$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/38816525-f76c-3e16-8adf-85bf0e745f4e.roa File: 38816525-f76c-3e16-8adf-85bf0e745f4e.roa (raw, json) Hash identifier: I+/Dc5GusJf7i2H3wEFhLYAkOBbD+TAl9o6pK4H2DBs= Subject key identifier: 42:25:05:EE:AF:11:FB:3D:07:0C:36:64:5B:B3:C8:4A:CD:E0:CB:81 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F89A84D89D8952CBBCFB619C0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/38816525-f76c-3e16-8adf-85bf0e745f4e.roa Signing time: Sun 18 Oct 2026 01:00:13 +0000 ROA not before: Sun 18 Oct 2026 01:00:13 +0000 ROA not after: Sat 16 Jan 2027 02:00:13 +0000 asID: 852 IP address blocks: 65.7.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:a8:4d:89:d8:95:2c:bb:cf:b6:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Oct 18 01:00:13 2026 GMT Not After : Jan 16 02:00:13 2027 GMT Subject: CN=2a0b25d0-d4ea-4cf2-83ac-e1e5be76a9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9d:e3:c3:ab:ab:12:24:f8:3b:0f:df:f7:ad: 38:48:12:90:2a:40:09:25:26:f7:76:ae:26:35:8a: 1e:47:43:29:aa:e5:0f:28:5a:dc:80:02:c9:74:5d: ee:d4:3b:5b:34:0d:1e:1e:1f:63:1d:77:f2:53:52: 32:08:c4:33:55:82:50:c6:7b:c1:1a:1d:47:d8:5a: b9:cd:d4:87:1d:1b:3b:2c:bf:f2:5f:7a:e8:41:9a: a5:f5:8d:30:5e:ed:3d:82:53:a5:5c:83:b7:01:fb: 6e:cd:27:e1:00:01:07:bb:f3:00:c3:f6:22:ff:01: a1:cf:4c:bd:40:55:c1:4f:6d:dc:91:51:d4:29:1f: 75:25:d3:16:fe:3e:cc:30:8c:fe:f7:d0:ac:24:1e: b2:8f:7d:fe:1b:b8:8b:27:a4:14:ed:5b:4f:9a:17: 6d:a7:cc:39:32:8c:f1:a5:2c:05:9e:e3:34:9d:42: 07:aa:2c:cd:fc:6e:21:2b:3d:86:b8:3d:b6:97:2d: 66:01:b0:78:3d:20:c8:56:71:f1:b0:4a:0c:a8:70: 99:24:35:4a:e6:d1:d1:96:62:27:8f:9b:9e:60:4b: 9e:a8:0f:d5:64:94:60:f4:a4:9b:b2:fc:ac:11:36: 01:70:94:9f:58:97:d0:82:de:f0:74:9a:55:48:c5: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:25:05:EE:AF:11:FB:3D:07:0C:36:64:5B:B3:C8:4A:CD:E0:CB:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/38816525-f76c-3e16-8adf-85bf0e745f4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 65.7.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:1a:22:1d:b0:1d:b6:ff:6e:34:90:e8:5a:b3:5d:77:76:c7: d1:da:0d:66:92:61:c9:1a:79:c8:fa:a7:4a:fb:0c:53:c0:50: e0:9d:66:16:59:10:e4:3b:dc:e3:1b:2a:cc:9f:d6:bf:ad:f6: 20:e9:a0:7d:51:c9:95:2e:1d:f8:a7:9e:99:f4:87:28:8a:0a: e6:43:71:e3:92:50:56:7c:90:7b:e5:57:88:ba:ea:e2:e3:f6: 69:91:e4:a0:58:3d:86:27:9a:e9:be:3e:0b:ce:1e:3a:b7:4d: 92:f8:ca:94:b6:ab:d3:22:3d:44:48:b8:0c:a1:be:76:a5:96: 86:05:ae:0c:50:fd:1c:13:42:1d:fc:f6:aa:c7:9f:c9:4f:89: 9f:e3:d8:06:41:d3:ca:1b:a7:68:3b:af:b8:af:62:6d:cb:01: 98:de:45:27:92:f3:10:87:ea:25:80:28:43:5f:f9:6c:12:78: c3:58:02:d1:58:1b:16:54:ab:8f:91:ae:cb:89:53:43:cf:3e: 44:c7:65:02:a1:02:48:ee:6b:9b:ff:8a:3a:1d:67:dc:6c:33: 8a:55:0a:90:8b:1f:85:22:18:4f:70:a2:2c:ba:95:97:74:dd: 7b:d5:7a:7c:45:d8:ed:82:48:61:1e:5e:cd:64:75:27:5f:d3: 9d:a1:2b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqE2J2JUsu8+2GcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk MmEwYjI1ZDAtZDRlYS00Y2YyLTgzYWMtZTFlNWJlNzZhOWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn53jw6urEiT4Ow/f9604SBKQKkAJJSb3dq4m NYoeR0MpquUPKFrcgALJdF3u1DtbNA0eHh9jHXfyU1IyCMQzVYJQxnvBGh1H2Fq5 zdSHHRs7LL/yX3roQZql9Y0wXu09glOlXIO3AftuzSfhAAEHu/MAw/Yi/wGhz0y9 QFXBT23ckVHUKR91JdMW/j7MMIz+99CsJB6yj33+G7iLJ6QU7VtPmhdtp8w5Mozx pSwFnuM0nUIHqizN/G4hKz2GuD22ly1mAbB4PSDIVnHxsEoMqHCZJDVK5tHRlmIn j5ueYEueqA/VZJRg9KSbsvysETYBcJSfWJfQgt7wdJpVSMWBwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIlBe6vEfs9Bww2ZFuzyErN4MuBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzg4MTY1MjUtZjc2Yy0z ZTE2LThhZGYtODViZjBlNzQ1ZjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQQdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUaIh2wHbb/bjSQ6FqzXXd2x9HaDWaSYckaecj6p0r7DFPAUOCdZhZZ EOQ73OMbKsyf1r+t9iDpoH1RyZUuHfinnpn0hyiKCuZDceOSUFZ8kHvlV4i66uLj 9mmR5KBYPYYnmum+PgvOHjq3TZL4ypS2q9MiPURIuAyhvnalloYFrgxQ/RwTQh38 9qrHn8lPiZ/j2AZB08obp2g7r7ivYm3LAZjeRSeS8xCH6iWAKENf+WwSeMNYAtFY GxZUq4+RrsuJU0PPPkTHZQKhAkjua5v/ijodZ9xsM4pVCpCLH4UiGE9woiy6lZd0 3XvVenxF2O2CSGEeXs1kdSdf052hK5Q= -----END CERTIFICATE-----Generated at Sat Oct 31 12:45:02 2026 by rpki-client