$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa File: aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa (raw, json) Hash identifier: mLqni4Z7hBRjJCmgBbbIpdr0VqhdgFG+zoPW/GCTp7E= Subject key identifier: 0E:CF:3D:5D:5D:0E:90:F8:60:23:06:AD:B7:27:59:F6:E7:DE:15:A8 Certificate issuer: /CN=e78d9e3b-7aed-4f65-85b4-120ec0a9ede3 Certificate serial: 010D0C9F4328584F0DBCF52E6F3D9A11BDE23DC0 Authority key identifier: CB:31:32:7B:67:42:3C:B0:C4:2D:66:22:9B:33:A1:EC:77:FA:9C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa Signing time: Thu 03 Sep 2026 15:41:41 +0000 ROA not before: Thu 03 Sep 2026 15:41:41 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 11059 IP address blocks: 64.234.228.0/22 maxlen: 24 136.175.64.0/23 maxlen: 24 199.202.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:bc:f5:2e:6f:3d:9a:11:bd:e2:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e78d9e3b-7aed-4f65-85b4-120ec0a9ede3 Validity Not Before: Sep 3 15:41:41 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=31ff814e-f4ad-4220-b74b-88393def03a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:37:9f:92:33:12:b1:03:78:f6:54:2f:c6: 14:a0:4c:b9:1a:cc:59:0d:66:5b:4d:16:96:a4:d9: 70:4a:34:ff:ac:7c:82:20:99:fe:7e:ac:45:8e:5a: 7c:90:1f:b1:1c:8b:c3:6d:08:8c:e9:66:df:5b:e4: a3:91:84:48:06:47:17:a6:db:85:7e:4d:04:cf:6b: a3:0f:a4:08:52:ec:db:4e:48:f3:84:93:bd:21:5c: b4:53:14:2b:71:1a:0a:d5:08:2a:99:d5:84:29:f7: 18:6a:64:6e:d7:33:72:c0:02:f1:49:51:b0:33:75: b8:b2:da:ed:a6:c8:9f:51:32:73:6f:c9:b0:16:a9: a2:65:47:95:54:ac:46:2f:46:93:be:4a:87:ce:86: 7a:c2:ee:b5:09:4c:7b:06:0b:89:3c:e4:77:98:75: 0c:69:c4:0b:c2:a4:33:7d:01:55:89:98:c2:91:71: fd:97:78:80:78:88:dc:55:a1:f9:b5:7c:c2:dd:52: 5f:88:d2:87:fc:70:ad:a2:f2:0f:c6:6b:30:1c:06: 06:1b:ba:dc:75:2b:52:0f:15:c7:dc:15:3e:a9:5d: a9:5c:b9:47:91:12:93:8c:11:83:aa:eb:9f:bf:54: a5:77:db:a6:9d:d0:b1:c7:c7:a7:66:81:7a:36:86: 58:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CF:3D:5D:5D:0E:90:F8:60:23:06:AD:B7:27:59:F6:E7:DE:15:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/aacdbaa6-ec6f-3a9c-bd9d-b1785fba835f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.crl X509v3 Authority Key Identifier: keyid:CB:31:32:7B:67:42:3C:B0:C4:2D:66:22:9B:33:A1:EC:77:FA:9C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e78d9e3b-7aed-4f65-85b4-120ec0a9ede3.cer sbgp-ipAddrBlock: critical IPv4: 64.234.228.0/22 136.175.64.0/23 199.202.