$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa File: 03d609bb-e0d2-3ffa-8996-b2eac543f536.roa (raw, json) Hash identifier: gIToT4XqTr/9AeCSEtTIEKuU5FsfvR9n7A7vC8XAJNs= Subject key identifier: 8C:7B:BA:A8:D5:7B:90:76:AD:2B:F6:E2:19:2A:AD:53:75:17:52:42 Certificate issuer: /CN=65df72a5-f0da-4c64-953a-15a62d5ca3b0 Certificate serial: 010D0C9F4328584F4C3D3C69FCFA534D9BDB5700 Authority key identifier: C3:F7:ED:6B:01:E3:63:27:BC:9B:BA:09:FA:0B:89:B4:83:CF:97:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30417 IP address blocks: 172.81.4.0/22 maxlen: 24 192.64.196.0/23 maxlen: 24 199.85.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:3c:69:fc:fa:53:4d:9b:db:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65df72a5-f0da-4c64-953a-15a62d5ca3b0 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=02b6228f-4438-40b1-9b7f-e72f43c48c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b6:3c:c1:94:01:ac:10:a4:81:15:65:1a:76: ac:05:f6:c0:fe:cf:f8:98:41:cb:53:13:0c:60:f0: ee:a1:9f:da:51:02:46:8e:e7:bc:06:b8:61:17:67: 86:50:6d:0e:73:f9:06:12:8d:36:11:ab:21:6a:ff: 0a:1f:ad:b5:8a:ef:0a:b6:84:b0:49:c2:c8:b5:b0: 3f:64:f1:64:30:26:e4:27:9c:9e:86:fe:b1:ff:57: 20:df:41:4e:e9:34:f5:7b:2e:ff:f9:92:7a:5f:d2: e2:a1:89:19:dd:5a:2b:49:02:73:ba:a6:59:b8:7f: aa:90:a3:d0:84:d8:8b:e2:45:0b:9a:59:c2:2b:4d: d0:d4:2e:5e:a5:bc:50:e9:8d:02:d0:15:65:9a:76: e1:28:ef:98:0b:ca:dc:f5:81:2a:a2:91:13:cc:e0: ba:06:e4:5d:63:9b:3f:f6:64:45:02:87:32:5c:d4: a9:cf:a6:51:51:8e:35:89:c4:04:47:e9:2c:23:9e: 90:24:f6:1d:40:5e:9e:3b:75:d3:e1:74:0a:b0:be: 71:de:48:cb:a3:b4:1d:f4:18:96:60:87:42:8c:a1: c1:07:d5:4f:4f:95:bb:15:95:0a:38:e8:0d:de:d4: ca:5e:bf:19:85:a7:3d:ff:8d:e8:b3:0b:ab:ea:45: 3f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7B:BA:A8:D5:7B:90:76:AD:2B:F6:E2:19:2A:AD:53:75:17:52:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/03d609bb-e0d2-3ffa-8996-b2eac543f536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0/65df72a5-f0da-4c64-953a-15a62d5ca3b0.crl X509v3 Authority Key Identifier: keyid:C3:F7:ED:6B:01:E3:63:27:BC:9B:BA:09:FA:0B:89:B4:83:CF:97:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/65df72a5-f0da-4c64-953a-15a62d5ca3b0.cer sbgp-ipAddrBlock: critical IPv4: 172.81.4.0/22 192.64.196.0/23 199.85.