$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/d1066f5c-b3fe-34bb-a237-a5c08e315d24.roa File: d1066f5c-b3fe-34bb-a237-a5c08e315d24.roa (raw, json) Hash identifier: MRVX/egswz3k8h0jZvppzZHNqCX1BmVUe/7QKQFIVIQ= Subject key identifier: F6:F3:5F:E3:90:84:45:EE:7E:18:78:3D:8F:A2:ED:15:29:F5:42:40 Certificate issuer: /CN=0b3e78b3-bf49-4038-b7a9-71936b1370d8 Certificate serial: 010D0C9F4328584F27F25C60F7C82525C9CCC9F0 Authority key identifier: A4:5B:B2:43:41:87:9F:58:0E:6B:44:13:BD:A7:08:16:72:2B:DA:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/d1066f5c-b3fe-34bb-a237-a5c08e315d24.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 206766 IP address blocks: 64.7.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:5c:60:f7:c8:25:25:c9:cc:c9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b3e78b3-bf49-4038-b7a9-71936b1370d8 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=2aaf2265-5502-4c50-a7c2-35126a209b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:76:66:a8:3b:bf:35:a2:e9:9b:98:e7:e1:76: 36:66:e9:97:d9:d9:7a:40:3a:c4:a1:39:4b:2a:1e: 7b:e7:75:4a:43:ed:4e:ea:12:a9:bc:05:12:f4:30: 5e:01:b2:ca:50:76:f2:1e:eb:45:92:75:59:01:31: f0:e9:ad:8e:48:33:30:cf:07:55:de:e0:da:59:13: 09:4b:c7:bd:02:8e:1e:4b:e4:8f:0d:f9:ef:62:44: 8f:2d:e7:4c:e5:e1:0b:92:9f:90:36:dc:7c:38:99: 36:74:7b:54:87:57:a0:3d:20:e0:73:0e:9b:40:fd: 45:5e:80:0f:76:34:4c:51:1c:dd:5b:4d:ea:df:68: 2a:81:2b:6b:df:dd:f9:62:b9:6d:2b:07:b6:21:d4: fa:88:54:88:b8:2f:69:2d:09:f9:01:c6:78:f2:e2: 3f:e3:c3:5d:fe:47:16:01:9e:db:1b:35:62:5b:3d: d0:39:de:38:8c:88:48:c9:53:b8:be:21:22:36:0e: cb:e1:54:c7:04:d6:2a:c8:3a:30:1d:10:e5:a5:78: ba:13:87:cc:93:2c:7d:7d:00:76:68:b6:c2:60:db: 94:b5:49:54:0b:0e:96:7d:49:61:32:9d:06:c0:3a: d9:22:76:c2:57:11:ac:a0:e7:eb:ed:92:a0:da:a5: 7c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F3:5F:E3:90:84:45:EE:7E:18:78:3D:8F:A2:ED:15:29:F5:42:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/d1066f5c-b3fe-34bb-a237-a5c08e315d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.crl X509v3 Authority Key Identifier: keyid:A4:5B:B2:43:41:87:9F:58:0E:6B:44:13:BD:A7:08:16:72:2B:DA:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b3e78b3-bf49-4038-b7a9-71936b1370d8.cer sbgp-ipAddrBlock: critical IPv4: 64.7.