5:2a:b5:be:ab:ba:9c: a4:2b:7b:98:0b:c9:ae:81:d0:ae:43:c7:8c:11:b4: 63:dd:a2:49:fa:01:fc:9e:a8:a3:6a:0c:a0:8c:b1: 15:35:45:43:05:86:bd:ec:83:38:72:bf:45:fe:82: ec:4f:67:b8:5b:24:ed:bf:fb:9f:07:51:38:72:d3: 7d:3c:03:1e:e0:a2:f3:da:bb:3c:6c:5d:76:17:6f: b1:9c:2a:93:6f:30:2d:26:b4:95:88:9b:96:3d:32: e3:64:e2:96:6d:07:97:a9:2b:df:a3:4b:c4:4e:53: 7d:8c:b0:75:6e:09:13:a9:5d:aa:7e:c1:a7:ac:59: 98:e4:04:2a:ce:4a:bc:07:c9:df:a6:5f:57:7c:44: 40:6f:ea:46:f3:55:3b:b6:1c:bf:8f:1e:86:bc:6b: ce:2b:56:9f:f0:a0:f6:e0:02:ca:0d:ab:a6:bb:de: e2:8f:87:a2:60:10:76:95:55:75:b9:e6:1f:c3:2c: eb:39:b7:c8:0f:2d:f8:82:b3:38:11:1a:5e:32:08: 73:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1F:D2:AC:FA:9C:DE:8F:D6:6B:C9:A9:84:87:32:84:22:75:36:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 64.237.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8e:22:47:39:80:5a:b6:83:63:fb:26:ff:3d:b8:65:6c:05: 52:d7:10:52:95:45:4b:01:f9:de:d0:c6:d4:9c:19:8c:98:a9: f8:69:4c:9f:7a:33:a7:06:ee:35:36:5b:d4:0a:35:52:4a:9e: 00:a3:9f:2a:f0:e2:25:6e:c3:8a:71:64:38:3a:76:5f:8c:b0: 1d:e5:1f:bb:b2:60:78:57:16:43:c8:1d:2a:df:90:35:fe:6c: fa:fd:9c:3b:0e:13:b3:f5:ed:5c:89:8c:59:b0:ae:5a:81:30: ed:b2:1a:fa:5e:32:e8:af:fa:52:06:e1:f8:c2:6c:cb:91:5f: 36:3d:cc:62:23:1c:7b:a2:f6:be:52:a5:52:85:62:10:ad:52: 01:f6:6d:9e:19:2a:86:1b:b2:83:db:0f:64:d6:34:4f:ea:30: b3:fe:55:c2:0a:f1:06:f6:2a:1f:ae:ee:9c:80:84:08:49:cd: 88:5e:18:c3:37:20:47:7d:7c:44:35:2e:3b:32:91:72:db:57: ba:5e:ea:4b:22:8f:6e:b1:9a:df:f1:cc:a1:c4:01:f8:93:19: d9:ce:8f:ed:be:a4:06:3b:4b:0c:5a:ca:f5:10:b0:4a:e6:cc: e0:86:c2:66:4d:6b:c8:c1:da:b5:07:c4:2a:ab:8d:5b:d2:9f: cd:17:12:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3MuLtEU2FLEDQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk ODZlZTc4NTEtNDEzZi00ZWIzLWE5NzEtMjk5MjY5ZmU4MmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPqBf+ScYWzD9ujiYdmWlNhv0OtSUoCl1bzE NcoisGMZivGATW2sN8BCxpMKr43LFtwwL8Uqtb6rupykK3uYC8mugdCuQ8eMEbRj 3aJJ+gH8nqijagygjLEVNUVDBYa97IM4cr9F/oLsT2e4WyTtv/ufB1E4ctN9PAMe 4KLz2rs8bF12F2+xnCqTbzAtJrSViJuWPTLjZOKWbQeXqSvfo0vETlN9jLB1bgkT qV2qfsGnrFmY5AQqzkq8B8nfpl9XfERAb+pG81U7thy/jx6GvGvOK1af8KD24ALK Daumu97ij4eiYBB2lVV1ueYfwyzrObfIDy34grM4ERpeMghzXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIf0qz6nN6P1mvJqYSHMoQidTb4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGZiOGE4ZGItZGZkOC0z ZjM2LWFmODctM2NjYzk3Nzc4ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyOIkc5gFq2g2P7Jv89uGVsBVLXEFKVRUsB+d7QxtScGYyYqfhpTJ96 M6cG7jU2W9QKNVJKngCjnyrw4iVuw4pxZDg6dl+MsB3lH7uyYHhXFkPIHSrfkDX+ bPr9nDsOE7P17VyJjFmwrlqBMO2yGvpeMuiv+lIG4fjCbMuRXzY9zGIjHHui9r5S pVKFYhCtUgH2bZ4ZKoYbsoPbD2TWNE/qMLP+VcIK8Qb2Kh+u7pyAhAhJzYheGMM3 IEd9fEQ1LjsykXLbV7pe6ksij26xmt/xzKHEAfiTGdnOj+2+pAY7SwxayvUQsErm zOCGwmZNa8jB2rUHxCqrjVvSn80XEuc= -----END CERTIFICATE-----Generated at Thu Sep 24 22:57:23 2026 by rpki-client