$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/a87b36e3-45d4-315f-a2d5-77c49a02b878.roa File: a87b36e3-45d4-315f-a2d5-77c49a02b878.roa (raw, json) Hash identifier: 4vgWqZafjB65E6NgnX1PoLJgqpbaz/O55ItCWOxv/Lc= Subject key identifier: F8:8F:A3:F7:2F:62:D9:7D:7C:23:C6:D0:D5:A6:5A:45:ED:52:C7:9E Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Certificate serial: 010D0C9F4328584F2ABD2C3E731DA751216F2C00 Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/a87b36e3-45d4-315f-a2d5-77c49a02b878.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 23470 IP address blocks: 65.110.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:2c:3e:73:1d:a7:51:21:6f:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=ee0af32d-86c8-40e6-a18f-890b7c15790c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6b:87:6e:17:c6:3c:6b:e7:70:4e:08:6d:28: 13:dc:26:8a:ab:29:06:16:d7:38:34:d8:75:24:04: f5:42:c1:b5:b9:9f:fe:11:bc:50:54:8b:26:ab:b7: 45:8f:cd:f7:bc:36:45:13:cf:4d:36:c7:0e:19:22: 22:f9:7b:dd:25:46:b5:9e:c5:0d:de:7a:2e:b3:68: 36:f8:b6:37:e7:d2:1f:dc:f9:b9:93:41:75:01:78: a3:39:71:e4:69:99:83:8b:e5:dc:be:99:e5:28:e8: 83:20:16:d4:0b:60:80:d8:69:17:38:b5:15:6a:36: b2:19:5e:73:e3:e0:1f:fe:af:a1:b8:8c:16:be:8e: 3d:be:a9:0a:0f:0c:20:3f:39:5c:93:42:88:f9:e1: 64:d0:24:fb:58:14:94:d6:8c:47:b7:b9:ab:e2:11: 86:d9:09:31:0d:cd:ef:ae:df:d6:62:55:1e:a8:b5: 33:28:9c:c5:0b:fb:02:e4:ae:67:40:98:e0:50:0a: b3:b7:4b:f8:06:2c:64:0c:05:82:c3:a6:9b:2d:db: 79:0f:97:b4:0c:be:0f:2b:d3:aa:a4:3d:8c:f3:85: be:11:03:11:de:9a:65:43:0c:d2:d0:70:f2:eb:30: 8e:35:0d:0c:3e:a8:66:92:db:74:bb:0f:11:35:66: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8F:A3:F7:2F:62:D9:7D:7C:23:C6:D0:D5:A6:5A:45:ED:52:C7:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/a87b36e3-45d4-315f-a2d5-77c49a02b878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl X509v3 Authority Key Identifier: keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer sbgp-ipAddrBlock: critical IPv4: 65.110.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:0f:46:eb:49:96:45:9c:4f:c0:a3:29:bc:90:31:96:01:cd: 77:fb:65:1a:48:7e:4b:85:3e:c9:06:4c:25:2b:85:3b:d0:e8: 9b:33:81:0f:59:3b:10:ec:47:32:d4:5f:e6:8c:4e:3d:3b:08: bf:14:b8:0c:98:62:e4:f1:36:1c:bc:a0:9f:a5:e9:03:d5:71: 68:fc:5a:16:60:8d:6e:12:dd:c0:ec:fa:1e:46:b5:86:77:21: 24:80:88:0b:ab:2c:45:2b:6a:6c:25:23:93:30:d1:25:a8:e6: 3c:62:9c:1c:99:d8:48:9f:b8:ef:12:4b:5d:03:2d:5b:cc:aa: d4:65:42:42:80:f3:60:5a:74:44:58:2d:e0:86:3e:63:bd:f3: b5:b3:19:89:be:52:4d:58:27:e3:60:c3:05:78:a7:83:82:1a: b2:c2:6d:c4:82:fe:0e:89:06:78:67:04:fd:47:66:ec:56:87: 77:cc:47:53:14:a0:01:fc:d0:b4:84:b0:c5:83:0c:ba:52:f4: af:f1:e3:54:75:af:c5:a1:d1:af:4a:a1:c5:cd:82:39:bc:ed: 73:b2:bf:b5:44:df:ae:65:4f:75:10:a1:70:d1:ad:17:58:b9: 1b:6d:15:eb:aa:e1:86:d1:38:47:34:3b:49:64:6b:4d:c0:78: c5:8e:08:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvSw+cx2nUSFvLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3 N2ExMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ZWUwYWYzMmQtODZjOC00MGU2LWExOGYtODkwYjdjMTU3OTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmuHbhfGPGvncE4IbSgT3CaKqykGFtc4NNh1 JAT1QsG1uZ/+EbxQVIsmq7dFj833vDZFE89NNscOGSIi+XvdJUa1nsUN3nous2g2 +LY359If3Pm5k0F1AXijOXHkaZmDi+XcvpnlKOiDIBbUC2CA2GkXOLUVajayGV5z 4+Af/q+huIwWvo49vqkKDwwgPzlck0KI+eFk0CT7WBSU1oxHt7mr4hGG2QkxDc3v rt/WYlUeqLUzKJzFC/sC5K5nQJjgUAqzt0v4BixkDAWCw6abLdt5D5e0DL4PK9Oq pD2M84W+EQMR3pplQwzS0HDy6zCONQ0MPqhmktt0uw8RNWaEdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiPo/cvYtl9fCPG0NWmWkXtUseeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5 NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvYTg3YjM2ZTMtNDVkNC0z MTVmLWEyZDUtNzdjNDlhMDJiODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMPRutJlkWcT8CjKbyQMZYBzXf7ZRpIfkuFPskGTCUrhTvQ6JszgQ9Z OxDsRzLUX+aMTj07CL8UuAyYYuTxNhy8oJ+l6QPVcWj8WhZgjW4S3cDs+h5GtYZ3 ISSAiAurLEUramwlI5Mw0SWo5jxinByZ2EifuO8SS10DLVvMqtRlQkKA82BadERY LeCGPmO987WzGYm+Uk1YJ+NgwwV4p4OCGrLCbcSC/g6JBnhnBP1HZuxWh3fMR1MU oAH80LSEsMWDDLpS9K/x41R1r8Wh0a9KocXNgjm87XOyv7VE365lT3UQoXDRrRdY uRttFeuq4YbROEc0O0lka03AeMWOCM4= -----END CERTIFICATE-----Generated at Mon Sep 21 23:07:09 2026 by rpki-client