$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ff23613f-b262-34dc-8e04-9c24922a8957.roa File: ff23613f-b262-34dc-8e04-9c24922a8957.roa (raw, json) Hash identifier: C9BVrgkSRiqo6oqh0xu37QIBbfz+nz23iM0JVnL/J9c= Subject key identifier: 83:5E:4A:49:C2:8F:F5:AF:B0:7A:04:D7:FD:62:38:1F:D6:E6:76:2D Certificate issuer: /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Certificate serial: 010D0C9F4328584F8F3DB85437F9E79739BCB700 Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ff23613f-b262-34dc-8e04-9c24922a8957.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 20454 IP address blocks: 64.38.244.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b8:54:37:f9:e7:97:39:bc:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=d5e71423-0024-4f01-9fc9-771a12e0bcd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3b:d9:c0:13:e4:99:a7:47:7b:01:16:df:6d: 7b:7f:c2:d0:e0:d2:27:e8:3b:64:a1:e3:6b:f8:17: 8f:24:38:47:b9:36:d3:1a:ef:56:fd:53:8a:60:77: 71:48:a9:b9:d4:ac:9d:03:ba:15:b1:e0:1d:b8:b7: ad:8e:2c:5a:e2:9a:65:35:c3:03:32:8f:04:d9:bc: 90:67:16:f5:5d:b5:d3:e5:8a:88:da:bd:de:c0:11: 1b:31:79:e3:d2:b7:3c:b7:9e:b0:4a:06:36:3a:09: d5:6d:0e:24:c9:49:45:91:e6:d9:85:72:d8:08:22: b9:26:4e:1c:8c:4b:e6:12:6e:dd:71:90:7b:58:e2: eb:d4:ec:02:9a:a6:58:e3:fc:ce:26:dd:d6:c4:70: 63:ac:62:ba:a2:05:f9:ca:52:1d:99:2c:ec:97:17: fd:b7:ae:fb:f8:e1:bd:70:ec:14:6c:b3:07:15:2c: 40:75:44:d3:bf:f9:d7:2c:e8:f2:9f:dc:24:44:60: 92:3e:25:1e:c9:63:69:fa:fd:1b:de:0b:39:f4:d9: 52:d0:c0:01:5e:e8:2f:7d:a5:d2:79:37:4c:8c:4b: 0b:06:d0:da:54:26:04:23:77:36:92:fb:35:cc:bc: 35:b1:6c:8d:9c:49:2d:8d:57:3b:b4:e2:7f:6f:38: 3c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5E:4A:49:C2:8F:F5:AF:B0:7A:04:D7:FD:62:38:1F:D6:E6:76:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/ff23613f-b262-34dc-8e04-9c24922a8957.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl X509v3 Authority Key Identifier: keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer sbgp-ipAddrBlock: critical IPv4: 64.38.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:95:d1:49:38:b4:51:29:86:06:00:52:6e:3b:59:57:d2:9a: c3:10:5b:08:47:59:2b:62:15:02:7d:79:18:46:cd:9e:64:26: 7e:90:e1:1f:5d:ef:41:3f:53:65:9f:4a:04:6f:85:85:79:5e: d4:55:0b:03:43:bb:8d:93:69:70:d3:d4:b4:ca:d0:82:a1:77: 73:b0:7d:00:61:f3:5a:ca:97:cf:5d:8e:ec:90:43:c7:07:49: 06:36:e5:d3:78:38:eb:f3:33:95:3c:8a:6b:57:9d:9b:99:78: 09:fc:6d:b0:20:45:f9:14:a5:ad:58:4d:45:0d:9d:b0:70:1a: 7f:bb:71:64:8a:c1:e1:c3:aa:96:38:9f:07:a2:e5:7f:d1:dd: 83:97:95:fc:ce:fa:8f:57:29:7c:86:c4:4f:87:06:c2:65:a3: 6b:14:c9:06:84:c1:cd:8f:e7:37:e2:53:42:f9:db:72:98:92: 24:bf:34:b1:20:a2:50:ed:ab:70:11:37:51:73:ae:f4:f7:0d: 37:5a:3a:46:9b:7f:9c:91:83:6e:1b:d4:7b:e7:89:88:dc:43: 95:89:5b:7d:2f:97:62:84:ca:d1:24:13:b7:50:05:03:67:3f: 18:12:80:3c:3b:8a:78:34:5b:06:21:bf:f1:22:c0:40:9b:66: a7:e4:1f:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPbhUN/nnlzm8twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi Mzk4MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk ZDVlNzE0MjMtMDAyNC00ZjAxLTlmYzktNzcxYTEyZTBiY2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDvZwBPkmadHewEW3217f8LQ4NIn6DtkoeNr +BePJDhHuTbTGu9W/VOKYHdxSKm51KydA7oVseAduLetjixa4pplNcMDMo8E2byQ Zxb1XbXT5YqI2r3ewBEbMXnj0rc8t56wSgY2OgnVbQ4kyUlFkebZhXLYCCK5Jk4c jEvmEm7dcZB7WOLr1OwCmqZY4/zOJt3WxHBjrGK6ogX5ylIdmSzslxf9t677+OG9 cOwUbLMHFSxAdUTTv/nXLOjyn9wkRGCSPiUeyWNp+v0b3gs59NlS0MABXugvfaXS eTdMjEsLBtDaVCYEI3c2kvs1zLw1sWyNnEktjVc7tOJ/bzg8MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINeSknCj/WvsHoE1/1iOB/W5nYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvZmYyMzYxM2YtYjI2Mi0z NGRjLThlMDQtOWMyNDkyMmE4OTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQCb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCV0Uk4tFEphgYAUm47WVfSmsMQWwhHWStiFQJ9eRhGzZ5kJn6Q4R9d 70E/U2WfSgRvhYV5XtRVCwNDu42TaXDT1LTK0IKhd3OwfQBh81rKl89djuyQQ8cH SQY25dN4OOvzM5U8imtXnZuZeAn8bbAgRfkUpa1YTUUNnbBwGn+7cWSKweHDqpY4 nwei5X/R3YOXlfzO+o9XKXyGxE+HBsJlo2sUyQaEwc2P5zfiU0L523KYkiS/NLEg olDtq3ARN1FzrvT3DTdaOkabf5yRg24b1HvniYjcQ5WJW30vl2KEytEkE7dQBQNn PxgSgDw7ing0WwYhv/EiwECbZqfkHy8= -----END CERTIFICATE-----Generated at Tue Oct 27 11:05:32 2026 by rpki-client