$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa File: 7942817f-a176-37e5-8911-6f29c62a1537.roa (raw, json) Hash identifier: BSfWQpcDbT3rY2n/UhYJCmvliSNoSNkP+dNuUTlj2qw= Subject key identifier: CB:E5:C0:0E:5D:10:DE:5E:22:5D:9C:97:D8:F3:EB:6F:FF:9A:FE:E1 Certificate issuer: /CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Certificate serial: 010D0C9F4328584F2D87C3759CB9A723065E1180 Authority key identifier: D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 393885 IP address blocks: 64.71.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:c3:75:9c:b9:a7:23:06:5e:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=173e3480-5891-483c-ab1f-80c061d9e5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cf:a6:7b:a0:51:cd:bd:d6:87:c7:d2:76:8c: bc:0a:07:8f:09:2f:8f:d8:14:c5:4b:76:02:62:fb: 37:df:f7:37:6f:8d:87:07:35:c9:27:46:45:c9:f3: 89:04:06:56:d4:63:64:ca:a7:88:2b:95:5b:e1:6a: ee:6c:4b:4c:4b:36:2f:70:eb:24:66:8d:ba:f9:bc: 26:8e:ec:b5:51:4c:ef:7b:0f:3b:7c:c3:bc:b3:b2: 0c:37:fe:aa:1f:f6:a7:f5:3c:26:5a:6c:0a:2b:af: 32:c4:f2:d3:2f:20:28:04:f3:66:7d:3a:ec:7e:e7: 45:e7:9b:f3:1c:76:a1:2c:00:3f:78:a0:1c:fd:73: 8b:ea:7f:25:08:91:93:78:5d:6c:ee:6a:01:a4:38: 15:8f:de:85:88:bd:fb:5f:c9:05:ea:f7:87:8a:a7: e7:9c:12:dd:84:c3:a1:ad:69:f2:72:5f:6c:bf:06: 30:dd:71:74:04:6d:62:27:a6:eb:f1:9c:dd:71:3d: 22:8f:ea:fe:c4:7f:db:39:f7:c4:5c:a2:b6:6c:48: 2c:ef:3c:f0:dd:84:a2:2c:df:b5:4c:01:71:b1:e8: 1f:7d:98:83:9f:bc:53:53:d0:dc:3e:b9:42:7e:10: 11:8d:74:80:5e:5d:56:bf:e8:de:00:07:1c:0e:8a: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E5:C0:0E:5D:10:DE:5E:22:5D:9C:97:D8:F3:EB:6F:FF:9A:FE:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/7942817f-a176-37e5-8911-6f29c62a1537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.crl X509v3 Authority Key Identifier: keyid:D5:8C:8D:9C:A1:75:58:0A:B6:0A:11:31:D8:45:AA:53:FC:D3:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd7ddfdf-18a0-4bd5-aefc-4fba3e35d66d.cer sbgp-ipAddrBlock: critical IPv4: 64.71.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:82:78:96:4f:77:46:9c:5d:a9:d9:30:b5:6e:f3:78:62:7c: b6:41:f5:9e:93:e0:36:20:da:04:1b:0c:73:65:b3:ce:ab:04: da:b5:cb:cf:05:7c:c4:71:b2:5e:7e:0c:91:f3:59:77:9c:04: 74:64:8f:26:2a:01:0e:f3:35:dd:d5:f2:af:f3:dc:a1:8d:fe: af:b5:bd:ea:67:b9:7d:fb:f2:89:26:d8:5e:e7:9c:ca:7b:4f: 50:24:6d:f0:f5:26:bb:f0:3c:21:d5:e1:61:6b:75:10:36:d3: f0:be:77:65:ea:dd:c2:40:ae:06:74:46:83:01:de:64:7c:53: 96:c2:f9:53:0e:f6:fa:05:3b:e8:3f:38:47:8a:fb:6e:5f:c4: 72:e6:e3:0f:e7:a9:86:c1:cc:16:f7:2a:b2:79:df:14:57:17: 6c:70:cd:6e:b2:6a:b0:40:a0:d7:27:02:fb:fa:86:7d:d5:70: 5d:41:17:2b:ad:e8:bf:fc:4f:6d:86:ae:da:de:48:e5:d7:b1: 5f:91:53:bb:b8:18:07:75:28:80:2e:1a:7f:22:05:70:d7:35: d3:7a:6d:af:ae:57:19:4c:c1:65:15:d0:39:00:ee:c1:f9:06: 24:a3:e2:8b:a1:69:97:dc:21:f2:19:39:ac:e3:cc:60:90:d9: 71:cd:05:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th8N1nLmnIwZeEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Q3ZGRmZGYtMThhMC00YmQ1LWFlZmMtNGZiYTNlMzVk NjZkMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk MTczZTM0ODAtNTg5MS00ODNjLWFiMWYtODBjMDYxZDllNWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8+me6BRzb3Wh8fSdoy8CgePCS+P2BTFS3YC Yvs33/c3b42HBzXJJ0ZFyfOJBAZW1GNkyqeIK5Vb4WrubEtMSzYvcOskZo26+bwm juy1UUzvew87fMO8s7IMN/6qH/an9TwmWmwKK68yxPLTLyAoBPNmfTrsfudF55vz HHahLAA/eKAc/XOL6n8lCJGTeF1s7moBpDgVj96FiL37X8kF6veHiqfnnBLdhMOh rWnycl9svwYw3XF0BG1iJ6br8ZzdcT0ij+r+xH/bOffEXKK2bEgs7zzw3YSiLN+1 TAFxsegffZiDn7xTU9DcPrlCfhARjXSAXl1Wv+jeAAccDopKrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvlwA5dEN5eIl2cl9jz62//mv7hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdk ZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJhM2UzNWQ2NmQvNzk0MjgxN2YtYTE3Ni0z N2U1LTg5MTEtNmYyOWM2MmExNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2Q3ZGRmZGYtMThhMC00YmQ1LWFl ZmMtNGZiYTNlMzVkNjZkL2NkN2RkZmRmLTE4YTAtNGJkNS1hZWZjLTRmYmEzZTM1 ZDY2ZC5jcmwwHwYDVR0jBBgwFoAU1YyNnKF1WAq2ChEx2EWqU/zTW0gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jZDdkZGZkZi0xOGEwLTRiZDUtYWVmYy00ZmJh M2UzNWQ2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQEfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6CeJZPd0acXanZMLVu83hifLZB9Z6T4DYg2gQbDHNls86rBNq1y88F fMRxsl5+DJHzWXecBHRkjyYqAQ7zNd3V8q/z3KGN/q+1vepnuX378okm2F7nnMp7 T1AkbfD1JrvwPCHV4WFrdRA20/C+d2Xq3cJArgZ0RoMB3mR8U5bC+VMO9voFO+g/ OEeK+25fxHLm4w/nqYbBzBb3KrJ53xRXF2xwzW6yarBAoNcnAvv6hn3VcF1BFyut 6L/8T22GrtreSOXXsV+RU7u4GAd1KIAuGn8iBXDXNdN6ba+uVxlMwWUV0DkA7sH5 BiSj4ouhaZfcIfIZOazjzGCQ2XHNBXs= -----END CERTIFICATE-----Generated at Thu Sep 24 22:56:44 2026 by rpki-client