$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/aacbda94-1c61-3766-b5d0-b72a4818b252.roa File: aacbda94-1c61-3766-b5d0-b72a4818b252.roa (raw, json) Hash identifier: WER6Iu6YIoPAHU5oAMj5ndzob6c6iZsScu5G3OSsAPM= Subject key identifier: 15:27:9C:60:CD:B0:3C:59:DA:B7:B2:53:09:19:C2:7C:BC:FF:C9:A9 Certificate issuer: /CN=3e03ba01-86be-4e51-b95f-af6e17a7979e Certificate serial: 010D0C9F4328584F3B7D26A08F29CD8C6033FF80 Authority key identifier: D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/aacbda94-1c61-3766-b5d0-b72a4818b252.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 398391 IP address blocks: 64.227.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:26:a0:8f:29:cd:8c:60:33:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e03ba01-86be-4e51-b95f-af6e17a7979e Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=1b5ac277-b515-4553-a6cf-d7806968b1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ef:94:f3:6c:48:df:b1:87:21:d3:5e:07:94: 58:02:f1:55:fb:cc:ba:cd:b0:24:6e:fd:7f:db:03: 23:db:b9:67:f6:4a:b8:ba:cb:e3:f7:f1:ca:77:cc: b1:ae:ae:f3:1a:10:d2:8a:ef:bc:a8:0e:45:6c:7e: f9:da:f2:98:f4:75:59:27:75:6e:ab:ff:5b:8a:91: 31:0f:b0:58:ac:a4:6e:fd:8d:8a:8f:04:c0:37:a8: 2b:a3:a3:bb:97:7b:c3:7c:f0:51:2f:14:3c:8a:2e: 2b:14:d1:a0:2a:33:7b:2f:ef:af:d4:16:73:86:24: f0:46:12:9b:d2:27:bd:50:43:36:4e:3d:af:05:7c: 3d:5b:5a:6e:13:3a:a8:3a:93:89:69:3a:49:f9:5b: 43:2b:10:d0:d7:19:4f:1c:b3:7c:86:3b:08:9b:6e: b8:5f:af:36:2d:53:16:10:9e:b1:02:b0:39:c3:79: 30:7f:af:0b:52:34:80:a9:6d:35:ca:12:13:03:3d: b3:af:29:ce:ac:9d:10:66:7b:8e:61:b2:00:ae:63: 32:20:87:b6:0a:c2:ec:3e:e8:60:04:5e:50:c9:a3: 74:92:c3:44:ce:75:4e:27:e8:0b:5d:48:b1:b9:10: 53:07:db:bf:2e:de:f3:c9:39:fe:b6:4b:a4:56:3b: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:27:9C:60:CD:B0:3C:59:DA:B7:B2:53:09:19:C2:7C:BC:FF:C9:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/aacbda94-1c61-3766-b5d0-b72a4818b252.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e/3e03ba01-86be-4e51-b95f-af6e17a7979e.crl X509v3 Authority Key Identifier: keyid:D3:4A:C4:43:FE:8D:9A:E9:14:50:0B:F6:7C:7B:4A:A0:E3:3A:E2:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e03ba01-86be-4e51-b95f-af6e17a7979e.cer sbgp-ipAddrBlock: critical IPv4: 64.227.