$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/ceeaa520-dfdc-304f-b4db-b794853b5d2d.roa File: ceeaa520-dfdc-304f-b4db-b794853b5d2d.roa (raw, json) Hash identifier: aT+XzYPaSreeVU6kzblpwW78an78z2pXyi2ZhIIOpvc= Subject key identifier: 0C:05:97:EF:0B:37:5A:42:05:BD:62:84:62:09:EE:9E:74:92:BD:DB Certificate issuer: /CN=d0247306-290f-4f19-89c3-f2f1fe2c16d5 Certificate serial: 010D0C9F4328584F4973828E3EB34B39651BDAD0 Authority key identifier: 29:01:B4:58:73:01:74:01:DA:58:66:DA:B5:8A:DE:C4:B7:C4:4C:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/ceeaa520-dfdc-304f-b4db-b794853b5d2d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4927 IP address blocks: 64.29.224.0/20 maxlen: 20 64.68.128.0/21 maxlen: 21 64.68.136.0/21 maxlen: 21 205.254.224.0/19 maxlen: 19 207.71.192.0/18 maxlen: 18 207.154.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/d0247306-290f-4f19-89c3-f2f1fe2c16d5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/d0247306-290f-4f19-89c3-f2f1fe2c16d5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:82:8e:3e:b3:4b:39:65:1b:da:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0247306-290f-4f19-89c3-f2f1fe2c16d5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b4664ecd-99d2-4d0a-966d-c072b7c9d9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:7e:64:62:d7:fd:a8:38:41:df:63:19:a5: 26:a5:17:50:50:bf:8e:c9:64:7c:40:4b:cb:23:bc: f6:7f:73:de:c1:69:a3:e4:cf:fe:35:23:1d:d5:d5: a9:bc:0d:c1:ad:34:3f:f6:49:2f:dd:8d:87:d3:03: 01:dd:3f:c8:06:47:71:7d:e2:4b:d8:1b:16:20:70: 73:25:d2:a0:c4:0f:9d:e8:a6:81:d0:57:34:68:8c: 41:f8:f8:19:d7:ed:5e:2f:2c:da:8b:b4:e0:00:2f: 36:52:30:fd:16:0f:92:bf:c2:2a:3d:8c:71:ad:11: 67:01:ee:14:a9:63:d4:ab:a8:df:44:a3:d4:25:d1: 29:ae:ee:3d:54:f7:1d:05:94:d8:e1:5b:10:85:70: dd:7b:49:fe:d5:1e:56:fc:8a:02:0a:ac:bf:6d:ac: 2b:16:76:55:9e:87:dd:73:37:7a:4d:98:42:d8:81: 49:46:db:d9:4a:23:17:af:22:c8:27:e5:28:b1:42: c1:14:30:53:66:75:bf:d4:60:3d:59:d8:3e:e5:77: d1:26:26:12:b8:d3:96:a0:8c:74:d4:03:22:04:6b: f5:f4:b4:4f:b9:de:74:66:7f:0b:30:7a:6d:d4:61: ff:72:70:74:09:dc:f1:21:b1:1c:80:b5:cd:9d:46: 86:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:05:97:EF:0B:37:5A:42:05:BD:62:84:62:09:EE:9E:74:92:BD:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/ceeaa520-dfdc-304f-b4db-b794853b5d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/d0247306-290f-4f19-89c3-f2f1fe2c16d5.crl X509v3 Authority Key Identifier: keyid:29:01:B4:58:73:01:74:01:DA:58:66:DA:B5:8A:DE:C4:B7:C4:4C:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5.cer sbgp-ipAddrBlock: critical IPv4: 64.29.224.0/20 64.68.128.0/20 205.254.224.0/19 207.71.192.0/18 207.154.