$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/4321a0e2-1607-3b92-8e26-22c2e6822e85.roa File: 4321a0e2-1607-3b92-8e26-22c2e6822e85.roa (raw, json) Hash identifier: RM9dZDZzL4g+lKJkzA3DNujM780+m2S1YwxM3uaUsXI= Subject key identifier: A9:A9:14:EB:AC:30:DA:8D:C5:43:44:05:2A:28:CE:63:5C:AE:72:4B Certificate issuer: /CN=12380a37-68ce-4e9c-9585-53cd09071ada Certificate serial: 010D0C9F4328584F243C73EEB09DB6E723D23720 Authority key identifier: 0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/4321a0e2-1607-3b92-8e26-22c2e6822e85.roa Signing time: Fri 11 Sep 2026 17:06:21 +0000 ROA not before: Fri 11 Sep 2026 17:06:21 +0000 ROA not after: Thu 10 Dec 2026 18:06:21 +0000 asID: 400350 IP address blocks: 64.189.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:24:3c:73:ee:b0:9d:b6:e7:23:d2:37:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12380a37-68ce-4e9c-9585-53cd09071ada Validity Not Before: Sep 11 17:06:21 2026 GMT Not After : Dec 10 18:06:21 2026 GMT Subject: CN=6ad0b99b-19ae-4b45-90fd-020cd56d855a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:de:fc:97:35:74:0c:91:6d:6c:58:b6:31:2a: b6:a2:85:9e:a3:68:5e:a7:73:6a:32:ed:91:0e:81: f7:b4:02:84:e1:2f:10:07:68:06:bf:64:21:3e:d7: 56:05:b3:9c:cc:f7:31:02:9b:c5:e5:46:7f:00:bf: 77:9c:3a:aa:6e:96:fd:32:85:a4:e9:d4:23:10:14: cb:83:f4:8f:a2:cf:2f:66:4c:c4:70:f2:57:97:65: 4a:bb:ef:f3:4d:5d:af:ab:dd:54:21:1b:90:6f:8d: ca:b0:35:a6:fd:6e:b2:33:0e:a3:85:bc:c5:69:46: 4e:d2:ce:4e:bd:c6:12:87:b6:01:84:76:47:74:dd: 2d:60:5f:96:15:aa:4d:0f:10:10:07:48:7f:7b:4a: 78:a9:6c:e4:2c:9c:73:2f:6e:c0:92:c1:b9:22:27: 9b:95:dc:e3:6d:3c:49:25:b6:55:3e:8c:18:02:5c: a3:25:7b:a7:be:f6:63:d2:4a:6c:72:e9:f8:6f:94: 21:1e:ed:48:2b:86:1b:52:17:e7:67:5a:95:28:50: 12:7d:c7:af:ca:a7:e3:dd:7d:1f:51:cb:03:6a:0e: 52:b6:2a:5a:66:f6:22:bc:e3:7d:de:7f:9a:c3:74: 8a:e7:7c:40:95:f1:52:57:30:7d:2b:59:7b:ae:cb: 4e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A9:14:EB:AC:30:DA:8D:C5:43:44:05:2A:28:CE:63:5C:AE:72:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/4321a0e2-1607-3b92-8e26-22c2e6822e85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada/12380a37-68ce-4e9c-9585-53cd09071ada.crl X509v3 Authority Key Identifier: keyid:0B:EB:FC:67:37:3D:77:62:15:42:95:3F:AE:61:DD:56:51:C1:B9:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/12380a37-68ce-4e9c-9585-53cd09071ada.cer sbgp-ipAddrBlock: critical IPv4: 64.189.