$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/4ebc2a88-29c7-379c-8e0a-f5734683af8e.roa File: 4ebc2a88-29c7-379c-8e0a-f5734683af8e.roa (raw, json) Hash identifier: yeijHFiXoAAi7F3AFklwMiuKJfED25Dcc7oEKGopNOY= Subject key identifier: 0F:D8:B5:39:86:F5:F7:D4:4C:C0:3D:60:BA:76:80:C4:20:99:6D:1F Certificate issuer: /CN=371eb60e-706e-49df-ab2d-603b6a056c68 Certificate serial: 010D0C9F4328584F0C1FF23EBD016B9A2673E040 Authority key identifier: 89:B1:E1:9B:68:57:B0:61:BF:49:B1:27:1D:20:5F:CF:D3:0F:6F:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/4ebc2a88-29c7-379c-8e0a-f5734683af8e.roa Signing time: Thu 03 Sep 2026 01:49:31 +0000 ROA not before: Thu 03 Sep 2026 01:49:31 +0000 ROA not after: Wed 02 Dec 2026 02:49:31 +0000 asID: 14618 IP address blocks: 64.239.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/371eb60e-706e-49df-ab2d-603b6a056c68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/371eb60e-706e-49df-ab2d-603b6a056c68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:1f:f2:3e:bd:01:6b:9a:26:73:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371eb60e-706e-49df-ab2d-603b6a056c68 Validity Not Before: Sep 3 01:49:31 2026 GMT Not After : Dec 2 02:49:31 2026 GMT Subject: CN=8a2d869a-ccac-44d4-bd8d-0c740e0c8e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:67:b0:94:43:7a:80:9b:83:e8:1f:1a:03:71: 81:2b:70:3d:70:03:b6:66:20:33:1e:9d:01:0d:b0: 01:9a:9d:e5:53:23:f9:8b:c9:27:fb:30:49:af:66: 88:3d:41:e3:91:a7:97:c9:9f:1e:b8:c3:0b:1e:e3: b6:30:e7:af:b3:84:e7:25:89:aa:00:b4:ea:58:9c: c7:ef:2c:40:25:61:00:8a:b3:17:85:29:af:fb:d0: 22:11:d3:b5:f5:2f:0b:3c:48:65:1a:d5:a2:76:9d: 81:1e:6e:76:da:5b:d6:a3:c2:21:f9:68:01:dd:46: 3b:3a:56:49:96:64:a2:1a:9b:da:c9:c3:c1:3b:28: 17:18:6b:68:81:09:2e:96:6c:11:01:fb:16:70:5e: 3a:58:71:41:ce:4a:e1:e4:b0:98:1e:8b:d2:d6:68: 09:ca:9b:c4:8d:e3:61:7f:48:54:c7:b9:8b:c1:bd: cd:a0:af:99:06:da:e7:d2:98:d9:a2:1a:36:d1:30: 34:41:fc:db:9e:61:bf:c8:0e:05:a5:28:f5:54:be: 1c:26:36:8f:67:af:62:e2:ba:4a:f5:14:af:a6:06: a7:5d:b3:af:5b:2a:1b:eb:55:47:9a:85:4c:62:5e: 3e:fd:60:cf:33:10:da:11:c5:7b:4e:c4:dc:37:47: 90:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D8:B5:39:86:F5:F7:D4:4C:C0:3D:60:BA:76:80:C4:20:99:6D:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/4ebc2a88-29c7-379c-8e0a-f5734683af8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68/371eb60e-706e-49df-ab2d-603b6a056c68.crl X509v3 Authority Key Identifier: keyid:89:B1:E1:9B:68:57:B0:61:BF:49:B1:27:1D:20:5F:CF:D3:0F:6F:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/371eb60e-706e-49df-ab2d-603b6a056c68.cer sbgp-ipAddrBlock: critical IPv4: 64.239.