$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/399d703a-fdab-3284-b44e-ae7fa23512f0.roa File: 399d703a-fdab-3284-b44e-ae7fa23512f0.roa (raw, json) Hash identifier: yIFG8Lv1ryoNyTm01lNQa0llBnrwPpF1aAQbyY0I67A= Subject key identifier: 64:F1:43:B5:E4:84:51:56:BC:C9:6A:AC:FB:07:0C:F4:98:EA:51:9D Certificate issuer: /CN=b3f4c5ee-0e47-48c9-8976-165a2de083f4 Certificate serial: 010D0C9F4328584F549DA323F992454249BB8680 Authority key identifier: 52:DB:90:8E:EB:21:09:42:F9:7C:04:42:FD:EA:70:E4:6F:52:F2:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/399d703a-fdab-3284-b44e-ae7fa23512f0.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 396866 IP address blocks: 67.218.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/b3f4c5ee-0e47-48c9-8976-165a2de083f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/b3f4c5ee-0e47-48c9-8976-165a2de083f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:a3:23:f9:92:45:42:49:bb:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3f4c5ee-0e47-48c9-8976-165a2de083f4 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=4a5bcf55-0511-4ad0-b083-e2e958145b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:31:0d:7c:54:f2:88:38:89:25:dd:f7:7a:25: ca:36:af:11:8b:89:2c:dc:75:49:78:8d:d3:eb:4a: b3:d9:a5:f3:c7:99:ce:ba:d7:e0:c0:6f:17:b1:52: cd:8b:2c:7c:92:26:6d:55:6b:29:ef:1d:9b:af:3e: 37:79:07:ba:fc:da:fa:d4:61:51:28:c4:58:c0:e8: 92:97:d8:a7:92:13:a3:84:cb:03:77:95:b4:a2:a6: 45:a8:24:19:d9:f5:2e:f2:dd:3e:7b:ee:6d:ae:75: cd:5e:07:83:34:27:e9:c9:f6:0c:b8:2c:47:52:d9: 42:65:2f:c2:91:db:ec:87:05:98:fe:94:0a:e6:67: 37:49:d5:17:37:ba:a5:06:0c:3b:0b:fa:a3:e8:25: 2d:6d:9f:41:71:e4:3f:5c:9a:94:e3:a3:d1:3e:9b: 3b:53:0f:b3:82:bc:bd:09:ac:f1:0c:3f:f5:11:8b: 66:13:78:78:09:84:e9:7e:2f:0c:3b:0a:2d:2f:4d: b9:76:64:47:42:9f:34:94:f3:63:d3:01:34:44:bd: 69:99:9d:6f:1e:aa:53:3c:3a:fd:0b:25:6a:ac:2a: ce:6f:2d:a6:9a:73:a3:c3:ee:f4:8e:25:8d:5f:31: d0:59:9c:fa:25:f4:68:d5:a0:63:f1:97:f1:ad:7f: 91:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F1:43:B5:E4:84:51:56:BC:C9:6A:AC:FB:07:0C:F4:98:EA:51:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/399d703a-fdab-3284-b44e-ae7fa23512f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4/b3f4c5ee-0e47-48c9-8976-165a2de083f4.crl X509v3 Authority Key Identifier: keyid:52:DB:90:8E:EB:21:09:42:F9:7C:04:42:FD:EA:70:E4:6F:52:F2:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b3f4c5ee-0e47-48c9-8976-165a2de083f4.cer sbgp-ipAddrBlock: critical IPv4: 67.218.