$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa File: add0a9ff-c124-381c-9d60-5f74979be3f7.roa (raw, json) Hash identifier: GBERVMFEY4/hTUihLL6VKLAi8A0GPpOEG7zm1rzC0N4= Subject key identifier: DC:83:61:CE:17:61:25:D7:14:9C:31:B2:F9:D0:87:C3:97:68:72:2F Certificate issuer: /CN=afc2bf64-2cba-4362-8b12-56844da30e4e Certificate serial: 010D0C9F4328584ED2CC7AAF5726405D697EB100 Authority key identifier: 43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa Signing time: Thu 13 Aug 2026 13:00:12 +0000 ROA not before: Thu 13 Aug 2026 13:00:12 +0000 ROA not after: Wed 11 Nov 2026 14:00:12 +0000 asID: 14343 IP address blocks: 64.26.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:cc:7a:af:57:26:40:5d:69:7e:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc2bf64-2cba-4362-8b12-56844da30e4e Validity Not Before: Aug 13 13:00:12 2026 GMT Not After : Nov 11 14:00:12 2026 GMT Subject: CN=2963282a-164a-4d12-b92a-0294f5fd043b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bb:4e:54:e9:0e:7f:5b:37:0f:39:ae:4f:3c: d3:d8:85:01:96:d0:ea:95:20:58:ff:65:e5:32:3a: 5a:3b:4d:d0:3e:f0:18:14:47:f2:f4:ae:65:ef:ce: d8:72:22:22:13:08:f3:6d:31:cf:6f:b5:70:28:6d: dd:c5:be:9f:dd:b5:90:b0:e7:bd:9a:4a:e9:2f:49: 82:40:01:35:a0:85:94:89:6a:18:12:5a:1e:03:54: a1:d4:c3:d8:71:97:a0:9d:3e:fe:f4:1b:bc:e9:36: 55:5d:f9:c9:c6:87:dd:ac:1a:48:bf:07:cc:29:08: c5:66:cc:f6:6a:50:fa:12:53:f1:12:11:7d:37:5e: d7:02:3b:97:e8:8a:41:67:a0:d7:b8:ee:7f:4b:32: 7f:2f:01:d6:2e:45:53:43:fa:6b:73:92:ad:e6:cf: 3f:bb:32:01:ea:2c:f9:d8:03:30:08:f0:3d:d5:bd: bd:f4:84:cd:ef:39:5a:4f:43:07:e4:d7:d5:30:44: c4:b4:2d:c6:73:66:64:26:53:86:18:87:a7:b4:63: 50:bc:f9:10:5b:78:88:ce:34:04:ef:c0:32:2b:46: 7c:6f:df:67:48:97:d7:92:dc:d5:e7:31:b5:d1:79: dd:71:3d:42:1f:65:57:b4:ca:a8:83:85:06:df:ff: 1d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:83:61:CE:17:61:25:D7:14:9C:31:B2:F9:D0:87:C3:97:68:72:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/add0a9ff-c124-381c-9d60-5f74979be3f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e/afc2bf64-2cba-4362-8b12-56844da30e4e.crl X509v3 Authority Key Identifier: keyid:43:5D:5A:CD:27:CD:09:AF:C9:76:63:2C:28:78:AF:73:FA:9F:5F:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afc2bf64-2cba-4362-8b12-56844da30e4e.cer sbgp-ipAddrBlock: critical IPv4: 64.26.