$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3e0111d4-fbc4-3d36-a9d2-f00bb4ff72b3.roa File: 3e0111d4-fbc4-3d36-a9d2-f00bb4ff72b3.roa (raw, json) Hash identifier: nRCxVdednRPMZpfnhx8+7FBMqzoHTwZ7Ked7eWTRkKw= Subject key identifier: 43:95:0A:53:F2:77:47:F5:16:D8:9C:CE:00:F2:9C:63:3B:2B:BE:B7 Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F4328584F6C58284AD4A959CFADCBD3C0 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3e0111d4-fbc4-3d36-a9d2-f00bb4ff72b3.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 12189 IP address blocks: 64.38.253.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:28:4a:d4:a9:59:cf:ad:cb:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=e58ea63b-17b6-4e03-a649-1c9e3c43049c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:96:09:45:9d:57:d1:63:da:a3:02:93:5f:6e: 06:ba:1f:71:2a:8f:bf:64:94:40:7b:c7:29:1e:b9: c4:d9:ac:c2:12:e1:34:c1:83:d6:1a:3a:09:c9:e9: 8d:08:3e:22:cd:57:23:d1:ff:6c:49:91:34:d7:b6: fc:7d:4f:19:54:c3:d6:97:94:92:bf:3d:d7:37:6d: 1c:6a:64:c6:1d:9b:62:a9:9d:81:0b:62:8d:53:1e: 01:2f:50:12:b2:b1:c7:d1:95:dc:68:0c:4a:42:12: f4:92:2b:e0:9f:c7:67:05:ed:2c:1e:d5:92:29:a1: 8f:be:c1:be:a7:8b:9d:a4:01:5f:84:1d:27:bb:29: 22:af:16:98:26:03:02:ca:ca:db:a0:97:c1:51:fb: 0b:f2:8a:01:9a:04:1f:a7:97:3b:65:34:78:a5:58: 04:cd:59:aa:30:f4:d4:f3:ac:2a:d5:70:ee:9b:99: bb:fb:5a:eb:b9:5a:18:f9:cb:dd:08:bc:5e:bf:51: 39:ba:e0:7e:bd:9f:79:f1:91:09:77:af:70:e1:be: 0f:d3:1b:f5:44:ff:ba:2d:b0:ec:04:4a:ba:44:45: 49:44:2d:0f:50:7b:ac:ed:38:6e:10:93:0b:3f:ea: f7:db:97:b4:44:92:b6:87:f4:08:da:07:02:35:3c: c0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:95:0A:53:F2:77:47:F5:16:D8:9C:CE:00:F2:9C:63:3B:2B:BE:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3e0111d4-fbc4-3d36-a9d2-f00bb4ff72b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:5e:40:47:22:dd:81:2b:b6:37:50:1e:4e:04:49:49:43:90: 8a:57:f2:ee:99:a1:7c:6b:44:db:a8:ad:92:5e:ee:ca:b6:8b: 29:0b:68:2d:0d:27:a4:71:14:4e:9b:4f:79:71:af:d4:78:3b: 73:0f:ba:25:e2:05:8d:75:06:9e:ee:ec:95:c3:a3:82:01:62: 88:24:dc:b3:34:ed:9c:1f:92:2e:93:a4:c5:bf:7f:ba:76:06: 44:dc:81:fa:0e:c9:e5:e6:d4:68:f1:b9:44:18:01:a7:7b:41: 30:8a:0c:dc:a6:74:c9:75:7f:55:72:52:39:97:c8:fd:d7:96: 1f:df:cf:b6:70:ce:c7:56:16:7b:19:f1:7e:cf:c9:e2:85:8c: ca:26:70:4e:22:3b:48:aa:04:93:26:ae:9e:47:e9:7b:e9:c3: 98:54:f0:49:58:c0:ea:83:78:99:68:5e:aa:f6:07:c0:11:fc: df:9f:1c:98:97:6a:fc:b4:80:7d:49:05:2c:2a:39:b5:d4:88: e9:29:33:80:08:7d:2c:01:fd:b1:68:fa:7d:66:87:df:7f:2f: c3:bb:a1:dc:cf:72:ca:06:6a:73:05:7f:13:d8:be:dd:be:92: 14:72:ae:82:6c:ad:b6:0c:de:2d:8b:8a:bf:86:4c:40:02:61: c5:2e:f1:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWChK1KlZz63L08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ZTU4ZWE2M2ItMTdiNi00ZTAzLWE2NDktMWM5ZTNjNDMwNDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopYJRZ1X0WPaowKTX24Guh9xKo+/ZJRAe8cp HrnE2azCEuE0wYPWGjoJyemNCD4izVcj0f9sSZE017b8fU8ZVMPWl5SSvz3XN20c amTGHZtiqZ2BC2KNUx4BL1ASsrHH0ZXcaAxKQhL0kivgn8dnBe0sHtWSKaGPvsG+ p4udpAFfhB0nuykirxaYJgMCysrboJfBUfsL8ooBmgQfp5c7ZTR4pVgEzVmqMPTU 86wq1XDum5m7+1rruVoY+cvdCLxev1E5uuB+vZ958ZEJd69w4b4P0xv1RP+6LbDs BEq6REVJRC0PUHus7ThuEJMLP+r325e0RJK2h/QI2gcCNTzA6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOVClPyd0f1FticzgDynGM7K763MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvM2UwMTExZDQtZmJjNC0z ZDM2LWE5ZDItZjAwYmI0ZmY3MmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCb9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGleQEci3YErtjdQHk4ESUlDkIpX8u6ZoXxrRNuorZJe7sq2iykLaC0N J6RxFE6bT3lxr9R4O3MPuiXiBY11Bp7u7JXDo4IBYogk3LM07Zwfki6TpMW/f7p2 BkTcgfoOyeXm1GjxuUQYAad7QTCKDNymdMl1f1VyUjmXyP3Xlh/fz7ZwzsdWFnsZ 8X7PyeKFjMomcE4iO0iqBJMmrp5H6Xvpw5hU8ElYwOqDeJloXqr2B8AR/N+fHJiX avy0gH1JBSwqObXUiOkpM4AIfSwB/bFo+n1mh99/L8O7odzPcsoGanMFfxPYvt2+ khRyroJsrbYM3i2Lir+GTEACYcUu8UM= -----END CERTIFICATE-----Generated at Thu Oct 8 16:33:50 2026 by rpki-client