$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9a03f21f-06de-30b1-9cf0-74ebd53f1fc2.roa File: 9a03f21f-06de-30b1-9cf0-74ebd53f1fc2.roa (raw, json) Hash identifier: o8EAzjq1Z0pwzoC1+eXimqu5oUjDkVRi8NW5TS9q+/k= Subject key identifier: E8:A2:2B:C8:37:2A:35:C1:2C:31:A3:A4:B6:65:76:A2:CC:71:00:C2 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584F119D16978847733309FF7B20 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9a03f21f-06de-30b1-9cf0-74ebd53f1fc2.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 13768 IP address blocks: 64.34.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:16:97:88:47:73:33:09:ff:7b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=fcd8369d-27b2-43c7-bd63-85448babab7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cd:9f:08:be:dd:af:87:94:45:e4:23:d2:56: 2d:0e:2e:38:90:d9:66:e4:1c:c6:05:8e:3d:96:30: 2f:01:66:19:c3:66:14:8c:59:f8:56:b1:fa:9e:0e: a0:a9:8e:2f:2e:52:3d:ab:92:b8:df:ae:c4:94:9f: 85:9a:08:80:18:8e:5b:0e:08:07:c1:9c:c6:bb:ef: 63:d1:02:68:58:b8:db:2e:7e:57:a2:e0:52:4f:2b: 86:c9:4a:ff:23:05:bd:78:05:06:49:c2:5b:ed:91: c6:83:42:75:13:c9:ea:a9:fd:f0:b8:61:4e:e3:c3: 9e:5c:19:c4:37:ff:14:dc:b4:f1:04:0d:01:37:e6: 76:28:97:0b:9a:02:4d:87:16:d1:d3:9c:f1:c6:0a: 10:a6:8d:c0:6b:88:d0:24:e1:f6:f8:59:73:bf:07: 5a:0b:71:3a:56:7a:b9:6b:aa:a7:35:fd:8f:84:cc: 61:d4:13:b2:a2:c3:87:89:b9:79:32:cb:46:5e:bd: a3:1f:a0:3d:ed:d4:a9:ac:8d:3c:bf:73:00:87:bd: d9:c0:b9:39:e1:08:86:78:17:72:7f:97:6d:18:a2: 92:5b:f0:15:d2:35:9a:c4:ef:b7:b4:12:3b:a6:44: b8:89:54:72:8a:a5:07:e1:3f:b8:7d:95:e6:04:cb: c9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A2:2B:C8:37:2A:35:C1:2C:31:A3:A4:B6:65:76:A2:CC:71:00:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9a03f21f-06de-30b1-9cf0-74ebd53f1fc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.34.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ca:16:3c:5d:bf:38:47:87:6a:90:43:0b:ff:f3:0c:1a:62: 84:ea:42:1b:fb:a3:36:c3:e4:9b:67:3b:c5:36:28:bd:7f:64: 63:a6:b0:e4:3e:28:ab:42:69:ce:9c:4c:cf:06:4d:17:fd:b8: c6:28:ce:77:fa:be:f1:f6:8d:b7:03:40:7b:7e:a1:04:19:c5: 3e:70:38:30:86:53:08:13:ee:aa:3e:e4:db:2d:50:39:6b:71: 91:3c:5f:e9:70:fc:65:b5:e7:76:50:86:ab:60:2e:14:d7:4c: cd:50:d2:a7:1d:c4:b1:18:f5:1d:6b:65:52:51:bd:a2:78:d5: ff:16:32:62:72:4e:c4:53:22:8f:b1:37:fb:c4:5f:4b:0d:9d: 9c:b4:5c:96:ef:e0:07:f4:a4:d2:8c:11:d3:20:a4:78:78:01: dc:b8:b5:5c:7e:00:29:b7:2a:45:e0:13:39:f9:e0:87:8a:3b: 1c:06:bc:aa:bc:be:47:57:b0:8b:d8:9c:5b:13:c2:97:7c:c2: 2d:4d:5e:fd:bf:30:e5:41:2d:ba:17:ea:17:bd:d4:57:4e:ee: 05:bf:46:27:d0:f4:b9:c5:1a:dd:a6:34:bf:a7:87:33:e7:b2: 20:e1:ef:b3:48:51:e3:ce:83:f0:52:e6:f6:e5:56:84:58:04: 87:ad:37:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRaXiEdzMwn/eyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmNkODM2OWQtMjdiMi00M2M3LWJkNjMtODU0NDhiYWJhYjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc2fCL7dr4eUReQj0lYtDi44kNlm5BzGBY49 ljAvAWYZw2YUjFn4VrH6ng6gqY4vLlI9q5K4367ElJ+FmgiAGI5bDggHwZzGu+9j 0QJoWLjbLn5XouBSTyuGyUr/IwW9eAUGScJb7ZHGg0J1E8nqqf3wuGFO48OeXBnE N/8U3LTxBA0BN+Z2KJcLmgJNhxbR05zxxgoQpo3Aa4jQJOH2+FlzvwdaC3E6Vnq5 a6qnNf2PhMxh1BOyosOHibl5MstGXr2jH6A97dSprI08v3MAh73ZwLk54QiGeBdy f5dtGKKSW/AV0jWaxO+3tBI7pkS4iVRyiqUH4T+4fZXmBMvJ1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiiK8g3KjXBLDGjpLZldqLMcQDCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvOWEwM2YyMWYtMDZkZS0z MGIxLTljZjAtNzRlYmQ1M2YxZmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzKFjxdvzhHh2qQQwv/8wwaYoTqQhv7ozbD5JtnO8U2KL1/ZGOmsOQ+ KKtCac6cTM8GTRf9uMYoznf6vvH2jbcDQHt+oQQZxT5wODCGUwgT7qo+5NstUDlr cZE8X+lw/GW153ZQhqtgLhTXTM1Q0qcdxLEY9R1rZVJRvaJ41f8WMmJyTsRTIo+x N/vEX0sNnZy0XJbv4Af0pNKMEdMgpHh4Ady4tVx+ACm3KkXgEzn54IeKOxwGvKq8 vkdXsIvYnFsTwpd8wi1NXv2/MOVBLboX6he91FdO7gW/RifQ9LnFGt2mNL+nhzPn siDh77NIUePOg/BS5vblVoRYBIetN/M= -----END CERTIFICATE-----Generated at Sat Sep 5 08:06:20 2026 by rpki-client