$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa File: 8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa (raw, json) Hash identifier: wSV9oyQAKkCqIyqLBf179UbXgz/AAFcG4NXZxsAXok8= Subject key identifier: 0C:B3:43:46:F1:F5:D7:B4:CC:6D:64:01:8B:AD:EE:6D:16:F3:2E:06 Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989 Certificate serial: 010D0C9F4328584EC0A72CA2A572637D3E2F82ED Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 64.29.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:2c:a2:a5:72:63:7d:3e:2f:82:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=cde99257-39d1-4795-b2c5-199895bf664d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:af:63:72:02:55:24:69:c0:4e:00:7f:1d: 32:b8:ac:d6:ea:f6:da:e8:dd:4d:a0:75:ac:2c:2d: e2:64:08:07:9e:03:f0:76:6a:db:54:63:65:b4:3c: 94:76:24:bb:99:78:01:3d:12:54:bf:26:9c:11:d5: 41:d6:d4:d8:7e:16:27:4a:cf:3a:6c:e4:7c:ee:53: 8c:ae:3c:f7:a6:8e:14:ff:81:1b:56:e9:5a:5b:f4: 67:45:86:77:6b:10:63:01:28:95:18:36:d0:5f:1f: 55:be:65:d6:b1:9c:b6:69:1a:50:a5:06:bc:5f:91: d5:c5:ae:63:3a:3c:07:e1:b3:92:9d:81:af:8e:1e: 91:66:47:b9:f5:37:fd:4a:35:e2:88:b1:d6:81:9d: 40:cb:eb:a7:83:4d:11:72:34:f4:ca:12:54:b8:1c: 66:0a:d1:59:dd:61:ae:ac:0f:e3:86:12:fe:c6:c9: 42:c2:5a:e7:76:3f:b6:f6:1a:af:04:d8:f0:24:1c: 93:8a:10:af:19:a3:88:f5:04:f8:49:cf:02:a9:6a: c4:0b:12:42:49:da:2f:86:89:e9:01:4d:2e:8c:77: ef:1e:b0:83:1a:d3:2b:99:ba:04:4a:cd:98:76:30: e6:02:7e:f0:6e:f1:a4:4d:2e:3e:ea:0b:bf:5c:81: f3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B3:43:46:F1:F5:D7:B4:CC:6D:64:01:8B:AD:EE:6D:16:F3:2E:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/8a5b8b38-d4b7-3b48-a8ac-ef2938b11950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl X509v3 Authority Key Identifier: keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer sbgp-ipAddrBlock: critical IPv4: 64.29.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ce:05:f7:18:93:f3:e9:e5:24:9f:48:16:a3:ba:7a:3e:03: 21:bb:16:f1:7e:bc:a6:a5:fc:ac:d9:cc:59:59:7e:0f:ef:08: 47:d3:78:7e:e8:89:2a:f1:95:21:ec:9e:9e:c3:b7:42:e4:b1: ae:96:28:de:c5:2f:32:d2:53:ea:88:9b:4b:cd:59:2c:88:1e: 1d:23:95:01:22:05:30:3f:1b:9e:2a:3a:71:4d:bf:d3:e0:6e: 1b:8e:8f:3c:d8:bb:48:a7:30:32:4e:6a:04:25:d1:c4:45:91: 25:6d:26:0b:ef:8b:94:06:26:80:89:17:ea:e7:7f:88:00:2d: 2f:b1:fc:f6:5a:ae:76:20:85:0a:fe:79:53:65:d9:a5:32:6b: 3b:09:30:93:08:2e:e5:c5:df:30:d8:81:2b:cf:b0:6d:a1:c9: 21:90:41:36:0c:a2:57:40:be:7f:dd:10:69:04:b6:e5:1b:04: b2:7d:11:8f:d4:a8:cc:13:d4:c1:bf:4b:7b:91:30:a8:15:98: d8:4d:d9:81:5f:2f:cd:ef:70:22:0f:8f:b5:df:4e:36:71:3f: 97:2c:5f:32:25:c3:ff:72:4a:cd:81:47:25:3c:c7:6f:5b:88: 53:ec:86:e8:96:5b:9d:6a:d2:fb:bc:e0:b6:3e:9d:5f:46:24: f2:a3:4e:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ApyyipXJjfT4vgu0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NTMwMmEtMTUwMi00MTE2LWI1NjAtNGMyZDIxNTVm OTg5MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk Y2RlOTkyNTctMzlkMS00Nzk1LWIyYzUtMTk5ODk1YmY2NjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHyvY3ICVSRpwE4Afx0yuKzW6vba6N1NoHWs LC3iZAgHngPwdmrbVGNltDyUdiS7mXgBPRJUvyacEdVB1tTYfhYnSs86bOR87lOM rjz3po4U/4EbVulaW/RnRYZ3axBjASiVGDbQXx9VvmXWsZy2aRpQpQa8X5HVxa5j OjwH4bOSnYGvjh6RZke59Tf9SjXiiLHWgZ1Ay+ung00RcjT0yhJUuBxmCtFZ3WGu rA/jhhL+xslCwlrndj+29hqvBNjwJByTihCvGaOI9QT4Sc8CqWrECxJCSdovhonp AU0ujHfvHrCDGtMrmboESs2YdjDmAn7wbvGkTS4+6gu/XIHz4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyzQ0bx9de0zG1kAYut7m0W8y4GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1 MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJkMjE1NWY5ODkvOGE1YjhiMzgtZDRiNy0z YjQ4LWE4YWMtZWYyOTM4YjExOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmE4NTMwMmEtMTUwMi00MTE2LWI1 NjAtNGMyZDIxNTVmOTg5LzJhODUzMDJhLTE1MDItNDExNi1iNTYwLTRjMmQyMTU1 Zjk4OS5jcmwwHwYDVR0jBBgwFoAUWPHGtsyKAI0BxiFTG/ayayXzzxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYTg1MzAyYS0xNTAyLTQxMTYtYjU2MC00YzJk MjE1NWY5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQB0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDOBfcYk/Pp5SSfSBajuno+AyG7FvF+vKal/KzZzFlZfg/vCEfTeH7o iSrxlSHsnp7Dt0Lksa6WKN7FLzLSU+qIm0vNWSyIHh0jlQEiBTA/G54qOnFNv9Pg bhuOjzzYu0inMDJOagQl0cRFkSVtJgvvi5QGJoCJF+rnf4gALS+x/PZarnYghQr+ eVNl2aUyazsJMJMILuXF3zDYgSvPsG2hySGQQTYMoldAvn/dEGkEtuUbBLJ9EY/U qMwT1MG/S3uRMKgVmNhN2YFfL83vcCIPj7XfTjZxP5csXzIlw/9ySs2BRyU8x29b iFPshuiWW51q0vu84LY+nV9GJPKjTpQ= -----END CERTIFICATE-----Generated at Fri Aug 21 00:18:47 2026 by rpki-client