$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/3ac2f620-9411-3e5b-8e2b-efd072b123a5.roa File: 3ac2f620-9411-3e5b-8e2b-efd072b123a5.roa (raw, json) Hash identifier: aotPtpwUQb2sfrigJ5mKWBnuS5m/DpMAF19OFGZb/WM= Subject key identifier: E8:1C:BB:FB:F1:AA:EA:1B:42:A9:C9:15:0E:F1:DD:EB:82:26:4C:7B Certificate issuer: /CN=807e0353-894a-4214-89b5-40ce5ac7089f Certificate serial: 010D0C9F4328584EE9DA745CBF6204C5943D6BC0 Authority key identifier: FD:E4:AC:FE:9C:7E:84:7E:48:69:97:5C:79:14:E2:56:5B:BB:BB:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/3ac2f620-9411-3e5b-8e2b-efd072b123a5.roa Signing time: Fri 21 Aug 2026 19:12:01 +0000 ROA not before: Fri 21 Aug 2026 19:12:01 +0000 ROA not after: Thu 19 Nov 2026 20:12:01 +0000 asID: 400494 IP address blocks: 64.70.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:da:74:5c:bf:62:04:c5:94:3d:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=807e0353-894a-4214-89b5-40ce5ac7089f Validity Not Before: Aug 21 19:12:01 2026 GMT Not After : Nov 19 20:12:01 2026 GMT Subject: CN=a95178d1-dd98-477d-9a19-16f3aaf87469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7f:ec:af:4a:13:ed:fa:d2:0f:36:75:42:17: be:4d:ac:88:e4:96:4b:3f:16:24:18:6e:43:6e:51: b6:8a:4b:d9:e9:42:f8:76:4d:07:72:21:34:11:c0: 81:06:8c:9c:ca:8f:a1:38:98:4e:c4:a3:56:19:1d: 2f:c7:1a:8b:df:97:13:0e:52:a3:fe:e8:93:85:2d: e2:60:32:7a:a8:62:28:eb:5f:e9:b5:3a:f6:b5:73: 27:5c:af:b6:f7:12:ff:d4:dc:2a:33:65:1b:9c:85: 1d:ab:6f:86:c2:26:ce:68:79:43:99:b4:3a:4a:10: 00:05:0b:9b:ab:c4:52:3e:85:08:0e:34:27:0e:5e: 7a:d7:8f:4d:58:a7:c4:ac:e2:12:92:03:92:90:7f: e4:c0:d5:6f:75:67:00:16:12:ff:93:3b:50:42:a8: bf:52:17:67:f5:82:97:8c:28:b1:a8:f0:69:6d:a8: b8:3e:4a:5f:fa:67:7c:2d:e4:81:dc:34:f2:25:18: 3c:99:2b:6a:1f:55:c2:89:2d:22:d2:45:23:38:2b: 12:47:b5:60:9b:41:40:6f:d2:9e:32:25:4f:f6:f6: 7c:1e:72:74:20:10:92:c6:e5:71:01:b7:e0:9a:1c: 35:7b:ab:7b:88:b1:aa:11:ee:77:04:d0:33:39:e6: 70:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1C:BB:FB:F1:AA:EA:1B:42:A9:C9:15:0E:F1:DD:EB:82:26:4C:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/3ac2f620-9411-3e5b-8e2b-efd072b123a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.crl X509v3 Authority Key Identifier: keyid:FD:E4:AC:FE:9C:7E:84:7E:48:69:97:5C:79:14:E2:56:5B:BB:BB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer sbgp-ipAddrBlock: critical IPv4: 64.70.