$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/982f6e65-bd39-36a1-a90d-3b469a869a64.roa File: 982f6e65-bd39-36a1-a90d-3b469a869a64.roa (raw, json) Hash identifier: V0pZFY251ttNrZfw5a5HwkPzqm1jWDewZ2xWsp6hqk4= Subject key identifier: AA:05:0E:95:E2:05:64:CF:A5:41:C0:99:D5:B0:26:05:13:BC:9B:42 Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Certificate serial: 010D0C9F4328584EDDF73C106B7E8CF595979880 Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/982f6e65-bd39-36a1-a90d-3b469a869a64.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 397873 IP address blocks: 64.20.208.0/24 maxlen: 24 66.248.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:3c:10:6b:7e:8c:f5:95:97:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=5cf57188-cbae-4bc2-bfe0-f1de2ce743cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fd:74:9d:ec:44:3c:06:ae:ca:4f:e3:c4:ac: f3:c9:8a:95:7f:62:2e:13:f1:af:d5:31:fb:bb:60: 03:35:3d:bb:e3:de:f6:1f:d7:04:b0:49:0e:f8:b6: 02:e1:90:65:e3:e3:d3:d0:8f:6b:f3:f5:18:12:5a: fe:11:6f:66:f9:a7:a1:c1:02:1b:a2:6b:a9:80:7c: d2:bd:dd:e6:c6:61:59:0d:3a:66:ea:44:57:de:29: 9f:91:79:2f:09:a5:53:1d:8a:f2:42:c5:61:c2:b3: 3f:d8:ff:2d:cc:22:7a:b4:8c:71:a0:4c:0b:d3:87: b4:ca:95:4e:4d:af:3a:4c:1f:a7:43:3e:5c:24:72: 49:8f:32:3d:3c:77:fc:ef:5f:3e:c7:aa:6c:0c:9d: 1c:33:60:42:4e:5e:55:ca:a9:cf:54:89:ff:f1:c1: b9:a4:1a:35:e6:4f:ef:e3:18:7e:6d:59:d5:41:38: 76:8a:e5:8f:be:ec:14:c9:27:62:64:10:37:81:e1: 45:49:57:35:f6:bd:14:e1:71:32:28:db:1c:1c:0c: ac:f8:1c:a6:bf:07:cd:92:eb:9e:2b:bf:94:16:50: a6:a8:4f:c7:dd:49:25:28:51:92:f1:16:1d:23:6d: 09:be:fb:3f:3b:d7:7a:21:16:87:42:cd:77:42:00: ec:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:05:0E:95:E2:05:64:CF:A5:41:C0:99:D5:B0:26:05:13:BC:9B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/982f6e65-bd39-36a1-a90d-3b469a869a64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl X509v3 Authority Key Identifier: keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer sbgp-ipAddrBlock: critical IPv4: 64.20.208.0/24 66.248.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:37:c7:f7:a1:93:70:e9:e2:32:a2:ee:b1:e9:d5:2c:1c:67: aa:72:d1:55:f8:21:15:5f:2e:45:03:5b:f3:04:10:e9:59:a9: 1b:de:e3:aa:aa:de:a0:91:7d:f7:99:4f:0b:e4:08:59:49:12: b9:9d:60:31:af:86:5b:87:b7:c2:1d:6c:3a:d9:da:0c:37:8f: 6f:fc:c2:4e:d3:c1:6a:13:5f:44:b4:08:12:65:c2:a8:ca:00: 5d:cb:66:30:bd:af:38:90:b9:94:cf:2f:06:8f:89:ec:86:91: 56:9f:9a:af:96:e5:c5:12:90:94:f2:5e:66:6e:b7:7b:f0:f9: f6:cc:3f:59:2c:78:43:47:a2:d1:3e:db:c9:98:fb:f5:3b:6e: 2e:42:58:17:e7:f4:b5:fd:28:01:e5:2d:d6:43:2d:4e:43:47: f3:86:50:61:db:30:a8:dd:3d:1c:20:d0:ea:e8:cb:37:dd:76: 77:57:cf:9a:96:26:b3:a7:6e:8f:29:91:96:9a:d3:ab:52:50: 5a:fb:73:57:d2:78:99:66:4e:1c:0f:41:f8:73:c7:1d:ae:ae: 69:f7:17:01:74:fa:67:8d:8a:a5:98:d3:49:a1:2b:cd:ff:f2: 2b:77:45:5f:90:0f:57:ee:7c:14:82:aa:42:72:9a:d4:c3:70: 4c:1d:e1:4b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE7d9zwQa36M9ZWXmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk M2RmMB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk NWNmNTcxODgtY2JhZS00YmMyLWJmZTAtZjFkZTJjZTc0M2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP10nexEPAauyk/jxKzzyYqVf2IuE/Gv1TH7 u2ADNT274972H9cEsEkO+LYC4ZBl4+PT0I9r8/UYElr+EW9m+aehwQIbomupgHzS vd3mxmFZDTpm6kRX3imfkXkvCaVTHYryQsVhwrM/2P8tzCJ6tIxxoEwL04e0ypVO Ta86TB+nQz5cJHJJjzI9PHf8718+x6psDJ0cM2BCTl5VyqnPVIn/8cG5pBo15k/v 4xh+bVnVQTh2iuWPvuwUySdiZBA3geFFSVc19r0U4XEyKNscHAys+BymvwfNkuue K7+UFlCmqE/H3UklKFGS8RYdI20Jvvs/O9d6IRaHQs13QgDsbQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKoFDpXiBWTPpUHAmdWwJgUTvJtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvOTgyZjZlNjUtYmQzOS0z NmExLWE5MGQtM2I0NjlhODY5YTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5 MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1 ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx MzBjNWQzZGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQBTQAwQA QvjwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFg3x/ehk3Dp4jKi7rHp1SwcZ6py0VX4IRVfLkUDW/MEEOlZ qRve46qq3qCRffeZTwvkCFlJErmdYDGvhluHt8IdbDrZ2gw3j2/8wk7TwWoTX0S0 CBJlwqjKAF3LZjC9rziQuZTPLwaPieyGkVafmq+W5cUSkJTyXmZut3vw+fbMP1ks eENHotE+28mY+/U7bi5CWBfn9LX9KAHlLdZDLU5DR/OGUGHbMKjdPRwg0Oroyzfd dndXz5qWJrOnbo8pkZaa06tSUFr7c1fSeJlmThwPQfhzxx2urmn3FwF0+meNiqWY 00mhK83/8it3RV+QD1fufBSCqkJymtTDcEwd4Us= -----END CERTIFICATE-----Generated at Wed Sep 16 09:19:40 2026 by rpki-client