$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/321af030-02a0-3657-a888-5ff509ca35d1.roa File: 321af030-02a0-3657-a888-5ff509ca35d1.roa (raw, json) Hash identifier: CRd1CsWc+TDw2x4EoxXcIwhbXAdI5ll9akRkcTT2u7U= Subject key identifier: 52:A2:8F:C0:61:9A:98:83:56:F2:52:B3:27:AA:5B:8C:B3:3B:81:D3 Certificate issuer: /CN=9acebd4e-10d7-44b3-802e-4efe607dd4e3 Certificate serial: 010D0C9F4328584F497546C8472835D2EA1BB8A0 Authority key identifier: AA:97:35:3D:93:AC:AD:D5:70:FB:DB:56:2D:A5:D4:0F:56:55:74:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/321af030-02a0-3657-a888-5ff509ca35d1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 65.38.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:46:c8:47:28:35:d2:ea:1b:b8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9acebd4e-10d7-44b3-802e-4efe607dd4e3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=111d3c00-1d06-4d32-80bd-c2d918dea65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:31:0d:fc:21:28:51:cf:9c:0b:98:de:79: 31:45:79:fb:39:d1:cf:01:74:25:e4:d1:e5:32:05: 91:e4:5d:e5:0f:03:08:85:2f:81:87:97:1a:19:15: d7:e3:15:bd:9e:ee:f2:b3:d4:3b:b2:f9:26:23:dd: 62:06:99:59:80:10:20:90:71:9f:02:4d:d8:c7:5b: 18:d3:bf:ec:34:bb:02:98:d0:90:56:8a:c0:2d:0b: 61:59:db:f3:b7:66:52:cb:36:67:9a:72:af:47:85: dd:94:34:c6:94:22:4f:ad:a6:6a:57:28:88:f3:83: 8f:1c:0c:d1:68:fe:18:61:b4:81:b1:95:72:58:71: b8:4f:ab:d1:35:07:e7:af:3a:25:1d:e4:e9:df:1f: 2e:7e:19:02:45:c4:50:c7:7d:0e:4a:d7:46:f6:d9: 45:11:4d:b1:a9:ae:68:17:c0:54:74:2c:85:ec:a1: 36:83:5b:28:3b:b4:e3:5e:ac:f0:fe:ef:9e:f0:1a: 7b:79:23:9b:b3:ab:f5:cc:c3:95:1d:4a:fc:72:5f: 57:b3:30:ef:5b:d1:2e:e8:c7:64:79:15:61:b0:c3: 5a:a8:eb:3f:0a:82:cd:5f:1f:57:1f:9f:5d:39:09: 4c:45:ad:9d:30:8c:ff:3a:a4:94:27:e5:d5:7f:ad: f2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A2:8F:C0:61:9A:98:83:56:F2:52:B3:27:AA:5B:8C:B3:3B:81:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/321af030-02a0-3657-a888-5ff509ca35d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.crl X509v3 Authority Key Identifier: keyid:AA:97:35:3D:93:AC:AD:D5:70:FB:DB:56:2D:A5:D4:0F:56:55:74:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer sbgp-ipAddrBlock: critical IPv4: 65.38.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:55:8a:7d:28:00:2c:43:4a:02:79:d6:c2:35:cd:ac:37:95: 65:30:b4:16:b1:9a:00:e3:0e:5c:65:ca:6b:d2:89:d7:2c:05: 8c:44:27:13:ec:eb:e2:ae:39:05:09:6c:8a:94:84:b1:88:56: a7:ba:69:6c:c6:02:8e:be:34:c9:66:1d:c7:4e:06:15:09:6c: 0e:08:ac:aa:19:16:fe:0f:c7:0c:a8:71:aa:38:9f:68:28:f3: 1e:f5:2a:fb:d4:1c:74:2b:58:24:f5:a7:7b:f8:7c:d3:c2:48: 07:c5:9d:9b:09:ee:b9:42:99:56:96:ec:a2:d0:d0:c3:1c:f7: 09:8b:fb:ae:3d:3c:a4:61:14:8c:45:16:46:a1:48:27:c2:bf: cd:1e:fc:b4:e0:38:be:95:0f:0d:25:57:fa:af:68:f0:1b:ac: 71:a2:5c:2e:16:d3:8c:d0:3c:6d:f8:4d:4d:54:62:f8:91:ef: f4:7f:80:89:59:57:63:cb:93:0a:2a:0b:6b:4e:2a:3b:7f:2a: b9:75:a1:6d:fb:27:2d:86:0d:56:48:c2:1a:03:3f:02:8a:d7: 14:15:5d:c3:0b:31:4b:9d:46:ef:94:29:1c:77:0c:51:21:18: b7:90:50:d1:3c:16:41:fa:46:a5:f7:7d:7a:5e:31:a7:9f:e8: e9:d2:30:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdUbIRyg10uobuKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWFjZWJkNGUtMTBkNy00NGIzLTgwMmUtNGVmZTYwN2Rk NGUzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTExZDNjMDAtMWQwNi00ZDMyLTgwYmQtYzJkOTE4ZGVhNjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG0xDfwhKFHPnAuY3nkxRXn7OdHPAXQl5NHl MgWR5F3lDwMIhS+Bh5caGRXX4xW9nu7ys9Q7svkmI91iBplZgBAgkHGfAk3Yx1sY 07/sNLsCmNCQVorALQthWdvzt2ZSyzZnmnKvR4XdlDTGlCJPraZqVyiI84OPHAzR aP4YYbSBsZVyWHG4T6vRNQfnrzolHeTp3x8ufhkCRcRQx30OStdG9tlFEU2xqa5o F8BUdCyF7KE2g1soO7TjXqzw/u+e8Bp7eSObs6v1zMOVHUr8cl9XszDvW9Eu6Mdk eRVhsMNaqOs/CoLNXx9XH59dOQlMRa2dMIz/OqSUJ+XVf63yiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKij8BhmpiDVvJSsyeqW4yzO4HTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YWNl YmQ0ZS0xMGQ3LTQ0YjMtODAyZS00ZWZlNjA3ZGQ0ZTMvMzIxYWYwMzAtMDJhMC0z NjU3LWE4ODgtNWZmNTA5Y2EzNWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWFjZWJkNGUtMTBkNy00NGIzLTgw MmUtNGVmZTYwN2RkNGUzLzlhY2ViZDRlLTEwZDctNDRiMy04MDJlLTRlZmU2MDdk ZDRlMy5jcmwwHwYDVR0jBBgwFoAUqpc1PZOsrdVw+9tWLaXUD1ZVdGEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YWNlYmQ0ZS0xMGQ3LTQ0YjMtODAyZS00ZWZl NjA3ZGQ0ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSZ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZVin0oACxDSgJ51sI1zaw3lWUwtBaxmgDjDlxlymvSidcsBYxEJxPs 6+KuOQUJbIqUhLGIVqe6aWzGAo6+NMlmHcdOBhUJbA4IrKoZFv4Pxwyocao4n2go 8x71KvvUHHQrWCT1p3v4fNPCSAfFnZsJ7rlCmVaW7KLQ0MMc9wmL+649PKRhFIxF FkahSCfCv80e/LTgOL6VDw0lV/qvaPAbrHGiXC4W04zQPG34TU1UYviR7/R/gIlZ V2PLkwoqC2tOKjt/Krl1oW37Jy2GDVZIwhoDPwKK1xQVXcMLMUudRu+UKRx3DFEh GLeQUNE8FkH6RqX3fXpeMaef6OnSMOQ= -----END CERTIFICATE-----Generated at Tue Oct 6 23:17:16 2026 by rpki-client