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:39:cf:20:9b:d2:34:d3:cf:49:df:6d:25:8f:ba:39:1c:7c: a3:46:99:d1:43:dc:0a:74:7b:1c:46:0b:2e:4a:d8:3d:b9:08: 4b:be:23:3d:f4:b8:cc:9a:37:0f:d3:40:ba:52:6b:4a:3e:bb: c9:10:f0:a0:df:96:fd:02:13:b3:7f:6d:46:88:e7:7e:94:03: 8d:50:02:74:23:9e:55:e4:f9:97:3f:5e:5c:80:30:d5:b9:5d: 31:b4:63:88:c5:8e:8f:db:e8:57:d1:c9:95:71:d6:73:79:83: 3a:0e:a7:5d:45:dd:46:e6:5a:3a:eb:b4:b5:95:16:33:51:94: 17:ea:b7:0d:1b:a3:ff:4f:b7:8a:0a:03:06:b9:ca:96:83:96: 66:03:2d:68:2f:25:fc:ff:00:7b:be:46:89:1e:51:18:90:e6: 8f:95:de:a2:48:81:f0:02:3f:40:26:05:1d:17:9b:22:c3:fe: fc:a5:62:84:59:1d:75:d4:62:6a:49:4f:b3:6f:f0:1b:50:5e: af:e9:66:aa:8c:1a:ac:7e:67:93:09:9f:f3:44:75:12:bf:93: 0b:a8:4f:6a:db:46:17:1b:3b:b3:83:cd:01:0c:a1:0a:b9:3f: 4a:39:44:39:9a:77:60:68:ca:50:27:1b:6e:ca:c8:d2:e2:28: b6:27:90:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7p2nRcv2IExZQ9a8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA3ZTAzNTMtODk0YS00MjE0LTg5YjUtNDBjZTVhYzcw ODlmMB4XDTI2MDgyMTE5MTIwMVoXDTI2MTExOTIwMTIwMVowLzEtMCsGA1UEAxMk YTk1MTc4ZDEtZGQ5OC00NzdkLTlhMTktMTZmM2FhZjg3NDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH/sr0oT7frSDzZ1Qhe+TayI5JZLPxYkGG5D blG2ikvZ6UL4dk0HciE0EcCBBoycyo+hOJhOxKNWGR0vxxqL35cTDlKj/uiThS3i YDJ6qGIo61/ptTr2tXMnXK+29xL/1NwqM2UbnIUdq2+GwibOaHlDmbQ6ShAABQub q8RSPoUIDjQnDl56149NWKfErOISkgOSkH/kwNVvdWcAFhL/kztQQqi/Uhdn9YKX jCixqPBpbai4Pkpf+md8LeSB3DTyJRg8mStqH1XCiS0i0kUjOCsSR7Vgm0FAb9Ke MiVP9vZ8HnJ0IBCSxuVxAbfgmhw1e6t7iLGqEe53BNAzOeZw7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgcu/vxquobQqnJFQ7x3euCJkx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84MDdl MDM1My04OTRhLTQyMTQtODliNS00MGNlNWFjNzA4OWYvM2FjMmY2MjAtOTQxMS0z ZTViLThlMmItZWZkMDcyYjEyM2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODA3ZTAzNTMtODk0YS00MjE0LTg5 YjUtNDBjZTVhYzcwODlmLzgwN2UwMzUzLTg5NGEtNDIxNC04OWI1LTQwY2U1YWM3 MDg5Zi5jcmwwHwYDVR0jBBgwFoAU/eSs/px+hH5IaZdceRTiVlu7u5YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84MDdlMDM1My04OTRhLTQyMTQtODliNS00MGNl NWFjNzA4OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEZ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH85zyCb0jTTz0nfbSWPujkcfKNGmdFD3Ap0exxGCy5K2D25CEu+Iz30 uMyaNw/TQLpSa0o+u8kQ8KDflv0CE7N/bUaI536UA41QAnQjnlXk+Zc/XlyAMNW5 XTG0Y4jFjo/b6FfRyZVx1nN5gzoOp11F3UbmWjrrtLWVFjNRlBfqtw0bo/9Pt4oK Awa5ypaDlmYDLWgvJfz/AHu+RokeURiQ5o+V3qJIgfACP0AmBR0XmyLD/vylYoRZ HXXUYmpJT7Nv8BtQXq/pZqqMGqx+Z5MJn/NEdRK/kwuoT2rbRhcbO7ODzQEMoQq5 P0o5RDmad2BoylAnG27KyNLiKLYnkF4= -----END CERTIFICATE-----Generated at Sat Sep 5 03:23:20 2026 by rpki-client