$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa File: 01b562f0-b1c7-3eae-99a1-f153b793addc.roa (raw, json) Hash identifier: 7gqMSil11aH/Ms7+/1dl6/HRBlrzJvktoOpzleVc2CI= Subject key identifier: C9:91:A0:F3:C9:DF:6F:2F:96:5B:40:F2:22:F6:E5:85:02:D7:E5:91 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584F119D07CFA960427D471E1960 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 13768 IP address blocks: 64.34.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:07:cf:a9:60:42:7d:47:1e:19:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=11b41e79-a970-4d85-8ccc-5ab4caf6f76a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ff:cc:d3:c8:d8:8a:5f:2f:ed:c3:3b:40:a1: ee:fd:f6:ba:0b:68:41:15:bb:65:45:e6:d9:a0:84: 67:14:69:61:09:12:57:f3:03:ae:a5:d9:e8:1f:62: f6:9a:7a:b1:71:43:0e:0a:e4:30:d4:7a:7a:24:52: c5:4a:69:58:3e:85:c5:ed:c5:35:5b:eb:a3:7f:47: 1b:2f:e2:71:f6:cf:f8:b2:15:c8:df:49:2a:b8:4f: af:bc:78:f4:15:63:71:e6:ed:35:cc:e8:32:51:95: b8:50:1c:ee:fa:08:72:78:82:fe:f8:68:9b:7e:45: b7:f7:e6:1b:d6:a4:9a:df:86:3f:22:5a:0c:82:18: 1c:aa:2c:35:17:1f:58:3b:8f:5a:73:d5:c7:d1:1b: 35:8e:2c:6a:6a:e4:2f:5a:81:4f:c3:66:58:83:99: ad:3f:08:b6:cd:82:ca:25:83:e2:fd:1c:9c:e1:04: 67:93:9d:3d:01:80:4c:b3:6d:af:38:30:f5:60:d6: 5e:41:5a:5b:7c:b7:e0:81:53:89:60:d4:5d:0c:8e: 88:dc:f9:2f:41:a0:2c:e6:44:5a:dd:87:3a:32:49: 9b:11:41:26:2c:44:45:a9:6f:ea:df:4d:bb:eb:93: 3b:52:92:8f:91:8a:1f:0e:65:bc:20:1d:58:bc:61: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:91:A0:F3:C9:DF:6F:2F:96:5B:40:F2:22:F6:E5:85:02:D7:E5:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:4d:39:14:10:48:a3:e5:5c:36:49:49:1b:a5:b4:95:62:e1: a8:a9:0d:1b:4b:a8:1e:eb:3b:74:6d:29:91:5b:8f:68:98:86: c3:d3:54:a5:8d:9f:8a:46:d6:ba:8e:7c:30:e8:1c:0d:f6:ad: ef:5c:e8:23:0b:14:61:f7:26:fd:b2:bb:2c:ea:2d:b1:b7:98: f8:c1:c5:3b:51:90:50:6d:7e:ce:f2:16:ec:d1:12:f1:24:d0: 6f:3b:5e:fe:09:31:28:9a:86:36:8f:a1:65:f5:69:96:60:2c: 18:5d:af:09:11:7c:42:78:47:93:44:40:6a:ec:ea:d2:08:35: dc:f1:00:c6:4a:a1:57:4c:df:15:83:1f:5e:1d:5c:36:b0:0d: af:61:e6:b0:b9:4b:a6:a6:d9:f7:cd:57:74:29:1f:98:84:d0: 52:4d:0d:cf:9c:a4:0c:44:43:7a:d2:a6:b5:83:f0:61:96:15: 1c:72:d2:b3:68:85:c9:b8:28:09:8a:d2:b5:39:ef:3b:e2:46: 66:5e:92:f6:77:93:53:87:c1:01:dd:92:e3:28:48:e7:55:a0: ae:4a:39:db:12:58:c2:36:67:a7:a8:1a:05:77:22:dc:c3:5c: 49:49:1c:29:ab:c0:eb:7a:1d:73:46:5a:05:a6:be:64:b5:92: d2:ff:42:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQfPqWBCfUceGWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MTFiNDFlNzktYTk3MC00ZDg1LThjY2MtNWFiNGNhZjZmNzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf/M08jYil8v7cM7QKHu/fa6C2hBFbtlRebZ oIRnFGlhCRJX8wOupdnoH2L2mnqxcUMOCuQw1Hp6JFLFSmlYPoXF7cU1W+ujf0cb L+Jx9s/4shXI30kquE+vvHj0FWNx5u01zOgyUZW4UBzu+ghyeIL++GibfkW39+Yb 1qSa34Y/IloMghgcqiw1Fx9YO49ac9XH0Rs1jixqauQvWoFPw2ZYg5mtPwi2zYLK JYPi/Ryc4QRnk509AYBMs22vODD1YNZeQVpbfLfggVOJYNRdDI6I3PkvQaAs5kRa 3Yc6MkmbEUEmLERFqW/q302765M7UpKPkYofDmW8IB1YvGEdAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmRoPPJ328vlltA8iL25YUC1+WRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMDFiNTYyZjAtYjFjNy0z ZWFlLTk5YTEtZjE1M2I3OTNhZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBNORQQSKPlXDZJSRultJVi4aipDRtLqB7rO3RtKZFbj2iYhsPTVKWN n4pG1rqOfDDoHA32re9c6CMLFGH3Jv2yuyzqLbG3mPjBxTtRkFBtfs7yFuzREvEk 0G87Xv4JMSiahjaPoWX1aZZgLBhdrwkRfEJ4R5NEQGrs6tIINdzxAMZKoVdM3xWD H14dXDawDa9h5rC5S6am2ffNV3QpH5iE0FJNDc+cpAxEQ3rSprWD8GGWFRxy0rNo hcm4KAmK0rU57zviRmZekvZ3k1OHwQHdkuMoSOdVoK5KOdsSWMI2Z6eoGgV3ItzD XElJHCmrwOt6HXNGWgWmvmS1ktL/Qj0= -----END CERTIFICATE-----Generated at Sat Sep 5 07:37:13 2026 by rpki-client