$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/7cae6c62-279c-3b6f-a5d3-382ad59ddaa9.roa File: 7cae6c62-279c-3b6f-a5d3-382ad59ddaa9.roa (raw, json) Hash identifier: kwURvAYGX9jYQKCB2NpJFOo8RmNEOfUCbrtLD36iNds= Subject key identifier: D2:E0:5F:77:12:03:6E:BF:F1:E1:D7:51:4F:AB:AD:4C:A8:42:43:F1 Certificate issuer: /CN=e78d9e3b-7aed-4f65-85b4-120ec0a9ede3 Certificate serial: 010D0C9F4328584F0DAE1F56FD9C563D2B7C7680 Authority key identifier: CB:31:32:7B:67:42:3C:B0:C4:2D:66:22:9B:33:A1:EC:77:FA:9C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/7cae6c62-279c-3b6f-a5d3-382ad59ddaa9.roa Signing time: Thu 03 Sep 2026 15:11:48 +0000 ROA not before: Thu 03 Sep 2026 15:11:48 +0000 ROA not after: Wed 02 Dec 2026 16:11:48 +0000 asID: 36014 IP address blocks: 64.234.228.0/22 maxlen: 24 136.175.64.0/23 maxlen: 24 167.253.80.0/22 maxlen: 24 199.202.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:ae:1f:56:fd:9c:56:3d:2b:7c:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e78d9e3b-7aed-4f65-85b4-120ec0a9ede3 Validity Not Before: Sep 3 15:11:48 2026 GMT Not After : Dec 2 16:11:48 2026 GMT Subject: CN=b9a4510c-be0d-4b1f-9d59-b815f17bf7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c2:a2:a3:06:5d:a4:c6:5b:14:c2:55:d7:a7: f2:6d:fc:c8:6d:bc:5a:81:1c:39:5d:33:43:0f:35: 2d:20:79:0d:cc:94:e1:84:03:df:52:3c:69:8e:37: 31:45:ee:74:82:54:1a:4f:f9:71:8f:f2:ec:98:7b: 6c:0e:89:e1:3d:4e:42:c6:a2:3e:a8:f0:aa:eb:aa: 4d:03:e1:40:ac:bf:88:bd:b1:9e:3d:c7:38:af:37: a2:7b:2f:9f:e9:e7:6f:34:12:cc:78:48:da:eb:9e: 10:d2:b4:65:69:e4:42:03:bc:73:5f:f3:74:59:67: d6:af:ac:9b:91:9a:e2:9c:a5:59:3d:0e:91:ea:1e: 64:b6:10:f2:eb:9b:1c:90:0c:33:47:ed:cf:22:93: 33:c0:15:a5:5b:da:0e:60:ab:82:e8:f7:c3:e4:a0: cc:9f:4a:c4:87:00:69:c5:89:19:5b:af:68:9f:b1: 52:97:8a:ae:8d:2d:16:a9:0f:eb:30:d2:ab:e9:79: 27:ee:2b:a0:6e:72:0e:03:97:e3:15:95:64:66:eb: 27:92:a6:94:d6:49:cb:f0:fb:f2:df:1b:5f:fe:29: 9c:0d:0c:04:4a:ee:97:17:47:01:92:3b:f5:e8:d4: d8:9c:5d:4f:f9:c4:68:b6:d8:58:ac:e8:96:6a:68: 78:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E0:5F:77:12:03:6E:BF:F1:E1:D7:51:4F:AB:AD:4C:A8:42:43:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/7cae6c62-279c-3b6f-a5d3-382ad59ddaa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.crl X509v3 Authority Key Identifier: keyid:CB:31:32:7B:67:42:3C:B0:C4:2D:66:22:9B:33:A1:EC:77:FA:9C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer sbgp-ipAddrBlock: critical IPv4: 64.234.228.0/22 136.175.64.0/23 167.253.80.0/22 199.202.