$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/ccea40b6-6b8b-3260-8acb-11e182c16519.roa File: ccea40b6-6b8b-3260-8acb-11e182c16519.roa (raw, json) Hash identifier: NbQWSyfMRvpcpFG/BMWYvUN0VbpkNO/BHA3JvE4VSWg= Subject key identifier: 44:2C:27:35:D2:1E:9C:97:B3:3C:9F:78:5D:83:DF:56:90:FE:8C:FA Certificate issuer: /CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Certificate serial: 010D0C9F4328584EED521BC580F4865E96008E70 Authority key identifier: C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/ccea40b6-6b8b-3260-8acb-11e182c16519.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 21657 IP address blocks: 64.147.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:1b:c5:80:f4:86:5e:96:00:8e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=914ef7e9-1543-4a8d-aee9-f423db9e9ab7 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=bc91fe50-7bf4-4460-8329-d729573aac80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:43:7b:66:66:6d:da:82:8f:95:ce:83:77:71: 30:bf:2c:6f:de:17:f8:7a:03:d6:c3:e7:5b:ad:2e: 73:6b:ad:fa:3b:15:af:5f:ae:a0:0f:13:16:a7:3a: 33:94:b6:fe:aa:b1:2d:ab:2b:17:ed:a1:b9:cc:09: cc:73:38:dd:23:90:f4:3e:ae:d1:93:80:c8:77:29: e6:21:e2:20:c4:94:9f:15:0f:1f:65:18:73:13:df: b5:85:60:e8:46:38:b5:eb:64:12:11:9b:30:1f:5d: 99:99:74:01:2d:2f:f3:a4:2f:d2:8f:ee:c1:39:66: 5b:c6:72:64:48:92:1f:3a:5d:0c:b8:05:4d:b2:2a: e0:f7:5b:3e:cc:ee:42:c5:9f:74:1e:8c:3e:f7:48: e6:65:2e:aa:70:11:e0:22:43:00:74:27:05:f8:fd: 14:67:d6:09:4a:59:fb:38:70:ed:a8:1a:49:70:96: 2b:fe:c5:97:6a:a5:71:01:bd:d3:f4:75:1f:0a:c1: 47:71:43:29:3a:06:0e:6b:62:55:b3:7e:45:04:f2: e5:93:0b:29:78:9a:18:1e:15:73:47:25:85:32:b8: a6:03:41:3c:78:5f:74:0f:11:1d:f0:85:69:b4:0c: 9b:e4:3c:7c:80:c7:ae:81:e4:29:7e:69:b1:dc:d0: 4e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2C:27:35:D2:1E:9C:97:B3:3C:9F:78:5D:83:DF:56:90:FE:8C:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/ccea40b6-6b8b-3260-8acb-11e182c16519.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.crl X509v3 Authority Key Identifier: keyid:C8:BA:1F:82:3B:70:55:DA:3F:F9:B6:48:8C:6A:12:B0:B5:0B:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/914ef7e9-1543-4a8d-aee9-f423db9e9ab7.cer sbgp-ipAddrBlock: critical IPv4: 64.147.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5b:4d:2c:d1:f8:eb:c9:42:a3:a9:53:08:44:ee:b4:2b:11: 8e:bd:a4:e2:43:2d:d5:ce:de:0e:76:5c:95:c6:0b:f9:02:26: 35:85:8d:9b:db:1a:1b:f8:f7:de:f1:63:79:52:df:bc:0b:1d: 48:e2:10:28:cd:80:45:91:3d:5c:64:79:c2:32:b6:55:98:6e: d9:bb:86:7a:b2:7a:c0:b3:ed:e5:32:b6:f2:a6:67:1a:a9:05: c3:2a:c2:38:33:ef:05:44:1c:d7:92:55:d9:73:fc:8b:5d:cf: 1e:1c:18:97:40:f7:f1:91:00:ab:d5:82:b4:36:51:11:84:36: 0b:7f:ca:ad:03:8e:50:cb:53:cd:34:ea:81:81:ed:74:4f:b6: 18:80:0a:d3:dc:32:f1:57:8a:48:db:be:35:49:03:17:ee:16: ab:8d:6c:4f:3e:bc:32:f7:07:ef:ad:7c:16:87:b7:01:71:a0: ea:eb:35:2b:ae:39:67:e9:16:44:13:c0:f3:74:fc:e2:94:38: 96:76:3b:eb:f2:3c:c2:dd:04:08:62:f9:b2:f0:85:51:da:65: 58:96:f0:6b:d0:e6:9f:71:10:0d:9d:c3:ba:c9:c2:d1:b3:76: 06:ea:5d:ec:d2:ef:a2:de:15:4d:a7:a9:cf:5d:c6:95:97:3c: c3:54:2a:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUhvFgPSGXpYAjnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE0ZWY3ZTktMTU0My00YThkLWFlZTktZjQyM2RiOWU5 YWI3MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk YmM5MWZlNTAtN2JmNC00NDYwLTgzMjktZDcyOTU3M2FhYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUN7ZmZt2oKPlc6Dd3Ewvyxv3hf4egPWw+db rS5za636OxWvX66gDxMWpzozlLb+qrEtqysX7aG5zAnMczjdI5D0Pq7Rk4DIdynm IeIgxJSfFQ8fZRhzE9+1hWDoRji162QSEZswH12ZmXQBLS/zpC/Sj+7BOWZbxnJk SJIfOl0MuAVNsirg91s+zO5CxZ90How+90jmZS6qcBHgIkMAdCcF+P0UZ9YJSln7 OHDtqBpJcJYr/sWXaqVxAb3T9HUfCsFHcUMpOgYOa2JVs35FBPLlkwspeJoYHhVz RyWFMrimA0E8eF90DxEd8IVptAyb5Dx8gMeugeQpfmmx3NBOFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQsJzXSHpyXszyfeF2D31aQ/oz6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTRl ZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIzZGI5ZTlhYjcvY2NlYTQwYjYtNmI4Yi0z MjYwLThhY2ItMTFlMTgyYzE2NTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE0ZWY3ZTktMTU0My00YThkLWFl ZTktZjQyM2RiOWU5YWI3LzkxNGVmN2U5LTE1NDMtNGE4ZC1hZWU5LWY0MjNkYjll OWFiNy5jcmwwHwYDVR0jBBgwFoAUyLofgjtwVdo/+bZIjGoSsLULcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTRlZjdlOS0xNTQzLTRhOGQtYWVlOS1mNDIz ZGI5ZTlhYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQJPvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtbTSzR+OvJQqOpUwhE7rQrEY69pOJDLdXO3g52XJXGC/kCJjWFjZvb Ghv4997xY3lS37wLHUjiECjNgEWRPVxkecIytlWYbtm7hnqyesCz7eUytvKmZxqp BcMqwjgz7wVEHNeSVdlz/Itdzx4cGJdA9/GRAKvVgrQ2URGENgt/yq0DjlDLU800 6oGB7XRPthiACtPcMvFXikjbvjVJAxfuFquNbE8+vDL3B++tfBaHtwFxoOrrNSuu OWfpFkQTwPN0/OKUOJZ2O+vyPMLdBAhi+bLwhVHaZViW8GvQ5p9xEA2dw7rJwtGz dgbqXezS76LeFU2nqc9dxpWXPMNUKvo= -----END CERTIFICATE-----Generated at Tue Sep 29 10:46:16 2026 by rpki-client