$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/5b0fbef2-da6f-35f0-9bad-9c65ba6966f3.roa File: 5b0fbef2-da6f-35f0-9bad-9c65ba6966f3.roa (raw, json) Hash identifier: 7IY/Re8qbghOhlUnc1er/y+BUqaV65lG6ePMWbLdhMo= Subject key identifier: FA:8D:F4:DF:77:DC:7E:FA:CF:75:7D:04:BB:61:3A:DA:1E:02:5C:C8 Certificate issuer: /CN=b8a0e292-3e8f-447b-81c6-cedef4747341 Certificate serial: 010D0C9F4328584F067240B1843539A19C4DC300 Authority key identifier: 83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/5b0fbef2-da6f-35f0-9bad-9c65ba6966f3.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 397058 IP address blocks: 64.202.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:40:b1:84:35:39:a1:9c:4d:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8a0e292-3e8f-447b-81c6-cedef4747341 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=243195c0-50c2-43fb-9b78-fceb4ee6e021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:88:fd:86:74:fd:d8:55:b9:35:4c:21:93:25: 8c:b1:8e:a7:a9:c0:67:3b:d6:e8:c3:de:e7:35:99: c5:de:1a:b3:a1:28:cd:b8:b1:bb:75:60:1d:ab:ff: 53:58:fb:de:7a:2a:3e:e5:7e:ce:50:ae:76:fb:ec: d2:2c:31:cf:65:d3:c8:b4:6a:dc:43:d7:79:57:1f: e8:49:39:9f:45:19:e4:d2:82:24:8c:e9:9f:8e:de: 40:d6:07:22:49:d3:c8:98:2b:c9:c8:48:dc:43:b4: 41:27:fd:34:f0:c4:ce:07:6b:55:77:85:1d:a2:5a: c5:80:42:47:ae:8e:ec:29:28:48:72:3d:98:e5:7c: 1d:cc:eb:33:a9:9c:17:e8:0a:85:51:cc:c0:30:39: d9:da:1b:7a:5c:08:df:4a:bb:d2:f7:75:3e:bb:60: 47:01:9a:7a:9f:e4:86:da:17:5c:8e:7a:21:1c:45: 60:71:87:b4:7f:bd:53:52:80:2e:57:dd:b3:8d:ff: 02:aa:46:32:3b:55:74:5e:4f:40:01:c6:2b:73:3e: f6:da:8b:49:87:d2:26:12:6a:d7:2a:ab:d7:07:63: 6b:a6:2d:5b:8b:a4:65:01:c4:85:2b:40:9e:47:bc: b4:3b:eb:eb:c9:d6:35:db:32:77:9e:87:5c:7a:2d: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8D:F4:DF:77:DC:7E:FA:CF:75:7D:04:BB:61:3A:DA:1E:02:5C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/5b0fbef2-da6f-35f0-9bad-9c65ba6966f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl X509v3 Authority Key Identifier: keyid:83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer sbgp-ipAddrBlock: critical IPv4: 64.202.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:e3:9c:55:ce:46:9c:f3:ec:d8:dc:1b:9e:b0:e8:c1:f7:fb: d0:a7:b6:a5:d2:93:2e:87:f3:ad:d4:14:19:f0:d5:56:62:0e: 13:a8:04:d6:11:22:76:cf:ab:1f:ba:37:6e:43:80:47:a0:59: be:0d:66:a9:fe:8e:2d:b2:d7:9a:f9:99:83:6f:8a:1e:82:3a: 0e:99:c9:b1:58:f5:4b:82:e7:2a:7e:fa:4f:7d:13:2a:b7:70: 7e:0d:e5:bb:e6:80:df:a5:5c:15:86:98:cd:52:11:b4:3a:7a: 27:75:3e:3f:3c:1f:d8:28:d3:de:85:c4:bc:bf:de:c0:45:3c: 7a:f2:cb:82:51:91:f6:ba:1d:d7:f6:c4:54:22:ac:fd:6d:2c: b7:1a:38:62:6d:b0:42:af:20:82:0f:96:ec:fa:ad:52:14:47: d4:b0:c8:2c:3a:dd:27:ee:15:7d:6a:b1:17:32:f5:d4:02:21: 15:4f:63:04:9b:bb:b6:b2:2e:41:a9:de:e8:bd:61:2a:d7:19: 0b:21:18:dd:9c:7f:98:91:47:d1:e8:ea:d8:dd:d3:0e:d1:78: fd:0a:79:f8:94:32:2b:c9:df:f1:28:bf:d5:7b:82:b8:ed:3a: 2e:13:56:c7:87:4c:86:a4:6e:35:29:68:18:f4:b6:54:4a:40: 12:cf:8b:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GckCxhDU5oZxNwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhhMGUyOTItM2U4Zi00NDdiLTgxYzYtY2VkZWY0NzQ3 MzQxMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MjQzMTk1YzAtNTBjMi00M2ZiLTliNzgtZmNlYjRlZTZlMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4j9hnT92FW5NUwhkyWMsY6nqcBnO9bow97n NZnF3hqzoSjNuLG7dWAdq/9TWPveeio+5X7OUK52++zSLDHPZdPItGrcQ9d5Vx/o STmfRRnk0oIkjOmfjt5A1gciSdPImCvJyEjcQ7RBJ/008MTOB2tVd4UdolrFgEJH ro7sKShIcj2Y5XwdzOszqZwX6AqFUczAMDnZ2ht6XAjfSrvS93U+u2BHAZp6n+SG 2hdcjnohHEVgcYe0f71TUoAuV92zjf8CqkYyO1V0Xk9AAcYrcz722otJh9ImEmrX KqvXB2Nrpi1bi6RlAcSFK0CeR7y0O+vrydY12zJ3nodcei3iFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqN9N933H76z3V9BLthOtoeAlzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iOGEw ZTI5Mi0zZThmLTQ0N2ItODFjNi1jZWRlZjQ3NDczNDEvNWIwZmJlZjItZGE2Zi0z NWYwLTliYWQtOWM2NWJhNjk2NmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjhhMGUyOTItM2U4Zi00NDdiLTgx YzYtY2VkZWY0NzQ3MzQxL2I4YTBlMjkyLTNlOGYtNDQ3Yi04MWM2LWNlZGVmNDc0 NzM0MS5jcmwwHwYDVR0jBBgwFoAUg6NsmzDl3oDss6T8QuVSciOI2g8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iOGEwZTI5Mi0zZThmLTQ0N2ItODFjNi1jZWRl ZjQ3NDczNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMraMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErjnFXORpzz7NjcG56w6MH3+9CntqXSky6H863UFBnw1VZiDhOoBNYR InbPqx+6N25DgEegWb4NZqn+ji2y15r5mYNvih6COg6ZybFY9UuC5yp++k99Eyq3 cH4N5bvmgN+lXBWGmM1SEbQ6eid1Pj88H9go096FxLy/3sBFPHryy4JRkfa6Hdf2 xFQirP1tLLcaOGJtsEKvIIIPluz6rVIUR9SwyCw63SfuFX1qsRcy9dQCIRVPYwSb u7ayLkGp3ui9YSrXGQshGN2cf5iRR9Ho6tjd0w7ReP0KefiUMivJ3/Eov9V7grjt Oi4TVseHTIakbjUpaBj0tlRKQBLPi2Q= -----END CERTIFICATE-----Generated at Mon Sep 28 12:32:14 2026 by rpki-client