$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/9464385d-488a-39dc-81c1-88e77971887a.roa File: 9464385d-488a-39dc-81c1-88e77971887a.roa (raw, json) Hash identifier: PRHEo23AEzGle2aC88cr+03ESCfJ05gPegQPyXIHsAA= Subject key identifier: 36:0B:E2:A3:6F:B7:6B:95:3A:7F:39:4D:74:1D:EC:4C:78:EC:92:26 Certificate issuer: /CN=720bf1f5-bfdc-4e9b-aec9-45f16525afbe Certificate serial: 010D0C9F4328584F4C3D4D7A362534BC2B568F80 Authority key identifier: 66:C7:EB:B2:4D:26:86:16:7A:77:EC:EC:4B:95:D7:30:03:81:5E:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/9464385d-488a-39dc-81c1-88e77971887a.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 32659 IP address blocks: 199.204.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:4d:7a:36:25:34:bc:2b:56:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=720bf1f5-bfdc-4e9b-aec9-45f16525afbe Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=64e99ab9-d17a-4d11-80a8-99178b22480f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:74:1a:e7:32:7e:31:bb:96:c6:a4:61:61:4d: f2:d9:8d:96:cd:a3:87:16:00:58:0f:d0:57:7e:5f: b9:15:0c:a7:a8:3c:95:22:41:1e:e7:d3:3f:8f:57: 9e:bc:8f:a8:4e:42:e0:ba:69:57:11:34:43:d2:34: 08:47:fc:06:66:c9:f1:18:b5:cc:ce:93:a8:55:f5: 51:65:bf:ee:f1:ef:37:50:30:a9:32:b2:89:55:08: 2b:7d:ee:32:b2:04:ee:68:46:7f:8b:40:29:80:24: b1:0b:09:f0:9e:cb:da:52:54:03:28:99:cd:62:d8: 12:4e:67:4a:46:ad:57:4d:a6:32:5d:a6:0e:63:ba: 13:c8:c2:01:2b:b8:f9:84:ea:31:29:a5:03:20:d1: a4:63:63:d2:ab:d8:fb:bb:10:3d:e0:e6:26:85:52: 36:08:65:bb:06:57:33:31:bc:be:3d:d0:67:fd:1a: 29:b8:4e:48:cb:e7:52:b6:7a:44:b4:5f:2f:50:31: 16:88:48:c7:7c:8d:f7:83:ae:6a:29:e2:c9:4d:76: 9b:79:8f:0a:62:7e:35:d3:b1:16:7a:93:cf:2c:c3: 21:36:db:64:69:9d:be:eb:b5:39:ee:f5:0c:2b:78: 24:1b:46:09:3a:14:3c:fe:97:be:52:f0:fc:f3:33: c0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0B:E2:A3:6F:B7:6B:95:3A:7F:39:4D:74:1D:EC:4C:78:EC:92:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/9464385d-488a-39dc-81c1-88e77971887a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.crl X509v3 Authority Key Identifier: keyid:66:C7:EB:B2:4D:26:86:16:7A:77:EC:EC:4B:95:D7:30:03:81:5E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.cer sbgp-ipAddrBlock: critical IPv4: 199.204.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:8a:46:76:2a:7a:b7:5d:17:b4:8d:b4:c4:12:8a:a5:c2:a8: 4e:f8:23:38:9b:2a:8c:77:9a:5f:84:1f:c5:cd:fc:18:ce:44: 8f:01:24:3c:ba:2b:52:95:4c:f1:e7:18:28:46:96:81:d8:d2: 9b:8f:fb:48:b4:ba:40:e7:06:82:6d:28:51:ad:ee:51:32:33: b5:51:af:4a:5d:9f:ce:de:21:2d:88:22:c3:26:92:40:d2:b3: c8:99:5d:fe:c5:c8:f4:79:66:89:12:35:19:f0:2a:f1:4d:1d: 95:19:0f:2c:46:26:42:0b:a0:d2:c1:72:00:58:8c:75:c2:b9: a6:d1:93:b3:67:fb:ee:f5:71:ff:4a:0d:45:e4:df:3c:6a:74: 85:39:f4:3e:53:cb:65:1a:f5:d7:f6:d1:4e:65:a8:f1:09:c8: c4:5b:1d:31:b6:c0:a0:1c:1a:85:9d:c2:9f:3f:c1:0c:c1:62: 31:e1:30:e5:e9:4a:60:55:2c:d0:d8:f7:ad:5c:d8:3d:d6:69: e3:03:1b:4c:61:d6:42:4c:c9:10:de:57:73:1a:36:ed:71:6c: 49:52:33:25:22:96:ac:77:9e:02:10:4d:82:88:a7:0b:0e:e5: 42:2c:41:3f:e2:e5:a4:13:37:d6:3d:f2:c5:d7:8d:d7:d5:a4: 1b:d1:27:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPU16NiU0vCtWj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzIwYmYxZjUtYmZkYy00ZTliLWFlYzktNDVmMTY1MjVh ZmJlMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NjRlOTlhYjktZDE3YS00ZDExLTgwYTgtOTkxNzhiMjI0ODBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHQa5zJ+MbuWxqRhYU3y2Y2WzaOHFgBYD9BX fl+5FQynqDyVIkEe59M/j1eevI+oTkLgumlXETRD0jQIR/wGZsnxGLXMzpOoVfVR Zb/u8e83UDCpMrKJVQgrfe4ysgTuaEZ/i0ApgCSxCwnwnsvaUlQDKJnNYtgSTmdK Rq1XTaYyXaYOY7oTyMIBK7j5hOoxKaUDINGkY2PSq9j7uxA94OYmhVI2CGW7Blcz Mby+PdBn/RopuE5Iy+dStnpEtF8vUDEWiEjHfI33g65qKeLJTXabeY8KYn4107EW epPPLMMhNttkaZ2+67U57vUMK3gkG0YJOhQ8/pe+UvD88zPApwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYL4qNvt2uVOn85TXQd7Ex47JImMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83MjBi ZjFmNS1iZmRjLTRlOWItYWVjOS00NWYxNjUyNWFmYmUvOTQ2NDM4NWQtNDg4YS0z OWRjLTgxYzEtODhlNzc5NzE4ODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzIwYmYxZjUtYmZkYy00ZTliLWFl YzktNDVmMTY1MjVhZmJlLzcyMGJmMWY1LWJmZGMtNGU5Yi1hZWM5LTQ1ZjE2NTI1 YWZiZS5jcmwwHwYDVR0jBBgwFoAUZsfrsk0mhhZ6d+zsS5XXMAOBXg4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83MjBiZjFmNS1iZmRjLTRlOWItYWVjOS00NWYx NjUyNWFmYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWKRnYqerddF7SNtMQSiqXCqE74IzibKox3ml+EH8XN/BjORI8BJDy6 K1KVTPHnGChGloHY0puP+0i0ukDnBoJtKFGt7lEyM7VRr0pdn87eIS2IIsMmkkDS s8iZXf7FyPR5ZokSNRnwKvFNHZUZDyxGJkILoNLBcgBYjHXCuabRk7Nn++71cf9K DUXk3zxqdIU59D5Ty2Ua9df20U5lqPEJyMRbHTG2wKAcGoWdwp8/wQzBYjHhMOXp SmBVLNDY961c2D3WaeMDG0xh1kJMyRDeV3MaNu1xbElSMyUilqx3ngIQTYKIpwsO 5UIsQT/i5aQTN9Y98sXXjdfVpBvRJ3E= -----END CERTIFICATE-----Generated at Sun Sep 27 05:02:22 2026 by rpki-client