$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e3d9ed9d-2d97-37d7-b0c2-af883421aec9.roa File: e3d9ed9d-2d97-37d7-b0c2-af883421aec9.roa (raw, json) Hash identifier: kLECQJcg+YhhuYAICic8jVxxOu2FkFz/nQcmPbZvafo= Subject key identifier: 4F:2E:09:35:01:45:06:88:EF:07:07:96:97:B4:A5:97:AC:3D:46:33 Certificate issuer: /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Certificate serial: 010D0C9F4328584F1B623DF0167A1684353EFD80 Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e3d9ed9d-2d97-37d7-b0c2-af883421aec9.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 13213 IP address blocks: 68.169.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:3d:f0:16:7a:16:84:35:3e:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=aa26540f-a99e-4db8-bdcc-d25d2dbb9d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:8b:c6:d8:a6:bc:02:3c:d6:56:de:4f:03: 85:a9:af:40:40:eb:bf:71:da:aa:92:bf:4e:6f:23: 3a:e6:11:1a:08:ac:ca:b5:26:f6:cc:48:39:d0:95: 35:f3:89:90:5a:bb:21:db:37:8e:e1:e3:1c:fb:b3: 55:90:7c:a5:c4:a6:91:3d:ff:08:d7:7c:bb:32:22: 53:27:7d:3a:ce:05:43:3a:c5:3a:0d:98:f1:45:a2: d5:c3:ec:fa:ca:b4:7e:75:d2:04:fa:93:3d:d4:a2: f4:eb:52:26:38:f7:e1:81:77:d6:5b:d9:41:06:13: 54:99:c5:21:6a:82:9e:ad:f8:b1:65:0a:df:58:c0: 6f:dc:0a:a9:d8:c5:13:8d:72:d0:28:73:e9:bb:bb: 33:54:66:df:3c:03:50:90:79:17:16:ea:9c:9f:62: f3:c7:55:41:6a:ca:b2:21:01:87:d6:b5:87:84:58: 89:d4:ad:a6:83:71:b6:97:b0:50:33:ce:41:92:61: 94:9d:bf:38:67:45:c2:78:c0:a0:7e:45:71:06:f7: 35:ce:e3:5c:00:6a:dc:f8:61:32:d2:df:ad:8a:4a: 36:2d:99:8d:4f:4c:53:85:58:1a:3a:e0:2a:67:62: 10:dc:ed:50:f8:29:1b:be:1b:01:64:a1:a0:d7:05: 25:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:2E:09:35:01:45:06:88:EF:07:07:96:97:B4:A5:97:AC:3D:46:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/e3d9ed9d-2d97-37d7-b0c2-af883421aec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl X509v3 Authority Key Identifier: keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer sbgp-ipAddrBlock: critical IPv4: 68.169.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:5e:23:f9:dd:7d:85:bf:e6:ad:50:d9:4d:71:d6:f7:50:1e: fa:9b:d7:5c:6c:98:9c:31:8f:3f:b5:f8:86:e5:1d:07:3b:f9: 9e:a0:12:18:3b:bb:e6:fd:64:cd:df:94:3b:c5:ab:82:ce:d2: 88:56:2c:b1:86:18:82:83:a8:63:67:a3:59:0f:09:07:b3:f6: 44:83:08:7c:3c:64:48:25:fb:60:19:0e:3b:57:7c:37:4a:c9: 7c:54:a6:27:1a:2a:8a:59:fa:42:ac:c3:bd:e2:75:43:61:a2: 28:42:d1:e7:58:9c:ad:46:20:2a:52:7e:33:77:2b:34:59:d3: 7a:42:1c:34:45:c3:fe:cc:95:59:51:c4:40:4f:0d:41:2d:3e: d7:88:48:fa:4a:95:d3:19:07:18:f1:c8:e7:dd:9f:0d:37:52: 76:67:51:9e:26:47:cc:f8:53:1d:f7:b5:aa:dc:94:01:9c:dc: a6:cf:f1:b6:45:63:f4:fa:5a:07:76:05:4c:53:fa:54:2f:16: 23:02:f9:de:fc:9d:da:00:f8:05:7d:61:a0:66:a5:a5:bf:0c: 76:4c:95:5e:b9:86:b3:41:e2:2c:37:3d:2b:93:a1:b7:38:15: b6:15:02:95:db:3e:4c:a3:e8:7c:e9:6c:52:8d:66:36:41:86: 00:b2:b4:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYj3wFnoWhDU+/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTY3YTk4YjAtMTAwZi00ZTY5LThhOWYtYmNlYWRiN2U5 YWFlMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YWEyNjU0MGYtYTk5ZS00ZGI4LWJkY2MtZDI1ZDJkYmI5ZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU2LxtimvAI81lbeTwOFqa9AQOu/cdqqkr9O byM65hEaCKzKtSb2zEg50JU184mQWrsh2zeO4eMc+7NVkHylxKaRPf8I13y7MiJT J306zgVDOsU6DZjxRaLVw+z6yrR+ddIE+pM91KL061ImOPfhgXfWW9lBBhNUmcUh aoKerfixZQrfWMBv3Aqp2MUTjXLQKHPpu7szVGbfPANQkHkXFuqcn2Lzx1VBasqy IQGH1rWHhFiJ1K2mg3G2l7BQM85BkmGUnb84Z0XCeMCgfkVxBvc1zuNcAGrc+GEy 0t+tiko2LZmNT0xThVgaOuAqZ2IQ3O1Q+CkbvhsBZKGg1wUl4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8uCTUBRQaI7wcHlpe0pZesPUYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Njdh OThiMC0xMDBmLTRlNjktOGE5Zi1iY2VhZGI3ZTlhYWUvZTNkOWVkOWQtMmQ5Ny0z N2Q3LWIwYzItYWY4ODM0MjFhZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTY3YTk4YjAtMTAwZi00ZTY5LThh OWYtYmNlYWRiN2U5YWFlLzk2N2E5OGIwLTEwMGYtNGU2OS04YTlmLWJjZWFkYjdl OWFhZS5jcmwwHwYDVR0jBBgwFoAU11g4vsgJB/HhoBW3h78hrABJOTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NjdhOThiMC0xMDBmLTRlNjktOGE5Zi1iY2Vh ZGI3ZTlhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVeI/ndfYW/5q1Q2U1x1vdQHvqb11xsmJwxjz+1+IblHQc7+Z6gEhg7 u+b9ZM3flDvFq4LO0ohWLLGGGIKDqGNno1kPCQez9kSDCHw8ZEgl+2AZDjtXfDdK yXxUpicaKopZ+kKsw73idUNhoihC0edYnK1GICpSfjN3KzRZ03pCHDRFw/7MlVlR xEBPDUEtPteISPpKldMZBxjxyOfdnw03UnZnUZ4mR8z4Ux33tarclAGc3KbP8bZF Y/T6Wgd2BUxT+lQvFiMC+d78ndoA+AV9YaBmpaW/DHZMlV65hrNB4iw3PSuTobc4 FbYVApXbPkyj6HzpbFKNZjZBhgCytC8= -----END CERTIFICATE-----Generated at Tue Sep 22 17:28:03 2026 by rpki-client