$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/4571e95a-de62-38cd-b7f3-2899cf91497b.roa File: 4571e95a-de62-38cd-b7f3-2899cf91497b.roa (raw, json) Hash identifier: UXNHVeHQmMOfQ8umoow86TCQCzgWH4YJkCC4/H+QU4c= Subject key identifier: 1D:31:86:3B:E8:25:C5:69:3E:30:D6:B2:48:96:67:E7:37:49:8D:2E Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584F1467939F136593817B4046C0 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/4571e95a-de62-38cd-b7f3-2899cf91497b.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 16686 IP address blocks: 64.68.192.0/20 maxlen: 24 64.68.192.0/24 maxlen: 24 64.68.193.0/24 maxlen: 24 64.68.194.0/24 maxlen: 24 64.68.195.0/24 maxlen: 24 64.68.196.0/24 maxlen: 24 64.68.197.0/24 maxlen: 24 64.68.198.0/24 maxlen: 24 64.68.199.0/24 maxlen: 24 64.68.200.0/24 maxlen: 24 64.68.201.0/24 maxlen: 24 64.68.202.0/24 maxlen: 24 64.68.203.0/24 maxlen: 24 64.68.204.0/24 maxlen: 24 64.68.205.0/24 maxlen: 24 64.68.206.0/24 maxlen: 24 64.68.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:93:9f:13:65:93:81:7b:40:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=6649ecce-27c3-41bc-88c1-1154b2f6b443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cb:27:e9:6d:7b:15:36:87:a6:cf:05:19:ff: 55:e7:df:17:e8:8b:07:81:df:4d:b1:10:39:e1:7b: 0b:a7:77:b4:ee:2f:ea:19:a9:3d:2c:26:65:00:45: 8b:35:40:f6:1a:37:60:5b:b4:e4:99:49:96:df:53: 6a:f3:ad:5f:91:ff:4c:ef:07:72:8d:e2:20:bc:fe: f0:4d:09:9d:59:93:28:83:fb:1c:99:9a:08:ba:13: fd:f1:eb:aa:58:1c:15:e7:98:a6:79:31:f1:0d:97: 80:ce:e3:10:36:e6:54:c6:a3:84:d7:9f:5e:a7:32: ed:5e:20:f3:ad:f4:19:90:38:50:f7:09:14:39:98: f6:2b:a0:73:40:37:63:af:0f:70:6f:aa:60:a0:4a: d4:2e:88:a3:3c:0c:a4:75:8f:68:db:ec:a9:e5:75: b6:6c:f8:77:75:73:c0:ef:5e:04:48:6b:b0:b9:8f: b2:17:a4:3c:15:7f:39:ed:16:13:ba:17:aa:84:12: 6b:2b:5b:61:c5:cb:2b:44:e5:5c:ef:0f:53:54:1d: 1f:4e:8d:55:89:ee:8e:f0:48:64:23:22:52:23:c3: 6c:6a:ca:ec:1a:c6:c3:e3:49:55:74:37:f5:33:fa: 8c:fa:da:cd:27:78:f7:74:55:64:66:3f:39:2b:e5: fa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:31:86:3B:E8:25:C5:69:3E:30:D6:B2:48:96:67:E7:37:49:8D:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/4571e95a-de62-38cd-b7f3-2899cf91497b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:9c:2c:c4:bc:c3:37:d3:b3:01:a3:33:fe:1e:68:fc:2e:4d: d9:1f:91:18:7f:c2:b9:ef:ee:28:e7:70:aa:99:d8:28:81:d1: 52:9a:ba:c6:f1:2a:b9:e1:26:d4:db:ad:b1:40:a7:a0:8d:a3: e9:f3:a3:fc:04:02:fb:00:e8:30:03:27:9c:f5:5b:8d:f8:2c: 14:ab:3c:3e:39:ec:24:d8:f7:c5:3d:db:43:26:18:0e:91:cb: c0:a5:e4:c9:33:72:ff:f5:6d:28:84:84:02:52:98:1c:a7:f4: a0:76:d4:d1:7e:07:96:26:09:79:74:01:42:8b:ee:ad:f5:57: 45:bc:65:99:c2:95:f9:10:27:b8:ac:e2:fc:2e:b7:65:6f:60: c9:21:90:46:47:78:b5:06:8d:24:e9:77:bc:85:8e:bd:35:52: e4:0f:f2:26:d1:e0:3c:2a:cd:af:c3:08:45:4f:4d:80:ef:08: 55:53:35:12:ed:cb:28:09:7e:cf:50:19:48:5f:42:b5:76:ff: 04:da:1b:8c:eb:73:b8:38:8b:5b:1f:52:06:c1:44:5f:61:94: 24:64:4e:4b:8b:98:de:29:fb:92:f1:00:0e:0d:f4:d9:ad:44: 16:8e:6e:38:9e:40:a2:04:5d:d4:ed:ba:6c:dd:4a:ad:d9:31: fe:19:83:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5OfE2WTgXtARsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NjY0OWVjY2UtMjdjMy00MWJjLTg4YzEtMTE1NGIyZjZiNDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcsn6W17FTaHps8FGf9V598X6IsHgd9NsRA5 4XsLp3e07i/qGak9LCZlAEWLNUD2GjdgW7TkmUmW31Nq861fkf9M7wdyjeIgvP7w TQmdWZMog/scmZoIuhP98euqWBwV55imeTHxDZeAzuMQNuZUxqOE159epzLtXiDz rfQZkDhQ9wkUOZj2K6BzQDdjrw9wb6pgoErULoijPAykdY9o2+yp5XW2bPh3dXPA 714ESGuwuY+yF6Q8FX857RYTuheqhBJrK1thxcsrROVc7w9TVB0fTo1Vie6O8Ehk IyJSI8NsasrsGsbD40lVdDf1M/qM+trNJ3j3dFVkZj85K+X6DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0xhjvoJcVpPjDWskiWZ+c3SY0uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvNDU3MWU5NWEtZGU2Mi0z OGNkLWI3ZjMtMjg5OWNmOTE0OTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQETAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGcLMS8wzfTswGjM/4eaPwuTdkfkRh/wrnv7ijncKqZ2CiB0VKausbx KrnhJtTbrbFAp6CNo+nzo/wEAvsA6DADJ5z1W434LBSrPD457CTY98U920MmGA6R y8Cl5Mkzcv/1bSiEhAJSmByn9KB21NF+B5YmCXl0AUKL7q31V0W8ZZnClfkQJ7is 4vwut2VvYMkhkEZHeLUGjSTpd7yFjr01UuQP8ibR4Dwqza/DCEVPTYDvCFVTNRLt yygJfs9QGUhfQrV2/wTaG4zrc7g4i1sfUgbBRF9hlCRkTkuLmN4p+5LxAA4N9Nmt RBaObjieQKIEXdTtumzdSq3ZMf4Zg2o= -----END CERTIFICATE-----Generated at Tue Sep 22 03:44:24 2026 by rpki-client