$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/d917b303-6fa9-3bb7-a3a2-f70e9989db01.roa File: d917b303-6fa9-3bb7-a3a2-f70e9989db01.roa (raw, json) Hash identifier: 9jxsaVCzKu2Jhznu2VbNvvUW1lN/fSDzOIjpxgdmQ1o= Subject key identifier: A3:44:96:7F:70:20:F2:68:4E:DB:B2:85:95:66:EB:EE:66:D5:F8:E1 Certificate issuer: /CN=65b75871-7632-4a71-a4a9-41f38235fc29 Certificate serial: 010D0C9F4328584F74B828C0A9454EF797529400 Authority key identifier: C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/d917b303-6fa9-3bb7-a3a2-f70e9989db01.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 13431 IP address blocks: 174.138.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:28:c0:a9:45:4e:f7:97:52:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b75871-7632-4a71-a4a9-41f38235fc29 Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=d66f9df2-b2bd-487a-be47-ee2cd07bea1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:04:3e:63:10:aa:7e:d2:22:a3:c6:8a:5a:b2: f7:03:88:be:b8:88:f9:28:cd:27:be:e1:c6:c7:9a: 66:52:83:2e:87:b4:31:d3:b4:46:e3:fb:cc:0d:5c: c2:34:47:f1:72:bb:5f:47:a1:63:8e:d3:c8:73:3b: c5:84:f4:91:28:63:ff:97:d0:e7:d6:83:39:26:1f: c2:05:e5:e5:73:b6:b6:fb:c9:e1:46:97:19:69:ce: 1c:37:76:03:40:92:f1:86:6f:c6:f2:0e:3f:f5:a8: 5e:74:1e:4d:b0:fa:1a:0c:01:22:2f:74:40:ba:a7: 5d:b3:c4:a2:ef:29:d2:6f:bc:f9:3b:5a:06:00:c4: 62:43:d1:c8:55:a6:bb:e5:32:d4:b8:55:63:43:ab: d0:88:36:5c:c0:47:46:83:db:8c:32:51:31:e8:47: 36:c6:d8:79:7b:af:be:d4:1c:91:9e:0c:2c:64:c8: 15:65:6a:9b:6b:3b:50:5f:bf:4a:33:0b:fe:3f:a8: e9:37:93:82:e1:cd:ac:ea:a2:5d:4c:c8:81:f7:8e: e5:9e:62:03:fe:97:5f:d0:19:c0:70:53:a6:44:fc: 07:0e:c2:14:5e:87:43:84:a4:7a:99:94:bc:ee:6a: a2:a8:3e:d2:8b:4f:2e:ec:44:6a:60:00:f8:f3:61: e0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:44:96:7F:70:20:F2:68:4E:DB:B2:85:95:66:EB:EE:66:D5:F8:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/d917b303-6fa9-3bb7-a3a2-f70e9989db01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29/65b75871-7632-4a71-a4a9-41f38235fc29.crl X509v3 Authority Key Identifier: keyid:C7:B0:89:1E:4F:D5:22:2F:C1:82:7E:3E:CE:5D:85:1C:29:8D:3D:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65b75871-7632-4a71-a4a9-41f38235fc29.cer sbgp-ipAddrBlock: critical IPv4: 174.138.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:31:d0:fd:b2:41:6f:22:02:7b:91:f2:44:64:38:9e:c6:53: 83:0f:2b:94:a6:fe:3f:f8:f5:53:b5:38:da:44:18:53:83:66: fa:5e:2b:a0:39:54:5a:21:54:4e:b4:61:59:25:b9:f0:42:0e: 03:6a:8e:e3:35:92:e9:fa:43:ce:c9:bb:27:e1:dd:17:0c:0d: 75:41:a8:5f:61:6b:fa:55:5c:13:91:fe:6d:8b:00:3b:a3:d5: af:76:99:12:19:36:7e:b4:58:9c:e2:ee:62:18:be:88:44:53: 7f:48:92:d2:1e:f4:90:72:4e:4b:cf:15:5c:fe:d3:95:ac:3c: 6b:5c:b4:a9:c8:bb:5d:cc:1b:12:af:be:4e:33:f4:29:c8:d8: 3c:a0:2c:0a:eb:3a:2c:56:f3:40:23:a6:8f:2e:f9:d3:b8:87: cf:63:02:62:39:b6:f0:c3:ca:9c:34:02:f9:33:31:f4:6d:b8: 1e:4c:48:b5:1f:0d:46:1b:0b:3a:da:54:c1:dd:b3:04:d1:72: c1:93:ed:a5:89:41:ce:8e:19:34:3e:3d:32:06:aa:c0:81:88: 81:95:07:0a:8a:2a:bc:98:2e:e3:ef:55:38:b3:41:93:61:be: b5:33:8d:61:4a:e6:1c:08:0e:97:9e:d5:a2:1c:b0:54:ad:10: b4:13:d5:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uCjAqUVO95dSlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjViNzU4NzEtNzYzMi00YTcxLWE0YTktNDFmMzgyMzVm YzI5MB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk ZDY2ZjlkZjItYjJiZC00ODdhLWJlNDctZWUyY2QwN2JlYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgQ+YxCqftIio8aKWrL3A4i+uIj5KM0nvuHG x5pmUoMuh7Qx07RG4/vMDVzCNEfxcrtfR6FjjtPIczvFhPSRKGP/l9Dn1oM5Jh/C BeXlc7a2+8nhRpcZac4cN3YDQJLxhm/G8g4/9ahedB5NsPoaDAEiL3RAuqdds8Si 7ynSb7z5O1oGAMRiQ9HIVaa75TLUuFVjQ6vQiDZcwEdGg9uMMlEx6Ec2xth5e6++ 1ByRngwsZMgVZWqbaztQX79KMwv+P6jpN5OC4c2s6qJdTMiB947lnmID/pdf0BnA cFOmRPwHDsIUXodDhKR6mZS87mqiqD7Si08u7ERqYAD482HggQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNEln9wIPJoTtuyhZVm6+5m1fjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWI3 NTg3MS03NjMyLTRhNzEtYTRhOS00MWYzODIzNWZjMjkvZDkxN2IzMDMtNmZhOS0z YmI3LWEzYTItZjcwZTk5ODlkYjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjViNzU4NzEtNzYzMi00YTcxLWE0 YTktNDFmMzgyMzVmYzI5LzY1Yjc1ODcxLTc2MzItNGE3MS1hNGE5LTQxZjM4MjM1 ZmMyOS5jcmwwHwYDVR0jBBgwFoAUx7CJHk/VIi/Bgn4+zl2FHCmNPeAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NWI3NTg3MS03NjMyLTRhNzEtYTRhOS00MWYz ODIzNWZjMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIx0P2yQW8iAnuR8kRkOJ7GU4MPK5Sm/j/49VO1ONpEGFODZvpeK6A5 VFohVE60YVklufBCDgNqjuM1kun6Q87Juyfh3RcMDXVBqF9ha/pVXBOR/m2LADuj 1a92mRIZNn60WJzi7mIYvohEU39IktIe9JByTkvPFVz+05WsPGtctKnIu13MGxKv vk4z9CnI2DygLArrOixW80Ajpo8u+dO4h89jAmI5tvDDypw0AvkzMfRtuB5MSLUf DUYbCzraVMHdswTRcsGT7aWJQc6OGTQ+PTIGqsCBiIGVBwqKKryYLuPvVTizQZNh vrUzjWFK5hwIDpee1aIcsFStELQT1eU= -----END CERTIFICATE-----Generated at Sun Oct 11 20:50:33 2026 by rpki-client