$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/72a33d24-a63d-31bb-9714-c49a799181d9.roa File: 72a33d24-a63d-31bb-9714-c49a799181d9.roa (raw, json) Hash identifier: bQc2mUpE9FaBwlwezkyMMhS6EeGS6ZPVd9YMD31pjlw= Subject key identifier: 09:CE:9E:19:20:29:C2:C5:01:83:4E:13:40:9D:17:C8:68:C1:DB:13 Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F4328584EF68D410AF1E97976EDDF8DC0 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/72a33d24-a63d-31bb-9714-c49a799181d9.roa Signing time: Wed 26 Aug 2026 08:21:59 +0000 ROA not before: Wed 26 Aug 2026 08:21:59 +0000 ROA not after: Tue 24 Nov 2026 09:21:59 +0000 asID: 397412 IP address blocks: 64.110.128.0/21 maxlen: 24 69.8.64.0/19 maxlen: 24 98.96.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f6:8d:41:0a:f1:e9:79:76:ed:df:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Aug 26 08:21:59 2026 GMT Not After : Nov 24 09:21:59 2026 GMT Subject: CN=64b845dd-244f-47e7-b253-909c33a4c16b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:db:94:e1:2f:91:05:25:46:e9:1d:0d:7f:f1: d2:2d:ae:36:02:6e:88:ea:4b:a0:66:a7:09:5d:af: 9f:4a:11:e4:ce:21:28:25:8b:f4:96:b2:b9:9c:78: 22:8d:69:83:f1:67:3a:ea:76:b0:e6:2b:c4:07:30: 34:71:ec:bd:07:c7:56:b3:4d:8d:34:df:e5:03:dc: f5:dd:cf:ff:f8:b5:89:4e:cd:22:76:fe:75:72:48: 88:95:01:34:e6:02:15:bd:b4:d6:c8:a3:08:ed:5c: 9d:95:0a:1d:3b:1e:a4:60:7a:6d:df:7c:95:26:9e: ca:7d:9a:5a:e9:34:08:32:0e:e0:34:a0:df:e8:00: a7:6e:27:da:61:33:aa:d0:ce:36:cc:15:de:9e:8d: 1e:60:88:ea:e1:58:71:88:97:8e:ad:70:af:00:6f: 3d:0a:ee:e5:fc:10:3a:66:95:b7:ee:1c:cb:34:99: ab:42:2f:b8:f2:28:8e:77:b7:36:f3:ea:d8:6d:a9: 33:45:d4:cf:b5:cd:96:89:06:61:6e:5e:d7:42:db: 8d:aa:a3:8e:cf:99:ef:04:b6:10:a0:e8:22:61:f3: 93:5d:c1:ad:9e:4c:47:c9:06:de:0b:14:78:74:8c: 1e:d1:de:dd:e6:82:6e:55:81:be:7c:95:40:07:0c: 36:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CE:9E:19:20:29:C2:C5:01:83:4E:13:40:9D:17:C8:68:C1:DB:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/72a33d24-a63d-31bb-9714-c49a799181d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv4: 64.110.128.0/21 69.8.64.0/19 98.96.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:c3:57:f7:25:8d:6d:3b:70:ea:e9:14:2e:12:e0:42:55:65: 8b:bb:42:86:0b:30:27:98:11:5c:f5:17:5d:97:35:3c:bb:b9: f0:7b:c4:26:53:68:02:4b:f7:3a:c0:6c:51:0c:0a:92:f6:c9: be:10:0b:22:7c:44:f8:79:05:22:76:9f:ad:87:28:43:53:94: c6:8b:fc:70:69:f6:fc:d5:5c:68:15:8d:89:14:23:b4:0d:b6: 16:d7:12:47:60:f5:06:52:22:ef:71:67:32:be:16:e4:73:50: 78:0a:ee:bb:12:7e:3f:37:2b:71:ee:2f:64:0b:80:c3:e0:65: 6d:c3:8f:51:73:07:5e:e4:a3:8a:f5:06:4c:51:59:92:35:60: f7:6c:1b:bf:c0:d2:41:86:24:d1:24:83:04:ae:f9:0d:2c:a7: 10:67:5e:93:1a:fd:3a:e6:d0:e4:cb:c8:1a:19:85:2b:ff:68: e4:b3:7d:e3:b0:22:40:06:48:55:a9:c7:5b:03:90:a4:cc:6e: 4f:93:7a:8e:96:a6:f6:ac:3d:3c:a9:af:29:e8:93:8f:87:ed: 3e:65:3b:e8:10:55:67:fd:9d:39:49:dd:4d:01:b9:6c:7e:91: 3d:2e:b0:36:40:3c:22:f8:33:83:d5:93:3f:1c:14:38:31:32: ba:9b:84:35 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE72jUEK8el5du3fjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI2MDgyNjA4MjE1OVoXDTI2MTEyNDA5MjE1OVowLzEtMCsGA1UEAxMk NjRiODQ1ZGQtMjQ0Zi00N2U3LWIyNTMtOTA5YzMzYTRjMTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9uU4S+RBSVG6R0Nf/HSLa42Am6I6kugZqcJ Xa+fShHkziEoJYv0lrK5nHgijWmD8Wc66naw5ivEBzA0cey9B8dWs02NNN/lA9z1 3c//+LWJTs0idv51ckiIlQE05gIVvbTWyKMI7VydlQodOx6kYHpt33yVJp7KfZpa 6TQIMg7gNKDf6ACnbifaYTOq0M42zBXeno0eYIjq4VhxiJeOrXCvAG89Cu7l/BA6 ZpW37hzLNJmrQi+48iiOd7c28+rYbakzRdTPtc2WiQZhbl7XQtuNqqOOz5nvBLYQ oOgiYfOTXcGtnkxHyQbeCxR4dIwe0d7d5oJuVYG+fJVABww21wIDAQABo4IDYTCC A10wHQYDVR0OBBYEFAnOnhkgKcLFAYNOE0CdF8howdsTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvNzJhMzNkMjQtYTYzZC0z MWJiLTk3MTQtYzQ5YTc5OTE4MWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDQG6AAwQF RQhAAwQHYmAAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHDDV/cljW07cOrpFC4S4EJVZYu7QoYLMCeYEVz1 F12XNTy7ufB7xCZTaAJL9zrAbFEMCpL2yb4QCyJ8RPh5BSJ2n62HKENTlMaL/HBp 9vzVXGgVjYkUI7QNthbXEkdg9QZSIu9xZzK+FuRzUHgK7rsSfj83K3HuL2QLgMPg ZW3Dj1FzB17ko4r1BkxRWZI1YPdsG7/A0kGGJNEkgwSu+Q0spxBnXpMa/Trm0OTL yBoZhSv/aOSzfeOwIkAGSFWpx1sDkKTMbk+Teo6WpvasPTyprynok4+H7T5lO+gQ VWf9nTlJ3U0BuWx+kT0usDZAPCL4M4PVkz8cFDgxMrqbhDU= -----END CERTIFICATE-----Generated at Wed Aug 26 22:45:34 2026 by rpki-client