$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/f1a66537-cdc4-36f4-b5d9-a541e7831ff2.roa File: f1a66537-cdc4-36f4-b5d9-a541e7831ff2.roa (raw, json) Hash identifier: HbGtaWvqn+Ti53CHYaPoR5iMbuFB4njFyJjq8sNumbA= Subject key identifier: 28:1F:34:13:AE:04:C8:7D:88:24:BF:7A:B3:29:AC:13:AF:86:19:42 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584F497517AEE44062266B50B880 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/f1a66537-cdc4-36f4-b5d9-a541e7831ff2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11878 IP address blocks: 64.112.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:17:ae:e4:40:62:26:6b:50:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e307563a-5754-4158-b66b-0da71164a17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c0:83:d6:6b:73:e0:48:31:06:d4:a2:0b:b1: 1b:fb:f7:83:92:ee:f2:33:33:c1:60:d7:ac:14:80: 92:ad:f2:0b:80:2b:29:c5:73:41:6c:85:d4:73:97: c6:10:aa:5f:43:51:0a:26:e9:b7:50:0c:25:6e:44: bc:dc:9c:e4:1c:2c:2d:a9:15:22:ab:db:e2:16:76: 7a:a6:86:40:57:61:86:48:77:78:eb:ea:2f:e7:6b: 56:bf:f4:b2:96:32:34:4d:02:d4:42:d8:cf:2c:16: c0:f2:c5:7b:fb:f1:c5:10:b6:04:ca:d8:c0:34:63: 96:1a:e8:73:97:d6:38:68:83:11:31:58:30:52:e0: e3:bd:48:ad:c8:c1:e6:cb:bd:68:96:d0:10:83:0d: fe:b4:67:73:46:1e:2f:bc:44:5f:c8:ec:a7:c4:f7: a8:be:8e:15:21:6c:c3:32:82:8d:04:63:4f:69:f9: 20:23:21:28:b5:73:59:81:90:ec:9c:52:f6:d1:b1: fc:72:d2:31:b7:7a:59:dd:4e:f9:10:26:51:09:7e: 4a:99:80:d6:ac:28:93:27:5a:70:6b:06:9e:6d:ff: e6:b0:c6:f5:f9:79:cc:7c:97:71:87:a7:7d:89:cc: 5b:4b:17:59:69:1a:de:1e:ba:cd:51:b9:e6:c4:d4: 87:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1F:34:13:AE:04:C8:7D:88:24:BF:7A:B3:29:AC:13:AF:86:19:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/f1a66537-cdc4-36f4-b5d9-a541e7831ff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 64.112.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:3c:5d:11:ce:a2:a6:b4:b1:1f:0a:78:bd:03:14:ca:ec:76: 8b:fa:e3:c1:76:86:39:5e:07:80:7f:54:40:76:13:11:f5:af: 83:00:bd:4e:71:61:c0:b2:e0:c4:a7:ed:4b:17:60:79:b5:d7: cd:a3:c9:5f:09:7d:b3:3a:d3:4b:50:52:fc:10:5e:55:b3:f9: 2e:7b:5b:cf:cd:23:10:cc:c1:35:32:50:24:92:2b:7b:1e:a6: d4:e3:01:c4:98:28:3b:d9:c5:4d:b9:2f:f4:e6:20:e6:09:89: 2f:22:9a:c5:ee:b0:c2:e8:52:9c:26:9a:4d:94:96:e9:6c:b5: ec:c5:b8:bf:1b:c7:5b:aa:d3:29:11:97:b3:fe:d6:8d:68:8c: b5:c2:18:01:33:fb:d3:69:b5:9c:b1:f7:17:8b:06:90:44:be: 5e:fd:28:e4:de:88:e5:56:2c:23:73:30:90:71:9a:78:f2:ab: d6:08:43:b3:eb:b9:ad:70:5f:39:f1:7f:ab:92:ab:af:44:ea: b8:f8:56:43:dc:a0:4e:91:99:bc:63:8b:3f:88:69:24:dc:98: 9f:a0:37:92:25:68:da:01:96:97:b4:f3:87:1e:23:5d:b1:a2: fa:7b:3c:1d:b5:07:d0:57:a4:68:ee:7a:e9:10:70:3a:56:a6: af:d3:5b:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdReu5EBiJmtQuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTMwNzU2M2EtNTc1NC00MTU4LWI2NmItMGRhNzExNjRhMTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsCD1mtz4EgxBtSiC7Eb+/eDku7yMzPBYNes FICSrfILgCspxXNBbIXUc5fGEKpfQ1EKJum3UAwlbkS83JzkHCwtqRUiq9viFnZ6 poZAV2GGSHd46+ov52tWv/SyljI0TQLUQtjPLBbA8sV7+/HFELYEytjANGOWGuhz l9Y4aIMRMVgwUuDjvUityMHmy71oltAQgw3+tGdzRh4vvERfyOynxPeovo4VIWzD MoKNBGNPafkgIyEotXNZgZDsnFL20bH8ctIxt3pZ3U75ECZRCX5KmYDWrCiTJ1pw awaebf/msMb1+XnMfJdxh6d9icxbSxdZaRreHrrNUbnmxNSHMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgfNBOuBMh9iCS/erMprBOvhhlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvZjFhNjY1MzctY2RjNC0z NmY0LWI1ZDktYTU0MWU3ODMxZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADM8XRHOoqa0sR8KeL0DFMrsdov648F2hjleB4B/VEB2ExH1r4MAvU5x YcCy4MSn7UsXYHm1182jyV8JfbM600tQUvwQXlWz+S57W8/NIxDMwTUyUCSSK3se ptTjAcSYKDvZxU25L/TmIOYJiS8imsXusMLoUpwmmk2UlulstezFuL8bx1uq0ykR l7P+1o1ojLXCGAEz+9NptZyx9xeLBpBEvl79KOTeiOVWLCNzMJBxmnjyq9YIQ7Pr ua1wXznxf6uSq69E6rj4VkPcoE6Rmbxjiz+IaSTcmJ+gN5IlaNoBlpe084ceI12x ovp7PB21B9BXpGjueukQcDpWpq/TW/Y= -----END CERTIFICATE-----Generated at Fri Sep 25 17:57:13 2026 by rpki-client