$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/c3dc54a9-232d-3a44-b61d-e9f4041e1623.roa File: c3dc54a9-232d-3a44-b61d-e9f4041e1623.roa (raw, json) Hash identifier: 1dLloOOQZ3HNnIUpsh3XqiedJTO6jnQ7Km+hPDJRqt8= Subject key identifier: 22:D8:EE:F9:9D:D7:63:AF:C7:06:05:5A:37:AA:B9:7D:C5:12:D7:8F Certificate issuer: /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d Certificate serial: 010D0C9F4328584F63F8123F6C5D008057A14140 Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/c3dc54a9-232d-3a44-b61d-e9f4041e1623.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 36734 IP address blocks: 64.201.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:12:3f:6c:5d:00:80:57:a1:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=7e162232-dd7b-405e-9fbb-fda7c94b2927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9a:ce:6d:32:94:75:8e:20:f2:6c:19:6e:30: a7:e7:4e:32:9e:af:33:3a:b4:cc:14:a0:4b:98:65: 13:cb:38:df:5f:b7:64:da:ee:f1:42:b3:25:ef:9f: f7:a8:95:eb:af:bb:b5:b2:80:e6:75:c6:96:31:08: 63:ea:b3:13:eb:df:ec:94:02:8c:a2:70:6d:b3:ec: 56:15:8e:b1:19:b3:c9:9d:ed:5d:e8:7f:a7:5c:10: 3a:67:b2:61:72:5f:0b:80:5b:33:42:7f:25:58:3e: 9d:46:90:cd:78:14:5d:60:89:6f:94:97:4b:0d:b5: 62:8c:0c:d2:43:a8:8d:ce:a5:28:55:f2:cb:88:29: b6:45:1d:9c:46:49:f7:ec:a5:95:50:35:2c:e6:01: 84:39:fb:16:62:ec:95:3e:95:fa:11:65:98:3d:36: de:4f:23:f1:af:73:01:4a:1f:3c:7a:10:fc:56:4f: 9a:5a:e6:44:60:53:9c:20:b8:22:fb:6f:1e:06:8f: aa:16:20:82:f4:04:ea:87:f6:f3:21:f0:59:79:60: 79:f0:ab:5e:3e:3c:2b:fe:37:be:33:b1:79:38:05: 57:c8:38:eb:e0:b2:ed:1c:12:af:6d:0e:18:67:89: 28:eb:fa:f4:ec:e0:04:ba:0c:2e:40:3d:28:8d:a2: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D8:EE:F9:9D:D7:63:AF:C7:06:05:5A:37:AA:B9:7D:C5:12:D7:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/c3dc54a9-232d-3a44-b61d-e9f4041e1623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl X509v3 Authority Key Identifier: keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer sbgp-ipAddrBlock: critical IPv4: 64.201.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c1:44:ff:3a:f9:bb:99:94:91:57:cf:13:a2:15:86:35:cf: a9:5f:dc:d7:61:b9:6d:25:1e:6e:af:cf:98:e1:50:a4:a2:52: 84:ee:02:41:2a:a7:89:0e:af:52:1a:e9:8f:ff:3a:f0:36:20: a1:c9:7d:36:bd:c3:99:d4:10:49:05:c5:de:f3:bf:11:bd:b4: cc:68:4d:08:90:5f:89:65:a7:76:b1:e1:a5:7b:3d:80:08:a2: 64:e0:e7:ca:5a:74:9d:fb:3d:5f:d9:79:a8:d1:03:ef:db:64: f0:71:32:41:69:f5:8d:f6:46:ec:05:5c:ac:64:95:a6:e1:43: 43:75:65:95:84:8d:4b:4f:5e:76:8c:7b:7a:b2:7e:68:21:62: d8:d8:ea:1b:92:6e:c6:c3:fe:5f:77:b4:7c:fe:18:f1:62:f0: 7d:84:31:72:3b:e4:83:8e:5e:78:55:08:e5:68:d9:ac:08:d4: cc:07:f3:92:56:3d:da:ec:7a:2a:15:65:9e:4b:bd:d1:0f:e6: 44:4b:25:f7:8d:f4:9d:cc:cf:dc:3f:b0:0c:65:29:be:1a:d0: 19:55:83:e4:8d:9e:1f:e3:9c:af:b1:80:dd:cc:9c:b2:8c:88: 5a:97:d7:2c:8c:94:ec:46:60:42:69:54:cd:73:3e:8f:5b:c7: 23:91:67:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+BI/bF0AgFehQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNiZTJjYWYtYWZkMC00ZWRmLWE3NDMtYjM1MGMyM2Uz MDdkMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk N2UxNjIyMzItZGQ3Yi00MDVlLTlmYmItZmRhN2M5NGIyOTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJrObTKUdY4g8mwZbjCn504ynq8zOrTMFKBL mGUTyzjfX7dk2u7xQrMl75/3qJXrr7u1soDmdcaWMQhj6rMT69/slAKMonBts+xW FY6xGbPJne1d6H+nXBA6Z7Jhcl8LgFszQn8lWD6dRpDNeBRdYIlvlJdLDbVijAzS Q6iNzqUoVfLLiCm2RR2cRkn37KWVUDUs5gGEOfsWYuyVPpX6EWWYPTbeTyPxr3MB Sh88ehD8Vk+aWuZEYFOcILgi+28eBo+qFiCC9ATqh/bzIfBZeWB58KtePjwr/je+ M7F5OAVXyDjr4LLtHBKvbQ4YZ4ko6/r07OAEugwuQD0ojaIkCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLY7vmd12OvxwYFWjequX3FEtePMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2Jl MmNhZi1hZmQwLTRlZGYtYTc0My1iMzUwYzIzZTMwN2QvYzNkYzU0YTktMjMyZC0z YTQ0LWI2MWQtZTlmNDA0MWUxNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWNiZTJjYWYtYWZkMC00ZWRmLWE3 NDMtYjM1MGMyM2UzMDdkL2VjYmUyY2FmLWFmZDAtNGVkZi1hNzQzLWIzNTBjMjNl MzA3ZC5jcmwwHwYDVR0jBBgwFoAUwnZy+KO6PDsEP1vhWw2QXNk6WFgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lY2JlMmNhZi1hZmQwLTRlZGYtYTc0My1iMzUw YzIzZTMwN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQMnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTBRP86+buZlJFXzxOiFYY1z6lf3NdhuW0lHm6vz5jhUKSiUoTuAkEq p4kOr1Ia6Y//OvA2IKHJfTa9w5nUEEkFxd7zvxG9tMxoTQiQX4llp3ax4aV7PYAI omTg58padJ37PV/ZeajRA+/bZPBxMkFp9Y32RuwFXKxklabhQ0N1ZZWEjUtPXnaM e3qyfmghYtjY6huSbsbD/l93tHz+GPFi8H2EMXI75IOOXnhVCOVo2awI1MwH85JW PdrseioVZZ5LvdEP5kRLJfeN9J3Mz9w/sAxlKb4a0BlVg+SNnh/jnK+xgN3MnLKM iFqX1yyMlOxGYEJpVM1zPo9bxyORZ6o= -----END CERTIFICATE-----Generated at Sun Nov 1 17:37:22 2026 by rpki-client