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:a1:53:c5:2d:76:4b:a9:b8:17:0d:ec:79:75:44:19:36:7e: c8:05:67:2e:27:76:d7:7b:9b:fd:c2:2f:c4:0e:0b:4c:b2:1c: bb:cb:cf:a2:2c:ae:97:a2:79:21:cf:83:b3:c5:3c:3c:24:bd: a2:16:59:59:ca:ad:3e:c6:d3:85:1b:99:8b:05:a0:cf:96:f4: 7c:17:7f:2e:c6:05:91:e6:ae:58:eb:e2:82:c4:a7:74:de:50: 54:53:04:d9:f2:0c:af:81:01:a7:63:bc:40:2b:5c:37:ee:0f: c5:d1:b5:9b:0f:52:fd:5e:0e:9d:aa:10:c4:f3:78:0d:56:e4: 86:96:b3:a9:97:16:e8:cb:28:97:58:40:80:f7:50:34:8e:23: 42:11:91:c6:31:26:51:a2:68:19:09:06:c9:f3:9c:c4:7e:0a: e1:c7:62:85:96:ee:1a:97:16:d1:9c:e4:63:10:8f:b8:d3:b0: c2:2b:42:d3:bf:aa:4e:bf:8e:80:3f:7b:89:0b:63:00:3f:2c: ae:6e:24:54:9f:ab:8a:cc:bb:cf:e1:88:32:62:8e:1e:07:88: be:0b:9c:3b:c3:cc:60:43:f4:d5:23:51:6a:ed:a2:d0:ba:49: 23:4e:39:e7:bb:65:10:84:91:44:5d:e3:38:c1:ed:a8:f6:7e: ca:58:57:18 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE8Nrh9W/ZxWPSt8doAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTc4ZDllM2ItN2FlZC00ZjY1LTg1YjQtMTIwZWMwYTll ZGUzMB4XDTI2MDkwMzE1MTE0OFoXDTI2MTIwMjE2MTE0OFowLzEtMCsGA1UEAxMk YjlhNDUxMGMtYmUwZC00YjFmLTlkNTktYjgxNWYxN2JmN2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8KiowZdpMZbFMJV16fybfzIbbxagRw5XTND DzUtIHkNzJThhAPfUjxpjjcxRe50glQaT/lxj/LsmHtsDonhPU5CxqI+qPCq66pN A+FArL+IvbGePcc4rzeiey+f6edvNBLMeEja654Q0rRlaeRCA7xzX/N0WWfWr6yb kZrinKVZPQ6R6h5kthDy65sckAwzR+3PIpMzwBWlW9oOYKuC6PfD5KDMn0rEhwBp xYkZW69on7FSl4qujS0WqQ/rMNKr6Xkn7iugbnIOA5fjFZVkZusnkqaU1knL8Pvy 3xtf/imcDQwESu6XF0cBkjv16NTYnF1P+cRotthYrOiWamh4RwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFNLgX3cSA26/8eHXUU+rrUyoQkPxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNzhk OWUzYi03YWVkLTRmNjUtODViNC0xMjBlYzBhOWVkZTMvN2NhZTZjNjItMjc5Yy0z YjZmLWE1ZDMtMzgyYWQ1OWRkYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTc4ZDllM2ItN2FlZC00ZjY1LTg1 YjQtMTIwZWMwYTllZGUzL2U3OGQ5ZTNiLTdhZWQtNGY2NS04NWI0LTEyMGVjMGE5 ZWRlMy5jcmwwHwYDVR0jBBgwFoAUyzEye2dCPLDELWYimzOh7Hf6nB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNzhkOWUzYi03YWVkLTRmNjUtODViNC0xMjBl YzBhOWVkZTMuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCQOrkAwQB iK9AAwQCp/1QAwQCx8rgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMahU8UtdkupuBcN7Hl1RBk2fsgFZy4n dtd7m/3CL8QOC0yyHLvLz6IsrpeieSHPg7PFPDwkvaIWWVnKrT7G04UbmYsFoM+W 9HwXfy7GBZHmrljr4oLEp3TeUFRTBNnyDK+BAadjvEArXDfuD8XRtZsPUv1eDp2q EMTzeA1W5IaWs6mXFujLKJdYQID3UDSOI0IRkcYxJlGiaBkJBsnznMR+CuHHYoWW 7hqXFtGc5GMQj7jTsMIrQtO/qk6/joA/e4kLYwA/LK5uJFSfq4rMu8/hiDJijh4H iL4LnDvDzGBD9NUjUWrtotC6SSNOOee7ZRCEkURd4zjB7aj2fspYVxg= -----END CERTIFICATE-----Generated at Tue Sep 8 11:59:48 2026 by rpki-client