$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa File: eae38249-949c-338e-a384-9f61ab8838c3.roa (raw, json) Hash identifier: Jg6D/xgwMn/u4GTJ2b/LGUSAvTUNwVdSiraCf55Q5C4= Subject key identifier: 31:EA:C6:5B:63:28:26:16:51:4E:21:19:A5:F2:B7:AF:71:A1:A8:1C Certificate issuer: /CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Certificate serial: 010D0C9F4328584F20F7AA4FE834E793A0A64C40 Authority key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 62856 IP address blocks: 64.207.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:aa:4f:e8:34:e7:93:a0:a6:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=c263fbac-81d9-492c-9833-aff928b6ef51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:65:a1:03:8f:e2:cb:13:c7:1d:74:f4:a4:0a: ad:66:17:af:d3:66:22:e9:f3:0e:44:e4:5f:b2:91: e6:d1:d2:b8:ac:bc:7e:d9:84:1f:55:ed:5d:79:d6: 3a:0d:df:03:95:4b:30:e9:b3:35:f9:5f:b8:de:5c: db:7c:36:58:66:63:de:6b:f3:d6:8b:dd:ca:70:60: 46:e4:82:de:1a:c2:00:f9:6d:74:1f:1d:ec:1a:f7: 1a:52:2d:ed:d7:03:be:e0:60:0f:4a:86:91:ca:31: fe:ef:44:f4:38:2f:af:fc:70:68:82:43:53:48:97: 6c:66:3f:24:0f:1a:fe:9a:da:e9:ae:c2:94:47:45: 05:2c:f4:da:78:a8:44:1e:e4:76:36:fd:e6:40:50: 24:05:37:38:b6:1b:3f:06:b0:84:69:ce:31:66:98: 43:e0:cb:01:fe:50:47:9e:a0:e9:49:92:85:25:63: 30:42:ae:fc:e3:61:b2:4a:9d:04:01:33:f6:52:91: 53:7d:ea:97:26:17:d8:8a:9f:c6:e0:bb:02:08:3f: 93:e8:9e:ab:82:39:b3:ba:85:da:ad:eb:bc:cd:23: 0e:8c:15:29:47:95:43:dc:b7:b0:91:12:ce:15:8c: c0:6c:52:c9:32:f5:53:29:68:d4:8e:c0:cf:a9:76: 65:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:EA:C6:5B:63:28:26:16:51:4E:21:19:A5:F2:B7:AF:71:A1:A8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eae38249-949c-338e-a384-9f61ab8838c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.crl X509v3 Authority Key Identifier: keyid:D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer sbgp-ipAddrBlock: critical IPv4: 64.207.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:10:0b:6e:12:b0:5f:a7:6a:72:f0:3c:76:66:0d:19:fc:0d: 6b:46:d5:f8:b9:ae:88:ad:5f:73:04:bc:82:70:ab:41:83:9f: 8b:7b:c7:62:19:5f:f3:40:80:c7:eb:61:ac:70:32:07:d4:66: 4b:68:cc:bf:2d:44:87:09:c6:a5:c7:66:8c:08:4b:bf:64:b6: 22:53:2a:01:fe:b7:3a:61:92:50:b5:8f:c4:ac:7e:a4:81:d9: 1c:50:e1:54:7b:2a:3a:66:c9:ae:ae:64:30:bd:ee:a6:77:d8: 34:5f:b5:58:c3:b8:d4:ad:3c:81:c1:08:44:9f:58:27:63:c2: 1c:88:7a:db:bf:ca:d2:7b:4e:b9:2f:1c:89:e9:af:a3:67:df: 3b:e3:9b:fb:77:0d:e1:f7:d9:14:9d:e1:9b:ef:93:b2:95:7b: a4:66:b2:d9:2b:69:53:bc:0a:a3:0c:66:73:6a:27:95:e9:ca: 34:95:07:29:63:ed:f8:d9:1b:48:ec:c6:3d:a7:a9:7e:17:e7: 94:11:73:4b:9c:0f:43:05:ea:48:41:32:1c:82:99:62:1e:68: 76:4e:f2:38:4e:91:d3:23:f5:e2:4d:1d:28:34:78:43:6c:2e: 8c:27:18:82:29:f5:64:5c:2c:c7:c0:ef:64:c0:2f:d2:37:7c: 23:3e:84:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96pP6DTnk6CmTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5 ZWYzMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YzI2M2ZiYWMtODFkOS00OTJjLTk4MzMtYWZmOTI4YjZlZjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWWhA4/iyxPHHXT0pAqtZhev02Yi6fMORORf spHm0dK4rLx+2YQfVe1dedY6Dd8DlUsw6bM1+V+43lzbfDZYZmPea/PWi93KcGBG 5ILeGsIA+W10Hx3sGvcaUi3t1wO+4GAPSoaRyjH+70T0OC+v/HBogkNTSJdsZj8k Dxr+mtrprsKUR0UFLPTaeKhEHuR2Nv3mQFAkBTc4ths/BrCEac4xZphD4MsB/lBH nqDpSZKFJWMwQq7842GySp0EATP2UpFTfeqXJhfYip/G4LsCCD+T6J6rgjmzuoXa reu8zSMOjBUpR5VD3LewkRLOFYzAbFLJMvVTKWjUjsDPqXZlfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHqxltjKCYWUU4hGaXyt69xoagcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3 ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvZWFlMzgyNDktOTQ5Yy0z MzhlLWEzODQtOWY2MWFiODgzOGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWFmN2RmMzUtYzY3Zi00NDBkLTk3 OTktNDYxZTdhODA5ZWYzL2VhZjdkZjM1LWM2N2YtNDQwZC05Nzk5LTQ2MWU3YTgw OWVmMy5jcmwwHwYDVR0jBBgwFoAU2Wzj3bzwBlTPKTIqIy/84RLCWzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFl N2E4MDllZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQM/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYQC24SsF+nanLwPHZmDRn8DWtG1fi5roitX3MEvIJwq0GDn4t7x2IZ X/NAgMfrYaxwMgfUZktozL8tRIcJxqXHZowIS79ktiJTKgH+tzphklC1j8SsfqSB 2RxQ4VR7Kjpmya6uZDC97qZ32DRftVjDuNStPIHBCESfWCdjwhyIetu/ytJ7Trkv HInpr6Nn3zvjm/t3DeH32RSd4Zvvk7KVe6RmstkraVO8CqMMZnNqJ5XpyjSVBylj 7fjZG0jsxj2nqX4X55QRc0ucD0MF6khBMhyCmWIeaHZO8jhOkdMj9eJNHSg0eENs LownGIIp9WRcLMfA72TAL9I3fCM+hJo= -----END CERTIFICATE-----Generated at Mon Sep 21 02:38:26 2026 by rpki-client