$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/5d7e6823-a949-3197-b7a6-e0a5ab688c39.roa File: 5d7e6823-a949-3197-b7a6-e0a5ab688c39.roa (raw, json) Hash identifier: 4GnjtuxHJfw7180q1MS//BXG6Cx7BIlpd8ylzMRtm2w= Subject key identifier: D5:43:EB:D9:E9:5C:56:0D:23:D1:05:56:98:AB:3A:9E:CE:A8:47:72 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584EAD1C684DC0CF57AF1FC89140 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/5d7e6823-a949-3197-b7a6-e0a5ab688c39.roa Signing time: Fri 31 Jul 2026 01:00:11 +0000 ROA not before: Fri 31 Jul 2026 01:00:11 +0000 ROA not after: Thu 29 Oct 2026 01:00:11 +0000 asID: 30456 IP address blocks: 64.112.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ad:1c:68:4d:c0:cf:57:af:1f:c8:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Jul 31 01:00:11 2026 GMT Not After : Oct 29 01:00:11 2026 GMT Subject: CN=f63c87d6-83a0-453f-9659-5feca2e7174c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dd:54:1a:6d:0d:8b:85:38:62:f7:6e:1d:1c: 3f:ca:60:74:94:3d:93:8b:e2:6d:90:48:62:52:7e: 04:e9:b0:60:35:20:71:a7:4f:1e:6e:85:84:e2:c7: 64:97:b1:08:8d:bc:7c:18:c9:1f:18:1e:59:ea:a5: 59:50:50:72:49:7c:97:dc:be:97:82:26:58:de:4d: e4:a8:d0:b6:6a:5a:02:61:c6:5b:58:f5:be:ad:c4: d3:ec:81:6f:31:4a:3e:ca:e3:eb:a3:23:ad:6b:57: 2d:0f:56:96:d4:13:dd:c9:66:55:9a:ad:67:bf:c4: fa:80:81:b4:08:ec:83:f5:02:0a:7a:ba:53:c3:91: 5f:68:e7:b3:8b:a0:98:c0:4f:05:e4:1c:7f:30:34: 3d:1e:9a:f5:11:18:d0:59:7c:2e:7f:06:d4:39:1a: af:cf:62:15:fa:8f:cf:13:63:a8:c6:b6:f8:f3:f1: 42:23:c1:b6:84:2e:45:a6:3e:a4:10:14:a8:e8:c1: 92:51:73:22:20:27:54:5f:da:58:57:00:d1:d1:c3: 07:78:02:f5:41:d1:51:3b:dd:b2:0b:29:b5:25:fc: dd:1c:7a:42:df:8e:42:7c:83:98:b6:04:d1:c6:cd: f1:f1:30:6a:5f:be:9b:9c:c4:00:6a:58:6d:80:a7: 0d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:43:EB:D9:E9:5C:56:0D:23:D1:05:56:98:AB:3A:9E:CE:A8:47:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/5d7e6823-a949-3197-b7a6-e0a5ab688c39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 64.112.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:1e:ac:03:9e:34:f7:fb:e9:98:da:3c:ba:16:cb:9f:75:98: 0a:49:bb:ae:ba:c4:f1:60:7f:a1:69:02:40:37:eb:7a:30:3e: e0:4c:9e:c6:a7:eb:da:19:88:7a:a9:f1:ba:64:d7:4e:02:43: 2b:6b:1b:7c:76:54:e7:44:bf:66:12:6d:c1:3a:6b:13:da:8e: af:55:5d:ee:ee:81:41:4b:d7:94:d1:23:4c:b0:4d:98:94:e1: ee:14:87:bc:79:dd:00:d7:9f:4e:90:23:e4:14:3f:f7:c9:4b: 8c:f0:38:36:09:06:b9:c7:b1:46:1c:46:c5:63:81:93:95:79: 9c:88:c1:08:9c:1b:c3:cf:45:74:1f:64:ca:97:a8:72:51:0f: c1:e9:44:dc:29:fc:69:83:a5:3a:d9:37:71:ea:fe:26:be:2a: 40:4c:95:2f:ca:fe:c0:66:dd:d8:fd:48:43:b0:f9:0a:d4:08: c4:eb:ef:04:c8:ab:cd:03:0f:ca:49:d6:bb:07:5d:2f:1b:fd: 5e:d6:47:ca:1f:1f:77:1b:b9:d6:b4:6d:a4:6d:65:1a:ce:ce: 61:e3:f2:55:c1:d7:cc:74:06:fb:69:fe:10:2b:80:e7:cd:da: dd:12:c2:59:fd:e7:a1:f9:40:7f:67:a6:a9:25:3e:5c:28:f5: c4:24:fd:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6tHGhNwM9Xrx/IkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDczMTAxMDAxMVoXDTI2MTAyOTAxMDAxMVowLzEtMCsGA1UEAxMk ZjYzYzg3ZDYtODNhMC00NTNmLTk2NTktNWZlY2EyZTcxNzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t1UGm0Ni4U4YvduHRw/ymB0lD2Ti+JtkEhi Un4E6bBgNSBxp08eboWE4sdkl7EIjbx8GMkfGB5Z6qVZUFBySXyX3L6XgiZY3k3k qNC2aloCYcZbWPW+rcTT7IFvMUo+yuProyOta1ctD1aW1BPdyWZVmq1nv8T6gIG0 COyD9QIKerpTw5FfaOezi6CYwE8F5Bx/MDQ9Hpr1ERjQWXwufwbUORqvz2IV+o/P E2Ooxrb48/FCI8G2hC5Fpj6kEBSo6MGSUXMiICdUX9pYVwDR0cMHeAL1QdFRO92y Cym1JfzdHHpC345CfIOYtgTRxs3x8TBqX76bnMQAalhtgKcN5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVD69npXFYNI9EFVpirOp7OqEdyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvNWQ3ZTY4MjMtYTk0OS0z MTk3LWI3YTYtZTBhNWFiNjg4YzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0erAOeNPf76ZjaPLoWy591mApJu666xPFgf6FpAkA363owPuBMnsan 69oZiHqp8bpk104CQytrG3x2VOdEv2YSbcE6axPajq9VXe7ugUFL15TRI0ywTZiU 4e4Uh7x53QDXn06QI+QUP/fJS4zwODYJBrnHsUYcRsVjgZOVeZyIwQicG8PPRXQf ZMqXqHJRD8HpRNwp/GmDpTrZN3Hq/ia+KkBMlS/K/sBm3dj9SEOw+QrUCMTr7wTI q80DD8pJ1rsHXS8b/V7WR8ofH3cbuda0baRtZRrOzmHj8lXB18x0Bvtp/hArgOfN 2t0Swln956H5QH9npqklPlwo9cQk/XA= -----END CERTIFICATE-----Generated at Thu Sep 10 17:04:12 2026 by rpki-client