$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8f2b3ac5-1b68-34be-8371-29af1cf4e2c1.roa File: 8f2b3ac5-1b68-34be-8371-29af1cf4e2c1.roa (raw, json) Hash identifier: CLkxMMTX2GQP5k7xzGf8ntTU3JLvIIPw/kjvdaX9kG0= Subject key identifier: 3B:1D:8D:86:06:00:9D:C9:44:C5:BF:C0:20:48:EF:9D:13:8C:73:EF Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Certificate serial: 010D0C9F4328584F49747D5A05411546E0B85D80 Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8f2b3ac5-1b68-34be-8371-29af1cf4e2c1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32035 IP address blocks: 64.136.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:7d:5a:05:41:15:46:e0:b8:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=383f4e49-c8fe-47b4-a6ca-4bcfbec35724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d3:b0:a8:f9:22:66:d0:ff:d1:4a:e0:a0:dc: 34:96:e8:15:88:6f:0c:3e:5e:70:21:69:c4:1a:18: a2:b7:48:c9:a0:a8:2f:b9:6b:8d:07:f4:a6:25:53: 60:32:b4:f5:4d:f8:cd:f2:f2:d3:fa:4f:2f:86:44: 01:f8:dd:37:e6:c9:ed:03:c0:1e:17:a2:91:cb:82: c8:0b:2d:53:e4:37:fc:1c:3a:ff:47:6b:6e:aa:bf: ca:05:7d:0f:ad:17:a6:bb:56:a5:f0:aa:af:3d:f9: 3d:78:bd:d8:c1:7c:98:15:59:3b:4a:75:71:cb:10: 03:3e:d2:66:c3:44:41:59:16:ad:7c:1e:5c:7b:e3: 79:b1:37:ec:8e:e0:e4:1c:bd:3f:e3:70:50:02:51: 2f:9a:ca:6c:cb:bb:1c:89:bc:24:6e:c2:56:eb:43: e0:69:35:e4:ca:f6:d0:93:88:66:75:d6:2a:ef:bb: 27:51:f2:e9:f3:96:1d:f6:ae:a3:bd:8b:2c:d9:72: 43:35:59:48:5f:57:6a:dd:22:50:87:c8:4a:9d:20: d4:7c:b8:86:97:a6:83:e4:51:35:85:a5:36:66:da: 41:d4:30:81:00:c4:6f:5c:7e:e8:ed:96:37:65:5b: c9:82:93:96:ea:d9:b5:b3:57:c7:e6:b6:d6:4a:6b: fd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1D:8D:86:06:00:9D:C9:44:C5:BF:C0:20:48:EF:9D:13:8C:73:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/8f2b3ac5-1b68-34be-8371-29af1cf4e2c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl X509v3 Authority Key Identifier: keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer sbgp-ipAddrBlock: critical IPv4: 64.136.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:20:18:b3:06:ad:ea:f2:e0:8c:8e:5d:15:92:b5:1e:d2:03: cd:85:87:29:00:0a:7f:06:cd:4d:a5:57:8f:6c:a8:02:11:ce: 35:67:50:32:31:80:e3:03:c2:c8:0f:9d:88:f5:b3:43:2e:fc: 4c:64:50:1c:6c:7c:bf:31:8b:f2:f1:37:2b:97:4c:46:ff:d3: 3a:ef:ef:e1:a4:b0:04:26:d2:25:d8:a6:0f:81:5b:45:b3:a5: 3c:fa:82:3f:eb:b2:e1:41:06:d9:f4:8c:c8:65:17:18:80:0f: 8a:95:70:87:9e:54:3b:bf:c0:e5:cd:d7:7e:1e:dc:c0:1e:80: 42:42:04:2a:ec:b5:9e:1e:a7:f0:f7:48:ec:2a:a2:6b:68:ef: 2d:68:61:32:3f:4a:3c:f2:d0:11:6e:9c:b7:a0:45:33:68:2c: a1:f7:8e:a9:e5:72:25:b9:f9:c5:25:9e:f8:6c:59:76:21:cc: 1e:2c:f3:86:1c:00:4a:1f:5d:c1:2f:b9:8a:f4:ff:24:09:be: f6:23:87:8a:a6:ad:e3:bc:ce:86:ba:4f:2d:a1:38:89:ee:6e: aa:e8:45:b2:27:6c:db:56:10:96:1f:43:2c:d0:97:c8:20:bd: 19:5a:82:3c:bd:c8:da:e8:08:1c:c5:e5:d0:6e:0e:86:29:d7: 00:62:11:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdH1aBUEVRuC4XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGI4MWM5MjgtMDhjYy00MjM0LWIxNWMtMGYxYTE5N2M2 ZTAwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzgzZjRlNDktYzhmZS00N2I0LWE2Y2EtNGJjZmJlYzM1NzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdOwqPkiZtD/0UrgoNw0lugViG8MPl5wIWnE Ghiit0jJoKgvuWuNB/SmJVNgMrT1TfjN8vLT+k8vhkQB+N035sntA8AeF6KRy4LI Cy1T5Df8HDr/R2tuqr/KBX0PrRemu1al8KqvPfk9eL3YwXyYFVk7SnVxyxADPtJm w0RBWRatfB5ce+N5sTfsjuDkHL0/43BQAlEvmspsy7scibwkbsJW60PgaTXkyvbQ k4hmddYq77snUfLp85Yd9q6jvYss2XJDNVlIX1dq3SJQh8hKnSDUfLiGl6aD5FE1 haU2ZtpB1DCBAMRvXH7o7ZY3ZVvJgpOW6tm1s1fH5rbWSmv9wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsdjYYGAJ3JRMW/wCBI750TjHPvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80Yjgx YzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFhMTk3YzZlMDAvOGYyYjNhYzUtMWI2OC0z NGJlLTgzNzEtMjlhZjFjZjRlMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGI4MWM5MjgtMDhjYy00MjM0LWIx NWMtMGYxYTE5N2M2ZTAwLzRiODFjOTI4LTA4Y2MtNDIzNC1iMTVjLTBmMWExOTdj NmUwMC5jcmwwHwYDVR0jBBgwFoAUGyJ1omrTZEyFY4Te69BMVmcuyJswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YjgxYzkyOC0wOGNjLTQyMzQtYjE1Yy0wZjFh MTk3YzZlMDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQIigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUgGLMGrery4IyOXRWStR7SA82FhykACn8GzU2lV49sqAIRzjVnUDIx gOMDwsgPnYj1s0Mu/ExkUBxsfL8xi/LxNyuXTEb/0zrv7+GksAQm0iXYpg+BW0Wz pTz6gj/rsuFBBtn0jMhlFxiAD4qVcIeeVDu/wOXN134e3MAegEJCBCrstZ4ep/D3 SOwqomto7y1oYTI/Sjzy0BFunLegRTNoLKH3jqnlciW5+cUlnvhsWXYhzB4s84Yc AEofXcEvuYr0/yQJvvYjh4qmreO8zoa6Ty2hOInubqroRbInbNtWEJYfQyzQl8gg vRlagjy9yNroCBzF5dBuDoYp1wBiEVo= -----END CERTIFICATE-----Generated at Tue Oct 13 02:53:01 2026 by rpki-client