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:40:32:0b:84:a0:73:35:7a:5a:13:81:bb:cb:04:57:8d:e6: ce:d9:83:a2:03:61:fc:f2:13:ec:e5:cf:62:a5:0f:12:3d:f5: 69:e5:cd:fc:7b:07:60:54:bd:46:17:5c:c0:72:a2:58:9e:ea: 75:2d:c0:70:38:17:2a:13:59:43:01:1a:29:f7:e4:07:64:3d: 21:94:56:2f:6e:7d:f9:90:91:be:d3:2f:38:16:9a:79:5a:66: 78:75:b6:50:58:c1:d3:c2:28:cc:68:46:50:33:70:a7:12:61: b1:71:0e:46:34:f6:b8:f9:45:9d:67:52:a3:47:6e:35:c1:eb: d4:da:8b:84:ad:0b:05:fa:f2:96:8d:a5:23:b1:55:75:06:65: da:32:03:47:0a:ea:23:62:ba:3e:83:eb:7f:8c:35:8b:9c:dd: 47:0a:b8:f8:c6:d3:62:d8:b8:3b:ac:e6:8a:ac:77:0b:bb:de: cc:79:95:01:d3:f7:8e:8e:e3:5b:f7:08:6a:7e:19:03:ae:d0: b1:55:de:98:2b:51:c4:a3:8d:8b:08:a6:6e:c9:b5:02:04:f1: f6:b6:2b:9b:33:2a:97:b4:21:1c:0b:0f:62:16:cd:e3:3c:d5: 73:40:ae:c6:69:1c:5f:40:72:59:68:7c:12:0c:85:9d:c7:13: 6f:5a:2c:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8kPHPusJ225yPSNyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTIzODBhMzctNjhjZS00ZTljLTk1ODUtNTNjZDA5MDcx YWRhMB4XDTI2MDkxMTE3MDYyMVoXDTI2MTIxMDE4MDYyMVowLzEtMCsGA1UEAxMk NmFkMGI5OWItMTlhZS00YjQ1LTkwZmQtMDIwY2Q1NmQ4NTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1978lzV0DJFtbFi2MSq2ooWeo2hep3NqMu2R DoH3tAKE4S8QB2gGv2QhPtdWBbOczPcxApvF5UZ/AL93nDqqbpb9MoWk6dQjEBTL g/SPos8vZkzEcPJXl2VKu+/zTV2vq91UIRuQb43KsDWm/W6yMw6jhbzFaUZO0s5O vcYSh7YBhHZHdN0tYF+WFapNDxAQB0h/e0p4qWzkLJxzL27AksG5IiebldzjbTxJ JbZVPowYAlyjJXunvvZj0kpscun4b5QhHu1IK4YbUhfnZ1qVKFASfcevyqfj3X0f UcsDag5StipaZvYivON93n+aw3SK53xAlfFSVzB9K1l7rstOXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmpFOusMNqNxUNEBSoozmNcrnJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4 MGEzNy02OGNlLTRlOWMtOTU4NS01M2NkMDkwNzFhZGEvNDMyMWEwZTItMTYwNy0z YjkyLThlMjYtMjJjMmU2ODIyZTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTIzODBhMzctNjhjZS00ZTljLTk1 ODUtNTNjZDA5MDcxYWRhLzEyMzgwYTM3LTY4Y2UtNGU5Yy05NTg1LTUzY2QwOTA3 MWFkYS5jcmwwHwYDVR0jBBgwFoAUC+v8Zzc9d2IVQpU/rmHdVlHBuaIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMjM4MGEzNy02OGNlLTRlOWMtOTU4NS01M2Nk MDkwNzFhZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQL2yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpAMguEoHM1eloTgbvLBFeN5s7Zg6IDYfzyE+zlz2KlDxI99Wnlzfx7 B2BUvUYXXMByolie6nUtwHA4FyoTWUMBGin35AdkPSGUVi9uffmQkb7TLzgWmnla Znh1tlBYwdPCKMxoRlAzcKcSYbFxDkY09rj5RZ1nUqNHbjXB69Tai4StCwX68paN pSOxVXUGZdoyA0cK6iNiuj6D63+MNYuc3UcKuPjG02LYuDus5oqsdwu73sx5lQHT 946O41v3CGp+GQOu0LFV3pgrUcSjjYsIpm7JtQIE8fa2K5szKpe0IRwLD2IWzeM8 1XNArsZpHF9AcllofBIMhZ3HE29aLDk= -----END CERTIFICATE-----Generated at Mon Sep 21 09:06:40 2026 by rpki-client