$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa File: d11d7e2d-3067-3749-a2e7-fb3533597efa.roa (raw, json) Hash identifier: XAyI3JpN2l7QDEhvZ7XclM5j9wp7poHN+xqrkXopRng= Subject key identifier: 5C:3E:81:5D:E7:F4:24:4B:22:A1:8B:AB:5B:8F:B2:84:C6:BE:FC:34 Certificate issuer: /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Certificate serial: 010D0C9F4328584F35E7C82ACDA03EB35BFF5AA6 Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 21782 IP address blocks: 64.127.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:c8:2a:cd:a0:3e:b3:5b:ff:5a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=c505ac22-7df9-4887-a213-3aa15cfdf70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f1:b6:fd:19:fe:b1:13:b2:f2:3c:09:de:85: 8e:92:23:78:b7:f4:31:33:7a:c1:92:03:47:13:aa: be:a1:54:cb:ca:72:98:fd:44:49:ee:e1:6a:04:fa: 78:0e:3c:a5:26:ee:af:23:6f:f6:5d:e9:12:bc:aa: 96:4c:15:db:fa:75:fc:25:49:80:d2:f2:03:d9:14: fd:5a:10:5b:dd:57:87:2b:2c:18:25:ed:83:6e:5c: 6d:06:a5:1d:50:ce:b9:02:01:ad:54:33:e8:6c:4a: 19:24:93:82:35:7e:20:f2:f3:8c:18:f1:4c:6a:43: 8d:1e:b1:54:99:a3:15:80:a1:0b:ef:5c:06:8d:67: 26:55:04:2e:ae:6d:be:6b:a6:a3:c0:7c:3d:30:86: 65:5f:f4:ad:0e:a4:33:bd:43:fb:f5:ae:91:fc:a0: c5:99:f7:06:3c:30:f3:2f:da:c7:46:57:3f:33:fb: 14:25:3b:4e:94:1b:78:a7:5d:78:b6:0c:7a:b1:cd: df:06:d7:77:a9:25:a1:0b:dd:35:55:7a:3a:cb:0e: 77:60:a6:ef:e2:16:ae:3d:4b:52:f0:af:f0:03:b6: 42:56:86:1e:92:c2:76:8d:e9:ae:32:16:1c:c2:64: 12:84:bf:14:c8:e5:07:17:8f:87:a2:b6:f1:f4:20: e5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:3E:81:5D:E7:F4:24:4B:22:A1:8B:AB:5B:8F:B2:84:C6:BE:FC:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl X509v3 Authority Key Identifier: keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer sbgp-ipAddrBlock: critical IPv4: 64.127.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f9:2b:97:8b:f2:57:a6:fc:88:3f:25:07:ae:cd:7c:86:d8: c3:9d:85:8e:26:49:74:66:b8:c6:2d:7e:94:95:63:7d:9d:35: 0d:c8:57:e6:47:a8:1f:a4:f3:76:de:fb:35:24:75:ec:e9:43: 9f:47:92:7f:b5:51:ca:94:9b:f3:16:32:6d:4a:43:e4:18:54: 8a:e7:27:0e:d1:28:5b:60:bc:58:51:ce:0c:6c:0a:04:a0:a6: e2:83:eb:35:f5:38:32:a5:46:31:bb:88:e3:f1:c9:c3:1b:26: 8f:99:20:b8:2b:74:6e:10:6a:c6:19:44:d8:ba:d7:0f:1a:c6: 53:ac:af:ee:8c:47:79:62:97:b4:1a:fe:62:77:e3:14:7a:31: 8e:10:4f:c6:1d:5c:54:6a:af:4d:60:5a:67:f3:96:0c:b9:03: 8e:88:57:10:46:07:d2:ed:7a:16:c9:35:6b:a4:de:ac:95:ec: a7:55:a7:cf:35:cd:73:88:66:d4:6e:83:69:e0:5b:33:4c:14: da:9c:a5:c0:37:2f:51:33:0b:3b:96:9c:cc:35:05:1d:6c:c8: 37:ff:2c:3b:5d:a0:af:1d:f6:37:7d:68:9b:8c:2c:0a:d4:4d: 03:97:2c:15:27:c0:40:1c:f9:ad:19:19:89:75:6e:8f:bb:3b: d2:64:6e:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8158gqzaA+s1v/WqYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM3ZGJjZDUtZDZiYi00YTg5LTk4YWUtZTI1NTBlYTNl OTNhMB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk YzUwNWFjMjItN2RmOS00ODg3LWEyMTMtM2FhMTVjZmRmNzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPG2/Rn+sROy8jwJ3oWOkiN4t/QxM3rBkgNH E6q+oVTLynKY/URJ7uFqBPp4DjylJu6vI2/2XekSvKqWTBXb+nX8JUmA0vID2RT9 WhBb3VeHKywYJe2DblxtBqUdUM65AgGtVDPobEoZJJOCNX4g8vOMGPFMakONHrFU maMVgKEL71wGjWcmVQQurm2+a6ajwHw9MIZlX/StDqQzvUP79a6R/KDFmfcGPDDz L9rHRlc/M/sUJTtOlBt4p114tgx6sc3fBtd3qSWhC901VXo6yw53YKbv4hauPUtS 8K/wA7ZCVoYeksJ2jemuMhYcwmQShL8UyOUHF4+Horbx9CDlNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFw+gV3n9CRLIqGLq1uPsoTGvvw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84Yzdk YmNkNS1kNmJiLTRhODktOThhZS1lMjU1MGVhM2U5M2EvZDExZDdlMmQtMzA2Ny0z NzQ5LWEyZTctZmIzNTMzNTk3ZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM3ZGJjZDUtZDZiYi00YTg5LTk4 YWUtZTI1NTBlYTNlOTNhLzhjN2RiY2Q1LWQ2YmItNGE4OS05OGFlLWUyNTUwZWEz ZTkzYS5jcmwwHwYDVR0jBBgwFoAUAzePKejZd54MxR716MslpAwKWwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzdkYmNkNS1kNmJiLTRhODktOThhZS1lMjU1 MGVhM2U5M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQH+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb5K5eL8lem/Ig/JQeuzXyG2MOdhY4mSXRmuMYtfpSVY32dNQ3IV+ZH qB+k83be+zUkdezpQ59Hkn+1UcqUm/MWMm1KQ+QYVIrnJw7RKFtgvFhRzgxsCgSg puKD6zX1ODKlRjG7iOPxycMbJo+ZILgrdG4QasYZRNi61w8axlOsr+6MR3lil7Qa /mJ34xR6MY4QT8YdXFRqr01gWmfzlgy5A46IVxBGB9LtehbJNWuk3qyV7KdVp881 zXOIZtRug2ngWzNMFNqcpcA3L1EzCzuWnMw1BR1syDf/LDtdoK8d9jd9aJuMLArU TQOXLBUnwEAc+a0ZGYl1bo+7O9JkbhQ= -----END CERTIFICATE-----Generated at Mon Sep 21 18:24:25 2026 by rpki-client