$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa File: 9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa (raw, json) Hash identifier: EJKFltUQslbp5iIQ9ofOXr7h7ISw512ZZho1+/CyvZg= Subject key identifier: 03:A7:12:60:5A:42:C8:CA:C1:11:38:C5:36:FE:26:88:72:B7:BF:4D Certificate issuer: /CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Certificate serial: 010D0C9F4328584EFF777CAAE465B38463878500 Authority key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 54579 IP address blocks: 65.255.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:7c:aa:e4:65:b3:84:63:87:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=210b61e6-b97e-4565-9045-a733bbc9adb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:86:44:98:02:1c:30:49:14:bc:4d:88:cb:18: 75:a2:6e:4d:ce:14:20:40:38:25:1a:72:84:dd:35: 46:92:8f:e9:01:65:ae:6c:f1:a8:50:06:98:c9:c1: 00:fc:9f:aa:90:6b:95:31:cc:79:46:3f:a0:3d:cb: 6a:42:3f:ad:22:2b:90:76:52:7c:3e:59:da:e8:ef: 38:18:9c:db:65:71:a9:af:25:cd:94:f1:30:02:9a: 79:a4:eb:6d:f0:5c:42:68:44:76:05:aa:9a:0a:a7: 7b:64:72:8a:a3:e6:18:0f:ea:af:b5:d6:b2:48:32: 56:49:e0:65:e6:86:ca:f6:d6:e9:ea:2d:bf:28:5c: 34:38:51:43:44:97:3c:99:e0:e9:e3:f0:45:0c:8d: b7:98:d3:dd:f0:a1:6f:26:d9:88:7d:79:3d:41:50: e5:44:8e:bf:2d:2b:d8:99:c6:cd:a0:7b:f6:64:2a: 98:4b:59:52:f6:ad:2b:f2:5d:a9:d4:11:b0:93:bf: 37:d7:1c:d7:36:aa:0d:4b:62:68:3f:46:cf:9d:60: b3:a1:65:22:6c:5c:9a:9b:f3:2a:b8:9e:d7:0f:5c: 9e:21:16:95:09:d3:8e:ea:39:57:9d:ab:a2:4f:72: 30:76:56:ad:54:be:f2:fa:6b:e1:0f:be:8b:b2:09: 2d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A7:12:60:5A:42:C8:CA:C1:11:38:C5:36:FE:26:88:72:B7:BF:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/9c8e17a0-b624-3b98-92e7-fbd40f1f5eb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.crl X509v3 Authority Key Identifier: keyid:4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer sbgp-ipAddrBlock: critical IPv4: 65.255.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:15:1d:df:57:97:c4:7d:06:98:6d:76:fa:6b:3a:ba:a9:56: 38:b6:c3:17:dd:34:aa:88:88:d7:ad:71:4a:d3:3c:98:9b:74: 6b:54:2f:35:89:a3:f1:ab:16:d7:2d:39:8c:32:7b:1e:32:5b: 3c:b9:37:65:9a:f4:e8:3f:0b:2d:0f:65:40:bb:95:4a:26:69: 28:1a:e6:31:f2:2b:e4:cb:88:f1:8f:8a:11:7b:89:09:46:fb: c7:5a:64:c2:39:1c:cf:41:e9:c4:10:a9:f8:d3:22:17:19:41: 98:82:17:a9:0c:5b:40:35:db:a5:d9:5c:af:32:2a:86:e1:92: 0e:39:33:08:78:31:2e:dc:d4:b4:3f:2f:a1:12:1f:d1:f3:38: ab:4d:98:36:82:01:22:f7:35:3b:91:58:3b:53:af:e7:d4:54: 55:02:f6:38:2f:2c:48:39:9d:c9:a7:17:97:23:66:9a:56:15: 8b:c8:bf:df:83:10:45:66:71:47:d9:64:c2:f4:3e:b8:ac:cc: 6d:42:92:da:03:b9:77:a0:53:23:59:3b:d7:75:24:78:f1:b9: 45:0c:ee:31:ea:60:e5:1b:d0:80:0c:e1:ee:16:8b:84:72:a9: 6c:d0:2e:09:88:b9:fa:28:e4:1b:fe:2b:d6:72:e4:95:02:58: 2f:d1:ed:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d3yq5GWzhGOHhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5 YTNkMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk MjEwYjYxZTYtYjk3ZS00NTY1LTkwNDUtYTczM2JiYzlhZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIZEmAIcMEkUvE2Iyxh1om5NzhQgQDglGnKE 3TVGko/pAWWubPGoUAaYycEA/J+qkGuVMcx5Rj+gPctqQj+tIiuQdlJ8Plna6O84 GJzbZXGpryXNlPEwApp5pOtt8FxCaER2BaqaCqd7ZHKKo+YYD+qvtdaySDJWSeBl 5obK9tbp6i2/KFw0OFFDRJc8meDp4/BFDI23mNPd8KFvJtmIfXk9QVDlRI6/LSvY mcbNoHv2ZCqYS1lS9q0r8l2p1BGwk7831xzXNqoNS2JoP0bPnWCzoWUibFyam/Mq uJ7XD1yeIRaVCdOO6jlXnauiT3IwdlatVL7y+mvhD76LsgktSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOnEmBaQsjKwRE4xTb+Johyt79NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1 ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvOWM4ZTE3YTAtYjYyNC0z Yjk4LTkyZTctZmJkNDBmMWY1ZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGM4NWU0MmQtMjE3MS00ZjZkLTgz N2YtM2Y3YmFjOWQ5YTNkLzRjODVlNDJkLTIxNzEtNGY2ZC04MzdmLTNmN2JhYzlk OWEzZC5jcmwwHwYDVR0jBBgwFoAUTDFDQUt7GHUNpYNAQhF9TZUOowwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdi YWM5ZDlhM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQf+CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIVHd9Xl8R9BphtdvprOrqpVji2wxfdNKqIiNetcUrTPJibdGtULzWJ o/GrFtctOYwyex4yWzy5N2Wa9Og/Cy0PZUC7lUomaSga5jHyK+TLiPGPihF7iQlG +8daZMI5HM9B6cQQqfjTIhcZQZiCF6kMW0A126XZXK8yKobhkg45Mwh4MS7c1LQ/ L6ESH9HzOKtNmDaCASL3NTuRWDtTr+fUVFUC9jgvLEg5ncmnF5cjZppWFYvIv9+D EEVmcUfZZML0PriszG1CktoDuXegUyNZO9d1JHjxuUUM7jHqYOUb0IAM4e4Wi4Ry qWzQLgmIufoo5Bv+K9Zy5JUCWC/R7Yg= -----END CERTIFICATE-----Generated at Fri Sep 25 07:52:36 2026 by rpki-client