$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa File: 3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa (raw, json) Hash identifier: 5vH8POd30iD3DmsxMQFwYiBCOKKDfAShhqo0piNK37E= Subject key identifier: 89:35:E1:21:75:A7:44:60:B8:A4:CE:E7:AF:B5:22:8C:44:AC:F2:E0 Certificate issuer: /CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Certificate serial: 010D0C9F4328584F6C5839E77AEB4056D4027000 Authority key identifier: D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 199.30.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:39:e7:7a:eb:40:56:d4:02:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064b1cb7-5fb2-4a39-b431-c1397f63a818 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=c504d72e-0442-40e7-97ef-ff9fe93983c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3b:68:3f:74:6c:9d:62:6f:3a:3c:d1:25:72: f3:15:32:7c:32:7c:32:49:2d:f7:60:ca:fc:11:9f: b7:bb:04:2b:b8:94:cd:8a:85:f8:ae:5a:0f:fe:52: e3:ba:eb:d2:17:92:6e:a0:e4:66:75:91:fd:f0:94: 55:4a:9f:5b:4f:3a:4e:da:88:34:aa:e8:6c:15:18: 98:c1:d2:80:e6:f1:11:27:9a:60:38:57:65:8a:b9: cd:b7:c5:f4:bc:98:05:9d:a8:d0:76:fe:c6:22:7a: 8c:30:ae:bd:b9:ab:0b:d0:38:c9:e2:64:2b:90:78: 94:ea:d0:c1:7e:ca:f6:4b:bf:8f:13:45:54:79:61: a3:bc:f0:ec:f3:a1:01:88:ce:0a:7d:f8:16:ce:aa: da:0d:1a:7c:65:18:dd:0d:62:8d:e7:31:df:42:93: 8c:bf:cd:d2:50:88:4a:30:aa:67:13:3f:01:f9:c3: 4b:7c:e6:ff:e7:2b:87:8c:57:01:c8:84:5d:33:d4: 40:42:2e:9c:b7:3e:74:79:da:ca:94:61:bd:55:f4: 91:79:ed:6a:ba:64:3d:74:f9:e4:86:ac:03:db:61: c7:80:2f:62:b4:f4:3a:bd:1b:50:56:7e:fa:e8:0c: 6b:ca:f6:8a:46:2f:0b:13:59:f1:b7:5d:07:26:b5: 6a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:35:E1:21:75:A7:44:60:B8:A4:CE:E7:AF:B5:22:8C:44:AC:F2:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/3988e5ad-c1f3-3a29-b196-70b296a3f87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818/064b1cb7-5fb2-4a39-b431-c1397f63a818.crl X509v3 Authority Key Identifier: keyid:D5:3E:2F:10:B5:BB:70:A1:20:B9:95:87:59:A4:9C:EA:98:D4:D4:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/064b1cb7-5fb2-4a39-b431-c1397f63a818.cer sbgp-ipAddrBlock: critical IPv4: 199.30.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f0:e5:48:e6:bf:97:f3:c2:4c:62:5b:f9:1b:72:52:79:e7: 7c:bb:47:fe:00:80:51:d3:d2:0d:a9:fe:77:9e:e6:2f:2e:8f: 5e:7d:99:c6:a2:59:a1:c9:70:e2:00:8e:e5:c8:25:76:2f:80: 28:af:83:97:66:5e:c4:ce:c1:d7:a3:e3:d4:0f:c8:b7:b1:c5: 70:ea:a6:4b:03:35:15:a2:e0:3a:36:62:fd:51:2e:c9:9a:87: 0b:a8:18:c5:0a:2e:eb:b5:0a:de:80:a1:40:fd:2d:73:3f:5f: 39:1d:ab:e5:e2:86:67:94:ac:38:23:cc:37:a6:e9:82:2c:b4: ac:3d:e3:5b:11:21:43:18:40:f6:b3:fa:8a:1a:c5:ca:99:fe: 02:b2:69:1b:1c:76:ec:97:f5:f3:e6:f5:79:2c:91:4b:6e:15: cf:fe:80:af:fa:dd:3c:bc:8d:00:de:1b:b0:c0:40:c3:84:4d: cc:96:30:d3:94:36:1d:7e:1e:0b:3f:39:fb:23:20:cb:6f:7a: b8:3f:6e:3b:3a:87:ba:96:d9:13:f2:68:45:11:cf:c1:b5:90: 30:ab:dc:63:0a:73:2c:5d:ad:85:28:67:25:c9:e5:e9:39:2c: ec:33:60:83:cc:c9:fb:bf:f0:ce:fd:04:08:6a:49:e9:b2:86: 6c:67:09:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDnneutAVtQCcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY0YjFjYjctNWZiMi00YTM5LWI0MzEtYzEzOTdmNjNh ODE4MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk YzUwNGQ3MmUtMDQ0Mi00MGU3LTk3ZWYtZmY5ZmU5Mzk4M2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzztoP3RsnWJvOjzRJXLzFTJ8MnwySS33YMr8 EZ+3uwQruJTNioX4rloP/lLjuuvSF5JuoORmdZH98JRVSp9bTzpO2og0quhsFRiY wdKA5vERJ5pgOFdlirnNt8X0vJgFnajQdv7GInqMMK69uasL0DjJ4mQrkHiU6tDB fsr2S7+PE0VUeWGjvPDs86EBiM4KffgWzqraDRp8ZRjdDWKN5zHfQpOMv83SUIhK MKpnEz8B+cNLfOb/5yuHjFcByIRdM9RAQi6ctz50edrKlGG9VfSRee1qumQ9dPnk hqwD22HHgC9itPQ6vRtQVn766AxryvaKRi8LE1nxt10HJrVqdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIk14SF1p0RguKTO56+1IoxErPLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRi MWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5N2Y2M2E4MTgvMzk4OGU1YWQtYzFmMy0z YTI5LWIxOTYtNzBiMjk2YTNmODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDY0YjFjYjctNWZiMi00YTM5LWI0 MzEtYzEzOTdmNjNhODE4LzA2NGIxY2I3LTVmYjItNGEzOS1iNDMxLWMxMzk3ZjYz YTgxOC5jcmwwHwYDVR0jBBgwFoAU1T4vELW7cKEguZWHWaSc6pjU1OswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNjRiMWNiNy01ZmIyLTRhMzktYjQzMS1jMTM5 N2Y2M2E4MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxx6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTw5Ujmv5fzwkxiW/kbclJ553y7R/4AgFHT0g2p/nee5i8uj159mcai WaHJcOIAjuXIJXYvgCivg5dmXsTOwdej49QPyLexxXDqpksDNRWi4Do2Yv1RLsma hwuoGMUKLuu1Ct6AoUD9LXM/Xzkdq+XihmeUrDgjzDem6YIstKw941sRIUMYQPaz +ooaxcqZ/gKyaRscduyX9fPm9XkskUtuFc/+gK/63Ty8jQDeG7DAQMOETcyWMNOU Nh1+Hgs/OfsjIMtverg/bjs6h7qW2RPyaEURz8G1kDCr3GMKcyxdrYUoZyXJ5ek5 LOwzYIPMyfu/8M79BAhqSemyhmxnCaQ= -----END CERTIFICATE-----Generated at Sun Oct 11 11:07:19 2026 by rpki-client