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:4a:03:fb:d5:94:a5:9b:b9:78:6a:9f:53:8d:95:63:6c:5d: b2:4d:7f:7c:44:19:1b:4e:cc:a9:c2:1e:52:f4:88:89:d3:78: b5:75:68:b7:5a:28:a8:4c:02:5f:96:97:4a:4b:3b:f7:6f:2a: ca:77:4f:6f:f1:9b:ef:fd:54:c0:d8:49:e7:23:e2:5d:2f:ea: 2e:aa:b3:94:47:a4:f6:02:1b:f1:f0:7d:24:4f:0b:e4:4e:32: 3e:ba:cc:7c:b0:9d:d6:52:9c:e9:83:7e:4c:85:b7:d9:2e:99: 3a:e5:8e:4d:69:3f:08:13:c8:4f:be:69:b4:4d:3a:27:05:7b: 16:2c:0e:51:7b:43:ca:63:e5:33:34:44:d9:56:48:90:ff:76: ee:5b:a6:01:05:56:e8:9f:c6:ff:95:00:9d:b5:f4:24:2c:d0: 37:c6:aa:36:f3:46:19:98:64:b1:87:d3:ac:79:53:58:f8:d1: 74:e4:96:82:7b:f7:92:82:57:bd:1c:2a:3b:8c:97:fc:49:41: 01:f2:22:da:46:2a:1e:6c:80:bf:23:c6:92:41:68:87:01:c4: 91:b6:04:28:12:ba:cf:b0:82:d7:3b:97:a5:aa:0a:2b:dc:84: e6:ff:29:7d:3d:e2:a1:b7:2c:d5:71:66:58:11:cc:5c:57:77: 10:88:bd:83 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE9Jc4KOPrNLOWUb2tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAyNDczMDYtMjkwZi00ZjE5LTg5YzMtZjJmMWZlMmMx NmQ1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjQ2NjRlY2QtOTlkMi00ZDBhLTk2NmQtYzA3MmI3YzlkOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl5+ZGLX/ag4Qd9jGaUmpRdQUL+OyWR8QEvL I7z2f3PewWmj5M/+NSMd1dWpvA3BrTQ/9kkv3Y2H0wMB3T/IBkdxfeJL2BsWIHBz JdKgxA+d6KaB0Fc0aIxB+PgZ1+1eLyzai7TgAC82UjD9Fg+Sv8IqPYxxrRFnAe4U qWPUq6jfRKPUJdEpru49VPcdBZTY4VsQhXDde0n+1R5W/IoCCqy/bawrFnZVnofd czd6TZhC2IFJRtvZSiMXryLIJ+UosULBFDBTZnW/1GA9Wdg+5XfRJiYSuNOWoIx0 1AMiBGv19LRPud50Zn8LMHpt1GH/cnB0CdzxIbEcgLXNnUaGmQIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFAwFl+8LN1pCBb1ihGIJ7p50kr3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMDI0 NzMwNi0yOTBmLTRmMTktODljMy1mMmYxZmUyYzE2ZDUvY2VlYWE1MjAtZGZkYy0z MDRmLWI0ZGItYjc5NDg1M2I1ZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDAyNDczMDYtMjkwZi00ZjE5LTg5 YzMtZjJmMWZlMmMxNmQ1L2QwMjQ3MzA2LTI5MGYtNGYxOS04OWMzLWYyZjFmZTJj MTZkNS5jcmwwHwYDVR0jBBgwFoAUKQG0WHMBdAHaWGbatYrexLfETH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMDI0NzMwNi0yOTBmLTRmMTktODljMy1mMmYx ZmUyYzE2ZDUuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEQB3gAwQE QESAAwQFzf7gAwQGz0fAAwQGz5pAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADBKA/vVlKWbuXhqn1ONlWNs XbJNf3xEGRtOzKnCHlL0iInTeLV1aLdaKKhMAl+Wl0pLO/dvKsp3T2/xm+/9VMDY Secj4l0v6i6qs5RHpPYCG/HwfSRPC+ROMj66zHywndZSnOmDfkyFt9kumTrljk1p PwgTyE++abRNOicFexYsDlF7Q8pj5TM0RNlWSJD/du5bpgEFVuifxv+VAJ219CQs 0DfGqjbzRhmYZLGH06x5U1j40XTkloJ795KCV70cKjuMl/xJQQHyItpGKh5sgL8j xpJBaIcBxJG2BCgSus+wgtc7l6WqCivchOb/KX094qG3LNVxZlgRzFxXdxCIvYM= -----END CERTIFICATE-----Generated at Wed Oct 21 04:43:59 2026 by rpki-client