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1f:87:66:f2:bc:cc:06:be:41:bd:81:0d:b5:43:cc:d0:83: 16:e5:ab:21:35:80:9e:d6:0d:5d:ce:b6:1f:54:59:6c:b4:42: b6:8f:35:8d:f6:a7:26:4c:80:28:d5:c9:9c:f1:08:c5:e9:29: cf:22:7d:ab:2c:51:b3:28:ba:d2:6f:ea:83:81:33:44:a7:21: cd:30:e2:4f:ee:e4:98:17:97:8f:a6:58:8f:4e:96:56:52:61: 5e:66:03:74:ec:7c:40:66:cb:2d:49:61:a7:37:d0:63:98:f5: 67:ec:26:ec:aa:e5:4e:2c:18:82:76:d7:b3:90:ac:72:15:60: a2:a0:ee:36:30:1b:c3:08:86:1f:19:1c:e1:4b:61:d1:fc:83: 3b:19:40:be:e9:ce:8b:f7:e3:ed:90:6b:32:8c:d3:d6:86:45: c1:64:b3:9f:b9:1d:ef:66:28:23:bd:91:28:3d:9a:a6:f5:b0: f5:4e:ad:8d:ce:98:7d:fe:97:c3:31:7f:0a:98:ba:bd:d4:54: 00:17:d9:11:7b:57:47:18:1b:58:99:bf:d0:a1:5a:f9:7d:f8: e1:0c:95:12:e4:35:3b:9c:e3:88:02:fd:cb:d8:e3:8b:69:00: 0d:8a:13:5b:53:84:8a:ae:21:d1:f5:f6:a2:5e:8d:82:84:12: ec:9d:c9:2e -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8NvPUubz2aEb3iPcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTc4ZDllM2ItN2FlZC00ZjY1LTg1YjQtMTIwZWMwYTll ZGUzMB4XDTI2MDkwMzE1NDE0MVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk MzFmZjgxNGUtZjRhZC00MjIwLWI3NGItODgzOTNkZWYwM2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApic3n5IzErEDePZUL8YUoEy5GsxZDWZbTRaW pNlwSjT/rHyCIJn+fqxFjlp8kB+xHIvDbQiM6WbfW+SjkYRIBkcXptuFfk0Ez2uj D6QIUuzbTkjzhJO9IVy0UxQrcRoK1QgqmdWEKfcYamRu1zNywALxSVGwM3W4strt psifUTJzb8mwFqmiZUeVVKxGL0aTvkqHzoZ6wu61CUx7BguJPOR3mHUMacQLwqQz fQFViZjCkXH9l3iAeIjcVaH5tXzC3VJfiNKH/HCtovIPxmswHAYGG7rcdStSDxXH 3BU+qV2pXLlHkRKTjBGDquufv1Sld9umndCxx8enZoF6NoZYDwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFA7PPV1dDpD4YCMGrbcnWfbn3hWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNzhk OWUzYi03YWVkLTRmNjUtODViNC0xMjBlYzBhOWVkZTMvYWFjZGJhYTYtZWM2Zi0z YTljLWJkOWQtYjE3ODVmYmE4MzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTc4ZDllM2ItN2FlZC00ZjY1LTg1 YjQtMTIwZWMwYTllZGUzL2U3OGQ5ZTNiLTdhZWQtNGY2NS04NWI0LTEyMGVjMGE5 ZWRlMy5jcmwwHwYDVR0jBBgwFoAUyzEye2dCPLDELWYimzOh7Hf6nB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNzhkOWUzYi03YWVkLTRmNjUtODViNC0xMjBl YzBhOWVkZTMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCQOrkAwQB iK9AAwQCx8rgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHgfh2byvMwGvkG9gQ21Q8zQgxblqyE1gJ7WDV3O th9UWWy0QraPNY32pyZMgCjVyZzxCMXpKc8ifassUbMoutJv6oOBM0SnIc0w4k/u 5JgXl4+mWI9OllZSYV5mA3TsfEBmyy1JYac30GOY9WfsJuyq5U4sGIJ217OQrHIV YKKg7jYwG8MIhh8ZHOFLYdH8gzsZQL7pzov34+2QazKM09aGRcFks5+5He9mKCO9 kSg9mqb1sPVOrY3OmH3+l8MxfwqYur3UVAAX2RF7V0cYG1iZv9ChWvl9+OEMlRLk NTuc44gC/cvY44tpAA2KE1tThIquIdH19qJejYKEEuydyS4= -----END CERTIFICATE-----Generated at Tue Sep 8 12:01:52 2026 by rpki-client