$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/8bff03f9-a167-3414-b274-a9724bc100f7.roa File: 8bff03f9-a167-3414-b274-a9724bc100f7.roa (raw, json) Hash identifier: tnodSsaOWTKXRf1R3Iv38JAspylDzm1eBy+QSeZZmM4= Subject key identifier: D0:3D:38:A8:95:3F:3D:FF:B8:D0:70:D8:98:87:DA:B5:79:BC:80:7E Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584EAFE6F79979426D1317017800 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/8bff03f9-a167-3414-b274-a9724bc100f7.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 33185 IP address blocks: 64.112.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:f7:99:79:42:6d:13:17:01:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=2d30c639-1252-4ea8-a242-81492d61844e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5b:95:40:19:4f:9b:5d:a7:86:98:1c:23:6c: b9:ce:6d:95:09:9c:4b:89:58:17:39:3d:b0:54:a4: 50:4d:6c:db:59:62:1a:59:e3:88:eb:e9:ab:c3:0f: 69:d7:51:4c:9a:cb:dd:ff:4c:29:d0:0a:3a:fd:5c: 16:90:6a:e4:1e:a1:71:b0:71:9c:97:96:ea:53:03: 0a:83:4a:64:60:9b:3d:e8:5d:0c:c2:3d:93:df:2e: 33:da:a7:95:6c:10:78:e7:80:3b:22:0d:18:f9:1b: 2f:c2:4b:9f:3a:93:59:80:c1:0d:52:eb:00:ee:02: 0d:51:8a:0f:43:d9:90:e1:4b:13:ee:8e:10:7b:7c: 6a:eb:ae:68:0b:72:7c:c7:26:5d:07:7c:46:b8:d1: 71:de:36:fd:e3:c9:24:3e:66:d3:c0:4b:d2:95:43: 47:78:ec:ac:42:f7:77:b0:75:7d:c8:ab:4b:09:c0: 5f:0f:fb:dd:87:23:3e:43:da:cb:4d:1a:c5:4d:f0: bf:35:73:ee:dc:58:39:d5:6f:5e:26:b0:8d:5d:23: 24:0a:60:95:a1:5c:12:15:d3:44:0a:ea:07:be:a9: cf:0f:30:82:dd:8e:60:bb:c0:46:f6:dc:42:84:41: 86:a9:62:21:f3:c2:ff:76:cf:e7:80:5d:b3:4b:ff: 20:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3D:38:A8:95:3F:3D:FF:B8:D0:70:D8:98:87:DA:B5:79:BC:80:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/8bff03f9-a167-3414-b274-a9724bc100f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 64.112.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:0b:3b:f5:7b:ad:8d:f9:64:0b:3e:a2:b6:64:8d:00:0e:08: 69:4c:4b:0c:9f:05:71:4d:00:4e:5d:b5:83:d0:83:00:14:5d: 3d:29:07:83:34:8f:91:5f:3d:f4:0f:9e:ef:2a:79:18:69:f5: f8:9b:56:a6:08:30:4e:ca:18:69:0b:76:32:48:0d:a3:15:cf: 4b:ae:f2:2c:9b:cc:1d:aa:8f:ca:18:59:3b:fc:0f:73:e7:a2: e6:15:7d:bc:d0:88:5e:7d:e2:cb:4b:54:4b:0e:bf:2c:23:14: f5:bf:5a:a4:83:9a:d6:72:b7:e3:a5:ae:02:20:a1:7a:f1:86: 13:01:40:9b:00:64:64:68:39:dc:ba:cd:a7:28:38:40:9c:3e: 33:9c:47:67:f1:df:5d:24:08:cc:31:55:2c:a3:93:76:b6:8e: 01:4d:ca:72:bb:ef:69:da:b0:a5:c2:44:64:1b:09:eb:da:3d: fe:1f:16:fd:11:f2:8f:d2:19:6e:af:74:33:30:40:f9:e2:51: 79:77:f6:a9:ac:14:0f:05:b6:8c:75:56:42:21:86:c8:21:e1: b9:72:ea:99:77:b4:73:d1:71:08:6a:5b:83:d4:7d:24:e3:50: a3:1d:d4:68:6f:26:2c:4c:00:2b:52:04:48:8f:ee:20:69:90: 79:db:4d:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5veZeUJtExcBeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MmQzMGM2MzktMTI1Mi00ZWE4LWEyNDItODE0OTJkNjE4NDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4luVQBlPm12nhpgcI2y5zm2VCZxLiVgXOT2w VKRQTWzbWWIaWeOI6+mrww9p11FMmsvd/0wp0Ao6/VwWkGrkHqFxsHGcl5bqUwMK g0pkYJs96F0Mwj2T3y4z2qeVbBB454A7Ig0Y+RsvwkufOpNZgMENUusA7gINUYoP Q9mQ4UsT7o4Qe3xq665oC3J8xyZdB3xGuNFx3jb948kkPmbTwEvSlUNHeOysQvd3 sHV9yKtLCcBfD/vdhyM+Q9rLTRrFTfC/NXPu3Fg51W9eJrCNXSMkCmCVoVwSFdNE CuoHvqnPDzCC3Y5gu8BG9txChEGGqWIh88L/ds/ngF2zS/8g/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNA9OKiVPz3/uNBw2JiH2rV5vIB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvOGJmZjAzZjktYTE2Ny0z NDE0LWIyNzQtYTk3MjRiYzEwMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwLO/V7rY35ZAs+orZkjQAOCGlMSwyfBXFNAE5dtYPQgwAUXT0pB4M0 j5FfPfQPnu8qeRhp9fibVqYIME7KGGkLdjJIDaMVz0uu8iybzB2qj8oYWTv8D3Pn ouYVfbzQiF594stLVEsOvywjFPW/WqSDmtZyt+OlrgIgoXrxhhMBQJsAZGRoOdy6 zacoOECcPjOcR2fx310kCMwxVSyjk3a2jgFNynK772nasKXCRGQbCevaPf4fFv0R 8o/SGW6vdDMwQPniUXl39qmsFA8Ftox1VkIhhsgh4bly6pl3tHPRcQhqW4PUfSTj UKMd1GhvJixMACtSBEiP7iBpkHnbTZk= -----END CERTIFICATE-----Generated at Thu Sep 10 19:56:49 2026 by rpki-client