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:3c:02:82:f7:08:0f:c2:d4:6f:bd:4c:dd:f7:26:de:d5:fa: c7:a3:06:9b:da:2c:99:3a:b2:f2:65:e2:f0:35:14:9a:6d:36: 33:88:f4:3a:a8:93:de:61:57:54:23:f0:8e:6c:bb:b7:88:89: 76:c9:6a:b3:0f:79:c7:44:92:15:1d:4f:81:38:84:36:8d:88: 90:af:9b:73:f0:51:37:27:45:41:e7:76:ff:76:d5:e6:2b:93: 54:88:a6:96:0e:d8:e8:65:ca:99:bb:f4:71:e0:c0:69:9d:bd: 52:7c:01:be:5d:81:f4:67:5d:d0:a1:58:17:ca:65:3d:97:91: f2:9b:9c:7a:14:32:c2:54:76:5a:0e:4f:5b:fa:97:46:c1:a4: 3b:69:55:f1:2c:a7:e2:b6:95:37:51:1c:fb:76:0e:69:b3:33: 6e:8f:a0:27:00:e8:ea:ed:d0:9a:42:c1:79:6c:b4:64:30:74: 8c:4d:67:ee:c0:f0:7f:5d:3b:17:e2:b2:a2:0a:82:62:f1:ce: d1:28:59:f4:67:d6:2a:74:4a:22:d6:df:2e:5a:4d:47:de:be: a2:0a:1c:62:c2:61:da:b2:04:b7:73:5d:41:db:86:cd:df:ed: f9:b4:c9:0f:9a:cd:3d:ea:6f:3d:1f:1d:25:45:6b:2c:b4:52: b3:7a:76:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7SzHqvVyZAXWl+sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjMmJmNjQtMmNiYS00MzYyLThiMTItNTY4NDRkYTMw ZTRlMB4XDTI2MDgxMzEzMDAxMloXDTI2MTExMTE0MDAxMlowLzEtMCsGA1UEAxMk Mjk2MzI4MmEtMTY0YS00ZDEyLWI5MmEtMDI5NGY1ZmQwNDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0btOVOkOf1s3DzmuTzzT2IUBltDqlSBY/2Xl MjpaO03QPvAYFEfy9K5l787YciIiEwjzbTHPb7VwKG3dxb6f3bWQsOe9mkrpL0mC QAE1oIWUiWoYEloeA1Sh1MPYcZegnT7+9Bu86TZVXfnJxofdrBpIvwfMKQjFZsz2 alD6ElPxEhF9N17XAjuX6IpBZ6DXuO5/SzJ/LwHWLkVTQ/prc5Kt5s8/uzIB6iz5 2AMwCPA91b299ITN7zlaT0MH5NfVMETEtC3Gc2ZkJlOGGIentGNQvPkQW3iIzjQE 78AyK0Z8b99nSJfXktzV5zG10XndcT1CH2VXtMqog4UG3/8dJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyDYc4XYSXXFJwxsvnQh8OXaHIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmMy YmY2NC0yY2JhLTQzNjItOGIxMi01Njg0NGRhMzBlNGUvYWRkMGE5ZmYtYzEyNC0z ODFjLTlkNjAtNWY3NDk3OWJlM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZjMmJmNjQtMmNiYS00MzYyLThi MTItNTY4NDRkYTMwZTRlL2FmYzJiZjY0LTJjYmEtNDM2Mi04YjEyLTU2ODQ0ZGEz MGU0ZS5jcmwwHwYDVR0jBBgwFoAUQ11azSfNCa/JdmMsKHivc/qfX0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmMyYmY2NC0yY2JhLTQzNjItOGIxMi01Njg0 NGRhMzBlNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBrkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADY8AoL3CA/C1G+9TN33Jt7V+sejBpvaLJk6svJl4vA1FJptNjOI9Dqo k95hV1Qj8I5su7eIiXbJarMPecdEkhUdT4E4hDaNiJCvm3PwUTcnRUHndv921eYr k1SIppYO2Ohlypm79HHgwGmdvVJ8Ab5dgfRnXdChWBfKZT2XkfKbnHoUMsJUdloO T1v6l0bBpDtpVfEsp+K2lTdRHPt2DmmzM26PoCcA6Ort0JpCwXlstGQwdIxNZ+7A 8H9dOxfisqIKgmLxztEoWfRn1ip0SiLW3y5aTUfevqIKHGLCYdqyBLdzXUHbhs3f 7fm0yQ+azT3qbz0fHSVFayy0UrN6dkI= -----END CERTIFICATE-----Generated at Tue Aug 25 04:19:59 2026 by rpki-client