$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994/0b284fae-e6fd-3b16-aa74-001fb4935031.roa File: 0b284fae-e6fd-3b16-aa74-001fb4935031.roa (raw, json) Hash identifier: gPjaA+GcOpj9xGBD7Ru6zeiCEQr48GxNUTzBWtRe7fk= Subject key identifier: C0:8A:1C:F6:26:F4:B3:1D:1B:4D:0A:80:EE:52:80:54:A0:E6:73:B0 Certificate issuer: /CN=1594aa31-e667-4afc-88a7-f2130384e994 Certificate serial: 010D0C9F4328584F79182C252BE1F3F2E4E5C980 Authority key identifier: 11:48:DC:EF:D7:66:C8:7F:01:CC:85:BE:A7:AE:43:97:9C:97:6A:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994/0b284fae-e6fd-3b16-aa74-001fb4935031.roa Signing time: Mon 12 Oct 2026 02:36:58 +0000 ROA not before: Mon 12 Oct 2026 02:36:58 +0000 ROA not after: Sun 10 Jan 2027 03:36:58 +0000 asID: 0 IP address blocks: 65.111.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994/1594aa31-e667-4afc-88a7-f2130384e994.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994/1594aa31-e667-4afc-88a7-f2130384e994.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:79:18:2c:25:2b:e1:f3:f2:e4:e5:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1594aa31-e667-4afc-88a7-f2130384e994 Validity Not Before: Oct 12 02:36:58 2026 GMT Not After : Jan 10 03:36:58 2027 GMT Subject: CN=74836a5e-d816-468d-8c11-06280883e369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4e:2b:0f:9d:be:61:bd:12:9c:e3:98:43:ee: f4:de:bb:d1:09:86:2a:a9:f9:a3:4b:2a:24:c7:ce: 6d:b8:17:73:77:af:bc:31:c4:e1:86:2e:71:8b:26: c5:fd:3b:9b:3f:c3:ff:b8:01:d2:86:1d:65:dc:8e: af:f4:38:cf:5d:e7:e3:07:9d:e2:d1:f3:34:ac:f4: dd:89:9e:d3:4a:f9:12:53:32:ae:f7:20:cf:d8:47: c0:46:05:a7:30:06:bc:aa:0a:f0:92:9c:c4:e5:83: f0:ce:c3:86:65:be:e4:50:27:00:84:f5:81:b6:23: eb:2f:d5:a8:3b:16:d5:02:47:e6:0b:01:ab:de:d6: c3:8d:73:cd:6a:4e:db:1d:f1:8a:47:b7:67:52:7d: f1:e7:6d:3d:c0:e5:69:d0:a0:c9:d8:bf:f4:44:2c: d3:58:fe:47:62:50:46:48:04:4b:46:33:1f:f1:9d: 11:d3:90:c6:14:42:b4:34:c2:2e:bd:2a:07:dc:ab: ae:28:c9:83:bd:24:e5:4f:24:78:f7:fd:c4:60:20: b8:0d:df:b2:ca:f9:6b:37:92:d5:c3:82:a5:13:f6: 2a:23:93:f3:75:14:12:31:9a:4c:4b:3e:08:9a:90: ef:ed:a1:87:fe:fb:41:07:34:9d:ea:d4:58:a3:72: c9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8A:1C:F6:26:F4:B3:1D:1B:4D:0A:80:EE:52:80:54:A0:E6:73:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994/0b284fae-e6fd-3b16-aa74-001fb4935031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994/1594aa31-e667-4afc-88a7-f2130384e994.crl X509v3 Authority Key Identifier: keyid:11:48:DC:EF:D7:66:C8:7F:01:CC:85:BE:A7:AE:43:97:9C:97:6A:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/1594aa31-e667-4afc-88a7-f2130384e994.cer sbgp-ipAddrBlock: critical IPv4: 65.111.