$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/df2cf78d-c7b0-3f2e-9c70-fdd8078a3351.roa File: df2cf78d-c7b0-3f2e-9c70-fdd8078a3351.roa (raw, json) Hash identifier: NzKLfCDSEORR9DwbIs56eBETNdMheJMPuvqQhS5Cxlc= Subject key identifier: D4:FE:6C:11:4D:F9:F3:04:79:B6:37:D2:0C:8A:ED:73:DA:01:AA:35 Certificate issuer: /CN=e0647553-32ca-48b6-be58-d6c7f475e654 Certificate serial: 010D0C9F4328584F3E47E89EA795B60D888F1370 Authority key identifier: 3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/df2cf78d-c7b0-3f2e-9c70-fdd8078a3351.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 7784 IP address blocks: 65.79.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e8:9e:a7:95:b6:0d:88:8f:13:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0647553-32ca-48b6-be58-d6c7f475e654 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=6fdcdcbb-231c-4465-b55e-4a4cc6e10137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:32:2b:73:d8:0c:02:bb:b0:e5:40:a5:39:c3: 77:2a:43:94:a4:88:ef:cc:6b:c5:c3:49:f0:00:c4: 31:30:26:35:1c:52:35:4f:6f:57:5c:50:67:8a:7a: 2d:61:f3:3a:b9:2b:74:20:10:83:13:64:94:e4:d3: 7b:d6:3b:8f:37:18:a8:9f:ca:84:6b:1c:c3:57:e7: 2b:57:d9:56:94:d8:f5:dc:a8:a3:28:da:d7:b4:db: e8:d3:71:d3:b0:b3:b8:a2:6c:68:2b:51:72:0b:4b: 2c:39:72:af:48:21:2b:d6:29:c8:68:25:da:87:88: 29:01:3b:cd:4e:1a:19:86:1f:4b:76:a8:e4:6d:fd: d5:79:77:71:80:00:6c:51:19:bc:b4:c9:56:a5:4a: db:e1:e6:4a:42:80:19:7f:a1:65:48:df:af:36:8c: 1a:ef:4a:6b:99:b4:89:c2:1b:f7:1c:cc:ea:44:97: 61:be:1d:db:4c:47:fc:4b:04:98:e4:8b:0c:06:e0: ec:2f:f3:d6:dd:56:98:0f:24:06:45:a0:b5:63:25: 27:b0:7a:ae:fd:89:de:10:a0:fd:41:fc:62:0d:94: 0c:7b:4b:e7:40:48:d0:bb:9d:15:c9:b3:b8:1f:68: cf:2e:63:b9:5a:e3:96:dd:ef:95:c3:a0:1b:34:87: 9b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FE:6C:11:4D:F9:F3:04:79:B6:37:D2:0C:8A:ED:73:DA:01:AA:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/df2cf78d-c7b0-3f2e-9c70-fdd8078a3351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl X509v3 Authority Key Identifier: keyid:3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer sbgp-ipAddrBlock: critical IPv4: 65.79.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:7c:e9:59:b7:94:ca:1a:71:99:3f:b7:96:1a:2c:ce:0f:3f: dd:d3:cc:18:e9:56:55:4f:66:22:da:28:7e:35:d8:b3:5d:42: 3b:50:e5:4e:ed:c2:80:66:a4:c6:e2:17:43:48:4e:3e:b3:90: 03:5b:59:24:ed:74:4d:ef:27:8a:aa:c1:cb:31:16:75:50:2b: 3a:d8:d9:cc:75:8c:c2:2d:bb:a5:a0:08:aa:1e:ca:31:4f:7e: f7:45:d9:25:d5:f3:ad:ac:c6:de:64:77:39:49:b3:c5:0d:65: 19:90:eb:96:b6:99:84:c7:c4:17:d7:4c:5a:1c:b1:b7:f4:82: dd:6d:a8:d6:d8:63:11:bf:78:61:3d:23:04:89:3e:44:6a:1f: a1:6d:18:b0:56:3a:ff:50:c3:35:02:ea:78:be:0e:09:fc:f6: a5:6e:ac:de:64:f4:ef:7e:2e:ab:ee:f4:c2:a6:19:77:2e:e9: 5a:52:6d:66:8d:87:a3:22:af:30:2e:c3:83:2a:40:a5:77:b6: be:ee:09:62:c5:cf:2a:6e:b2:01:2e:1f:0b:ef:e6:08:09:0f: 74:ed:1a:63:03:ab:67:96:60:ac:25:d9:8a:aa:ed:90:30:3a: 61:d4:bf:79:43:51:0a:70:0b:2c:5b:2a:98:96:21:04:18:5c: 77:4d:ae:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+iep5W2DYiPE3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA2NDc1NTMtMzJjYS00OGI2LWJlNTgtZDZjN2Y0NzVl NjU0MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk NmZkY2RjYmItMjMxYy00NDY1LWI1NWUtNGE0Y2M2ZTEwMTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzIrc9gMAruw5UClOcN3KkOUpIjvzGvFw0nw AMQxMCY1HFI1T29XXFBninotYfM6uSt0IBCDE2SU5NN71juPNxion8qEaxzDV+cr V9lWlNj13KijKNrXtNvo03HTsLO4omxoK1FyC0ssOXKvSCEr1inIaCXah4gpATvN ThoZhh9Ldqjkbf3VeXdxgABsURm8tMlWpUrb4eZKQoAZf6FlSN+vNowa70prmbSJ whv3HMzqRJdhvh3bTEf8SwSY5IsMBuDsL/PW3VaYDyQGRaC1YyUnsHqu/YneEKD9 QfxiDZQMe0vnQEjQu50VybO4H2jPLmO5WuOW3e+Vw6AbNIeb3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNT+bBFN+fMEebY30gyK7XPaAao1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMDY0 NzU1My0zMmNhLTQ4YjYtYmU1OC1kNmM3ZjQ3NWU2NTQvZGYyY2Y3OGQtYzdiMC0z ZjJlLTljNzAtZmRkODA3OGEzMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTA2NDc1NTMtMzJjYS00OGI2LWJl NTgtZDZjN2Y0NzVlNjU0L2UwNjQ3NTUzLTMyY2EtNDhiNi1iZTU4LWQ2YzdmNDc1 ZTY1NC5jcmwwHwYDVR0jBBgwFoAUPeqHK+uoJ4iQ/FpjZA/KjxDA/kcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMDY0NzU1My0zMmNhLTQ4YjYtYmU1OC1kNmM3 ZjQ3NWU2NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQU/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd86Vm3lMoacZk/t5YaLM4PP93TzBjpVlVPZiLaKH412LNdQjtQ5U7t woBmpMbiF0NITj6zkANbWSTtdE3vJ4qqwcsxFnVQKzrY2cx1jMItu6WgCKoeyjFP fvdF2SXV862sxt5kdzlJs8UNZRmQ65a2mYTHxBfXTFocsbf0gt1tqNbYYxG/eGE9 IwSJPkRqH6FtGLBWOv9QwzUC6ni+Dgn89qVurN5k9O9+Lqvu9MKmGXcu6VpSbWaN h6MirzAuw4MqQKV3tr7uCWLFzypusgEuHwvv5ggJD3TtGmMDq2eWYKwl2Yqq7ZAw OmHUv3lDUQpwCyxbKpiWIQQYXHdNrmE= -----END CERTIFICATE-----Generated at Mon Sep 28 05:50:42 2026 by rpki-client