$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa File: 20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa (raw, json) Hash identifier: KexMtIhPZ+mFRlE7hSc7bwd2ifji4j42Nfy5z1NzWf8= Subject key identifier: 9D:0A:97:FD:CF:15:5B:8D:70:AD:43:1F:0A:96:B4:15:CB:EC:D0:D6 Certificate issuer: /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Certificate serial: 010D0C9F4328584EE7BCA02A587BF403AEAB8F80 Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 36329 IP address blocks: 64.58.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:a0:2a:58:7b:f4:03:ae:ab:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=8e2bea0c-49b4-473d-a317-93d8e7109de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:33:6e:8d:0f:db:6d:88:59:9e:24:6d:26:dd: 20:d9:68:a7:e0:0d:73:d4:ae:a5:53:d6:81:b0:51: 10:37:e6:e5:3f:87:fd:50:aa:5a:08:6f:af:10:70: db:89:12:4e:4f:2b:42:3c:1b:fe:cb:f1:e6:9f:55: c2:94:9e:8f:e9:90:3d:4c:bf:83:98:50:b8:59:41: cd:da:5f:d1:fb:d4:32:6a:1b:d0:8f:08:01:89:72: 77:74:8d:2f:54:11:9f:84:00:13:88:69:b5:79:b3: 65:11:59:b5:cc:2d:b3:5f:1f:70:26:2d:f5:81:2f: 4e:c4:5a:3f:53:f7:c9:b7:82:c1:bf:4e:bb:32:f3: 7d:5f:90:b4:23:de:da:0d:56:a0:51:9c:97:2f:d5: e1:05:bb:7b:a4:6a:46:f3:df:35:8c:95:8c:ea:9c: 67:09:f1:ed:ac:11:4d:f6:e5:88:52:5f:f7:fc:e2: be:fc:b1:f8:e9:e7:ef:ce:15:b9:88:b6:5d:8d:20: 4c:e8:01:d9:4b:4d:c6:8b:15:01:c5:95:ca:50:aa: 97:74:d2:ff:9b:d3:ca:46:08:55:d8:9a:03:cb:32: 8c:f6:c7:bd:bb:dd:9d:ec:99:a1:45:ec:32:3b:cc: 9c:59:8b:3a:82:c3:9d:36:ac:1b:17:b9:6d:c8:87: dc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:0A:97:FD:CF:15:5B:8D:70:AD:43:1F:0A:96:B4:15:CB:EC:D0:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl X509v3 Authority Key Identifier: keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer sbgp-ipAddrBlock: critical IPv4: 64.58.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6c:f9:f3:6b:37:4d:26:7b:66:0d:93:6a:88:fe:89:ba:a1: 28:69:ef:63:c9:7d:cc:4b:67:53:4e:f5:bd:2e:e6:77:e5:a4: 08:ab:f2:84:e2:3a:99:83:c8:6c:75:bf:43:0a:36:49:ff:b6: 6b:47:98:f3:31:a3:d5:4e:29:02:d9:d7:dd:b6:f9:e5:a3:35: 4e:7d:b4:58:44:47:d1:6a:99:0a:35:8e:bb:c4:ca:92:5b:ca: 37:07:43:cb:cb:00:95:d8:00:8e:e2:2c:5e:93:b8:52:6d:ff: 70:8d:ab:fd:4f:c7:2f:ef:8b:3e:d7:cb:c2:32:37:b2:6d:ca: bb:52:04:77:57:8d:a9:4b:48:90:27:ee:f2:bb:c7:31:6b:c4: 63:5e:80:c5:7b:9b:19:12:ad:f6:f9:3b:f8:dd:eb:8f:b9:54: df:62:f2:22:1d:39:b9:3f:e2:98:f9:d2:8c:20:6f:89:85:4f: 7d:63:e8:84:03:71:df:30:43:b0:f6:e2:c8:5c:e0:18:b6:74: 0f:28:0b:ff:0c:cd:34:5c:d6:04:fe:1a:23:30:bb:ef:4a:2d: d3:fa:b4:0b:5a:8f:0f:90:14:87:24:e9:a5:ec:0e:a5:9f:05: 9f:7b:36:7a:13:82:de:a0:4f:38:27:6c:4d:02:a2:9e:c5:fd: 82:e7:d9:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvKAqWHv0A66rj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVlMjkyODktNmYxYy00YzJmLTg0ZjQtYzk0NGU5ZTU0 OTQwMB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk OGUyYmVhMGMtNDliNC00NzNkLWEzMTctOTNkOGU3MTA5ZGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzNujQ/bbYhZniRtJt0g2Win4A1z1K6lU9aB sFEQN+blP4f9UKpaCG+vEHDbiRJOTytCPBv+y/Hmn1XClJ6P6ZA9TL+DmFC4WUHN 2l/R+9QyahvQjwgBiXJ3dI0vVBGfhAATiGm1ebNlEVm1zC2zXx9wJi31gS9OxFo/ U/fJt4LBv067MvN9X5C0I97aDVagUZyXL9XhBbt7pGpG8981jJWM6pxnCfHtrBFN 9uWIUl/3/OK+/LH46efvzhW5iLZdjSBM6AHZS03GixUBxZXKUKqXdNL/m9PKRghV 2JoDyzKM9se9u92d7JmhRewyO8ycWYs6gsOdNqwbF7ltyIfc6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0Kl/3PFVuNcK1DHwqWtBXL7NDWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUy OTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0ZTllNTQ5NDAvMjBlMjE1MjMtNzg2Ny0z ZTZkLWJkMmEtZjRiYTU1NThjZWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTVlMjkyODktNmYxYy00YzJmLTg0 ZjQtYzk0NGU5ZTU0OTQwLzk1ZTI5Mjg5LTZmMWMtNGMyZi04NGY0LWM5NDRlOWU1 NDk0MC5jcmwwHwYDVR0jBBgwFoAUTbpFqqu5h2Ol5m+zCcVulzCUmp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85NWUyOTI4OS02ZjFjLTRjMmYtODRmNC1jOTQ0 ZTllNTQ5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQDowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5s+fNrN00me2YNk2qI/om6oShp72PJfcxLZ1NO9b0u5nflpAir8oTi OpmDyGx1v0MKNkn/tmtHmPMxo9VOKQLZ1922+eWjNU59tFhER9FqmQo1jrvEypJb yjcHQ8vLAJXYAI7iLF6TuFJt/3CNq/1Pxy/viz7Xy8IyN7JtyrtSBHdXjalLSJAn 7vK7xzFrxGNegMV7mxkSrfb5O/jd64+5VN9i8iIdObk/4pj50owgb4mFT31j6IQD cd8wQ7D24shc4Bi2dA8oC/8MzTRc1gT+GiMwu+9KLdP6tAtajw+QFIck6aXsDqWf BZ97NnoTgt6gTzgnbE0Cop7F/YLn2ak= -----END CERTIFICATE-----Generated at Sat Aug 22 18:12:16 2026 by rpki-client