$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa File: d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa (raw, json) Hash identifier: y53XU45e8WW+T1eCavyDmAbgZBHcxTyP38QB3pWF5bg= Subject key identifier: 11:0C:8A:7B:BA:2F:44:CD:4F:2D:35:2A:73:6D:DB:D0:E4:F4:BC:78 Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584F3CE2A57CE2A6B68886992C00 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 11232 IP address blocks: 67.217.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a5:7c:e2:a6:b6:88:86:99:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=d3ab4ee0-a001-455d-91ca-fc0ce908e067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6f:8b:3b:c1:fd:2f:39:6b:ad:0a:08:cc:5b: 57:d0:22:af:6d:0c:04:d1:ff:ec:50:dc:80:ab:e9: eb:c9:f1:66:85:90:b5:49:42:fb:3f:af:f8:62:16: 8c:23:99:b2:c7:c3:82:6a:5f:ab:82:99:38:7a:79: cb:c0:16:e3:06:33:3d:91:d5:d3:82:95:6e:36:3d: 9c:95:b8:ab:2f:52:12:88:ea:0d:ae:d7:61:cc:86: 3d:85:ee:42:b4:89:e9:4e:bd:64:94:43:fc:71:2a: ad:d0:16:db:81:70:05:3b:66:1a:f6:9a:e4:52:6a: a7:01:6f:e1:26:6f:d8:44:6e:ad:e0:86:cd:e3:f8: a9:7b:bb:13:48:b8:30:ba:25:6e:7b:43:16:c7:74: 71:ed:2b:21:7f:da:26:2d:df:4d:0d:ed:1b:ea:56: 28:d3:16:a1:e7:51:dc:e1:20:bf:ee:5f:95:67:3f: 0c:48:8b:b9:2d:0a:3e:d1:49:fd:8a:bc:3e:3e:3c: fd:7a:0c:a3:63:eb:7e:75:de:46:18:b7:6f:d1:26: df:3a:91:2b:40:f5:1c:c8:62:b7:7c:dd:1e:df:a6: c1:50:18:37:44:18:b0:59:54:83:82:ee:21:76:c3: 0d:d1:10:5d:60:b5:26:1b:b9:04:a0:16:e8:9b:60: a3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0C:8A:7B:BA:2F:44:CD:4F:2D:35:2A:73:6D:DB:D0:E4:F4:BC:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d4127f43-adbc-3358-88af-a9ae9b0a63ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 67.217.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:66:b2:56:7d:04:72:56:5f:6c:69:3a:0d:94:0e:94:c7:d7: da:e7:8d:e9:00:68:db:8a:f9:e0:18:d3:9c:d8:e0:b0:01:dd: b5:57:ea:37:be:70:23:be:a7:de:67:5a:b5:20:3a:1c:ed:be: e9:39:bc:bb:b9:24:20:4a:a7:5c:d9:d6:43:db:17:2f:b6:f3: 88:42:db:6f:cd:ec:3d:b9:09:de:7e:45:22:33:8b:76:1b:ca: c5:aa:c5:a3:5a:67:61:36:97:28:a3:21:4e:ff:40:c6:19:10: 42:34:75:cb:45:c3:02:38:9f:09:e6:d1:60:c9:2f:5c:eb:00: 5a:52:82:3b:c3:b1:87:59:0d:cb:1c:e7:55:1f:84:d2:8b:00: b7:5d:87:52:98:bf:c1:32:72:af:b1:d9:93:af:73:4c:b4:da: 2c:31:ff:17:00:7a:7b:80:97:eb:dd:4f:e4:b9:f1:9f:e9:75: 8d:7b:79:a7:aa:7b:d9:f1:22:ac:51:9b:b6:f6:ea:64:b4:7e: fa:3a:df:16:77:ba:30:38:55:c3:15:82:9a:ee:96:98:07:e4: c0:15:3d:79:07:41:ef:98:cd:3c:4a:97:67:57:12:0c:50:7b: a5:d0:ca:85:8c:63:22:23:fd:aa:75:e4:81:7d:9c:f5:e5:a1: 4b:b9:91:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qV84qa2iIaZLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk ZDNhYjRlZTAtYTAwMS00NTVkLTkxY2EtZmMwY2U5MDhlMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG+LO8H9LzlrrQoIzFtX0CKvbQwE0f/sUNyA q+nryfFmhZC1SUL7P6/4YhaMI5myx8OCal+rgpk4ennLwBbjBjM9kdXTgpVuNj2c lbirL1ISiOoNrtdhzIY9he5CtInpTr1klEP8cSqt0BbbgXAFO2Ya9prkUmqnAW/h Jm/YRG6t4IbN4/ipe7sTSLgwuiVue0MWx3Rx7Sshf9omLd9NDe0b6lYo0xah51Hc 4SC/7l+VZz8MSIu5LQo+0Un9irw+Pjz9egyjY+t+dd5GGLdv0SbfOpErQPUcyGK3 fN0e36bBUBg3RBiwWVSDgu4hdsMN0RBdYLUmG7kEoBbom2CjpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEMinu6L0TNTy01KnNt29Dk9Lx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZDQxMjdmNDMtYWRiYy0z MzU4LTg4YWYtYTlhZTliMGE2M2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9kUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5mslZ9BHJWX2xpOg2UDpTH19rnjekAaNuK+eAY05zY4LAB3bVX6je+ cCO+p95nWrUgOhztvuk5vLu5JCBKp1zZ1kPbFy+284hC22/N7D25Cd5+RSIzi3Yb ysWqxaNaZ2E2lyijIU7/QMYZEEI0dctFwwI4nwnm0WDJL1zrAFpSgjvDsYdZDcsc 51UfhNKLALddh1KYv8Eycq+x2ZOvc0y02iwx/xcAenuAl+vdT+S58Z/pdY17eaeq e9nxIqxRm7b26mS0fvo63xZ3ujA4VcMVgprulpgH5MAVPXkHQe+YzTxKl2dXEgxQ e6XQyoWMYyIj/ap15IF9nPXloUu5kX8= -----END CERTIFICATE-----Generated at Tue Sep 22 17:43:33 2026 by rpki-client