$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/64bec62c-3e6a-34d2-acb5-21e2c15b4a73.roa File: 64bec62c-3e6a-34d2-acb5-21e2c15b4a73.roa (raw, json) Hash identifier: 6o5X7IDYYAKqO1d1C4iat8vzYTrAk3Ka7SWRfQcluaw= Subject key identifier: BD:35:23:48:88:32:04:9E:4A:98:A7:26:A3:B1:70:53:84:2D:B7:51 Certificate issuer: /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Certificate serial: 010D0C9F4328584ED431E9D9098AE1E05D218100 Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/64bec62c-3e6a-34d2-acb5-21e2c15b4a73.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 11650 IP address blocks: 208.114.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:e9:d9:09:8a:e1:e0:5d:21:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=b7ec5137-3ddf-4a1e-a26f-c5f33f6533fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fc:70:17:78:c3:97:a0:ed:95:38:a5:96:9b: 4b:2c:16:59:34:5f:e9:0c:ce:6d:12:9d:e6:ca:84: 6e:08:64:92:e6:02:8b:51:ce:4d:02:55:e7:de:a2: 50:d4:e1:99:16:8c:06:9b:b1:20:1b:6d:06:78:b0: 05:60:1e:b7:19:cf:89:a0:8f:fb:00:9b:bc:43:57: ae:13:d7:05:d5:32:3b:a2:6c:a9:be:02:5b:6f:19: 7f:68:2b:91:b3:16:11:e6:e9:cf:ce:c5:84:6b:95: 55:c2:72:79:5b:7d:97:7c:db:e9:ec:3e:49:5e:d1: 80:1d:0d:7f:ef:2e:0f:c4:d4:46:da:93:5e:38:fc: 63:26:2a:bd:19:8a:dc:c0:74:29:34:7d:04:55:b3: d9:15:a2:0d:4a:bb:51:6a:d2:c6:37:75:3b:db:b1: b2:85:26:63:7e:ae:a5:93:70:24:6f:c3:41:6d:80: c1:5a:2f:83:ac:4a:47:7f:52:fd:55:87:72:50:4e: 12:db:71:9c:e1:6f:ce:24:4c:4a:37:c8:ce:8c:25: 3f:06:0f:fa:98:0e:88:5e:c8:b1:9b:8b:18:7d:5a: dd:0c:75:3e:72:da:5b:28:bb:c3:d4:c4:36:22:96: 98:79:ab:5e:e2:57:21:16:ab:e9:4b:e6:0d:02:d6: a2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:35:23:48:88:32:04:9E:4A:98:A7:26:A3:B1:70:53:84:2D:B7:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/64bec62c-3e6a-34d2-acb5-21e2c15b4a73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl X509v3 Authority Key Identifier: keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer sbgp-ipAddrBlock: critical IPv4: 208.114.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6f:fe:50:c3:fb:5e:06:6c:d6:c6:e4:19:ef:4b:43:ca:62: 5b:d9:00:95:89:6b:24:31:74:1e:4c:63:d7:0f:0d:85:52:00: a8:8a:51:dc:ae:23:65:8c:b5:47:bd:8a:ee:a0:e9:9f:f9:38: bf:91:ad:8b:d1:2d:42:e2:7d:7c:b1:03:6b:b3:20:b9:69:c5: c5:3e:25:18:89:c2:b6:92:49:29:23:f1:ad:b2:bd:a2:95:38: fb:92:33:d2:d2:83:b0:d0:12:c7:69:22:c6:62:74:57:3b:44: d2:f6:c1:96:d2:37:84:66:ad:8e:8c:b6:89:3c:4d:69:6c:67: ff:4d:4e:03:2e:88:4b:41:dc:2b:e8:6e:7c:68:ae:f8:b3:29: c7:06:e8:fd:03:be:0c:a5:3d:49:6a:ea:49:95:dc:97:36:49: b6:59:d0:97:95:a1:89:db:b2:40:bb:03:48:c0:07:40:49:89: 74:c7:d8:fb:6e:9f:58:8c:1d:9c:4d:37:f4:65:be:f4:40:c2: 29:f6:5e:c7:48:ee:0b:36:85:9e:fa:f6:a5:c0:a5:96:49:b0: 28:c1:6c:30:7c:c0:ae:42:00:0b:b1:95:91:ec:76:2e:eb:c9: 09:7f:ba:b6:d7:54:47:87:fa:b7:48:75:fb:0d:d2:a9:fb:fe: 33:f9:00:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMenZCYrh4F0hgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZkZWUzZjgtZTM2OC00NWVhLTlhMGEtMDMzYzU5MWI0 OTcxMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk YjdlYzUxMzctM2RkZi00YTFlLWEyNmYtYzVmMzNmNjUzM2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofxwF3jDl6DtlTillptLLBZZNF/pDM5tEp3m yoRuCGSS5gKLUc5NAlXn3qJQ1OGZFowGm7EgG20GeLAFYB63Gc+JoI/7AJu8Q1eu E9cF1TI7omypvgJbbxl/aCuRsxYR5unPzsWEa5VVwnJ5W32XfNvp7D5JXtGAHQ1/ 7y4PxNRG2pNeOPxjJiq9GYrcwHQpNH0EVbPZFaINSrtRatLGN3U727GyhSZjfq6l k3Akb8NBbYDBWi+DrEpHf1L9VYdyUE4S23Gc4W/OJExKN8jOjCU/Bg/6mA6IXsix m4sYfVrdDHU+ctpbKLvD1MQ2IpaYeate4lchFqvpS+YNAtaiGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL01I0iIMgSeSpinJqOxcFOELbdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRl ZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNjNTkxYjQ5NzEvNjRiZWM2MmMtM2U2YS0z NGQyLWFjYjUtMjFlMmMxNWI0YTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmZkZWUzZjgtZTM2OC00NWVhLTlh MGEtMDMzYzU5MWI0OTcxL2ZmZGVlM2Y4LWUzNjgtNDVlYS05YTBhLTAzM2M1OTFi NDk3MS5jcmwwHwYDVR0jBBgwFoAUozvxxshhdA6a/HFRB4QVpwaz2l8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mZmRlZTNmOC1lMzY4LTQ1ZWEtOWEwYS0wMzNj NTkxYjQ5NzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhv/lDD+14GbNbG5BnvS0PKYlvZAJWJayQxdB5MY9cPDYVSAKiKUdyu I2WMtUe9iu6g6Z/5OL+RrYvRLULifXyxA2uzILlpxcU+JRiJwraSSSkj8a2yvaKV OPuSM9LSg7DQEsdpIsZidFc7RNL2wZbSN4RmrY6Mtok8TWlsZ/9NTgMuiEtB3Cvo bnxorvizKccG6P0DvgylPUlq6kmV3Jc2SbZZ0JeVoYnbskC7A0jAB0BJiXTH2Ptu n1iMHZxNN/RlvvRAwin2XsdI7gs2hZ769qXApZZJsCjBbDB8wK5CAAuxlZHsdi7r yQl/urbXVEeH+rdIdfsN0qn7/jP5AFE= -----END CERTIFICATE-----Generated at Fri Sep 11 03:52:04 2026 by rpki-client