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:5d:8e:a8:4a:01:f3:60:ef:7e:2a:e4:e6:37:38:db:a8:67: dd:6c:2f:24:0a:88:45:4c:98:7f:a5:3d:69:b7:ec:9f:30:b3: 2b:b3:cb:e4:fd:99:5b:46:b7:c9:c4:c2:18:4f:85:c4:84:b0: f8:c5:57:1c:c9:98:65:38:4e:6a:8f:a3:27:2b:f5:f7:51:82: 77:c1:fb:ed:da:75:eb:0f:99:7b:85:35:eb:ef:26:07:da:c0: fb:e9:b2:03:15:8c:f7:8b:40:7e:7d:11:db:2d:e3:d6:8b:88: d8:ed:85:fe:29:1c:9a:d3:ce:99:cb:8e:c0:14:6b:7b:c3:d4: 4d:41:93:fe:20:c6:ba:f5:a8:21:32:9a:5f:39:fd:3a:6b:59: 1c:8f:8b:9d:59:fa:95:cd:60:60:aa:55:95:e0:6f:d8:09:a4: 90:e0:53:ed:78:ea:19:6d:ea:47:4a:09:ae:20:f9:36:ad:55: a1:b3:d9:5e:cc:18:82:f9:49:76:20:ba:d4:f0:0e:ba:e6:b2: 42:c1:ca:e3:74:8f:da:a2:79:e4:49:97:26:06:46:f6:db:58: 9b:f0:f9:d2:86:9a:ec:5d:6e:b0:02:e6:27:60:7f:ce:e0:8b: 94:30:c2:a0:db:5f:5f:f5:24:6e:51:5a:96:e5:a2:50:dd:b2: 2a:ed:ec:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lxg98glJcnMyfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIzZTc4YjMtYmY0OS00MDM4LWI3YTktNzE5MzZiMTM3 MGQ4MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk MmFhZjIyNjUtNTUwMi00YzUwLWE3YzItMzUxMjZhMjA5Yjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXZmqDu/NaLpm5jn4XY2ZumX2dl6QDrEoTlL Kh5753VKQ+1O6hKpvAUS9DBeAbLKUHbyHutFknVZATHw6a2OSDMwzwdV3uDaWRMJ S8e9Ao4eS+SPDfnvYkSPLedM5eELkp+QNtx8OJk2dHtUh1egPSDgcw6bQP1FXoAP djRMURzdW03q32gqgStr3935YrltKwe2IdT6iFSIuC9pLQn5AcZ48uI/48Nd/kcW AZ7bGzViWz3QOd44jIhIyVO4viEiNg7L4VTHBNYqyDowHRDlpXi6E4fMkyx9fQB2 aLbCYNuUtUlUCw6WfUlhMp0GwDrZInbCVxGsoOfr7ZKg2qV8DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbzX+OQhEXufhh4PY+i7RUp9UJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYjNl NzhiMy1iZjQ5LTQwMzgtYjdhOS03MTkzNmIxMzcwZDgvZDEwNjZmNWMtYjNmZS0z NGJiLWEyMzctYTVjMDhlMzE1ZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGIzZTc4YjMtYmY0OS00MDM4LWI3 YTktNzE5MzZiMTM3MGQ4LzBiM2U3OGIzLWJmNDktNDAzOC1iN2E5LTcxOTM2YjEz NzBkOC5jcmwwHwYDVR0jBBgwFoAUpFuyQ0GHn1gOa0QTvacIFnIr2lUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYjNlNzhiMy1iZjQ5LTQwMzgtYjdhOS03MTkz NmIxMzcwZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQAf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpdjqhKAfNg734q5OY3ONuoZ91sLyQKiEVMmH+lPWm37J8wsyuzy+T9 mVtGt8nEwhhPhcSEsPjFVxzJmGU4TmqPoycr9fdRgnfB++3adesPmXuFNevvJgfa wPvpsgMVjPeLQH59Edst49aLiNjthf4pHJrTzpnLjsAUa3vD1E1Bk/4gxrr1qCEy ml85/TprWRyPi51Z+pXNYGCqVZXgb9gJpJDgU+146hlt6kdKCa4g+TatVaGz2V7M GIL5SXYgutTwDrrmskLByuN0j9qieeRJlyYGRvbbWJvw+dKGmuxdbrAC5idgf87g i5QwwqDbX1/1JG5RWpblolDdsirt7BY= -----END CERTIFICATE-----Generated at Sun Sep 20 18:41:42 2026 by rpki-client