$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/3856ddeb-1a7b-3d87-9349-f60c0633eecf.roa File: 3856ddeb-1a7b-3d87-9349-f60c0633eecf.roa (raw, json) Hash identifier: KmpZLOIBWuyjgIigQXmedcFDcQyxv8YhbOUliO8sBe4= Subject key identifier: E0:BD:33:E5:B7:3F:2C:E4:B5:BC:8C:88:3C:01:96:CE:A2:B8:96:A0 Certificate issuer: /CN=829fa5a7-a3d5-4117-b578-3b0df4686c29 Certificate serial: 010D0C9F4328584EF5B2150B70CE75514BB6D200 Authority key identifier: 54:F8:C1:10:2B:9F:46:36:07:E2:9B:C9:F0:17:DF:21:75:D1:67:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/3856ddeb-1a7b-3d87-9349-f60c0633eecf.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 812 IP address blocks: 64.87.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/829fa5a7-a3d5-4117-b578-3b0df4686c29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/829fa5a7-a3d5-4117-b578-3b0df4686c29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:15:0b:70:ce:75:51:4b:b6:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=829fa5a7-a3d5-4117-b578-3b0df4686c29 Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=b944c780-aeaf-4ff5-9039-9908a1813609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ba:3c:11:28:4d:48:49:96:a8:56:70:65:7e: 91:e0:15:b4:59:8c:19:8a:75:f1:2c:2b:39:6b:d4: 7a:db:a3:21:db:bb:bf:cc:a9:37:38:0c:d4:28:0d: 6e:18:91:f5:9e:9f:5c:41:f5:f4:28:ed:51:8e:18: 22:bc:11:ef:64:c3:99:76:ed:d3:f2:2b:7a:94:86: cc:77:2a:ba:49:a2:b5:b4:25:22:0a:40:ab:3a:41: 0f:dd:ab:01:b3:eb:28:a2:cb:d1:38:20:ba:8d:f9: 62:fb:fb:48:fd:bc:51:9c:ee:cd:96:2d:c5:b1:03: 14:ff:4f:d8:60:48:2e:9e:b2:89:3d:24:ee:e9:a6: 08:93:89:70:67:8d:e5:68:59:a5:28:8a:0e:40:7e: 16:66:f8:67:27:3b:46:ba:cb:f6:43:5a:27:93:d8: 90:11:42:8a:3a:18:f8:78:44:d0:3a:6a:ac:55:cf: 90:3f:a8:ec:74:0b:ef:a8:11:9d:24:d6:c4:1d:d8: 84:c8:a6:7f:9f:e4:80:33:ff:b6:d7:39:3b:d0:95: f7:fe:1f:f8:d0:e3:08:44:0d:7f:89:5f:22:d9:be: b2:3a:04:b5:c3:4f:ed:33:1b:8d:f9:27:bf:8f:17: 0a:bc:bb:a8:01:ed:f4:ac:fe:92:e5:99:ad:31:fd: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BD:33:E5:B7:3F:2C:E4:B5:BC:8C:88:3C:01:96:CE:A2:B8:96:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/3856ddeb-1a7b-3d87-9349-f60c0633eecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29/829fa5a7-a3d5-4117-b578-3b0df4686c29.crl X509v3 Authority Key Identifier: keyid:54:F8:C1:10:2B:9F:46:36:07:E2:9B:C9:F0:17:DF:21:75:D1:67:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/829fa5a7-a3d5-4117-b578-3b0df4686c29.cer sbgp-ipAddrBlock: critical IPv4: 64.87.