$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/321af030-02a0-3657-a888-5ff509ca35d1.roa File: 321af030-02a0-3657-a888-5ff509ca35d1.roa (raw, json) Hash identifier: tGTHCWrh+TWW814ixJ8pzqWRbbuDdXvFJRv/AaE6iqs= Subject key identifier: 6E:89:8B:E4:62:E7:35:50:EF:19:9A:08:66:83:A8:55:61:97:D8:42 Certificate issuer: /CN=9acebd4e-10d7-44b3-802e-4efe607dd4e3 Certificate serial: 010D0C9F4328584EA787750569CB1223FB646880 Authority key identifier: AA:97:35:3D:93:AC:AD:D5:70:FB:DB:56:2D:A5:D4:0F:56:55:74:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/321af030-02a0-3657-a888-5ff509ca35d1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 65.38.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:75:05:69:cb:12:23:fb:64:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9acebd4e-10d7-44b3-802e-4efe607dd4e3 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=33f3ed82-befe-4a1f-adea-fa360df4391b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0f:02:c6:24:b8:b1:ae:72:a3:3b:ea:3b:d7: ce:19:68:34:2c:4a:b2:f7:dc:65:6a:5c:b6:dd:7a: c5:ea:b0:86:c8:46:7f:0b:94:f8:0d:2b:56:a9:c4: fe:78:50:58:b8:5f:91:1f:12:74:1d:f2:b3:23:4d: b4:3c:6c:83:bf:88:21:48:8c:c5:5c:3f:8d:da:33: e1:00:da:ea:fd:32:f8:52:4b:df:fb:2c:ce:b3:1a: aa:3a:61:84:75:24:af:6b:8c:d7:bc:49:41:60:fd: 2f:06:a2:ba:c6:16:c6:e8:fe:62:14:43:f4:ac:20: f7:f0:95:a8:81:cd:00:37:5d:6b:61:22:61:6e:8e: e4:af:06:70:e4:73:c8:54:64:97:9e:92:b3:74:11: dc:62:d0:2a:d9:c2:ce:e0:9f:f0:e2:b0:c1:17:83: c7:94:68:61:25:dc:27:44:8c:28:e6:32:33:56:db: cb:45:3d:27:90:c2:bf:e1:15:5b:90:7c:a6:00:24: 5a:0b:80:5e:bb:0b:7e:64:62:07:46:55:5d:8f:b2: 36:28:83:40:bf:50:73:44:9a:34:51:64:26:89:3c: 54:26:c6:62:d7:b9:74:50:31:97:8f:f4:00:93:ff: 00:72:b1:d6:a0:5a:88:df:99:2e:59:db:c9:cf:23: 8d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:89:8B:E4:62:E7:35:50:EF:19:9A:08:66:83:A8:55:61:97:D8:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/321af030-02a0-3657-a888-5ff509ca35d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.crl X509v3 Authority Key Identifier: keyid:AA:97:35:3D:93:AC:AD:D5:70:FB:DB:56:2D:A5:D4:0F:56:55:74:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer sbgp-ipAddrBlock: critical IPv4: 65.38.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:94:75:e0:72:1d:a6:b0:36:9e:88:37:e6:fa:02:49:ba:61: d9:65:4c:83:bc:b7:e3:b3:65:1c:c2:49:7c:ad:20:89:c7:bf: f7:ce:04:f7:a1:a4:61:5c:ca:54:50:f3:15:90:73:5c:97:a8: 5e:0c:94:8a:2f:6f:c6:11:f3:05:91:75:e5:dc:07:e2:40:c6: e8:8a:81:38:3e:67:23:08:1f:11:af:90:ef:2c:d7:21:30:c9: 43:5b:78:07:da:e4:20:55:67:93:98:be:9f:62:12:bf:92:fe: 10:b9:02:0f:14:63:70:cc:e6:ad:4d:fa:67:f4:c4:c0:53:02: 90:b1:71:38:bf:96:6e:81:5e:4a:f7:17:63:aa:c1:a5:e1:bc: 96:10:2e:7f:e9:08:f3:d2:c6:2d:ff:e0:75:f6:c5:b7:df:36: 18:1a:f9:e1:0e:cd:eb:1b:b2:fe:75:6e:bb:5c:e5:3a:09:2c: be:40:89:93:48:68:e6:88:cb:d8:cc:bd:76:90:0b:21:3d:26: b4:b1:42:3e:b3:6a:91:36:d1:cc:81:85:d9:6e:85:fa:41:95: 4e:9e:0a:2f:b3:aa:a6:a2:74:68:c4:c5:6e:15:1e:ec:9e:4e: 70:20:bf:e3:b7:79:ac:bc:2b:2c:dd:69:c2:ba:ee:1f:dc:92: 57:b3:70:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh3UFacsSI/tkaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjZWJkNGUtMTBkNy00NGIzLTgwMmUtNGVmZTYwN2Rk NGUzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzNmM2VkODItYmVmZS00YTFmLWFkZWEtZmEzNjBkZjQzOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg8CxiS4sa5yozvqO9fOGWg0LEqy99xlaly2 3XrF6rCGyEZ/C5T4DStWqcT+eFBYuF+RHxJ0HfKzI020PGyDv4ghSIzFXD+N2jPh ANrq/TL4Ukvf+yzOsxqqOmGEdSSva4zXvElBYP0vBqK6xhbG6P5iFEP0rCD38JWo gc0AN11rYSJhbo7krwZw5HPIVGSXnpKzdBHcYtAq2cLO4J/w4rDBF4PHlGhhJdwn RIwo5jIzVtvLRT0nkMK/4RVbkHymACRaC4Beuwt+ZGIHRlVdj7I2KINAv1BzRJo0 UWQmiTxUJsZi17l0UDGXj/QAk/8AcrHWoFqI35kuWdvJzyONcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6Ji+Ri5zVQ7xmaCGaDqFVhl9hCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YWNl YmQ0ZS0xMGQ3LTQ0YjMtODAyZS00ZWZlNjA3ZGQ0ZTMvMzIxYWYwMzAtMDJhMC0z NjU3LWE4ODgtNWZmNTA5Y2EzNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWFjZWJkNGUtMTBkNy00NGIzLTgw MmUtNGVmZTYwN2RkNGUzLzlhY2ViZDRlLTEwZDctNDRiMy04MDJlLTRlZmU2MDdk ZDRlMy5jcmwwHwYDVR0jBBgwFoAUqpc1PZOsrdVw+9tWLaXUD1ZVdGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YWNlYmQ0ZS0xMGQ3LTQ0YjMtODAyZS00ZWZl NjA3ZGQ0ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSZ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqUdeByHaawNp6IN+b6Akm6YdllTIO8t+OzZRzCSXytIInHv/fOBPeh pGFcylRQ8xWQc1yXqF4MlIovb8YR8wWRdeXcB+JAxuiKgTg+ZyMIHxGvkO8s1yEw yUNbeAfa5CBVZ5OYvp9iEr+S/hC5Ag8UY3DM5q1N+mf0xMBTApCxcTi/lm6BXkr3 F2OqwaXhvJYQLn/pCPPSxi3/4HX2xbffNhga+eEOzesbsv51brtc5ToJLL5AiZNI aOaIy9jMvXaQCyE9JrSxQj6zapE20cyBhdluhfpBlU6eCi+zqqaidGjExW4VHuye TnAgv+O3eay8KyzdacK67h/cklezcBo= -----END CERTIFICATE-----Generated at Thu Aug 20 21:57:33 2026 by rpki-client