$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a9ff331-5183-36df-ab6d-01ae046643d7.roa File: 2a9ff331-5183-36df-ab6d-01ae046643d7.roa (raw, json) Hash identifier: CjL6TCRetFxwwaSmfneavFIpagNDX7uwPZpY2adPZ+w= Subject key identifier: FF:E8:B5:24:AC:31:A5:18:68:7A:DD:33:06:E6:B2:E5:F1:D4:FD:16 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F00DCCBEA935BB57E55047270 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a9ff331-5183-36df-ab6d-01ae046643d7.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 30036 IP address blocks: 64.237.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:cb:ea:93:5b:b5:7e:55:04:72:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=deded4ca-b56b-42de-a5c4-04d125f769c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f7:63:7c:3c:f1:07:44:26:f3:2a:a0:71:bd: a5:00:b0:76:94:db:a9:0e:f4:ca:36:b7:1f:5e:d0: cd:7e:2d:44:3f:64:57:26:c0:3d:0a:9b:81:cf:32: dd:de:40:cc:7a:e8:ab:48:e9:6e:14:14:b2:61:ad: 9f:28:e2:77:66:60:ec:80:64:62:5e:42:f2:0b:17: e5:1f:bd:ce:c9:66:24:3f:28:9c:e2:51:b8:79:82: eb:f5:7c:b7:8a:4a:b5:c6:c6:74:44:68:75:f8:c4: 29:3b:a1:86:ab:0e:d5:50:22:83:59:6f:6f:9d:4e: 97:07:bf:93:9a:ab:7d:52:63:4b:0c:38:4e:89:96: 6e:4b:7d:4f:50:15:73:84:11:2f:af:02:e8:f1:35: 1f:b2:0d:1b:a1:26:1f:df:cd:c3:50:11:2e:9c:5f: e9:19:36:96:cc:5f:9b:f7:6a:91:ea:86:4c:de:1c: 60:10:da:13:e0:bc:03:e6:8b:03:e8:0f:57:ad:2b: db:94:86:1c:4f:36:e2:c3:0d:50:d9:2f:90:88:e2: 0f:e1:4d:bb:26:03:5c:86:ec:55:b4:32:26:e5:df: 76:ed:1a:22:46:4b:50:b8:f1:8d:91:20:ab:a3:cc: c7:e3:71:95:2c:78:f9:86:d1:2e:78:11:72:ff:fa: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E8:B5:24:AC:31:A5:18:68:7A:DD:33:06:E6:B2:E5:F1:D4:FD:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a9ff331-5183-36df-ab6d-01ae046643d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 64.237.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a9:04:75:55:ed:df:1d:e6:42:04:a0:37:a5:bf:b0:80:88: 66:85:c4:75:94:a4:aa:f3:d2:a8:3e:be:57:c1:48:08:eb:d6: df:3d:72:d4:f0:5b:ab:51:ec:d6:ac:6d:b0:9c:de:c5:c3:d2: c7:47:42:f2:82:ab:5f:5d:51:f3:72:fd:87:e9:ef:f4:f3:ea: 23:02:44:4a:bc:0d:7a:94:62:55:58:46:4f:a0:b0:73:e7:72: 09:1c:d5:ad:d7:47:78:24:f9:33:6e:e5:cf:85:b1:38:82:69: 2d:6c:2f:a7:e0:bb:8c:be:b6:c5:6a:96:fe:27:a1:6d:a9:ea: ba:da:c7:e8:af:f5:da:4f:59:f0:22:51:ee:8d:c5:48:59:94: d9:cf:62:e0:8f:53:d8:c7:6d:65:5b:c2:03:95:53:77:b2:04: 88:88:d3:ef:3e:38:7c:9f:ec:7e:2f:f7:8a:fc:58:d3:8a:95: ae:15:ed:50:b8:93:a4:19:56:1d:a3:a1:ee:bf:bf:bf:10:e4: 0d:bb:ca:b6:d0:7e:77:71:6a:07:da:09:8a:45:57:a4:1a:d5: 02:6b:24:c5:f9:00:86:e3:07:bd:a1:2f:0f:6d:a6:15:c9:3b: 72:3d:7d:ce:e0:af:d3:2a:45:73:3c:7c:87:b7:93:6b:3b:b9: 51:7c:b4:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3Mvqk1u1flUEcnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk ZGVkZWQ0Y2EtYjU2Yi00MmRlLWE1YzQtMDRkMTI1Zjc2OWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvdjfDzxB0Qm8yqgcb2lALB2lNupDvTKNrcf XtDNfi1EP2RXJsA9CpuBzzLd3kDMeuirSOluFBSyYa2fKOJ3ZmDsgGRiXkLyCxfl H73OyWYkPyic4lG4eYLr9Xy3ikq1xsZ0RGh1+MQpO6GGqw7VUCKDWW9vnU6XB7+T mqt9UmNLDDhOiZZuS31PUBVzhBEvrwLo8TUfsg0boSYf383DUBEunF/pGTaWzF+b 92qR6oZM3hxgENoT4LwD5osD6A9XrSvblIYcTzbiww1Q2S+QiOIP4U27JgNchuxV tDIm5d927RoiRktQuPGNkSCro8zH43GVLHj5htEueBFy//qMPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/otSSsMaUYaHrdMwbmsuXx1P0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmE5ZmYzMzEtNTE4My0z NmRmLWFiNmQtMDFhZTA0NjY0M2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJupBHVV7d8d5kIEoDelv7CAiGaFxHWUpKrz0qg+vlfBSAjr1t89ctTw W6tR7NasbbCc3sXD0sdHQvKCq19dUfNy/Yfp7/Tz6iMCREq8DXqUYlVYRk+gsHPn cgkc1a3XR3gk+TNu5c+FsTiCaS1sL6fgu4y+tsVqlv4noW2p6rrax+iv9dpPWfAi Ue6NxUhZlNnPYuCPU9jHbWVbwgOVU3eyBIiI0+8+OHyf7H4v94r8WNOKla4V7VC4 k6QZVh2joe6/v78Q5A27yrbQfndxagfaCYpFV6Qa1QJrJMX5AIbjB72hLw9tphXJ O3I9fc7gr9MqRXM8fIe3k2s7uVF8tCA= -----END CERTIFICATE-----Generated at Sun Sep 27 08:46:59 2026 by rpki-client