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7d:5a:25:aa:bd:c9:2f:67:49:2b:47:32:a2:5c:03:4a:82: 5f:07:0c:a8:4d:95:49:2f:63:c2:e9:97:08:a2:3b:8d:38:56: 82:d4:ae:51:3d:f2:1a:18:3e:f6:95:71:de:45:16:3a:1a:11: cf:b4:81:10:d7:9a:92:c1:8f:f2:64:35:b0:4d:72:e8:75:48: da:33:3d:ad:28:48:2f:f6:49:d5:ea:80:ac:75:aa:8e:7b:c9: d3:a2:5d:66:f0:84:24:42:74:4a:b3:ba:92:db:95:90:68:0a: c0:ba:1b:27:98:fe:f7:c4:66:56:e0:f5:96:77:07:3e:58:60: fd:a7:cc:59:29:66:4e:ce:29:27:72:7f:5c:e1:0d:e4:cd:d4: 3f:43:34:27:d2:99:2b:5d:67:8e:dd:e0:fd:82:50:e1:c3:c4: 0f:48:38:89:c5:bd:16:86:0d:b2:bc:3e:df:d1:05:76:cc:8d: 09:a6:ce:e1:8f:1d:05:90:96:49:b1:c3:50:01:fb:62:14:20: 1e:9c:dd:2d:f5:2b:c5:1f:eb:b4:bf:74:db:d2:2e:e8:8b:2d: 0c:b7:02:9f:f4:c4:5d:5a:73:cc:aa:85:00:0b:85:cd:11:ed: d4:d2:af:4b:2e:79:6e:36:b1:59:1d:80:a4:11:15:89:91:a0: 82:b9:ab:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fSagjynNjGAz/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UwM2JhMDEtODZiZS00ZTUxLWI5NWYtYWY2ZTE3YTc5 NzllMB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk MWI1YWMyNzctYjUxNS00NTUzLWE2Y2YtZDc4MDY5NjhiMWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu+U82xI37GHIdNeB5RYAvFV+8y6zbAkbv1/ 2wMj27ln9kq4usvj9/HKd8yxrq7zGhDSiu+8qA5FbH752vKY9HVZJ3Vuq/9bipEx D7BYrKRu/Y2KjwTAN6gro6O7l3vDfPBRLxQ8ii4rFNGgKjN7L++v1BZzhiTwRhKb 0ie9UEM2Tj2vBXw9W1puEzqoOpOJaTpJ+VtDKxDQ1xlPHLN8hjsIm264X682LVMW EJ6xArA5w3kwf68LUjSAqW01yhITAz2zrynOrJ0QZnuOYbIArmMyIIe2CsLsPuhg BF5QyaN0ksNEznVOJ+gLXUixuRBTB9u/Lt7zyTn+tkukVjtYzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUnnGDNsDxZ2reyUwkZwny8/8mpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZTAz YmEwMS04NmJlLTRlNTEtYjk1Zi1hZjZlMTdhNzk3OWUvYWFjYmRhOTQtMWM2MS0z NzY2LWI1ZDAtYjcyYTQ4MThiMjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2UwM2JhMDEtODZiZS00ZTUxLWI5 NWYtYWY2ZTE3YTc5NzllLzNlMDNiYTAxLTg2YmUtNGU1MS1iOTVmLWFmNmUxN2E3 OTc5ZS5jcmwwHwYDVR0jBBgwFoAU00rEQ/6NmukUUAv2fHtKoOM64sEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZTAzYmEwMS04NmJlLTRlNTEtYjk1Zi1hZjZl MTdhNzk3OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOPHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR9WiWqvckvZ0krRzKiXANKgl8HDKhNlUkvY8LplwiiO404VoLUrlE9 8hoYPvaVcd5FFjoaEc+0gRDXmpLBj/JkNbBNcuh1SNozPa0oSC/2SdXqgKx1qo57 ydOiXWbwhCRCdEqzupLblZBoCsC6GyeY/vfEZlbg9ZZ3Bz5YYP2nzFkpZk7OKSdy f1zhDeTN1D9DNCfSmStdZ47d4P2CUOHDxA9IOInFvRaGDbK8Pt/RBXbMjQmmzuGP HQWQlkmxw1AB+2IUIB6c3S31K8Uf67S/dNvSLuiLLQy3Ap/0xF1ac8yqhQALhc0R 7dTSr0sueW42sVkdgKQRFYmRoIK5q/g= -----END CERTIFICATE-----Generated at Sat Sep 26 09:22:08 2026 by rpki-client