$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/aae793b8-1871-365c-b48d-3bc0238d3be0.roa File: aae793b8-1871-365c-b48d-3bc0238d3be0.roa (raw, json) Hash identifier: qxrZIkG8iZbbuuPgio0lGl+FaspK4SgC2WNn+zD6YQA= Subject key identifier: DE:02:CF:66:C0:D3:3B:6D:A3:3E:BE:89:24:75:58:5A:1D:58:9C:A4 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584F4973DDE1FCE3FF7D8AE21A60 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/aae793b8-1871-365c-b48d-3bc0238d3be0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5769 IP address blocks: 70.80.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:dd:e1:fc:e3:ff:7d:8a:e2:1a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fba890b8-c9b1-40ca-a0a5-edb6ccf646c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a1:15:01:b5:9a:23:aa:2a:a1:fe:01:98:ec: 23:91:6b:ae:fb:14:0a:61:a0:61:21:24:90:29:d9: 90:57:e6:e4:ab:bc:aa:c9:53:62:b5:e5:c3:05:93: 65:6a:70:26:f6:be:5b:93:ab:db:e8:43:c5:03:f9: 2b:be:0d:8d:e0:dc:d9:61:cd:51:40:6a:86:50:d5: f0:77:43:6b:cf:ca:16:db:75:5a:80:9f:c9:3e:59: 0a:80:ec:a9:53:de:1a:69:15:fc:11:f6:62:89:6a: 60:f4:e4:ff:b6:64:72:55:d1:97:04:79:d6:fe:3e: d6:46:07:1c:52:4f:80:4b:0c:a8:ba:3b:3b:b8:e3: f8:fa:4b:0b:91:7d:96:3a:33:81:8d:43:9c:8c:58: 42:5e:73:b3:5e:69:ed:a4:d3:17:e4:37:30:7d:78: 1d:98:4a:8f:bd:a1:65:18:3e:69:29:0d:d6:91:1d: 77:e1:c4:9a:33:1d:2a:81:f7:00:53:83:93:cc:78: 35:82:01:ac:b9:bd:29:25:fa:0c:db:a5:99:3f:cd: 30:78:c1:24:20:e3:a6:b9:6d:09:1c:23:66:b7:3f: 1e:45:f3:97:69:70:c5:84:e1:e7:6a:e1:ac:ef:17: 2a:ae:c4:50:6c:9d:28:66:d4:14:0a:2f:28:c4:21: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:02:CF:66:C0:D3:3B:6D:A3:3E:BE:89:24:75:58:5A:1D:58:9C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/aae793b8-1871-365c-b48d-3bc0238d3be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 70.80.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:8d:a8:91:12:23:a2:8e:3c:d5:5d:f8:c3:7b:4c:f1:09:c3: 90:26:64:03:d8:84:5e:a5:c0:92:bd:d3:85:11:8b:aa:e2:37: 34:3b:bd:85:e4:ae:4b:87:51:f0:21:59:8d:81:68:0c:99:34: 42:11:b9:db:c6:cf:b6:a8:cf:c6:22:57:51:53:d4:a7:81:c7: 2f:06:17:bb:89:e2:53:f8:47:df:48:c1:bc:1c:f6:bd:f7:01: 3a:9f:02:b7:04:04:6c:ce:0c:05:52:c2:91:9f:59:14:7b:a4: 82:21:2b:a6:4e:fe:39:e5:77:d8:28:af:fb:cd:6b:f2:e9:b1: 38:f0:bc:f7:8a:72:e2:a8:77:e4:a2:9d:20:43:9f:7b:64:fc: 0e:64:23:a0:44:e5:16:a9:21:ef:5c:87:ed:77:1c:6f:45:7a: 90:ec:63:e0:1f:d7:c7:0c:33:ae:ac:15:22:27:56:98:8b:ae: 62:22:5c:ab:d4:82:f5:6e:26:1f:19:6b:ed:df:20:be:3c:d2: fe:4a:17:95:25:c2:26:60:7c:ae:2f:40:2a:5f:05:75:b0:c0: b5:17:a8:2d:bd:7f:e8:f0:29:2a:a7:bb:65:63:f8:7f:b8:7a: 5c:40:ac:e0:fb:c3:09:5b:97:70:5a:b4:60:40:4b:34:8a:f1: fb:f5:f8:b7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9Jc93h/OP/fYriGmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmJhODkwYjgtYzliMS00MGNhLWEwYTUtZWRiNmNjZjY0NmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKEVAbWaI6oqof4BmOwjkWuu+xQKYaBhISSQ KdmQV+bkq7yqyVNiteXDBZNlanAm9r5bk6vb6EPFA/krvg2N4NzZYc1RQGqGUNXw d0Nrz8oW23VagJ/JPlkKgOypU94aaRX8EfZiiWpg9OT/tmRyVdGXBHnW/j7WRgcc Uk+ASwyoujs7uOP4+ksLkX2WOjOBjUOcjFhCXnOzXmntpNMX5DcwfXgdmEqPvaFl GD5pKQ3WkR134cSaMx0qgfcAU4OTzHg1ggGsub0pJfoM26WZP80weMEkIOOmuW0J HCNmtz8eRfOXaXDFhOHnauGs7xcqrsRQbJ0oZtQUCi8oxCGk5QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFN4Cz2bA0zttoz6+iSR1WFodWJykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvYWFlNzkzYjgtMTg3MS0z NjVjLWI0OGQtM2JjMDIzOGQzYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCRlAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHo2okRIjoo481V34w3tM8QnDkCZkA9iEXqXAkr3ThRGLquI3NDu9heSu S4dR8CFZjYFoDJk0QhG528bPtqjPxiJXUVPUp4HHLwYXu4niU/hH30jBvBz2vfcB Op8CtwQEbM4MBVLCkZ9ZFHukgiErpk7+OeV32Civ+81r8umxOPC894py4qh35KKd IEOfe2T8DmQjoETlFqkh71yH7Xccb0V6kOxj4B/XxwwzrqwVIidWmIuuYiJcq9SC 9W4mHxlr7d8gvjzS/koXlSXCJmB8ri9AKl8FdbDAtReoLb1/6PApKqe7ZWP4f7h6 XECs4PvDCVuXcFq0YEBLNIrx+/X4tw== -----END CERTIFICATE-----Generated at Sun Sep 27 01:12:44 2026 by rpki-client