$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fb820c5d-9b7f-3f71-b098-59ec7631c272.roa File: fb820c5d-9b7f-3f71-b098-59ec7631c272.roa (raw, json) Hash identifier: 7HWUtKHuv/dkXZs2o8afnA3f5CNVK5ZwTnBW4CZp5S8= Subject key identifier: AE:B4:3C:B5:20:A7:9F:B1:E3:FD:02:2B:A4:6E:0A:6A:EF:9A:E0:56 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584EA79BF3E852497055B5D9F080 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fb820c5d-9b7f-3f71-b098-59ec7631c272.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 271493 IP address blocks: 154.64.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:f3:e8:52:49:70:55:b5:d9:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4af63f14-938b-4170-b9b6-9b3ec49ceda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:26:1a:4f:8e:0a:05:16:b2:85:fd:72:04:90: 50:d7:ef:bb:6f:e1:72:7c:55:f2:8c:18:87:67:6e: fc:e0:7d:55:0f:43:bd:d9:0b:ac:b3:64:26:07:67: ed:25:fa:77:a5:24:09:26:d3:0c:42:28:6f:fc:ed: 53:e6:f4:33:cc:9a:c7:08:a0:1a:34:13:4c:d6:e1: 97:d0:5c:9d:62:2a:13:f0:d2:d9:25:40:cc:43:b6: 0a:9d:72:64:2e:05:c8:e2:47:17:b7:9c:17:1d:cd: a6:33:7c:5d:66:b5:50:49:62:2b:86:6c:0f:64:f8: af:b5:fc:50:91:0e:38:7c:3f:54:b2:3f:c8:3b:16: fc:f8:d6:ee:e3:9e:a6:0a:e3:12:81:c8:2e:82:13: ca:3e:c5:22:8b:db:9c:7c:4d:ac:6c:1d:a7:50:57: f2:cf:c3:f9:23:a5:ce:52:62:c9:c9:ec:3e:65:83: 77:c6:da:64:1f:ee:29:f7:26:54:b1:b4:18:f0:b6: 1e:ad:4d:ed:63:ce:e4:c4:b3:8a:6a:40:07:29:df: cc:41:54:c6:b7:ad:68:f6:f1:9c:f2:25:8e:22:a2: d6:ba:58:c9:f6:55:07:d9:98:24:b0:4c:2b:87:2c: 3e:cb:1b:50:bb:0f:c7:42:be:ed:5f:97:f5:eb:9b: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B4:3C:B5:20:A7:9F:B1:E3:FD:02:2B:A4:6E:0A:6A:EF:9A:E0:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/fb820c5d-9b7f-3f71-b098-59ec7631c272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 154.64.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:cc:f6:2f:92:3e:b6:70:1b:01:9c:0d:22:de:53:21:9e:60: a1:b5:37:2c:4c:9d:ed:cb:c5:9b:35:aa:df:df:27:d0:7a:95: 3e:9e:8b:4a:9f:9f:d8:51:16:b6:f2:a4:ac:63:8a:37:89:78: 5c:d3:70:30:64:0f:ff:1f:86:b7:b1:3d:6b:b2:2b:eb:47:7c: dc:49:9d:c1:31:b1:47:c6:e5:8b:56:d4:b8:ef:6f:4b:cb:94: ed:ef:91:d1:01:4e:55:a3:6d:1d:9d:7c:e5:79:e0:73:0f:0d: 44:23:f7:c3:5f:1c:7c:e2:30:13:e5:7e:05:da:29:2b:23:10: 54:2a:52:6b:6d:aa:91:25:d3:7f:62:33:ac:17:e4:de:0a:c6: a7:52:41:eb:89:a8:98:51:20:8f:e0:52:51:fd:0b:79:0e:ab: c0:f8:67:b4:53:8a:fe:b0:d1:8d:84:2b:ee:d3:f2:52:77:3f: 4b:2e:24:c1:78:62:e2:2d:80:be:56:ab:97:12:1e:e4:26:c7: 19:ef:7e:da:0b:e5:5f:cb:cf:69:4b:be:08:eb:c7:b5:8d:98: 6c:cd:3a:8c:e6:d7:1a:b7:ae:42:88:10:57:d5:67:fa:3b:39: 2a:b3:6b:56:ff:57:18:e3:82:87:f6:68:1d:cf:b9:13:9a:ff: cd:a5:2d:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm/PoUklwVbXZ8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGFmNjNmMTQtOTM4Yi00MTcwLWI5YjYtOWIzZWM0OWNlZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SYaT44KBRayhf1yBJBQ1++7b+FyfFXyjBiH Z2784H1VD0O92Quss2QmB2ftJfp3pSQJJtMMQihv/O1T5vQzzJrHCKAaNBNM1uGX 0FydYioT8NLZJUDMQ7YKnXJkLgXI4kcXt5wXHc2mM3xdZrVQSWIrhmwPZPivtfxQ kQ44fD9Usj/IOxb8+Nbu456mCuMSgcgughPKPsUii9ucfE2sbB2nUFfyz8P5I6XO UmLJyew+ZYN3xtpkH+4p9yZUsbQY8LYerU3tY87kxLOKakAHKd/MQVTGt61o9vGc 8iWOIqLWuljJ9lUH2ZgksEwrhyw+yxtQuw/HQr7tX5f165tGWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK60PLUgp5+x4/0CK6RuCmrvmuBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZmI4MjBjNWQtOWI3Zi0z ZjcxLWIwOTgtNTllYzc2MzFjMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmkAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvM9i+SPrZwGwGcDSLeUyGeYKG1NyxMne3LxZs1qt/fJ9B6lT6ei0qf n9hRFrbypKxjijeJeFzTcDBkD/8fhrexPWuyK+tHfNxJncExsUfG5YtW1Ljvb0vL lO3vkdEBTlWjbR2dfOV54HMPDUQj98NfHHziMBPlfgXaKSsjEFQqUmttqpEl039i M6wX5N4KxqdSQeuJqJhRII/gUlH9C3kOq8D4Z7RTiv6w0Y2EK+7T8lJ3P0suJMF4 YuItgL5Wq5cSHuQmxxnvftoL5V/Lz2lLvgjrx7WNmGzNOozm1xq3rkKIEFfVZ/o7 OSqza1b/Vxjjgof2aB3PuROa/82lLYE= -----END CERTIFICATE-----Generated at Fri Sep 11 13:52:19 2026 by rpki-client