$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/c10be178-41da-38c0-aa71-3d02d08e892d.roa File: c10be178-41da-38c0-aa71-3d02d08e892d.roa (raw, json) Hash identifier: 9TL+c50Y+/Qx9nkSCrVTyvzQV6ygI/DNIpu4hgKpRZ8= Subject key identifier: 17:E2:B1:D8:E4:2C:67:1F:52:A1:80:87:19:B2:AB:80:EA:E8:6A:92 Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584EED521BAE37DE963A608FD000 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/c10be178-41da-38c0-aa71-3d02d08e892d.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 21657 IP address blocks: 64.147.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:1b:ae:37:de:96:3a:60:8f:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=4057d8c0-1c08-416c-bd1f-4035a727ef00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:ef:1c:f6:22:74:d9:89:81:36:13:69:69: a2:e5:5f:fa:46:f9:91:a0:77:86:6f:08:e4:de:4f: d1:bb:08:17:4b:19:2c:14:f8:d9:10:7c:23:0a:f9: 7b:5b:d1:96:df:cd:0a:99:e9:c0:67:f9:c5:0d:db: 8e:62:0c:18:30:a2:b8:e9:75:e6:e5:58:9f:a1:99: dc:3d:a2:35:a5:88:14:47:aa:a9:16:b8:83:a7:a0: 40:18:b2:c5:9c:ff:44:9c:da:9c:2c:57:0e:39:35: 43:f4:bd:31:94:a1:30:b7:e1:ec:93:a6:d3:a2:e7: ee:e7:fb:c7:2f:89:3b:86:40:15:b7:e5:c8:3c:fa: 06:da:74:fa:02:74:52:04:ec:51:f2:8f:ea:00:65: 71:b1:a2:33:0f:2a:93:95:cb:62:cf:b6:9b:5f:4f: 5b:21:ac:66:5c:6e:8a:bc:c4:a4:9c:1e:b8:0c:6e: 62:b5:ab:a8:85:59:54:20:0c:db:cb:6d:2c:39:f0: 45:fd:5d:de:72:dd:26:b1:39:84:04:7d:b4:84:f8: 5f:59:eb:1a:d9:01:fc:08:eb:93:b5:b5:59:ad:2e: 8e:fb:a8:48:3c:f3:2c:02:a3:72:6c:dd:7c:c1:f2: 53:9c:e2:35:64:bc:79:c4:4e:1b:11:8a:c6:91:11: e0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E2:B1:D8:E4:2C:67:1F:52:A1:80:87:19:B2:AB:80:EA:E8:6A:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/c10be178-41da-38c0-aa71-3d02d08e892d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:40:d4:38:d1:8b:da:9d:20:e1:2a:61:d8:fb:9e:7b:7f:33: 51:81:43:65:2d:37:65:12:dc:46:0a:ad:e4:7b:e3:b6:33:ee: f5:66:86:2c:96:d7:db:ef:5d:a7:77:6a:31:81:ff:47:34:d4: 65:d2:91:ee:41:87:dc:2f:94:4c:c4:ae:2d:7e:d6:e5:b5:1a: fd:2a:6f:02:42:86:f6:18:f6:26:56:b3:40:90:d8:48:aa:02: 81:f2:4e:80:17:ff:99:13:ff:e0:45:87:b8:9f:8d:ba:8e:94: c9:e6:d5:ce:1a:4a:16:9f:ef:10:11:29:a3:c4:ba:ba:32:0b: 68:1a:ff:57:fb:89:9c:5f:0a:a7:e6:45:ee:1c:56:b2:d7:a1: c0:1c:78:50:be:58:9d:d5:20:e9:cb:5b:c2:48:b3:0c:a1:19: ad:d2:56:cb:76:fd:de:de:f1:4a:15:35:3b:eb:e9:05:e0:4d: b3:9a:a0:b6:6b:15:8f:02:58:86:32:42:64:1a:b7:4a:7b:7f: ce:31:a1:ca:a6:e4:67:e5:52:49:8b:bb:d0:1f:80:b2:b8:37: 3d:26:16:24:eb:f0:ef:70:c4:c7:89:a5:4d:3f:ff:08:a2:fb: 17:69:05:70:d3:58:8a:4b:80:a1:01:bf:96:c5:09:f1:a3:12: c2:fc:83:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUhuuN96WOmCP0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk NDA1N2Q4YzAtMWMwOC00MTZjLWJkMWYtNDAzNWE3MjdlZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GbvHPYidNmJgTYTaWmi5V/6RvmRoHeGbwjk 3k/RuwgXSxksFPjZEHwjCvl7W9GW380KmenAZ/nFDduOYgwYMKK46XXm5VifoZnc PaI1pYgUR6qpFriDp6BAGLLFnP9EnNqcLFcOOTVD9L0xlKEwt+Hsk6bToufu5/vH L4k7hkAVt+XIPPoG2nT6AnRSBOxR8o/qAGVxsaIzDyqTlctiz7abX09bIaxmXG6K vMSknB64DG5itauohVlUIAzby20sOfBF/V3ect0msTmEBH20hPhfWesa2QH8COuT tbVZrS6O+6hIPPMsAqNybN18wfJTnOI1ZLx5xE4bEYrGkRHgPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfisdjkLGcfUqGAhxmyq4Dq6GqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvYzEwYmUxNzgtNDFkYS0z OGMwLWFhNzEtM2QwMmQwOGU4OTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJPlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVA1DjRi9qdIOEqYdj7nnt/M1GBQ2UtN2US3EYKreR747Yz7vVmhiyW 19vvXad3ajGB/0c01GXSke5Bh9wvlEzEri1+1uW1Gv0qbwJChvYY9iZWs0CQ2Eiq AoHyToAX/5kT/+BFh7ifjbqOlMnm1c4aShaf7xARKaPEuroyC2ga/1f7iZxfCqfm Re4cVrLXocAceFC+WJ3VIOnLW8JIswyhGa3SVst2/d7e8UoVNTvr6QXgTbOaoLZr FY8CWIYyQmQat0p7f84xocqm5GflUkmLu9AfgLK4Nz0mFiTr8O9wxMeJpU0//wii +xdpBXDTWIpLgKEBv5bFCfGjEsL8g9Y= -----END CERTIFICATE-----Generated at Sat Sep 26 12:43:31 2026 by rpki-client