$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa File: 25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa (raw, json) Hash identifier: 8S89kP5620xrXyPra4X7KWBdC0cv1VyPwdQDnec4c2k= Subject key identifier: 84:48:E1:0A:A9:A0:A7:D8:94:19:A1:1D:0B:B3:7A:9A:F2:11:B7:21 Certificate issuer: /CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Certificate serial: 010D0C9F4328584F3E47ED9561DCDA38809D5080 Authority key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 40788 IP address blocks: 64.140.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:ed:95:61:dc:da:38:80:9d:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=1bcd3555-9d46-4c14-8cf4-2c180c7f93a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9b:f5:21:08:37:20:60:d1:22:d2:6b:8b:57: 7c:6d:a5:35:30:cd:17:9a:a3:61:9d:1a:e8:f5:51: 7a:03:6f:7c:d2:52:71:5b:93:d7:e6:24:5d:d2:1f: 00:25:13:3c:94:46:8c:ea:81:ec:a4:51:77:12:f4: d8:0d:2c:da:b1:f7:33:3c:f4:bb:ab:1b:51:5f:b5: a4:9a:63:0f:da:0a:2a:26:6f:ae:a8:42:d0:2f:4e: f4:fc:7e:75:08:c5:23:34:a9:3c:8c:2f:66:c6:31: cc:11:ec:c2:b3:3f:fd:76:8a:49:34:c8:13:e2:92: d1:aa:5d:f6:48:ad:57:17:94:a9:4b:c4:7d:4e:30: 3f:56:77:4b:31:6c:d3:1b:11:22:6f:e8:ba:01:a8: db:95:aa:56:74:b0:27:31:e8:87:53:e5:90:66:af: 7a:99:59:30:9f:2f:b4:f6:df:84:9a:4a:b6:55:94: 6f:68:a9:de:35:3a:cd:58:04:7b:14:83:e4:6e:db: 2b:22:7f:9b:60:be:95:49:6b:d4:0f:cd:57:40:dc: e6:cd:4c:b7:fd:c0:28:16:a9:dc:6a:eb:f6:74:fe: d9:e4:90:27:8a:36:f3:a0:c7:ff:df:38:ad:24:7b: fd:4c:b0:08:98:2b:f5:06:da:5c:54:be:d8:ca:33: 9c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:48:E1:0A:A9:A0:A7:D8:94:19:A1:1D:0B:B3:7A:9A:F2:11:B7:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/25292b62-98ec-35f9-8a4e-fd7d2cd02de9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.crl X509v3 Authority Key Identifier: keyid:E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer sbgp-ipAddrBlock: critical IPv4: 64.140.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:3f:aa:9c:cb:49:c7:d9:b4:c5:b5:b5:41:da:d7:8b:0c:12: e3:6b:4f:b5:1e:3b:9a:6c:1f:64:82:2d:70:bc:cf:f8:c9:08: 3c:2c:a6:b7:bd:d1:2a:f4:d3:68:be:33:8a:bb:36:43:c3:16: 6a:50:b7:8c:73:ea:87:e8:ce:43:bf:08:24:da:05:67:a4:09: 92:78:f2:c5:e2:fc:8c:9e:07:13:f0:cd:12:fa:f0:92:70:08: 2f:29:4c:8e:d1:12:f7:0f:0e:0a:15:ac:ce:2f:a6:7f:4f:a9: 27:ca:dc:d9:86:88:05:6b:84:05:cc:32:80:84:4e:80:0c:57: 25:b2:4a:a2:0a:6b:c1:ea:42:e2:ca:57:21:7d:57:87:0c:0a: ce:4b:c4:ae:68:6f:64:b3:05:b1:0e:48:85:fa:c7:fa:74:52: 30:f8:08:fd:5e:80:ea:5b:b5:a6:ca:54:31:25:a0:3c:85:1f: 16:c2:a4:66:29:c2:74:8b:6b:b1:1b:40:23:10:28:8f:a3:ac: 28:18:df:8e:8a:28:51:a8:7d:53:5b:74:f4:23:02:63:16:95: 49:97:aa:64:2d:fa:9d:c0:6a:28:ca:76:c0:81:3e:cb:89:d6: a3:9b:6c:d4:19:23:36:26:8f:95:10:a4:ae:6c:ed:d3:7d:c3: 33:3f:43:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+2VYdzaOICdUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhk MzI2MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MWJjZDM1NTUtOWQ0Ni00YzE0LThjZjQtMmMxODBjN2Y5M2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5v1IQg3IGDRItJri1d8baU1MM0XmqNhnRro 9VF6A2980lJxW5PX5iRd0h8AJRM8lEaM6oHspFF3EvTYDSzasfczPPS7qxtRX7Wk mmMP2goqJm+uqELQL070/H51CMUjNKk8jC9mxjHMEezCsz/9dopJNMgT4pLRql32 SK1XF5SpS8R9TjA/VndLMWzTGxEib+i6AajblapWdLAnMeiHU+WQZq96mVkwny+0 9t+Emkq2VZRvaKneNTrNWAR7FIPkbtsrIn+bYL6VSWvUD81XQNzmzUy3/cAoFqnc auv2dP7Z5JAnijbzoMf/3zitJHv9TLAImCv1BtpcVL7YyjOcoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRI4QqpoKfYlBmhHQuzepryEbchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYw NDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvMjUyOTJiNjItOThlYy0z NWY5LThhNGUtZmQ3ZDJjZDAyZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTM2MDQ3MDgtM2UwZi00ZWE2LWIx NTEtNGQyZjc0MDhkMzI2L2UzNjA0NzA4LTNlMGYtNGVhNi1iMTUxLTRkMmY3NDA4 ZDMyNi5jcmwwHwYDVR0jBBgwFoAU5LlVX3UhkJoYMg04VOQhuidg6RQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJm NzQwOGQzMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQIxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk/qpzLScfZtMW1tUHa14sMEuNrT7UeO5psH2SCLXC8z/jJCDwspre9 0Sr002i+M4q7NkPDFmpQt4xz6ofozkO/CCTaBWekCZJ48sXi/IyeBxPwzRL68JJw CC8pTI7REvcPDgoVrM4vpn9PqSfK3NmGiAVrhAXMMoCEToAMVyWySqIKa8HqQuLK VyF9V4cMCs5LxK5ob2SzBbEOSIX6x/p0UjD4CP1egOpbtabKVDEloDyFHxbCpGYp wnSLa7EbQCMQKI+jrCgY346KKFGofVNbdPQjAmMWlUmXqmQt+p3AaijKdsCBPsuJ 1qObbNQZIzYmj5UQpK5s7dN9wzM/Qxw= -----END CERTIFICATE-----Generated at Tue Sep 22 04:11:33 2026 by rpki-client