$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/2a16a396-2c27-3987-8c67-8adede3e55eb.roa File: 2a16a396-2c27-3987-8c67-8adede3e55eb.roa (raw, json) Hash identifier: pswK2S2mACVF4RMGvzUJ8ln75cSXwkWWwmVS6//mK38= Subject key identifier: D0:91:8D:0C:04:56:65:9A:67:42:98:29:DF:A2:89:B6:06:F6:7C:3B Certificate issuer: /CN=5dcf6139-5993-4941-a803-3ff450a6149e Certificate serial: 010D0C9F4328584F3CE29CCA73DB0E898E3FFFC0 Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/2a16a396-2c27-3987-8c67-8adede3e55eb.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 61317 IP address blocks: 64.113.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:9c:ca:73:db:0e:89:8e:3f:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=c6879ac1-f6e5-425d-b9fa-b0d09a8ad594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9d:67:1f:e4:e0:64:4a:81:e5:05:bb:5e:d5: 05:1e:75:9c:0e:3a:c0:ff:61:41:f1:06:62:17:8e: 40:be:63:11:d1:8f:91:a3:2d:1d:04:97:73:17:91: c3:89:d8:75:a7:2d:fc:c0:31:ef:49:a0:44:73:d3: 8b:58:1c:46:be:98:df:03:0c:14:11:4f:00:db:98: 4e:70:6f:47:6f:9a:68:52:1b:e3:e3:87:a1:61:40: 4f:36:86:17:dd:22:0c:16:a4:da:1b:22:9c:c1:97: 0a:a2:ca:71:b0:84:e5:89:a4:03:6d:e6:d4:3c:91: c1:29:b4:b0:f7:65:64:d6:6a:e2:d6:68:9e:21:71: 40:5b:eb:60:ef:e2:b8:fb:0e:c1:d8:9d:2c:83:a3: 7d:4b:cc:55:49:c2:98:a5:f8:f1:b9:21:70:c4:e6: a1:41:90:d3:44:ed:08:88:20:f2:b8:ce:fe:16:bf: cb:77:6b:6f:78:16:68:93:72:10:ed:3d:df:87:30: 73:fd:8d:f8:62:94:c8:cd:2e:b6:ee:8e:15:7e:3c: 57:80:33:b9:81:07:f0:d4:b4:17:da:23:43:ed:52: ea:ba:01:84:b8:ba:4e:73:fd:eb:4b:2e:fa:35:62: f7:d6:29:62:ab:bf:a3:93:6a:44:4e:9e:89:aa:f5: 31:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:91:8D:0C:04:56:65:9A:67:42:98:29:DF:A2:89:B6:06:F6:7C:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/2a16a396-2c27-3987-8c67-8adede3e55eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl X509v3 Authority Key Identifier: keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer sbgp-ipAddrBlock: critical IPv4: 64.113.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:cc:ad:f3:9a:ee:4f:c9:39:30:8b:7c:21:43:a4:2b:22:00: f5:f3:bf:74:25:7d:1d:d3:80:69:e9:6b:9e:26:19:e9:9a:2f: cd:64:f9:0e:b9:a4:3b:79:44:80:66:a6:5e:c4:5c:7c:8c:92: 77:14:f6:73:b6:5c:12:f1:0a:c9:f3:90:91:e7:b3:e0:2e:e9: 13:6b:7d:c9:c2:db:fb:87:e4:d8:f7:53:14:4b:73:97:a5:88: 4c:68:5d:48:8f:5b:01:3a:44:0d:52:b3:c1:f1:54:20:03:c5: 3a:30:af:27:54:7e:ad:53:43:98:bb:da:2a:9d:51:9d:1d:1b: 34:c4:96:60:23:33:c6:cc:86:07:55:17:73:35:2b:60:07:c7: b4:4b:5c:6e:39:ab:7d:b5:17:0d:39:d5:1a:6b:ac:39:74:de: 28:dd:c2:7a:63:34:cc:a7:2b:2b:8c:2f:b2:4f:20:88:08:fd: 59:20:8e:f0:9b:15:f7:92:c5:73:37:ce:01:de:df:05:46:48: c8:7c:e7:3d:4f:fe:ea:61:e4:e2:8c:0a:42:b9:01:67:49:55: 31:2a:42:f8:a8:ce:13:72:42:6e:f1:74:91:de:d8:fd:51:15: 15:70:8c:b7:40:13:20:f9:c8:6c:0d:a6:55:e4:37:2c:03:f2: 90:66:c3:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884pzKc9sOiY4//8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx NDllMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk YzY4NzlhYzEtZjZlNS00MjVkLWI5ZmEtYjBkMDlhOGFkNTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp1nH+TgZEqB5QW7XtUFHnWcDjrA/2FB8QZi F45AvmMR0Y+Roy0dBJdzF5HDidh1py38wDHvSaBEc9OLWBxGvpjfAwwUEU8A25hO cG9Hb5poUhvj44ehYUBPNoYX3SIMFqTaGyKcwZcKospxsITliaQDbebUPJHBKbSw 92Vk1mri1mieIXFAW+tg7+K4+w7B2J0sg6N9S8xVScKYpfjxuSFwxOahQZDTRO0I iCDyuM7+Fr/Ld2tveBZok3IQ7T3fhzBz/Y34YpTIzS627o4VfjxXgDO5gQfw1LQX 2iND7VLqugGEuLpOc/3rSy76NWL31iliq7+jk2pETp6JqvUxcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCRjQwEVmWaZ0KYKd+iibYG9nw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvMmExNmEzOTYtMmMyNy0z OTg3LThjNjctOGFkZWRlM2U1NWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4 MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2 MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0 NTBhNjE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHELMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrMrfOa7k/JOTCLfCFDpCsiAPXzv3QlfR3TgGnpa54mGemaL81k+Q65 pDt5RIBmpl7EXHyMkncU9nO2XBLxCsnzkJHns+Au6RNrfcnC2/uH5Nj3UxRLc5el iExoXUiPWwE6RA1Ss8HxVCADxTowrydUfq1TQ5i72iqdUZ0dGzTElmAjM8bMhgdV F3M1K2AHx7RLXG45q321Fw051RprrDl03ijdwnpjNMynKyuML7JPIIgI/VkgjvCb FfeSxXM3zgHe3wVGSMh85z1P/uph5OKMCkK5AWdJVTEqQviozhNyQm7xdJHe2P1R FRVwjLdAEyD5yGwNplXkNywD8pBmw0M= -----END CERTIFICATE-----Generated at Sat Oct 3 11:32:33 2026 by rpki-client