$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa File: 37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa (raw, json) Hash identifier: yLTgItb4r8HfYaGuNqHkn8z8XXhQigLsBlq45EELq+Y= Subject key identifier: 0A:E4:23:6A:78:CC:B1:70:14:C0:9B:E6:9F:A7:91:61:35:06:70:73 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F8F3DB3F91EB654284BA25C00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 6404 IP address blocks: 64.209.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b3:f9:1e:b6:54:28:4b:a2:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=ab892a7f-21a4-46f4-9099-ed048d0c4949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:79:b7:14:06:c2:fe:ad:ce:72:43:5f:3c:62: f0:71:47:da:29:a2:f9:d3:8c:f0:f6:c3:5a:e3:1d: 2d:1b:b0:8a:a4:89:f7:7f:3c:5c:c9:b5:73:2c:0e: f4:2a:05:df:67:f6:65:39:c7:4d:4d:d9:b9:d1:e4: c5:7a:1d:28:c7:fc:00:00:3e:f4:e7:fd:6e:08:65: 8a:7a:e2:d0:1a:cb:3a:c0:10:6e:cf:67:95:45:71: 10:39:ff:dd:98:1e:84:72:f3:c4:0f:85:59:62:b3: 03:0b:8d:98:d9:8e:62:83:1e:2e:15:33:0e:5f:51: a6:7c:a0:a7:3f:f6:51:37:84:d1:9c:d5:57:3e:25: d8:db:5a:62:10:de:5c:c0:17:74:23:75:79:db:5f: fc:0e:6a:35:d3:05:99:31:e4:34:39:54:0c:f8:76: 67:af:5d:46:1d:66:34:cc:34:4a:1f:be:90:14:9d: b7:e8:e8:e2:01:7c:43:f8:3a:80:63:6d:2f:ad:e5: 9e:30:f9:eb:7b:c3:0f:c7:cc:9d:06:f6:6d:89:e8: 2e:46:f4:12:db:16:f8:86:40:d7:27:05:49:42:fe: 40:0d:8d:20:08:68:29:4e:9a:2d:23:c6:9f:44:dc: 13:6f:b8:86:99:64:53:02:0e:4f:20:cf:d9:eb:80: 8a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:E4:23:6A:78:CC:B1:70:14:C0:9B:E6:9F:A7:91:61:35:06:70:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/37f977aa-3d80-31d3-bc7d-f873f3ffa93a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.209.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:fd:70:3a:1b:67:fb:3e:79:83:b3:1c:98:2b:4e:81:5f:bc: 64:45:4e:62:fe:82:df:4e:0b:68:9a:1d:1d:a8:ab:fe:de:e1: 8a:be:6e:a0:ff:3f:a7:cd:57:6b:3f:a5:5e:0b:22:48:a6:c6: 1a:57:2b:a6:82:06:75:96:69:03:08:1c:e3:d7:66:2d:c9:be: 10:8e:40:35:c8:14:7c:d0:f0:d2:75:c6:00:1c:7d:fd:83:28: 87:23:c1:4b:98:20:d5:64:56:84:e4:df:52:b9:a8:7e:6a:8c: 6f:16:2a:5c:b9:77:bc:c4:2f:a0:13:c5:af:ba:92:46:fc:00: 0b:0c:48:b9:fd:e2:de:40:76:dd:04:2d:5c:33:fe:f9:46:89: 51:d4:c5:bb:ae:42:cf:ce:6e:6d:74:e2:fb:9f:96:e0:b0:f1: 50:c7:b8:3e:6f:be:58:38:ba:ef:59:e7:ef:4a:d4:36:93:56: 3e:2d:41:d0:70:92:30:bc:0e:51:37:70:13:e0:4c:8b:3e:fa: 3b:06:5d:03:6d:d2:07:f0:cb:cf:ec:bf:81:de:88:bc:61:6a: 18:20:40:4f:91:9a:c6:a7:c0:b8:2d:06:04:8f:23:88:6f:38: a8:52:9d:76:f3:e2:1a:da:7a:06:1c:c6:d3:04:55:cd:48:55: ae:4a:5c:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPbP5HrZUKEuiXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk YWI4OTJhN2YtMjFhNC00NmY0LTkwOTktZWQwNDhkMGM0OTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3m3FAbC/q3OckNfPGLwcUfaKaL504zw9sNa 4x0tG7CKpIn3fzxcybVzLA70KgXfZ/ZlOcdNTdm50eTFeh0ox/wAAD705/1uCGWK euLQGss6wBBuz2eVRXEQOf/dmB6EcvPED4VZYrMDC42Y2Y5igx4uFTMOX1GmfKCn P/ZRN4TRnNVXPiXY21piEN5cwBd0I3V521/8Dmo10wWZMeQ0OVQM+HZnr11GHWY0 zDRKH76QFJ236OjiAXxD+DqAY20vreWeMPnre8MPx8ydBvZtieguRvQS2xb4hkDX JwVJQv5ADY0gCGgpTpotI8afRNwTb7iGmWRTAg5PIM/Z64CKoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArkI2p4zLFwFMCb5p+nkWE1BnBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzdmOTc3YWEtM2Q4MC0z MWQzLWJjN2QtZjg3M2YzZmZhOTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQNFZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACf9cDobZ/s+eYOzHJgrToFfvGRFTmL+gt9OC2iaHR2oq/7e4Yq+bqD/ P6fNV2s/pV4LIkimxhpXK6aCBnWWaQMIHOPXZi3JvhCOQDXIFHzQ8NJ1xgAcff2D KIcjwUuYINVkVoTk31K5qH5qjG8WKly5d7zEL6ATxa+6kkb8AAsMSLn94t5Adt0E LVwz/vlGiVHUxbuuQs/Obm104vufluCw8VDHuD5vvlg4uu9Z5+9K1DaTVj4tQdBw kjC8DlE3cBPgTIs++jsGXQNt0gfwy8/sv4HeiLxhahggQE+RmsanwLgtBgSPI4hv OKhSnXbz4hraegYcxtMEVc1IVa5KXEk= -----END CERTIFICATE-----Generated at Wed Oct 28 10:13:59 2026 by rpki-client