$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/de58c588-4488-3729-a7e1-98130f91c66c.roa File: de58c588-4488-3729-a7e1-98130f91c66c.roa (raw, json) Hash identifier: q6kmnRf67kpEETYYuPEQGz8bF53nTU56Ya+ErrkoSCE= Subject key identifier: C4:13:35:52:4B:09:D5:37:93:2B:90:41:CC:AF:50:40:54:78:3C:66 Certificate issuer: /CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849 Certificate serial: 010D0C9F4328584F2EED0F83D221EA451D2785C0 Authority key identifier: 76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/de58c588-4488-3729-a7e1-98130f91c66c.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 32867 IP address blocks: 64.5.64.0/20 maxlen: 20 64.186.16.0/21 maxlen: 21 66.172.192.0/18 maxlen: 18 74.221.32.0/20 maxlen: 20 143.223.184.0/21 maxlen: 21 199.116.180.0/22 maxlen: 22 199.247.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:0f:83:d2:21:ea:45:1d:27:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca2c0e73-f7f7-4070-98aa-c78ef1752849 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=876e34a3-7c60-48e0-be8c-cf004a23a7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:a4:10:fe:7f:92:2d:90:70:6e:ee:e0:1e: 57:c5:92:80:e6:38:87:1e:80:8d:40:f9:63:15:90: 4d:ea:07:91:9c:07:da:6d:19:69:a1:16:12:65:fb: 3e:cf:3c:53:96:26:ac:f4:72:54:f7:22:d6:b2:2e: c9:d4:ac:f9:fb:47:c2:41:89:99:d2:ba:12:60:ec: b2:ef:6c:04:c7:6c:40:5a:ea:20:72:a8:cd:91:f0: 1e:2b:9b:c9:70:07:33:fb:0c:d7:5e:78:59:b8:03: c9:f2:e1:ea:92:07:1b:33:e9:13:4e:2e:9c:42:91: a9:79:4a:82:23:16:d5:28:41:29:20:4a:3b:24:89: 15:2e:ba:2c:ee:fe:a9:b6:f1:1a:6f:89:16:62:38: f9:e6:da:2c:7a:88:82:ef:a6:89:15:98:09:3a:10: e8:ce:0f:84:37:66:d7:ef:98:b0:1b:6a:57:dd:87: 08:f7:4d:71:0e:09:47:cd:83:ac:f9:69:bc:03:ba: 07:1b:0f:7a:ff:56:91:01:59:e2:e7:41:5f:f9:68: 77:5b:92:b1:fa:84:d9:72:fe:b1:36:ff:37:9f:2c: 3a:d7:52:c7:5c:3e:ca:09:86:f1:c5:77:3b:d6:ee: 09:5c:2d:5a:08:1f:15:6d:98:d0:32:4b:08:a3:25: 09:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:13:35:52:4B:09:D5:37:93:2B:90:41:CC:AF:50:40:54:78:3C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/de58c588-4488-3729-a7e1-98130f91c66c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849/ca2c0e73-f7f7-4070-98aa-c78ef1752849.crl X509v3 Authority Key Identifier: keyid:76:CE:90:F2:9A:98:0C:BD:C1:58:74:E2:1C:58:59:B7:53:0A:4E:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ca2c0e73-f7f7-4070-98aa-c78ef1752849.cer sbgp-ipAddrBlock: critical IPv4: 64.5.64.0/20 64.186.16.0/21 66.172.192.0/18 74.221.32.0/20 143.223.184.0/21 199.116.180.0/22 199.247.