$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/297e0a0c-c0b4-3a4e-ad78-2d888a963b5f.roa File: 297e0a0c-c0b4-3a4e-ad78-2d888a963b5f.roa (raw, json) Hash identifier: vJi9lOQHlQPAPwFwOW0q2KmzBxdCBgGpCcNZAsKhCvA= Subject key identifier: 5C:66:03:DF:E2:CB:98:58:3A:71:38:9E:A1:00:79:B5:9F:71:3F:36 Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584F37CF3996A45D8F1642908D00 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/297e0a0c-c0b4-3a4e-ad78-2d888a963b5f.roa Signing time: Fri 18 Sep 2026 17:22:26 +0000 ROA not before: Fri 18 Sep 2026 17:22:26 +0000 ROA not after: Thu 17 Dec 2026 18:22:26 +0000 asID: 64267 IP address blocks: 64.69.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:cf:39:96:a4:5d:8f:16:42:90:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Sep 18 17:22:26 2026 GMT Not After : Dec 17 18:22:26 2026 GMT Subject: CN=fcc539de-a628-473a-b83e-ec4827dc1492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:c8:d7:21:ce:9c:42:16:33:40:ec:64:2e: 20:91:48:1f:01:a4:e9:10:1b:21:97:9f:ef:c7:3b: 72:0b:72:b5:47:e1:26:95:70:7e:7a:a5:ce:ef:70: 34:5e:6e:4d:fa:c2:16:6d:fe:4d:8c:95:14:9d:2b: cd:48:5e:40:77:5e:cc:0e:53:70:49:3d:b9:a8:a1: 4e:08:2a:87:f9:4b:2d:da:b0:99:68:7c:a5:8e:dc: 4e:96:5d:c1:92:f9:67:25:47:9a:c0:39:8c:bd:32: 87:dd:17:ad:55:a8:83:6b:86:c9:c6:70:05:ea:7e: 57:68:d9:c8:c2:5c:4d:65:c1:4c:7e:d4:f8:94:7f: de:80:0e:c8:7b:27:04:8e:87:66:c9:44:4c:e6:2d: f6:fe:43:9d:e1:cd:49:35:b7:cb:cc:cb:2a:dd:da: b6:b4:7c:16:0e:87:13:bc:17:6a:e6:b7:71:4d:0a: c7:d3:ca:eb:2f:43:87:f2:90:91:6e:50:92:c4:65: 0a:66:21:c7:d6:ba:0b:05:07:e2:25:90:39:93:be: bf:63:84:07:d2:22:95:41:5f:6b:a7:8f:c9:11:95: fb:40:27:63:7d:83:85:96:0e:10:23:7a:49:67:48: 53:8d:a2:9b:2c:d0:80:53:1e:9e:07:14:e2:95:1f: fd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:66:03:DF:E2:CB:98:58:3A:71:38:9E:A1:00:79:B5:9F:71:3F:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/297e0a0c-c0b4-3a4e-ad78-2d888a963b5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 64.69.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fa:dc:63:de:8a:d4:43:f4:2f:04:64:18:3e:e0:db:d8:75: 34:32:c5:7a:c8:70:c8:61:66:89:44:b6:88:69:df:66:81:4b: 65:eb:28:9d:92:68:94:10:63:8b:b4:4d:0c:1e:41:43:c2:c2: af:ed:99:8d:bc:89:4a:74:76:0f:ce:3c:e2:a3:f6:43:ee:25: 4b:34:51:fa:b2:33:88:ad:21:6d:21:82:9f:c4:6e:fc:ba:80: 37:fa:43:8d:46:4c:b4:87:1b:a3:1a:28:ee:2e:37:9c:b4:81: b4:5b:cc:9f:39:1f:06:3b:39:0e:d0:67:36:3d:45:fc:27:55: da:45:4b:51:8c:20:41:e3:22:da:4e:38:a9:f9:be:5c:a2:3c: f7:71:5f:5e:19:bf:f7:ac:1a:57:94:74:40:11:63:d4:1b:cf: 3b:04:47:2f:fa:7b:a5:57:39:b0:13:71:da:41:39:f4:42:d8: d4:4e:ad:d1:07:7f:69:6c:36:be:55:bc:17:f4:7f:38:3e:27: 8c:68:61:76:c8:4a:9f:27:1c:0e:a5:ec:8a:4e:31:5e:c4:b9: 2d:9a:5a:2d:a1:9a:a1:73:62:30:c2:99:8e:6e:d8:f4:25:4e: 61:b2:7c:fd:0e:43:a9:36:c2:ba:12:df:c9:5b:71:ad:0e:9b: f4:c8:a8:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83zzmWpF2PFkKQjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MDkxODE3MjIyNloXDTI2MTIxNzE4MjIyNlowLzEtMCsGA1UEAxMk ZmNjNTM5ZGUtYTYyOC00NzNhLWI4M2UtZWM0ODI3ZGMxNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosvI1yHOnEIWM0DsZC4gkUgfAaTpEBshl5/v xztyC3K1R+EmlXB+eqXO73A0Xm5N+sIWbf5NjJUUnSvNSF5Ad17MDlNwST25qKFO CCqH+Ust2rCZaHyljtxOll3BkvlnJUeawDmMvTKH3RetVaiDa4bJxnAF6n5XaNnI wlxNZcFMftT4lH/egA7IeycEjodmyURM5i32/kOd4c1JNbfLzMsq3dq2tHwWDocT vBdq5rdxTQrH08rrL0OH8pCRblCSxGUKZiHH1roLBQfiJZA5k76/Y4QH0iKVQV9r p4/JEZX7QCdjfYOFlg4QI3pJZ0hTjaKbLNCAUx6eBxTilR/9VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxmA9/iy5hYOnE4nqEAebWfcT82MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMjk3ZTBhMGMtYzBiNC0z YTRlLWFkNzgtMmQ4ODhhOTYzYjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEV7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF363GPeitRD9C8EZBg+4NvYdTQyxXrIcMhhZolEtohp32aBS2XrKJ2S aJQQY4u0TQweQUPCwq/tmY28iUp0dg/OPOKj9kPuJUs0UfqyM4itIW0hgp/Ebvy6 gDf6Q41GTLSHG6MaKO4uN5y0gbRbzJ85HwY7OQ7QZzY9RfwnVdpFS1GMIEHjItpO OKn5vlyiPPdxX14Zv/esGleUdEARY9QbzzsERy/6e6VXObATcdpBOfRC2NROrdEH f2lsNr5VvBf0fzg+J4xoYXbISp8nHA6l7IpOMV7EuS2aWi2hmqFzYjDCmY5u2PQl TmGyfP0OQ6k2wroS38lbca0Om/TIqEY= -----END CERTIFICATE-----Generated at Sat Sep 19 22:43:46 2026 by rpki-client