$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa File: afdbac6f-debc-393d-952e-f803e27af2c1.roa (raw, json) Hash identifier: nCOBMeCVcLcCdLPtZwLWOO3gsXLPQR5hF/aYthGmt0c= Subject key identifier: 29:DE:A5:85:1B:AA:BF:D2:3F:49:4D:78:5D:5E:B3:E1:00:6F:26:20 Certificate issuer: /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Certificate serial: 010D0C9F4328584F0D6CE11F682FFF698E6EABA0 Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 53828 IP address blocks: 64.191.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e1:1f:68:2f:ff:69:8e:6e:ab:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=70be4418-b710-413d-8781-ba0438766ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e8:6e:8a:dc:9d:c5:2c:89:c0:c7:0d:1e:dc: ca:1c:f6:24:9c:66:9d:40:10:f9:5f:f8:b1:e7:cd: 76:7a:cb:81:de:cd:8c:6e:82:32:d4:1f:d1:52:ec: ea:62:6c:45:c0:6a:c8:f2:e5:6d:f3:15:93:55:30: ac:cf:76:f9:e6:a3:32:05:d6:20:ba:7c:a8:db:ad: 76:79:af:c5:c8:7c:a1:9a:16:e8:ce:38:a8:4a:f7: b8:6b:f0:83:83:85:ba:8a:21:94:84:d0:9a:c0:d1: 61:26:7b:1c:9e:2b:9d:2c:26:ce:ab:92:8c:69:41: 17:4c:0b:5b:72:a0:70:aa:c9:73:63:47:e7:57:63: 21:a8:1c:25:61:56:3e:9e:83:01:51:51:57:a7:6f: a8:1c:92:f8:61:94:4a:85:ee:67:f4:a8:62:1f:f6: 7b:58:f9:57:5c:6c:85:f8:1e:38:fb:71:ee:05:97: 5b:44:4f:10:f4:3a:f5:cd:b8:f2:a2:f3:de:60:ed: 56:96:7f:bc:b8:b8:b5:15:62:90:2c:00:df:84:56: 3b:f4:f4:a1:4e:c3:b7:a3:91:9d:e9:e0:09:dc:1f: b2:cf:a6:48:af:ef:7b:f3:5c:76:0a:38:24:88:47: d3:a9:df:06:79:1f:c9:60:18:11:4a:b4:66:c4:33: ca:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DE:A5:85:1B:AA:BF:D2:3F:49:4D:78:5D:5E:B3:E1:00:6F:26:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/afdbac6f-debc-393d-952e-f803e27af2c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl X509v3 Authority Key Identifier: keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer sbgp-ipAddrBlock: critical IPv4: 64.191.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:24:da:c9:e3:43:47:36:15:49:20:91:e0:93:8e:ca:23:f2: 13:cd:76:53:ac:c7:fc:48:9f:ff:8d:89:f8:df:cc:b0:e1:67: 42:d4:33:74:49:24:bf:ca:12:a3:0b:53:89:1b:d8:84:b0:a2: f0:5a:b0:24:dd:b6:10:3b:07:68:d7:d7:35:1b:42:0b:70:3e: 97:e8:48:98:4c:81:ad:a2:8a:df:ac:4a:64:05:06:f1:c9:81: f3:7d:50:36:19:fc:c0:35:38:cb:87:c9:37:ac:73:ca:de:c9: ad:ec:c2:ca:6a:b8:d6:fe:bd:83:0e:88:2d:1c:f4:70:0e:80: c3:a6:95:9f:88:bc:c0:ba:57:1b:db:66:6c:8b:a6:f9:24:88: 21:39:70:6d:53:c0:a6:88:b0:c2:79:8a:3e:e8:87:41:19:72: d5:b7:49:15:36:91:e0:0e:34:20:80:df:db:f5:97:c7:7c:49: e4:8d:64:39:52:bb:85:ae:8d:04:0d:ae:3d:af:a3:28:8d:4d: de:88:31:87:79:b3:74:63:ee:eb:62:68:1f:2d:6a:71:c9:f5: 99:79:e1:e3:b0:01:c4:71:58:22:4a:4e:53:fd:c2:98:4f:1a: c7:5c:02:e1:4e:97:3e:aa:5e:2f:44:fc:fe:60:56:eb:02:27: e1:af:12:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOEfaC//aY5uq6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyN2JjNTUtYjA0MS00N2NkLTg0ZWItZjNlOTcwN2Fj ZmYxMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk NzBiZTQ0MTgtYjcxMC00MTNkLTg3ODEtYmEwNDM4NzY2YWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuhuitydxSyJwMcNHtzKHPYknGadQBD5X/ix 5812esuB3s2MboIy1B/RUuzqYmxFwGrI8uVt8xWTVTCsz3b55qMyBdYgunyo2612 ea/FyHyhmhbozjioSve4a/CDg4W6iiGUhNCawNFhJnscniudLCbOq5KMaUEXTAtb cqBwqslzY0fnV2MhqBwlYVY+noMBUVFXp2+oHJL4YZRKhe5n9KhiH/Z7WPlXXGyF +B44+3HuBZdbRE8Q9Dr1zbjyovPeYO1Wln+8uLi1FWKQLADfhFY79PShTsO3o5Gd 6eAJ3B+yz6ZIr+9781x2CjgkiEfTqd8GeR/JYBgRSrRmxDPKZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnepYUbqr/SP0lNeF1es+EAbyYgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3 YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5NzA3YWNmZjEvYWZkYmFjNmYtZGViYy0z OTNkLTk1MmUtZjgwM2UyN2FmMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGMyN2JjNTUtYjA0MS00N2NkLTg0 ZWItZjNlOTcwN2FjZmYxLzBjMjdiYzU1LWIwNDEtNDdjZC04NGViLWYzZTk3MDdh Y2ZmMS5jcmwwHwYDVR0jBBgwFoAUxGYN+fPG33iLV0S/f1yezNk2Bp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYzI3YmM1NS1iMDQxLTQ3Y2QtODRlYi1mM2U5 NzA3YWNmZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQL9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIck2snjQ0c2FUkgkeCTjsoj8hPNdlOsx/xIn/+NifjfzLDhZ0LUM3RJ JL/KEqMLU4kb2ISwovBasCTdthA7B2jX1zUbQgtwPpfoSJhMga2iit+sSmQFBvHJ gfN9UDYZ/MA1OMuHyTesc8reya3swspquNb+vYMOiC0c9HAOgMOmlZ+IvMC6Vxvb ZmyLpvkkiCE5cG1TwKaIsMJ5ij7oh0EZctW3SRU2keAONCCA39v1l8d8SeSNZDlS u4WujQQNrj2voyiNTd6IMYd5s3Rj7utiaB8tanHJ9Zl54eOwAcRxWCJKTlP9wphP GsdcAuFOlz6qXi9E/P5gVusCJ+GvEj0= -----END CERTIFICATE-----Generated at Mon Oct 12 03:04:33 2026 by rpki-client