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b5:7a:73:8b:63:a0:c8:04:67:55:9b:19:5e:61:1b:a0:7e: 01:db:84:e8:a4:fe:cb:19:9a:e4:79:16:bf:93:76:7f:ac:f4: 8e:61:6c:93:e3:5e:96:a6:e6:81:fc:10:67:05:6b:d6:a3:ad: a7:62:e9:a3:0f:ff:31:ed:85:ab:aa:15:d0:14:49:87:17:b5: b0:0b:71:86:87:5f:d2:e5:7b:9a:0d:5f:d0:1c:11:1e:ce:be: 81:fe:d3:ae:81:c5:a3:8b:cb:8b:57:05:43:16:ef:12:3a:25: d1:9f:53:a9:ee:c0:7b:6c:17:5c:21:44:cf:88:91:8f:db:86: 28:fa:19:01:a7:06:87:31:e5:e3:f5:d5:17:80:0e:7a:7a:5e: 51:fe:dd:78:29:3a:bd:24:86:7c:8e:70:44:93:32:df:6f:91: 8e:18:37:aa:b5:fa:3e:4b:f4:61:ae:4e:bc:69:f8:ea:fb:35: 3c:12:2b:d5:10:e7:69:b5:db:30:22:14:94:1c:19:6a:9d:be: 6b:d0:ea:60:75:a6:76:66:fa:9f:17:00:c5:e9:13:b9:01:ff: da:fe:2e:7f:44:16:2b:6d:95:74:72:13:39:99:67:dd:3b:8c: 38:50:13:e8:89:84:e8:8a:40:c8:fd:6f:f5:c7:f2:25:04:a1: a9:c6:09:76 -----BEGIN CERTIFICATE----- MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWE8u7Q+D0iHqRR0nhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EyYzBlNzMtZjdmNy00MDcwLTk4YWEtYzc4ZWYxNzUy ODQ5MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk ODc2ZTM0YTMtN2M2MC00OGUwLWJlOGMtY2YwMDRhMjNhN2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUmkEP5/ki2QcG7u4B5XxZKA5jiHHoCNQPlj FZBN6geRnAfabRlpoRYSZfs+zzxTlias9HJU9yLWsi7J1Kz5+0fCQYmZ0roSYOyy 72wEx2xAWuogcqjNkfAeK5vJcAcz+wzXXnhZuAPJ8uHqkgcbM+kTTi6cQpGpeUqC IxbVKEEpIEo7JIkVLros7v6ptvEab4kWYjj55toseoiC76aJFZgJOhDozg+EN2bX 75iwG2pX3YcI901xDglHzYOs+Wm8A7oHGw96/1aRAVni50Ff+Wh3W5Kx+oTZcv6x Nv83nyw611LHXD7KCYbxxXc71u4JXC1aCB8VbZjQMksIoyUJAQIDAQABo4IDeTCC A3UwHQYDVR0OBBYEFMQTNVJLCdU3kyuQQcyvUEBUeDxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYTJj MGU3My1mN2Y3LTQwNzAtOThhYS1jNzhlZjE3NTI4NDkvZGU1OGM1ODgtNDQ4OC0z NzI5LWE3ZTEtOTgxMzBmOTFjNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2EyYzBlNzMtZjdmNy00MDcwLTk4 YWEtYzc4ZWYxNzUyODQ5L2NhMmMwZTczLWY3ZjctNDA3MC05OGFhLWM3OGVmMTc1 Mjg0OS5jcmwwHwYDVR0jBBgwFoAUds6Q8pqYDL3BWHTiHFhZt1MKTmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYTJjMGU3My1mN2Y3LTQwNzAtOThhYS1jNzhl ZjE3NTI4NDkuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQEQAVAAwQD QLoQAwQGQqzAAwQESt0gAwQDj9+4AwQCx3S0AwQEx/dAMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACW1enOL Y6DIBGdVmxleYRugfgHbhOik/ssZmuR5Fr+Tdn+s9I5hbJPjXpam5oH8EGcFa9aj radi6aMP/zHthauqFdAUSYcXtbALcYaHX9Lle5oNX9AcER7OvoH+066BxaOLy4tX BUMW7xI6JdGfU6nuwHtsF1whRM+IkY/bhij6GQGnBocx5eP11ReADnp6XlH+3Xgp Or0khnyOcESTMt9vkY4YN6q1+j5L9GGuTrxp+Or7NTwSK9UQ52m12zAiFJQcGWqd vmvQ6mB1pnZm+p8XAMXpE7kB/9r+Ln9EFittlXRyEzmZZ907jDhQE+iJhOiKQMj9 b/XH8iUEoanGCXY= -----END CERTIFICATE-----Generated at Sun Oct 11 14:59:46 2026 by rpki-client