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:41:c1:d4:6e:e1:14:b5:21:fb:48:e1:d5:db:59:cf:86:c1: 81:5c:85:4d:f5:85:a0:6b:35:74:b7:2a:4f:e6:31:39:93:40: 10:de:7d:5a:60:c5:05:10:71:68:f3:36:12:53:c9:e2:78:30: 56:c7:79:20:f5:70:33:89:f2:22:55:c7:d5:53:11:d0:ef:b0: fa:72:78:a2:36:1f:11:9c:09:d8:e1:5f:48:6b:b9:9b:78:5e: 14:4a:e4:5a:0a:c3:25:87:88:36:06:30:22:81:c3:38:2b:b6: 1c:7f:e2:7a:6c:4d:31:59:03:80:7d:22:98:6e:2a:47:1d:d4: 4f:4c:35:a7:da:e5:39:3c:03:2b:66:1b:ba:13:44:5e:cc:c2: 36:08:f5:a3:ec:1d:14:73:be:2b:9a:ab:19:22:2d:c2:c9:39: c9:20:57:56:cd:ef:ee:82:36:48:b9:4d:d1:f5:3a:ea:7f:65: ea:40:4f:34:a7:b1:f1:5e:44:9d:6e:d0:06:6b:f6:7d:fd:c9: 64:b0:7e:94:8c:0b:f5:73:29:e7:0f:85:ad:42:5f:e6:37:76: f8:74:6b:28:ae:a8:c8:23:8e:22:b4:32:89:9b:d5:7c:5d:0a: bc:94:97:d7:60:b6:74:3a:76:3d:82:b2:37:93:54:d6:0c:1e: 39:ea:de:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71shULcM51UUu20gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI5ZmE1YTctYTNkNS00MTE3LWI1NzgtM2IwZGY0Njg2 YzI5MB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjk0NGM3ODAtYWVhZi00ZmY1LTkwMzktOTkwOGExODEzNjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bo8EShNSEmWqFZwZX6R4BW0WYwZinXxLCs5 a9R626Mh27u/zKk3OAzUKA1uGJH1np9cQfX0KO1RjhgivBHvZMOZdu3T8it6lIbM dyq6SaK1tCUiCkCrOkEP3asBs+soosvROCC6jfli+/tI/bxRnO7Nli3FsQMU/0/Y YEgunrKJPSTu6aYIk4lwZ43laFmlKIoOQH4WZvhnJztGusv2Q1onk9iQEUKKOhj4 eETQOmqsVc+QP6jsdAvvqBGdJNbEHdiEyKZ/n+SAM/+21zk70JX3/h/40OMIRA1/ iV8i2b6yOgS1w0/tMxuN+Se/jxcKvLuoAe30rP6S5ZmtMf3ZkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOC9M+W3PyzktbyMiDwBls6iuJagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84Mjlm YTVhNy1hM2Q1LTQxMTctYjU3OC0zYjBkZjQ2ODZjMjkvMzg1NmRkZWItMWE3Yi0z ZDg3LTkzNDktZjYwYzA2MzNlZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODI5ZmE1YTctYTNkNS00MTE3LWI1 NzgtM2IwZGY0Njg2YzI5LzgyOWZhNWE3LWEzZDUtNDExNy1iNTc4LTNiMGRmNDY4 NmMyOS5jcmwwHwYDVR0jBBgwFoAUVPjBECufRjYH4pvJ8BffIXXRZ3swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84MjlmYTVhNy1hM2Q1LTQxMTctYjU3OC0zYjBk ZjQ2ODZjMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQFdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERBwdRu4RS1IftI4dXbWc+GwYFchU31haBrNXS3Kk/mMTmTQBDefVpg xQUQcWjzNhJTyeJ4MFbHeSD1cDOJ8iJVx9VTEdDvsPpyeKI2HxGcCdjhX0hruZt4 XhRK5FoKwyWHiDYGMCKBwzgrthx/4npsTTFZA4B9IphuKkcd1E9MNafa5Tk8Aytm G7oTRF7MwjYI9aPsHRRzviuaqxkiLcLJOckgV1bN7+6CNki5TdH1Oup/ZepATzSn sfFeRJ1u0AZr9n39yWSwfpSMC/VzKecPha1CX+Y3dvh0ayiuqMgjjiK0Momb1Xxd CryUl9dgtnQ6dj2CsjeTVNYMHjnq3nY= -----END CERTIFICATE-----Generated at Thu Sep 3 17:44:45 2026 by rpki-client