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:be:c0:95:e7:d7:62:fe:30:21:00:41:f0:62:92:30:1b:85: de:97:89:81:53:e9:5c:aa:e8:c1:6d:ac:99:36:3c:01:0e:5f: bf:5e:c7:5d:1a:de:af:d0:49:2b:1e:10:b5:6d:92:ce:10:38: 5d:02:96:c8:1d:b7:b2:98:6f:71:16:31:46:20:d1:76:fa:31: 72:c6:fb:4c:b0:ed:e4:08:4c:2e:cb:3e:3f:44:6c:fe:84:17: 19:c2:28:27:3a:8a:d2:08:71:89:8d:6c:6f:7d:64:18:4c:cf: 0d:25:de:c9:26:52:87:db:42:7f:d0:31:99:36:a1:62:d1:64: 38:68:11:36:fa:5c:14:ed:d7:3f:be:e8:08:d1:53:17:a8:ed: 2a:f3:da:32:71:f3:1d:49:09:ca:24:e3:49:92:00:b1:d1:19: f9:97:1d:5a:15:e0:a8:e7:1c:c7:80:30:5e:8f:52:ff:c0:a1: 49:60:43:96:a3:65:af:4f:16:35:c7:84:31:c7:74:11:db:a8: c0:89:63:4c:b9:f6:5b:a9:74:a8:1a:f3:3a:b3:f1:f7:77:6a: 4d:7c:1a:fb:c0:24:e7:1e:a5:b8:b0:a1:3f:91:d6:9a:e3:65: b3:1a:b2:40:4e:01:ca:96:bf:58:a7:0a:ac:8b:7a:68:17:39: 8b:00:9d:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MH/I+vQFrmiZz4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcxZWI2MGUtNzA2ZS00OWRmLWFiMmQtNjAzYjZhMDU2 YzY4MB4XDTI2MDkwMzAxNDkzMVoXDTI2MTIwMjAyNDkzMVowLzEtMCsGA1UEAxMk OGEyZDg2OWEtY2NhYy00NGQ0LWJkOGQtMGM3NDBlMGM4ZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGewlEN6gJuD6B8aA3GBK3A9cAO2ZiAzHp0B DbABmp3lUyP5i8kn+zBJr2aIPUHjkaeXyZ8euMMLHuO2MOevs4TnJYmqALTqWJzH 7yxAJWEAirMXhSmv+9AiEdO19S8LPEhlGtWidp2BHm522lvWo8Ih+WgB3UY7OlZJ lmSiGpvaycPBOygXGGtogQkulmwRAfsWcF46WHFBzkrh5LCYHovS1mgJypvEjeNh f0hUx7mLwb3NoK+ZBtrn0pjZoho20TA0QfzbnmG/yA4FpSj1VL4cJjaPZ69i4rpK 9RSvpganXbOvWyob61VHmoVMYl4+/WDPMxDaEcV7TsTcN0eQGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/YtTmG9ffUTMA9YLp2gMQgmW0fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zNzFl YjYwZS03MDZlLTQ5ZGYtYWIyZC02MDNiNmEwNTZjNjgvNGViYzJhODgtMjljNy0z NzljLThlMGEtZjU3MzQ2ODNhZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMzcxZWI2MGUtNzA2ZS00OWRmLWFi MmQtNjAzYjZhMDU2YzY4LzM3MWViNjBlLTcwNmUtNDlkZi1hYjJkLTYwM2I2YTA1 NmM2OC5jcmwwHwYDVR0jBBgwFoAUibHhm2hXsGG/SbEnHSBfz9MPb84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8zNzFlYjYwZS03MDZlLTQ5ZGYtYWIyZC02MDNi NmEwNTZjNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO/lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2+wJXn12L+MCEAQfBikjAbhd6XiYFT6Vyq6MFtrJk2PAEOX79ex10a 3q/QSSseELVtks4QOF0Clsgdt7KYb3EWMUYg0Xb6MXLG+0yw7eQITC7LPj9EbP6E FxnCKCc6itIIcYmNbG99ZBhMzw0l3skmUofbQn/QMZk2oWLRZDhoETb6XBTt1z++ 6AjRUxeo7Srz2jJx8x1JCcok40mSALHRGfmXHVoV4KjnHMeAMF6PUv/AoUlgQ5aj Za9PFjXHhDHHdBHbqMCJY0y59lupdKga8zqz8fd3ak18GvvAJOcepbiwoT+R1prj ZbMaskBOAcqWv1inCqyLemgXOYsAne8= -----END CERTIFICATE-----Generated at Tue Sep 22 22:51:09 2026 by rpki-client