$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7c541232-f9bf-31a7-938c-fd61c70d5047.roa File: 7c541232-f9bf-31a7-938c-fd61c70d5047.roa (raw, json) Hash identifier: bCC+Z9phQ0EmLi9rUDljZqoIYtNgw2SJNc2imzXPW3E= Subject key identifier: 64:33:6D:1C:0B:D6:6F:67:D0:1A:D3:67:45:91:BD:38:FC:8B:D4:37 Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b Certificate serial: 010D0C9F4328584EE7BCA92336A7EE941A65BCC0 Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7c541232-f9bf-31a7-938c-fd61c70d5047.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 11260 IP address blocks: 24.138.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:a9:23:36:a7:ee:94:1a:65:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=3e0617dc-2004-4dbf-a390-bd197e2c7d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:29:82:ed:8c:96:92:e5:df:81:98:3e:aa:c9: 50:4e:c4:d5:56:e6:0f:1f:23:fc:c1:87:98:f3:3e: 5d:41:d5:e5:61:0b:3b:60:88:9d:14:5e:01:00:20: 45:69:85:54:c2:01:ba:35:61:88:b3:a4:07:dd:98: b5:8f:6c:02:af:87:34:65:f9:5a:b9:9b:77:ba:cf: f8:f6:21:e8:b9:f4:a8:3d:4f:10:6e:4e:d4:43:53: 16:b7:22:03:05:62:74:d0:a8:46:cd:47:78:05:6d: 0b:c0:e2:1d:11:f0:d4:b6:18:4f:e4:7c:2c:58:24: 26:1f:5b:43:7b:7c:29:2a:1c:61:95:de:d5:ad:41: 69:19:2a:0e:18:8d:93:c9:7d:c6:64:13:4e:78:e9: 70:d8:57:8a:3a:c0:00:44:63:10:85:70:54:4e:45: 07:d6:97:be:f8:17:cf:92:5c:c5:be:35:6b:5e:e5: 52:02:6e:b0:b0:83:08:4b:6e:87:e4:6f:60:b6:78: 3a:a3:e6:bd:76:e7:f7:f3:32:cf:f0:13:c4:46:f2: 58:2c:57:79:4d:be:4a:d4:15:5b:27:91:88:da:a2: f1:db:d9:cc:de:f3:b5:77:56:69:25:ca:da:fc:ed: fb:50:c3:c9:c7:09:9c:39:08:80:41:2f:9c:29:86: d7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:33:6D:1C:0B:D6:6F:67:D0:1A:D3:67:45:91:BD:38:FC:8B:D4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7c541232-f9bf-31a7-938c-fd61c70d5047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl X509v3 Authority Key Identifier: keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer sbgp-ipAddrBlock: critical IPv4: 24.138.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:35:e5:44:d0:d2:9e:b7:b3:f2:43:1a:56:52:b3:19:01:82: 60:75:b2:9b:b1:f0:9b:80:bc:d3:9d:89:07:a3:b8:2f:ab:a8: fe:a9:f1:ba:21:a7:4c:ab:eb:cc:1f:95:15:4d:2a:27:25:e8: a2:fc:20:cc:27:a6:09:2c:4d:21:67:09:14:62:32:2c:52:17: 51:03:9c:92:66:e9:f7:d8:38:8f:33:0e:7d:d6:23:f6:f9:5e: a0:8d:2b:24:46:91:ad:c9:2f:09:34:e5:ca:b2:a9:50:08:31: d7:ad:f0:0c:c3:98:4c:0d:3b:2e:43:4a:7c:f8:dd:74:3e:19: ef:f4:9a:52:4b:17:f2:16:2d:95:cb:eb:47:e2:07:30:ab:24: 4b:7b:f7:c9:5e:cd:ca:ed:11:37:70:1c:92:69:77:3c:45:fe: a7:41:9b:8f:df:b3:70:c1:af:2a:84:04:65:69:a0:84:b9:ec: 71:ac:a3:e4:bb:39:2c:3c:c8:4f:aa:c7:71:a7:44:dc:8a:13: 60:63:c4:ff:14:87:45:84:e0:07:09:6f:86:b0:f7:23:4b:77: d4:66:ba:63:e6:3f:f3:ae:87:4d:c6:6b:25:12:e3:f8:dd:9f: b1:36:57:69:ee:c3:e8:bf:cd:99:55:0d:68:07:0a:20:a6:f4: c0:d7:c6:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvKkjNqfulBplvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlhODBkYTgtNjllMS00NTgwLWFiNjMtMWNlMjNiZWE4 OTViMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk M2UwNjE3ZGMtMjAwNC00ZGJmLWEzOTAtYmQxOTdlMmM3ZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCmC7YyWkuXfgZg+qslQTsTVVuYPHyP8wYeY 8z5dQdXlYQs7YIidFF4BACBFaYVUwgG6NWGIs6QH3Zi1j2wCr4c0ZflauZt3us/4 9iHoufSoPU8Qbk7UQ1MWtyIDBWJ00KhGzUd4BW0LwOIdEfDUthhP5HwsWCQmH1tD e3wpKhxhld7VrUFpGSoOGI2TyX3GZBNOeOlw2FeKOsAARGMQhXBUTkUH1pe++BfP klzFvjVrXuVSAm6wsIMIS26H5G9gtng6o+a9duf38zLP8BPERvJYLFd5Tb5K1BVb J5GI2qLx29nM3vO1d1ZpJcra/O37UMPJxwmcOQiAQS+cKYbXxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQzbRwL1m9n0BrTZ0WRvTj8i9Q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4 MGRhOC02OWUxLTQ1ODAtYWI2My0xY2UyM2JlYTg5NWIvN2M1NDEyMzItZjliZi0z MWE3LTkzOGMtZmQ2MWM3MGQ1MDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjlhODBkYTgtNjllMS00NTgwLWFi NjMtMWNlMjNiZWE4OTViLzY5YTgwZGE4LTY5ZTEtNDU4MC1hYjYzLTFjZTIzYmVh ODk1Yi5jcmwwHwYDVR0jBBgwFoAUhqiB3KYHVFZrTqUs0M1hUuvpHc8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82OWE4MGRhOC02OWUxLTQ1ODAtYWI2My0xY2Uy M2JlYTg5NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGIpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk15UTQ0p63s/JDGlZSsxkBgmB1spux8JuAvNOdiQejuC+rqP6p8boh p0yr68wflRVNKicl6KL8IMwnpgksTSFnCRRiMixSF1EDnJJm6ffYOI8zDn3WI/b5 XqCNKyRGka3JLwk05cqyqVAIMdet8AzDmEwNOy5DSnz43XQ+Ge/0mlJLF/IWLZXL 60fiBzCrJEt798lezcrtETdwHJJpdzxF/qdBm4/fs3DBryqEBGVpoIS57HGso+S7 OSw8yE+qx3GnRNyKE2BjxP8Uh0WE4AcJb4aw9yNLd9RmumPmP/Ouh03GayUS4/jd n7E2V2nuw+i/zZlVDWgHCiCm9MDXxt0= -----END CERTIFICATE-----Generated at Sat Sep 5 16:10:52 2026 by rpki-client