$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa File: 3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa (raw, json) Hash identifier: 8pH1INN18bbJMoYWhP6R7ExAv8gi1of4GD2HnQCFuMU= Subject key identifier: B8:FB:7B:E5:F4:F2:71:32:0F:2D:BE:47:09:39:8D:B1:9F:5E:AB:B8 Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9 Certificate serial: 010D0C9F4328584EE7BCA7EC996145E0DA515D80 Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 14618 IP address blocks: 64.52.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:a7:ec:99:61:45:e0:da:51:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=b82aff5d-667b-4074-8d92-56dca23cdd43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6d:5c:31:86:1e:f7:55:0f:4e:c8:d4:82:45: ab:77:e6:a4:dd:c4:24:f1:bd:6f:c7:d5:e2:ce:fa: f7:71:06:57:f5:ee:9a:b2:ef:00:32:2b:e6:c1:7a: 60:52:a8:b1:06:8e:f8:ce:e2:93:de:77:f6:86:1c: 28:12:c1:a5:d5:88:53:89:d0:6a:e1:31:d2:a3:de: e8:04:8c:02:1b:31:8f:66:34:6d:a1:04:da:29:e6: d1:16:7a:23:35:1f:28:03:a5:d2:0e:89:0d:76:75: d4:0f:6c:01:bd:4c:2e:6a:eb:15:ea:e3:03:d0:22: 49:ef:c5:45:3c:de:ff:40:e1:30:d0:61:db:6c:65: 5d:ec:ae:68:4e:bf:65:d0:97:14:ef:c7:47:4f:5f: e7:92:4c:c0:42:c8:fa:d6:d4:08:91:c3:50:4d:4b: 0a:38:12:6e:76:fd:4c:68:55:be:ce:91:ec:a7:55: ad:25:cd:32:5f:d2:63:8c:79:d6:db:7c:0e:91:6d: 53:4d:44:e4:b8:f6:f6:f5:97:db:bc:22:ed:9b:fa: b5:59:aa:c8:cc:f1:fc:8c:25:85:05:d6:e9:b8:ce: 98:29:16:0c:71:a6:09:ad:dd:40:df:df:1d:a3:e9: 8d:32:eb:2d:7f:5d:d9:30:87:f9:25:66:7b:c6:f9: cc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:FB:7B:E5:F4:F2:71:32:0F:2D:BE:47:09:39:8D:B1:9F:5E:AB:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/3f1d5e08-9a57-3b1f-a2d9-9da03cd8aaab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl X509v3 Authority Key Identifier: keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer sbgp-ipAddrBlock: critical IPv4: 64.52.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:7b:32:60:60:5a:af:57:eb:64:2f:ad:85:54:93:4b:94:33: c4:b6:2a:83:60:99:94:2d:70:e3:c6:84:56:0c:d3:67:ba:1c: bb:da:c4:37:9f:f0:35:88:f3:62:9f:28:77:17:20:ea:ba:85: 61:cd:fc:37:57:a3:cc:f6:c8:14:4c:12:d9:c6:2f:3d:3d:4a: e0:6c:03:9d:de:1b:82:95:b9:64:9e:dc:59:39:d0:a9:3c:bd: 8a:d0:6d:ec:bc:8c:92:38:c0:90:6b:d0:93:cb:42:af:33:e2: d3:7d:32:14:e1:3b:b1:81:45:95:e8:4c:da:64:68:5d:37:6b: 21:77:f1:68:f2:cb:f7:e6:92:98:cd:02:2e:0f:39:7d:fa:d6: 38:11:12:5a:cc:70:8e:a9:11:22:a2:1b:dc:ac:ca:6d:c7:bd: 6d:df:51:7c:e7:77:42:29:9d:d8:94:9f:da:4f:dc:b8:83:4e: 4f:5f:8b:52:c8:d3:5b:9b:9e:31:55:69:87:82:1f:55:ad:ea: 72:e1:cf:8e:3f:56:07:11:59:19:86:81:db:1f:ff:60:3f:4d: d4:a2:76:c2:72:fb:57:7c:e7:69:6d:63:e9:cb:8c:ba:65:92: 0d:c6:98:04:9f:0b:e0:20:04:1c:bc:39:cf:e9:1e:2f:7d:62: fb:b9:48:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvKfsmWFF4NpRXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MTJlOTEtNDFkMy00ODk0LTg5M2MtOGRlNGY5NDE3 NWY5MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk YjgyYWZmNWQtNjY3Yi00MDc0LThkOTItNTZkY2EyM2NkZDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6G1cMYYe91UPTsjUgkWrd+ak3cQk8b1vx9Xi zvr3cQZX9e6asu8AMivmwXpgUqixBo74zuKT3nf2hhwoEsGl1YhTidBq4THSo97o BIwCGzGPZjRtoQTaKebRFnojNR8oA6XSDokNdnXUD2wBvUwuausV6uMD0CJJ78VF PN7/QOEw0GHbbGVd7K5oTr9l0JcU78dHT1/nkkzAQsj61tQIkcNQTUsKOBJudv1M aFW+zpHsp1WtJc0yX9JjjHnW23wOkW1TTUTkuPb29ZfbvCLtm/q1WarIzPH8jCWF BdbpuM6YKRYMcaYJrd1A398do+mNMustf13ZMIf5JWZ7xvnMwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj7e+X08nEyDy2+Rwk5jbGfXqu4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkx MmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0Zjk0MTc1ZjkvM2YxZDVlMDgtOWE1Ny0z YjFmLWEyZDktOWRhMDNjZDhhYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWE5MTJlOTEtNDFkMy00ODk0LTg5 M2MtOGRlNGY5NDE3NWY5L2FhOTEyZTkxLTQxZDMtNDg5NC04OTNjLThkZTRmOTQx NzVmOS5jcmwwHwYDVR0jBBgwFoAUdlSJQRe9cfU+RIev65h/bbYl5lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTkxMmU5MS00MWQzLTQ4OTQtODkzYy04ZGU0 Zjk0MTc1ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDRvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFV7MmBgWq9X62QvrYVUk0uUM8S2KoNgmZQtcOPGhFYM02e6HLvaxDef 8DWI82KfKHcXIOq6hWHN/DdXo8z2yBRMEtnGLz09SuBsA53eG4KVuWSe3Fk50Kk8 vYrQbey8jJI4wJBr0JPLQq8z4tN9MhThO7GBRZXoTNpkaF03ayF38Wjyy/fmkpjN Ai4POX361jgRElrMcI6pESKiG9ysym3HvW3fUXznd0IpndiUn9pP3LiDTk9fi1LI 01ubnjFVaYeCH1Wt6nLhz44/VgcRWRmGgdsf/2A/TdSidsJy+1d852ltY+nLjLpl kg3GmASfC+AgBBy8Oc/pHi99Yvu5SCA= -----END CERTIFICATE-----Generated at Sun Sep 20 14:44:18 2026 by rpki-client