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:3f:7a:ff:01:ad:91:9d:0d:87:0d:6f:28:1c:09:df:cc:72: 96:a6:84:4b:f2:46:90:83:21:22:d7:5f:0c:e0:4b:63:68:36: 0f:fd:e9:47:45:34:93:7b:a3:e6:ec:e5:32:1e:71:84:31:53: df:8c:47:34:79:29:5f:36:77:e5:6a:d9:5b:f7:f4:28:17:80: ad:15:fc:0e:86:9c:92:16:79:bc:bb:b7:da:63:56:bf:23:c1: 49:0d:f6:e1:c4:d6:d9:4e:cd:8a:14:18:5b:99:38:bc:a0:a8: f2:ee:a2:a0:6b:6c:33:ff:85:e4:38:a4:40:ef:37:25:82:2f: 39:e6:14:db:f7:9f:0c:ce:c5:6b:4d:3e:bb:45:5c:d8:bc:af: 5a:1b:a0:75:d4:cb:d8:ed:4d:fc:0f:cd:32:35:7e:4a:0a:2f: 49:43:9a:02:3f:74:59:44:80:df:96:ee:17:d6:97:07:e4:5e: 38:a2:b2:e0:b9:34:54:84:9e:1b:a1:bc:37:43:fe:69:48:d1: 55:8b:fb:b4:59:33:72:7f:be:84:08:cc:7b:77:6f:0e:de:20: a1:9f:db:4b:b9:de:b3:12:6b:3b:4f:97:08:4e:37:72:ab:3f: b2:6f:fa:57:f5:89:a6:60:2b:9c:d6:93:46:be:1d:7c:37:b4: ee:5f:bd:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE95GCwlK+Hz8uTlyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTU5NGFhMzEtZTY2Ny00YWZjLTg4YTctZjIxMzAzODRl OTk0MB4XDTI2MTAxMjAyMzY1OFoXDTI3MDExMDAzMzY1OFowLzEtMCsGA1UEAxMk NzQ4MzZhNWUtZDgxNi00NjhkLThjMTEtMDYyODA4ODNlMzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk4rD52+Yb0SnOOYQ+703rvRCYYqqfmjSyok x85tuBdzd6+8McThhi5xiybF/TubP8P/uAHShh1l3I6v9DjPXefjB53i0fM0rPTd iZ7TSvkSUzKu9yDP2EfARgWnMAa8qgrwkpzE5YPwzsOGZb7kUCcAhPWBtiPrL9Wo OxbVAkfmCwGr3tbDjXPNak7bHfGKR7dnUn3x5209wOVp0KDJ2L/0RCzTWP5HYlBG SARLRjMf8Z0R05DGFEK0NMIuvSoH3KuuKMmDvSTlTyR49/3EYCC4Dd+yyvlrN5LV w4KlE/YqI5PzdRQSMZpMSz4ImpDv7aGH/vtBBzSd6tRYo3LJeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCKHPYm9LMdG00KgO5SgFSg5nOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8xNTk0 YWEzMS1lNjY3LTRhZmMtODhhNy1mMjEzMDM4NGU5OTQvMGIyODRmYWUtZTZmZC0z YjE2LWFhNzQtMDAxZmI0OTM1MDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMTU5NGFhMzEtZTY2Ny00YWZjLTg4 YTctZjIxMzAzODRlOTk0LzE1OTRhYTMxLWU2NjctNGFmYy04OGE3LWYyMTMwMzg0 ZTk5NC5jcmwwHwYDVR0jBBgwFoAUEUjc79dmyH8BzIW+p65Dl5yXaiwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8xNTk0YWEzMS1lNjY3LTRhZmMtODhhNy1mMjEz MDM4NGU5OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQW/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKM/ev8BrZGdDYcNbygcCd/McpamhEvyRpCDISLXXwzgS2NoNg/96UdF NJN7o+bs5TIecYQxU9+MRzR5KV82d+Vq2Vv39CgXgK0V/A6GnJIWeby7t9pjVr8j wUkN9uHE1tlOzYoUGFuZOLygqPLuoqBrbDP/heQ4pEDvNyWCLznmFNv3nwzOxWtN PrtFXNi8r1oboHXUy9jtTfwPzTI1fkoKL0lDmgI/dFlEgN+W7hfWlwfkXjiisuC5 NFSEnhuhvDdD/mlI0VWL+7RZM3J/voQIzHt3bw7eIKGf20u53rMSaztPlwhON3Kr P7Jv+lf1iaZgK5zWk0a+HXw3tO5fvcA= -----END CERTIFICATE-----Generated at Mon Nov 2 07:11:30 2026 by rpki-client