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f2:84:ab:c0:d5:f5:d8:60:7a:bc:71:f3:7e:f2:70:cf:6d: 23:de:3f:2e:01:83:e7:36:2c:71:19:0f:a5:2b:eb:9d:e5:dd: 92:35:08:fa:26:68:f5:52:f0:22:8a:c3:56:e3:76:fd:10:b3: 68:e2:58:8f:03:0d:56:d1:d2:03:51:05:95:42:0f:3e:31:d9: f2:5d:9b:64:7f:a7:40:2a:6f:cf:33:9d:83:bc:ef:31:a0:05: e7:9f:b9:9a:7c:e4:42:0f:d7:22:82:59:6f:60:4b:7e:9c:19: 5e:63:ba:62:48:ca:03:e4:3d:47:5c:58:70:99:c2:18:5f:cf: e8:39:c9:af:32:ce:20:80:b0:07:85:38:c7:b5:94:21:47:7e: 5e:6b:ec:40:56:5c:3a:5a:c7:db:c9:01:7b:ad:04:15:c0:0f: 4b:bd:61:fd:0c:d3:6f:1f:39:6b:cd:b1:b6:e6:00:18:57:91: b9:e8:17:3d:54:2f:f6:ef:24:8b:7d:78:53:33:3e:73:2b:1c: 91:f7:ab:03:c3:eb:72:cc:35:a5:bc:2b:f0:82:3c:7a:a6:4f: 38:2a:2f:42:21:20:3b:13:de:a0:65:d2:bd:89:44:ce:e7:c3: c6:ae:29:48:65:f8:4c:b2:fe:f6:4b:e4:fb:10:66:66:ba:e0: 48:37:bb:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnaMj+ZJFQkm7hoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNmNGM1ZWUtMGU0Ny00OGM5LTg5NzYtMTY1YTJkZTA4 M2Y0MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NGE1YmNmNTUtMDUxMS00YWQwLWIwODMtZTJlOTU4MTQ1YjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozENfFTyiDiJJd33eiXKNq8Ri4ks3HVJeI3T 60qz2aXzx5nOutfgwG8XsVLNiyx8kiZtVWsp7x2brz43eQe6/Nr61GFRKMRYwOiS l9inkhOjhMsDd5W0oqZFqCQZ2fUu8t0+e+5trnXNXgeDNCfpyfYMuCxHUtlCZS/C kdvshwWY/pQK5mc3SdUXN7qlBgw7C/qj6CUtbZ9BceQ/XJqU46PRPps7Uw+zgry9 CazxDD/1EYtmE3h4CYTpfi8MOwotL025dmRHQp80lPNj0wE0RL1pmZ1vHqpTPDr9 CyVqrCrOby2mmnOjw+70jiWNXzHQWZz6JfRo1aBj8ZfxrX+RpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTxQ7XkhFFWvMlqrPsHDPSY6lGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9iM2Y0 YzVlZS0wZTQ3LTQ4YzktODk3Ni0xNjVhMmRlMDgzZjQvMzk5ZDcwM2EtZmRhYi0z Mjg0LWI0NGUtYWU3ZmEyMzUxMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYjNmNGM1ZWUtMGU0Ny00OGM5LTg5 NzYtMTY1YTJkZTA4M2Y0L2IzZjRjNWVlLTBlNDctNDhjOS04OTc2LTE2NWEyZGUw ODNmNC5jcmwwHwYDVR0jBBgwFoAUUtuQjushCUL5fARC/epw5G9S8tYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9iM2Y0YzVlZS0wZTQ3LTQ4YzktODk3Ni0xNjVh MmRlMDgzZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9oHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLyhKvA1fXYYHq8cfN+8nDPbSPePy4Bg+c2LHEZD6Ur653l3ZI1CPom aPVS8CKKw1bjdv0Qs2jiWI8DDVbR0gNRBZVCDz4x2fJdm2R/p0Aqb88znYO87zGg BeefuZp85EIP1yKCWW9gS36cGV5jumJIygPkPUdcWHCZwhhfz+g5ya8yziCAsAeF OMe1lCFHfl5r7EBWXDpax9vJAXutBBXAD0u9Yf0M028fOWvNsbbmABhXkbnoFz1U L/bvJIt9eFMzPnMrHJH3qwPD63LMNaW8K/CCPHqmTzgqL0IhIDsT3qBl0r2JRM7n w8auKUhl+Eyy/vZL5PsQZma64Eg3uwo= -----END CERTIFICATE-----Generated at Sun Oct 25 03:09:47 2026 by rpki-client