$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/602f07e1-021b-347d-b55f-1a3c6a0afe0a.roa File: 602f07e1-021b-347d-b55f-1a3c6a0afe0a.roa (raw, json) Hash identifier: K0iKvjAPAX6DQj3NsNUWL8EaN4lDVpudS7vosP72vdE= Subject key identifier: 5C:76:A6:AC:71:E8:46:EC:C9:81:3A:D4:55:0B:E9:51:7E:C3:33:BB Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Certificate serial: 010D0C9F4328584F612D6825D20D40856C8C9600 Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/602f07e1-021b-347d-b55f-1a3c6a0afe0a.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 16739 IP address blocks: 67.217.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:68:25:d2:0d:40:85:6c:8c:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=0d487be9-8f4b-4bc2-862f-2bd1903c880b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:35:2e:52:69:f1:db:37:72:a8:11:94:ad:a3: 77:56:7f:9d:aa:3f:7c:8c:54:2a:ed:b4:3e:39:1b: 0f:7b:63:05:c1:0d:8a:7b:b9:98:dd:29:a2:bb:75: 39:32:0f:04:2a:5f:5b:b5:67:83:4e:5b:30:41:eb: 76:c2:f9:d9:17:ce:13:2e:86:c8:ac:75:a4:a1:68: 22:5f:87:97:10:d1:bb:e0:ec:c0:0f:8a:bc:c6:99: dc:c8:21:da:e9:51:6d:74:20:b0:06:41:f2:18:96: 41:28:ba:7b:69:d1:4b:cd:e1:d9:c6:d1:32:40:96: af:62:ee:5a:e8:70:a8:39:a6:4c:a1:a4:83:a8:6e: 01:52:62:49:ec:4f:44:88:98:26:e3:b4:6d:18:3e: 2a:fc:db:c5:05:c5:14:97:28:0f:f5:ea:dc:21:38: 56:94:72:13:86:87:6b:d8:2c:11:c0:0f:2b:d8:5b: 8d:81:ce:44:22:7d:89:91:ef:c4:7f:d0:c1:b5:bd: f2:a7:45:79:d9:70:47:05:64:99:36:db:af:2a:a4: 32:ae:90:b6:fa:08:1c:36:16:15:0d:2e:ce:8f:10: a9:30:9d:74:d9:b9:65:09:fc:35:e8:9b:54:2e:a9: 57:59:e1:6a:c0:01:f3:37:3b:7d:54:53:fc:d5:5a: 7f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:76:A6:AC:71:E8:46:EC:C9:81:3A:D4:55:0B:E9:51:7E:C3:33:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/602f07e1-021b-347d-b55f-1a3c6a0afe0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl X509v3 Authority Key Identifier: keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer sbgp-ipAddrBlock: critical IPv4: 67.217.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:72:b4:4a:72:d6:e1:aa:99:cc:ce:b7:de:87:cb:19:02:8b: d4:52:f0:e6:c2:f5:46:71:f2:b0:27:44:35:c0:40:d3:c5:bd: b1:c1:48:03:7b:25:55:d9:82:d1:8f:e0:04:22:11:bc:02:02: 18:c6:c7:1c:c0:34:e1:62:98:ac:ce:77:aa:67:d9:b6:24:93: 55:0a:27:6d:77:cd:7c:b1:fa:d2:d2:5f:1e:0f:86:87:9b:14: 66:32:f0:3c:52:48:9f:1b:4b:94:e5:2f:92:13:c2:3f:a2:f2: 69:1c:cb:f3:68:d4:54:3d:97:ce:11:31:6f:e5:c5:86:d3:72: 02:35:bc:c5:69:a1:85:66:fb:c1:03:c0:1d:0a:61:71:62:55: 31:6c:c0:05:0f:6f:40:d7:f3:44:94:9a:7f:d8:86:f4:31:e2: d8:79:df:e1:13:13:82:c6:b4:40:9e:46:1f:50:fc:0c:26:68: 75:25:70:d9:c2:b7:f1:4f:2f:8e:84:b7:19:0b:88:77:93:ca: 2a:08:f4:dc:3e:ce:55:f2:2c:48:86:56:84:44:db:99:75:1c: d0:33:c2:c1:ae:43:a6:ee:9b:93:c5:e3:f7:10:2b:ea:dd:f9: b7:95:27:56:d7:07:78:7e:c4:18:67:7c:51:26:69:09:6f:de: 3c:0a:a7:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWgl0g1AhWyMlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3 MDg1MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk MGQ0ODdiZTktOGY0Yi00YmMyLTg2MmYtMmJkMTkwM2M4ODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TUuUmnx2zdyqBGUraN3Vn+dqj98jFQq7bQ+ ORsPe2MFwQ2Ke7mY3Smiu3U5Mg8EKl9btWeDTlswQet2wvnZF84TLobIrHWkoWgi X4eXENG74OzAD4q8xpncyCHa6VFtdCCwBkHyGJZBKLp7adFLzeHZxtEyQJavYu5a 6HCoOaZMoaSDqG4BUmJJ7E9EiJgm47RtGD4q/NvFBcUUlygP9ercIThWlHIThodr 2CwRwA8r2FuNgc5EIn2Jke/Ef9DBtb3yp0V52XBHBWSZNtuvKqQyrpC2+ggcNhYV DS7OjxCpMJ102bllCfw16JtULqlXWeFqwAHzNzt9VFP81Vp/JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFx2pqxx6EbsyYE61FUL6VF+wzO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2 M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNjAyZjA3ZTEtMDIxYi0z NDdkLWI1NWYtMWEzYzZhMGFmZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3 NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2 NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ9kEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVytEpy1uGqmczOt96HyxkCi9RS8ObC9UZx8rAnRDXAQNPFvbHBSAN7 JVXZgtGP4AQiEbwCAhjGxxzANOFimKzOd6pn2bYkk1UKJ213zXyx+tLSXx4Phoeb FGYy8DxSSJ8bS5TlL5ITwj+i8mkcy/No1FQ9l84RMW/lxYbTcgI1vMVpoYVm+8ED wB0KYXFiVTFswAUPb0DX80SUmn/YhvQx4th53+ETE4LGtECeRh9Q/AwmaHUlcNnC t/FPL46EtxkLiHeTyioI9Nw+zlXyLEiGVoRE25l1HNAzwsGuQ6bum5PF4/cQK+rd +beVJ1bXB3h+xBhnfFEmaQlv3jwKp9o= -----END CERTIFICATE-----Generated at Wed Oct 28 14:18:43 2026 by rpki-client