$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/09fac336-7359-3a0e-aaf5-7677dfa3d9a7.roa File: 09fac336-7359-3a0e-aaf5-7677dfa3d9a7.roa (raw, json) Hash identifier: srcadIk/HByKFhOwYmJnGV9M8NrgcLyzM94Dn11nVhk= Subject key identifier: 82:C9:B9:48:D5:23:49:BD:26:E6:27:6E:44:B6:EC:E1:B1:7B:20:75 Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584F15CCE0E029EE791E18A11100 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/09fac336-7359-3a0e-aaf5-7677dfa3d9a7.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 26967 IP address blocks: 64.136.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e0:e0:29:ee:79:1e:18:a1:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=370bd3bb-112e-46f5-b568-8c6f53ca7a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:a5:2f:f7:ff:cb:0c:34:92:05:41:62:b5: 0c:2f:fb:0c:67:83:28:58:73:cf:cd:ec:43:43:e2: 22:66:77:fd:65:93:12:a2:14:12:13:f3:b4:a5:bf: 2b:40:18:c8:7b:a3:62:ec:78:9e:0d:75:f8:b2:cc: 3b:73:ab:6e:6a:42:b1:66:1a:93:51:89:df:e1:86: cc:ac:a6:a6:c2:83:a8:96:de:9a:69:3e:08:87:3b: a9:ac:2b:0f:03:1e:c7:c6:58:f4:23:28:95:7e:65: 4e:9e:fb:ed:a4:17:3d:f1:d5:18:b0:bc:c5:e4:6a: e9:4e:16:ee:6c:4b:36:50:40:3f:29:39:ee:a9:b0: 36:b0:c0:5c:63:3d:67:a2:96:b8:f9:32:4e:66:48: ae:fd:42:2f:5a:ce:52:a7:09:4d:e0:c2:47:07:38: 9a:52:c4:9c:bd:b2:5b:20:8d:ff:3e:71:c8:aa:6c: 40:c7:51:9f:4d:4f:b6:ea:d4:d9:02:8e:74:4a:fe: 3b:0e:db:1f:a0:e9:5d:64:fa:f6:be:e9:ba:9e:51: a4:2f:68:80:87:a3:76:60:80:62:8f:73:6e:4e:92: 5e:e7:5b:e6:5d:51:8b:8e:e6:6c:ca:17:aa:87:c0: 81:51:a5:e4:88:3a:f3:98:d1:94:35:2b:05:15:d7: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C9:B9:48:D5:23:49:BD:26:E6:27:6E:44:B6:EC:E1:B1:7B:20:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/09fac336-7359-3a0e-aaf5-7677dfa3d9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 64.136.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:2a:41:68:ab:b1:44:50:ab:78:87:00:b9:49:06:54:b7:22: 7d:30:fc:fc:70:ac:93:f0:59:44:70:21:96:97:a8:8a:c8:ce: d9:6d:e1:74:d9:bc:64:c7:1b:26:7e:ad:51:45:1d:54:29:01: 6a:75:22:68:c5:9e:cb:ce:e9:43:fd:30:5e:89:88:97:57:c3: 6d:2d:47:51:81:41:e6:f7:da:c8:d2:3c:cd:22:2d:3b:97:a0: 35:65:17:5c:ce:bc:f4:32:39:0d:2a:f4:ef:bc:3c:2b:02:f8: f2:b1:ff:4d:9e:8f:89:79:84:81:4c:4f:97:cf:40:57:b4:15: 97:45:80:0d:16:d8:86:6c:de:e4:4f:bd:44:d2:cb:59:dc:40: 7d:d1:2d:61:3d:6f:0c:a2:ef:40:0e:99:c4:cb:5e:d0:b5:f1: af:dd:7b:89:25:a7:69:67:c5:26:e6:be:ec:56:7c:7b:ca:3f: c1:de:58:c4:ba:31:5f:83:23:2f:9e:e7:2d:b7:24:68:71:58: 1d:15:83:f8:a5:45:76:19:13:4c:cc:4e:5e:06:b2:29:8c:71: 0d:2e:5e:8d:10:d9:cd:e4:7d:99:f7:5b:8f:02:7e:2a:e2:e0: 84:e7:f0:f4:7d:87:d4:84:d6:fd:4b:2e:65:44:d4:60:9f:a3: 84:cc:ad:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzODgKe55HhihEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MzcwYmQzYmItMTEyZS00NmY1LWI1NjgtOGM2ZjUzY2E3YThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWmlL/f/yww0kgVBYrUML/sMZ4MoWHPPzexD Q+IiZnf9ZZMSohQSE/O0pb8rQBjIe6Ni7HieDXX4ssw7c6tuakKxZhqTUYnf4YbM rKamwoOolt6aaT4IhzuprCsPAx7Hxlj0IyiVfmVOnvvtpBc98dUYsLzF5GrpThbu bEs2UEA/KTnuqbA2sMBcYz1nopa4+TJOZkiu/UIvWs5SpwlN4MJHBziaUsScvbJb II3/PnHIqmxAx1GfTU+26tTZAo50Sv47DtsfoOldZPr2vum6nlGkL2iAh6N2YIBi j3NuTpJe51vmXVGLjuZsyheqh8CBUaXkiDrzmNGUNSsFFdcnSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILJuUjVI0m9JuYnbkS27OGxeyB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvMDlmYWMzMzYtNzM1OS0z YTBlLWFhZjUtNzY3N2RmYTNkOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQIikMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkqQWirsURQq3iHALlJBlS3In0w/PxwrJPwWURwIZaXqIrIztlt4XTZ vGTHGyZ+rVFFHVQpAWp1ImjFnsvO6UP9MF6JiJdXw20tR1GBQeb32sjSPM0iLTuX oDVlF1zOvPQyOQ0q9O+8PCsC+PKx/02ej4l5hIFMT5fPQFe0FZdFgA0W2IZs3uRP vUTSy1ncQH3RLWE9bwyi70AOmcTLXtC18a/de4klp2lnxSbmvuxWfHvKP8HeWMS6 MV+DIy+e5y23JGhxWB0Vg/ilRXYZE0zMTl4GsimMcQ0uXo0Q2c3kfZn3W48Cfiri 4ITn8PR9h9SE1v1LLmVE1GCfo4TMrT0= -----END CERTIFICATE-----Generated at Thu Oct 8 15:40:09 2026 by rpki-client