$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/8572da3f-6760-3c41-ac0c-4d66de248df8.roa File: 8572da3f-6760-3c41-ac0c-4d66de248df8.roa (raw, json) Hash identifier: HexrZgHXYO9uv6hZlNOQJ74u/UAXbUcg565ufDLQRTQ= Subject key identifier: CE:27:A8:A5:DC:53:48:A3:2A:31:2B:D6:62:60:63:32:FD:41:C7:E0 Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708 Certificate serial: 010D0C9F4328584F6AF2BB1949D3A7DADE841080 Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/8572da3f-6760-3c41-ac0c-4d66de248df8.roa Signing time: Wed 07 Oct 2026 01:00:12 +0000 ROA not before: Wed 07 Oct 2026 01:00:12 +0000 ROA not after: Tue 05 Jan 2027 02:00:12 +0000 asID: 401866 IP address blocks: 64.93.68.0/24 maxlen: 24 64.93.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6a:f2:bb:19:49:d3:a7:da:de:84:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708 Validity Not Before: Oct 7 01:00:12 2026 GMT Not After : Jan 5 02:00:12 2027 GMT Subject: CN=3170eed6-1a65-4f4b-9a9a-48d14c44805c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:18:23:1d:dc:67:20:9a:e7:25:c9:b1:41: bf:ad:00:bf:22:a6:e5:61:4d:2a:8e:34:42:ce:b5: 67:b6:da:fd:1f:32:96:6a:13:78:8f:ae:15:c7:3a: 17:02:57:1a:09:1a:ca:a5:d5:e1:59:3e:c1:10:39: db:7e:5b:dc:94:fc:cd:9f:af:44:9d:0c:94:c8:8c: f5:90:1b:dc:8b:d4:44:f9:ba:c8:d9:84:69:b0:09: e1:9f:53:e4:38:18:27:ed:af:21:a6:fd:ca:39:24: e0:1a:d7:ed:9a:ca:45:f9:4e:54:de:ee:d9:fe:20: 27:b9:7d:dd:14:a7:42:79:a8:ee:69:7c:7c:12:e6: f9:47:dc:0d:3e:60:ee:98:1d:25:0e:43:a4:ca:75: dc:4e:e4:2d:9c:a8:cd:39:81:fe:ae:e6:c3:4b:39: 5c:d3:53:b4:91:89:f2:6d:c1:b1:04:43:ed:17:31: a0:90:45:45:22:70:71:aa:75:bc:a9:7f:6b:ec:ea: 7f:69:63:62:28:83:e8:89:f6:d1:0f:3d:f2:24:e1: ee:cd:4a:8e:42:03:6f:c4:3d:bd:bb:76:5e:e3:3b: 02:73:0f:a8:6c:5c:02:60:df:05:7d:9e:94:8b:81: b6:b3:a8:c5:5c:a5:88:e2:d9:68:4e:44:3e:b8:25: 43:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:27:A8:A5:DC:53:48:A3:2A:31:2B:D6:62:60:63:32:FD:41:C7:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/8572da3f-6760-3c41-ac0c-4d66de248df8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl X509v3 Authority Key Identifier: keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer sbgp-ipAddrBlock: critical IPv4: 64.93.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:ae:ea:ac:f8:7e:b9:9d:c5:f3:4b:fa:b3:23:46:4c:22:22: 2f:ee:de:7d:40:0b:ab:09:52:8d:88:e7:d6:28:de:17:28:a2: e5:16:49:a9:3c:6e:1e:aa:c1:82:d7:fd:b7:c3:7b:61:84:a5: c8:12:98:06:b6:9f:54:8a:27:bf:82:e4:b3:7d:ba:53:2b:a2: 02:23:73:0a:55:0c:8c:4c:ee:d4:ea:c0:60:a1:73:d3:1a:fa: 5e:eb:1d:b9:7b:a6:69:10:c1:ae:43:3a:67:a5:b5:05:6c:36: db:1d:47:1c:ca:ff:c7:d3:5c:9e:7c:97:80:a8:ad:a8:60:c6: 15:78:12:3b:a9:8f:94:d4:bb:4e:1e:16:ab:29:c3:92:01:29: f9:e8:2a:7a:cc:32:83:29:4e:31:07:6f:c0:1e:b9:a8:35:26: f9:bf:63:65:d7:a0:b0:be:47:22:21:fb:d1:4d:06:56:a0:fa: 47:17:d4:a6:5a:74:02:a8:27:d6:cc:7f:51:ed:f0:0c:33:4c: 6f:a4:9d:33:e0:90:83:c2:38:4b:f2:e5:68:47:49:31:93:1a: 82:38:ca:93:f6:6f:e2:92:64:25:b4:e4:bc:92:b4:6d:d2:e9: a1:78:6f:70:06:cb:e1:29:2d:61:78:d3:95:4e:d2:b6:6c:11: 86:65:61:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9q8rsZSdOn2t6EEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMzkyYTEtMDdlOS00OWY0LTlhMDMtZGY1MDA1MzMz NzA4MB4XDTI2MTAwNzAxMDAxMloXDTI3MDEwNTAyMDAxMlowLzEtMCsGA1UEAxMk MzE3MGVlZDYtMWE2NS00ZjRiLTlhOWEtNDhkMTRjNDQ4MDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno4YIx3cZyCa5yXJsUG/rQC/IqblYU0qjjRC zrVnttr9HzKWahN4j64VxzoXAlcaCRrKpdXhWT7BEDnbflvclPzNn69EnQyUyIz1 kBvci9RE+brI2YRpsAnhn1PkOBgn7a8hpv3KOSTgGtftmspF+U5U3u7Z/iAnuX3d FKdCeajuaXx8Eub5R9wNPmDumB0lDkOkynXcTuQtnKjNOYH+rubDSzlc01O0kYny bcGxBEPtFzGgkEVFInBxqnW8qX9r7Op/aWNiKIPoifbRDz3yJOHuzUqOQgNvxD29 u3Ze4zsCcw+obFwCYN8FfZ6Ui4G2s6jFXKWI4tloTkQ+uCVDSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4nqKXcU0ijKjEr1mJgYzL9QcfgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYz OTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUwMDUzMzM3MDgvODU3MmRhM2YtNjc2MC0z YzQxLWFjMGMtNGQ2NmRlMjQ4ZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FmMzkyYTEtMDdlOS00OWY0LTlh MDMtZGY1MDA1MzMzNzA4L2NhZjM5MmExLTA3ZTktNDlmNC05YTAzLWRmNTAwNTMz MzcwOC5jcmwwHwYDVR0jBBgwFoAURC8Ry3nbTZVcRvWNkst9EsMqGU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYzOTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUw MDUzMzM3MDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQF1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOu6qz4frmdxfNL+rMjRkwiIi/u3n1AC6sJUo2I59Yo3hcoouUWSak8 bh6qwYLX/bfDe2GEpcgSmAa2n1SKJ7+C5LN9ulMrogIjcwpVDIxM7tTqwGChc9Ma +l7rHbl7pmkQwa5DOmeltQVsNtsdRxzK/8fTXJ58l4CorahgxhV4Ejupj5TUu04e Fqspw5IBKfnoKnrMMoMpTjEHb8Aeuag1Jvm/Y2XXoLC+RyIh+9FNBlag+kcX1KZa dAKoJ9bMf1Ht8AwzTG+knTPgkIPCOEvy5WhHSTGTGoI4ypP2b+KSZCW05LyStG3S 6aF4b3AGy+EpLWF405VO0rZsEYZlYRo= -----END CERTIFICATE-----Generated at Fri Oct 9 23:11:45 2026 by rpki-client