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:cf:85:06:10:ab:fc:20:35:7b:0d:64:94:ec:44:b2:ed:7a: 25:11:71:49:5e:4d:34:63:fc:12:f9:2a:cf:69:9b:8f:46:c1: c2:a2:b2:19:81:42:76:ce:92:d7:88:8d:3f:2e:b1:bc:aa:65: f7:f5:6d:4c:df:fd:64:1b:09:ad:64:e1:57:9d:50:fc:87:c9: 1b:21:ce:af:d9:b2:14:6f:24:94:ca:c8:7f:2f:ab:05:30:86: 53:b4:66:d6:77:5b:83:e5:b7:56:46:a0:3c:34:e3:74:bb:6e: 7e:84:de:3d:83:b0:b1:7d:b1:7b:31:28:a5:b4:26:77:f3:2f: a7:87:e2:7f:ed:ae:02:95:5f:19:19:ff:91:a5:23:30:46:ca: af:57:a7:5d:e6:95:a4:67:88:26:4b:a1:97:67:fa:5d:ef:b3: 61:85:18:ac:1d:cb:6e:b9:4e:13:0b:3a:c9:cc:9a:0c:83:2f: 08:5c:fd:8e:d5:39:49:31:18:ce:83:71:50:a9:dc:b7:ee:63: 0f:c7:48:7f:d0:57:31:7e:ee:26:8b:d7:2b:cd:93:3f:04:ad: 0b:54:16:df:d9:d0:41:19:b6:5a:77:bb:d1:e7:5c:69:64:7b: e2:bb:51:57:ca:2a:f9:a8:59:08:34:06:c4:c5:b7:11:3e:96: 1f:db:22:e4 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE9MPTxp/PpTTZvbVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVkZjcyYTUtZjBkYS00YzY0LTk1M2EtMTVhNjJkNWNh M2IwMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDJiNjIyOGYtNDQzOC00MGIxLTliN2YtZTcyZjQzYzQ4YzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLY8wZQBrBCkgRVlGnasBfbA/s/4mEHLUxMM YPDuoZ/aUQJGjue8BrhhF2eGUG0Oc/kGEo02Eashav8KH621iu8KtoSwScLItbA/ ZPFkMCbkJ5yehv6x/1cg30FO6TT1ey7/+ZJ6X9LioYkZ3VorSQJzuqZZuH+qkKPQ hNiL4kULmlnCK03Q1C5epbxQ6Y0C0BVlmnbhKO+YC8rc9YEqopETzOC6BuRdY5s/ 9mRFAocyXNSpz6ZRUY41icQER+ksI56QJPYdQF6eO3XT4XQKsL5x3kjLo7Qd9BiW YIdCjKHBB9VPT5W7FZUKOOgN3tTKXr8Zhac9/43oswur6kU/5QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIx7uqjVe5B2rSv24hkqrVN1F1JCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82NWRm NzJhNS1mMGRhLTRjNjQtOTUzYS0xNWE2MmQ1Y2EzYjAvMDNkNjA5YmItZTBkMi0z ZmZhLTg5OTYtYjJlYWM1NDNmNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjVkZjcyYTUtZjBkYS00YzY0LTk1 M2EtMTVhNjJkNWNhM2IwLzY1ZGY3MmE1LWYwZGEtNGM2NC05NTNhLTE1YTYyZDVj YTNiMC5jcmwwHwYDVR0jBBgwFoAUw/ftawHjYye8m7oJ+guJtIPPlyIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82NWRmNzJhNS1mMGRhLTRjNjQtOTUzYS0xNWE2 MmQ1Y2EzYjAuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCrFEEAwQB wEDEAwQAx1X1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADbPhQYQq/wgNXsNZJTsRLLteiURcUleTTRj/BL5 Ks9pm49GwcKishmBQnbOkteIjT8usbyqZff1bUzf/WQbCa1k4VedUPyHyRshzq/Z shRvJJTKyH8vqwUwhlO0ZtZ3W4Plt1ZGoDw043S7bn6E3j2DsLF9sXsxKKW0Jnfz L6eH4n/trgKVXxkZ/5GlIzBGyq9Xp13mlaRniCZLoZdn+l3vs2GFGKwdy265ThML OsnMmgyDLwhc/Y7VOUkxGM6DcVCp3LfuYw/HSH/QVzF+7iaL1yvNkz8ErQtUFt/Z 0EEZtlp3u9HnXGlke+K7UVfKKvmoWQg0BsTFtxE+lh/bIuQ= -----END CERTIFICATE-----Generated at Sat Sep 26 11:50:32 2026 by rpki-client