$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa File: a29feace-471c-3bbd-813c-81620749951b.roa (raw, json) Hash identifier: bUfmt40pdFgDLTGbImrK/3HWMbeYWxPwGjZdc8pQ33k= Subject key identifier: 4D:37:37:1F:86:34:9C:2F:29:5E:59:58:B8:70:04:9E:3B:97:1E:8C Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584F49757E6F3B9689EC25904640 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4213 IP address blocks: 97.64.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:7e:6f:3b:96:89:ec:25:90:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=31857f2d-75af-4289-b392-834627e1decd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:25:d8:85:18:f3:69:cb:7f:b2:19:55:da: 4a:e0:64:f1:01:30:4d:5e:7b:e6:02:75:b8:65:c7: 36:0d:6b:95:b2:b3:f7:d6:32:22:b2:77:54:26:b2: 0f:d9:8c:43:84:26:d8:8f:e4:5d:da:72:95:d1:10: d0:71:50:9d:7b:cf:4c:b1:29:4c:ee:d2:18:0f:e6: 0d:28:22:67:28:2a:c7:a6:92:72:37:5a:bc:eb:e3: 88:20:ad:d4:e5:da:fe:86:12:8a:77:4e:18:f9:9f: b5:90:4a:f7:de:e1:22:02:30:3e:4b:8f:24:53:b9: 43:ee:24:9c:fb:b1:5a:60:ed:9c:0d:be:76:f8:47: 19:f6:d0:58:3b:81:10:52:80:9d:5c:11:0d:6e:97: 1e:f0:84:f8:10:a5:a4:04:fc:be:03:6d:ea:42:72: e8:83:fd:21:93:8d:16:25:ba:40:fc:38:1b:01:fb: b3:8f:47:b0:80:6b:63:4c:dc:8e:73:cb:0f:8b:06: 4d:81:58:9e:6c:96:83:85:5e:b0:8e:fb:38:c8:2d: 1d:dc:5b:a5:9e:0a:2a:1e:00:0c:c6:d9:a2:59:d9: 9a:1d:f4:d9:d3:5f:62:33:9c:f1:25:54:1f:a6:e6: 41:b8:b2:b1:7a:7a:05:1e:7b:5c:61:26:b8:ee:b6: fa:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:37:37:1F:86:34:9C:2F:29:5E:59:58:B8:70:04:9E:3B:97:1E:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/a29feace-471c-3bbd-813c-81620749951b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 97.64.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:37:55:0c:37:05:e1:9e:c1:b1:e7:9c:4b:7b:47:19:a7:d5: 29:35:89:f4:29:cf:3e:2f:7e:04:9e:c0:86:9c:76:dd:d0:29: f6:f0:10:0c:a2:a5:54:18:e0:ca:9a:6c:0b:94:ab:91:35:ee: 87:4a:64:a0:bb:6b:c1:88:f0:4e:f6:09:b1:23:6f:3c:8a:29: 0c:2d:63:de:15:26:86:49:f4:d5:ed:ca:be:a0:56:49:aa:77: 05:4c:b4:60:f4:df:58:61:2e:f7:85:43:46:77:62:a3:87:6d: ae:cb:35:87:68:a9:60:f7:9e:22:ab:77:00:7e:21:9f:8d:6e: df:8b:86:38:0b:86:db:07:73:71:8f:7e:f0:ba:b8:98:0b:ef: b5:f8:be:a1:9f:c6:ce:2b:24:26:c5:30:74:05:97:f9:2f:57: f9:3b:e3:50:ed:ea:79:9c:0d:23:a7:fe:83:83:49:bd:34:10: bd:7c:ab:13:82:ed:d8:14:86:79:8e:29:05:a3:52:0c:7b:be: 12:c5:23:b7:1d:66:7f:ec:1e:48:eb:09:ee:6c:98:f4:05:44: 90:5d:7e:c1:db:04:79:21:81:e5:2b:c2:26:c8:94:ea:15:9c: b5:54:b8:de:e2:ce:e6:52:97:19:34:2a:55:95:a1:11:99:38: d2:6f:f2:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdX5vO5aJ7CWQRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzE4NTdmMmQtNzVhZi00Mjg5LWIzOTItODM0NjI3ZTFkZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnUl2IUY82nLf7IZVdpK4GTxATBNXnvmAnW4 Zcc2DWuVsrP31jIisndUJrIP2YxDhCbYj+Rd2nKV0RDQcVCde89MsSlM7tIYD+YN KCJnKCrHppJyN1q86+OIIK3U5dr+hhKKd04Y+Z+1kEr33uEiAjA+S48kU7lD7iSc +7FaYO2cDb52+EcZ9tBYO4EQUoCdXBENbpce8IT4EKWkBPy+A23qQnLog/0hk40W JbpA/DgbAfuzj0ewgGtjTNyOc8sPiwZNgViebJaDhV6wjvs4yC0d3FulngoqHgAM xtmiWdmaHfTZ019iM5zxJVQfpuZBuLKxenoFHntcYSa47rb6kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE03Nx+GNJwvKV5ZWLhwBJ47lx6MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvYTI5ZmVhY2UtNDcxYy0z YmJkLTgxM2MtODE2MjA3NDk5NTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYUBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc3VQw3BeGewbHnnEt7Rxmn1Sk1ifQpzz4vfgSewIacdt3QKfbwEAyi pVQY4MqabAuUq5E17odKZKC7a8GI8E72CbEjbzyKKQwtY94VJoZJ9NXtyr6gVkmq dwVMtGD031hhLveFQ0Z3YqOHba7LNYdoqWD3niKrdwB+IZ+Nbt+LhjgLhtsHc3GP fvC6uJgL77X4vqGfxs4rJCbFMHQFl/kvV/k741Dt6nmcDSOn/oODSb00EL18qxOC 7dgUhnmOKQWjUgx7vhLFI7cdZn/sHkjrCe5smPQFRJBdfsHbBHkhgeUrwibIlOoV nLVUuN7izuZSlxk0KlWVoRGZONJv8rQ= -----END CERTIFICATE-----Generated at Tue Oct 6 03:59:49 2026 by rpki-client