$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa File: 9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa (raw, json) Hash identifier: K6HW+bqQKH5eCP1pLz5YYzceLIL7JTUheQDxmfZ5Kjk= Subject key identifier: E7:1D:09:AA:D7:74:EF:F5:E1:29:37:EA:C0:90:DA:D1:40:94:DC:37 Certificate issuer: /CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Certificate serial: 010D0C9F4328584EED52019F22E8966AD3810D00 Authority key identifier: CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 397127 IP address blocks: 67.218.1.0/24 maxlen: 24 2620:13d:e000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:01:9f:22:e8:96:6a:d3:81:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae8f2797-b6fa-4c49-a3e2-811d0c484615 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=c963e3ef-56e4-441d-9cc9-f7215cba10d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e3:2a:66:45:bd:1a:97:f2:77:7d:18:54:24: 2d:07:d4:90:18:99:5c:59:79:96:fb:cf:e1:e0:f1: a8:b3:12:64:b2:dd:83:93:9d:8c:d1:25:e7:01:cd: b1:e6:17:2f:8f:dc:6d:e9:87:34:87:e1:41:de:20: de:76:10:87:5c:f1:96:c4:f8:03:ea:e9:76:88:51: a7:59:da:09:55:65:2e:21:3d:d1:ce:39:05:f2:15: 41:74:c1:df:16:a1:94:66:02:37:2d:56:81:c2:72: 7a:85:b7:52:96:11:a2:bd:cb:8d:36:a5:f9:e2:dc: 7b:df:fe:8d:3f:a8:01:ba:17:de:b7:ff:69:98:82: f9:2c:11:e8:e1:8c:d8:53:28:e4:2d:69:e9:8b:9e: 8a:1d:01:72:95:77:c0:53:e7:92:7f:a8:cb:38:7a: ae:50:4e:b7:07:31:3c:88:fe:4b:9f:59:50:b9:60: 93:96:19:24:bd:9b:60:5d:c6:42:18:48:05:d5:e2: 56:ce:e6:9d:ae:33:e3:1b:35:b2:a8:2b:d2:e7:a9: 03:fb:49:15:6c:a1:28:98:96:29:40:3b:10:56:b5: bd:db:46:fd:40:78:de:8e:7e:de:62:6b:eb:fd:83: 11:3a:cc:23:e8:98:f5:b8:e9:53:d5:76:88:e3:e8: f2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1D:09:AA:D7:74:EF:F5:E1:29:37:EA:C0:90:DA:D1:40:94:DC:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/9bd893d7-af6e-34c6-b311-94a77d1e42f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615/ae8f2797-b6fa-4c49-a3e2-811d0c484615.crl X509v3 Authority Key Identifier: keyid:CF:B8:A4:FE:E8:4C:A9:74:D4:6E:00:4D:64:CB:3E:0E:81:2F:C6:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae8f2797-b6fa-4c49-a3e2-811d0c484615.cer sbgp-ipAddrBlock: critical IPv4: 67.218.1.0/24 IPv6: 2620:13d:e000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:8d:a9:ad:22:6f:ce:54:e0:e7:01:d2:2c:97:5a:07:4e:73: a7:af:de:f8:a9:fd:65:94:76:91:73:82:4c:0d:60:59:97:ab: 53:5e:56:24:ae:b5:9d:d1:52:7a:db:27:47:69:18:07:da:42: 4f:84:4e:1c:8b:9f:bc:2d:22:f8:66:7d:8d:bb:21:0d:06:08: cb:c1:ca:92:99:f8:46:72:22:6d:19:ed:19:2a:ae:a4:a1:8b: f0:a1:2d:60:60:bb:8d:4a:8e:b2:8a:ab:14:99:89:86:a0:a7: b5:24:95:52:32:0c:7e:75:c7:b4:b5:0a:9a:b7:f0:a9:0b:0a: 62:bf:c8:bb:f3:90:f0:9f:44:84:81:ce:93:84:51:de:ed:fa: 23:4a:e5:83:49:e1:e6:f1:a9:af:42:d9:a6:7d:c0:c7:29:cf: a2:b9:2c:0f:e3:e1:b4:e9:62:88:d0:0a:90:6d:be:e7:6f:ef: 1d:9f:30:b8:61:af:c0:96:2b:ef:f6:c1:dc:e6:a8:bc:49:4c: 6d:12:ae:cf:36:8a:b0:bd:72:21:36:43:c8:2e:b0:9d:df:05: fe:6b:9b:48:17:55:d4:61:d0:f6:74:6a:96:f6:a2:e0:8f:18: 19:f3:49:6b:22:92:41:41:d3:7b:d7:8a:db:02:48:7e:18:ca: 2a:6b:69:f7 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE7tUgGfIuiWatOBDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU4ZjI3OTctYjZmYS00YzQ5LWEzZTItODExZDBjNDg0 NjE1MB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk Yzk2M2UzZWYtNTZlNC00NDFkLTljYzktZjcyMTVjYmExMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheMqZkW9Gpfyd30YVCQtB9SQGJlcWXmW+8/h 4PGosxJkst2Dk52M0SXnAc2x5hcvj9xt6Yc0h+FB3iDedhCHXPGWxPgD6ul2iFGn WdoJVWUuIT3RzjkF8hVBdMHfFqGUZgI3LVaBwnJ6hbdSlhGivcuNNqX54tx73/6N P6gBuhfet/9pmIL5LBHo4YzYUyjkLWnpi56KHQFylXfAU+eSf6jLOHquUE63BzE8 iP5Ln1lQuWCTlhkkvZtgXcZCGEgF1eJWzuadrjPjGzWyqCvS56kD+0kVbKEomJYp QDsQVrW920b9QHjejn7eYmvr/YMROswj6Jj1uOlT1XaI4+jyvwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFOcdCarXdO/14Sk36sCQ2tFAlNw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hZThm Mjc5Ny1iNmZhLTRjNDktYTNlMi04MTFkMGM0ODQ2MTUvOWJkODkzZDctYWY2ZS0z NGM2LWIzMTEtOTRhNzdkMWU0MmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWU4ZjI3OTctYjZmYS00YzQ5LWEz ZTItODExZDBjNDg0NjE1L2FlOGYyNzk3LWI2ZmEtNGM0OS1hM2UyLTgxMWQwYzQ4 NDYxNS5jcmwwHwYDVR0jBBgwFoAUz7ik/uhMqXTUbgBNZMs+DoEvxugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hZThmMjc5Ny1iNmZhLTRjNDktYTNlMi04MTFk MGM0ODQ2MTUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQ9oBMA8E AgACMAkDBwQmIAE94AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjY2prSJvzlTg5wHSLJdaB05zp6/e+Kn9 ZZR2kXOCTA1gWZerU15WJK61ndFSetsnR2kYB9pCT4ROHIufvC0i+GZ9jbshDQYI y8HKkpn4RnIibRntGSqupKGL8KEtYGC7jUqOsoqrFJmJhqCntSSVUjIMfnXHtLUK mrfwqQsKYr/Iu/OQ8J9EhIHOk4RR3u36I0rlg0nh5vGpr0LZpn3AxynPorksD+Ph tOliiNAKkG2+52/vHZ8wuGGvwJYr7/bB3OaovElMbRKuzzaKsL1yITZDyC6wnd8F /mubSBdV1GHQ9nRqlvai4I8YGfNJayKSQUHTe9eK2wJIfhjKKmtp9w== -----END CERTIFICATE-----Generated at Sun Oct 4 06:52:29 2026 by rpki-client