$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/8d8ab803-c1ae-39e0-b8f4-88d0a51cafb1.roa File: 8d8ab803-c1ae-39e0-b8f4-88d0a51cafb1.roa (raw, json) Hash identifier: WSsmEDDF6pZSKzjdt5Wr+RIgsC0wvAEbo+PIiOUamSM= Subject key identifier: 41:D0:AB:9E:A0:A2:10:7F:4D:D5:00:C3:26:36:49:12:C2:93:2E:3D Certificate issuer: /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Certificate serial: 010D0C9F4328584F3B7D1F32D6FCDE202F0B1280 Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/8d8ab803-c1ae-39e0-b8f4-88d0a51cafb1.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 14618 IP address blocks: 64.120.232.0/24 maxlen: 24 64.120.233.0/24 maxlen: 24 64.120.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1f:32:d6:fc:de:20:2f:0b:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=011d503f-3184-464d-a671-beadc9de762f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:77:99:12:bf:a8:23:f6:f6:56:cb:67:80:a4: 13:0d:53:3f:39:84:9d:cc:5a:59:0d:6a:ac:58:af: 0a:bd:0f:a6:13:2d:97:f8:64:df:ee:98:13:3c:68: d7:4f:c8:d4:d3:f6:b7:49:23:3c:64:ce:d1:d5:b2: 85:54:b9:08:3a:f4:5b:a2:74:09:72:cb:1d:4f:28: 54:ca:ce:1e:ae:02:6f:e3:93:1c:47:fb:63:73:06: b8:88:04:c6:c7:2b:cd:7f:4c:ee:3f:19:75:a5:d4: 0d:7b:ee:ee:fa:b2:db:c5:d8:46:1b:9e:bb:8d:f7: ff:d6:ca:d5:70:0a:2b:f3:a7:ab:72:cc:2c:24:52: 58:b8:27:13:b1:06:a1:7a:b5:81:f9:85:2d:77:4e: c8:05:bc:57:81:03:b5:ed:98:f9:7a:82:d7:fa:ef: 63:9a:1d:ad:d5:cb:dc:72:bb:dd:94:92:5e:b9:1b: 96:85:3f:5d:a4:48:10:12:db:ba:ba:c7:12:d2:cc: 18:60:f8:b8:78:e2:2a:41:58:91:97:15:dd:7b:c7: 4e:42:bd:62:52:86:10:b8:ad:f1:56:99:ec:db:f9: ca:81:7d:c8:39:f3:34:fa:41:1a:f2:22:48:0c:b4: 39:de:75:64:2d:80:2e:9a:95:74:64:fd:ee:7f:00: 86:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D0:AB:9E:A0:A2:10:7F:4D:D5:00:C3:26:36:49:12:C2:93:2E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/8d8ab803-c1ae-39e0-b8f4-88d0a51cafb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl X509v3 Authority Key Identifier: keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer sbgp-ipAddrBlock: critical IPv4: 64.120.232.0-64.120.234.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:dc:6d:94:aa:c2:1f:f1:7e:8f:12:29:ca:e2:b3:bf:67:0a: 21:03:e7:58:3b:9a:73:53:d3:23:2a:97:6c:65:5a:98:6b:75: 57:0a:a8:52:9d:f7:59:3e:ee:20:f8:5b:a1:cd:0c:7a:64:15: 75:30:95:31:5e:1e:7d:23:08:8a:a4:3d:be:d4:7f:41:3c:c6: ed:b1:7e:c7:44:8a:be:c5:fc:06:d2:2e:db:82:62:b9:df:ad: 60:a2:47:68:26:49:bb:9c:23:2a:0d:3e:1d:fc:5a:56:df:cf: db:93:4f:4b:ae:f8:a9:53:a2:03:db:c0:3a:0e:03:a4:ac:f3: 89:9b:eb:64:a3:34:fc:28:5d:35:e5:9a:6e:63:ea:64:31:8d: 43:24:00:08:6c:b5:6f:16:05:6f:46:33:6d:fb:fe:91:70:e2: 00:d5:51:d3:f1:2c:fe:26:c3:81:f4:66:49:38:29:0b:2f:37: 24:66:da:93:92:14:2a:02:66:30:82:ee:31:a5:dd:43:c6:2c: f4:67:32:9e:a5:b3:27:8b:f3:d7:b8:72:42:7e:bc:d3:38:a8: 3a:2d:5b:17:99:22:91:07:04:33:12:94:f4:a4:8b:c0:30:94: a1:f6:df:9a:12:92:03:3d:f7:91:0b:fd:92:b6:fc:7f:ee:41: 74:47:e9:89 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE87fR8y1vzeIC8LEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZl NTdjMB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk MDExZDUwM2YtMzE4NC00NjRkLWE2NzEtYmVhZGM5ZGU3NjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3eZEr+oI/b2VstngKQTDVM/OYSdzFpZDWqs WK8KvQ+mEy2X+GTf7pgTPGjXT8jU0/a3SSM8ZM7R1bKFVLkIOvRbonQJcssdTyhU ys4ergJv45McR/tjcwa4iATGxyvNf0zuPxl1pdQNe+7u+rLbxdhGG567jff/1srV cAor86ercswsJFJYuCcTsQaherWB+YUtd07IBbxXgQO17Zj5eoLX+u9jmh2t1cvc crvdlJJeuRuWhT9dpEgQEtu6uscS0swYYPi4eOIqQViRlxXde8dOQr1iUoYQuK3x Vpns2/nKgX3IOfM0+kEa8iJIDLQ53nVkLYAumpV0ZP3ufwCGNwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFEHQq56gohB/TdUAwyY2SRLCky49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2 NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvOGQ4YWI4MDMtYzFhZS0z OWUwLWI4ZjQtODhkMGE1MWNhZmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMGQ4NjYzOGEtMmUxMi00YWE0LWJk Y2QtMjI2NjViMjZlNTdjLzBkODY2MzhhLTJlMTItNGFhNC1iZGNkLTIyNjY1YjI2 ZTU3Yy5jcmwwHwYDVR0jBBgwFoAUWEZxtOubjmMGeKRywWglQLM/E9cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2 NWIyNmU1N2MuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANAeOgD BABAeOowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAUdxtlKrCH/F+jxIpyuKzv2cKIQPnWDuac1PTIyqXbGVa mGt1VwqoUp33WT7uIPhboc0MemQVdTCVMV4efSMIiqQ9vtR/QTzG7bF+x0SKvsX8 BtIu24Jiud+tYKJHaCZJu5wjKg0+HfxaVt/P25NPS674qVOiA9vAOg4DpKzziZvr ZKM0/ChdNeWabmPqZDGNQyQACGy1bxYFb0Yzbfv+kXDiANVR0/Es/ibDgfRmSTgp Cy83JGbak5IUKgJmMILuMaXdQ8Ys9GcynqWzJ4vz17hyQn680zioOi1bF5kikQcE MxKU9KSLwDCUofbfmhKSAz33kQv9krb8f+5BdEfpiQ== -----END CERTIFICATE-----Generated at Sun Sep 20 17:33:10 2026 by rpki-client