$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/842ecda0-182f-3843-adab-4bdda84d6875.roa File: 842ecda0-182f-3843-adab-4bdda84d6875.roa (raw, json) Hash identifier: Uab8ixOO4BjBwXNvb++KO8xbe7fC83KKZvJ1SFba3Ok= Subject key identifier: 5D:E8:3F:64:5B:0C:44:0B:74:6A:A9:01:64:22:5F:4D:01:02:90:ED Certificate issuer: /CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Certificate serial: 010D0C9F4328584F374D2CA408ED68A02E874D80 Authority key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/842ecda0-182f-3843-adab-4bdda84d6875.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 64.57.33.0/24 maxlen: 24 64.57.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2c:a4:08:ed:68:a0:2e:87:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=7a5e5cda-5833-4f9f-8ac7-a6f65fa15ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:cd:50:81:54:ec:6a:b5:5a:d6:86:c4:61: 67:1f:27:7b:62:e3:67:b5:ad:b5:85:6f:2b:68:ec: 4b:43:ce:bb:fc:f3:4f:bd:1f:d2:78:57:e7:d9:46: 07:70:41:f8:30:9d:19:ae:3d:11:2d:a6:16:ee:dc: 25:32:de:c9:21:ec:6a:79:37:20:e7:c7:e2:f5:14: 74:12:72:e9:db:84:06:c9:5f:f3:95:5f:42:4f:91: 37:06:b1:3e:70:75:f5:4b:b3:e9:2a:c3:11:eb:7f: 3c:aa:9d:a7:63:be:ea:c3:92:6a:81:f9:6d:ab:2f: 77:9c:91:a6:c3:f3:63:27:0c:d8:7b:8c:eb:4c:3f: cb:6c:26:6a:f7:00:2f:b6:de:6c:08:cf:bc:17:87: 8a:15:0f:f3:b8:97:0d:97:df:9a:85:4d:4c:8d:fe: 33:3c:77:69:83:53:97:e9:8a:c4:d0:29:d1:50:d9: a8:b0:0b:c6:6c:a2:e9:29:f3:fb:6d:04:9b:f0:16: 66:df:42:cc:6b:6a:eb:6d:42:d9:7b:db:ae:58:b4: ef:b4:1f:14:d2:54:3d:12:67:c5:40:52:cb:18:ec: 03:29:0d:55:02:7f:16:af:cf:94:c9:f2:9b:c5:c1: cf:a8:c2:de:52:cf:82:57:9d:88:32:22:1a:b4:0d: 58:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E8:3F:64:5B:0C:44:0B:74:6A:A9:01:64:22:5F:4D:01:02:90:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/842ecda0-182f-3843-adab-4bdda84d6875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.crl X509v3 Authority Key Identifier: keyid:88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer sbgp-ipAddrBlock: critical IPv4: 64.57.33.0-64.57.34.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c6:3e:a8:33:9f:dd:cf:38:f3:19:b0:a9:c5:2a:80:b2:6d: b2:b2:3c:b0:e4:5c:7f:21:0a:51:a3:a5:86:2f:f8:43:1c:96: 85:25:ec:06:cb:58:cd:5a:e3:1b:5a:4b:94:ca:e2:4e:58:7c: ac:a9:99:67:e2:a0:5b:12:d1:f5:4f:ec:7c:1b:26:e3:a2:34: 1c:67:70:ab:3d:b1:c4:3c:e1:1d:a9:87:c3:db:8b:2b:17:a0: 75:b5:5a:44:58:af:06:d3:68:ad:35:8c:59:c9:42:77:de:73: 7f:10:92:ee:10:91:4b:f6:2b:89:8f:25:86:99:c7:e7:48:88: 23:7c:78:4c:d3:64:73:05:ba:09:f1:32:bf:e1:ad:90:0b:42: 13:8d:66:55:cb:4d:68:63:e3:0e:16:41:fa:c3:ed:d1:92:94: 19:34:f8:78:00:99:fb:6d:26:9d:a5:d6:93:bc:78:fe:85:a4: 43:84:62:22:80:bd:76:e6:87:50:07:8c:6a:bd:de:44:9d:7a: 2f:65:e7:cf:fc:48:5b:da:80:47:18:4c:c7:34:35:a6:fa:e1: 2e:a1:6c:1a:1e:60:9f:d8:65:36:f0:3a:62:c2:0d:e3:54:f8: aa:31:5b:39:01:53:da:e1:01:58:12:ac:6a:76:83:6c:43:2e: 8c:e8:f6:ab -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE83TSykCO1ooC6HTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZh ZmEzMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk N2E1ZTVjZGEtNTgzMy00ZjlmLThhYzctYTZmNjVmYTE1ZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvDNUIFU7Gq1WtaGxGFnHyd7YuNnta21hW8r aOxLQ867/PNPvR/SeFfn2UYHcEH4MJ0Zrj0RLaYW7twlMt7JIexqeTcg58fi9RR0 EnLp24QGyV/zlV9CT5E3BrE+cHX1S7PpKsMR6388qp2nY77qw5Jqgfltqy93nJGm w/NjJwzYe4zrTD/LbCZq9wAvtt5sCM+8F4eKFQ/zuJcNl9+ahU1Mjf4zPHdpg1OX 6YrE0CnRUNmosAvGbKLpKfP7bQSb8BZm30LMa2rrbULZe9uuWLTvtB8U0lQ9EmfF QFLLGOwDKQ1VAn8Wr8+UyfKbxcHPqMLeUs+CV52IMiIatA1YewIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFF3oP2RbDEQLdGqpAWQiX00BApDtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNm NjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvODQyZWNkYTAtMTgyZi0z ODQzLWFkYWItNGJkZGE4NGQ2ODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWQzZjY2MjAtMDU3Ni00NmQ4LWIw NWQtM2UyY2RkMDZhZmEzL2FkM2Y2NjIwLTA1NzYtNDZkOC1iMDVkLTNlMmNkZDA2 YWZhMy5jcmwwHwYDVR0jBBgwFoAUiN/bmDDB0UzVtzGE7Kf8YPRf8tMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJj ZGQwNmFmYTMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABAOSED BABAOSIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAmMY+qDOf3c848xmwqcUqgLJtsrI8sORcfyEKUaOlhi/4 QxyWhSXsBstYzVrjG1pLlMriTlh8rKmZZ+KgWxLR9U/sfBsm46I0HGdwqz2xxDzh HamHw9uLKxegdbVaRFivBtNorTWMWclCd95zfxCS7hCRS/YriY8lhpnH50iII3x4 TNNkcwW6CfEyv+GtkAtCE41mVctNaGPjDhZB+sPt0ZKUGTT4eACZ+20mnaXWk7x4 /oWkQ4RiIoC9duaHUAeMar3eRJ16L2Xnz/xIW9qARxhMxzQ1pvrhLqFsGh5gn9hl NvA6YsIN41T4qjFbOQFT2uEBWBKsanaDbEMujOj2qw== -----END CERTIFICATE-----Generated at Sun Sep 20 23:32:56 2026 by rpki-client