$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/db9f9283-9f59-3943-9b5d-414b64f0037f.roa File: db9f9283-9f59-3943-9b5d-414b64f0037f.roa (raw, json) Hash identifier: sZJ3HdPAlCi230nHEI+ZbxdFyHrgJbgHNy/Sv/8E7aQ= Subject key identifier: 89:D8:E1:F6:D3:9C:0B:22:F1:D0:69:22:03:1B:B9:48:C2:F9:80:DC Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Certificate serial: 010D0C9F4328584F1E2CF2E6178628ADF8E084A0 Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/db9f9283-9f59-3943-9b5d-414b64f0037f.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 401659 IP address blocks: 64.255.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:f2:e6:17:86:28:ad:f8:e0:84:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=b17191ff-645e-4df5-93f8-b53d9458c157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:27:2d:14:4e:24:c8:f2:d9:f5:07:00:58:e3: 3d:04:84:9c:30:61:00:6f:e5:48:0e:c1:12:2f:15: da:63:fb:76:9d:74:9c:c4:15:04:34:20:11:3a:b7: 24:34:13:c1:75:8e:a5:59:56:24:dd:70:5e:31:02: 77:83:86:02:77:fc:d9:de:a2:b4:60:27:97:bf:93: 79:c1:fb:1a:d0:de:3e:30:d7:7b:1a:de:c9:37:2c: 69:43:81:28:76:ff:fc:9f:44:0e:63:bd:7f:fe:13: 18:6b:40:62:ab:58:31:ae:d0:b0:5f:eb:56:38:21: 8c:ce:ba:89:64:fa:db:22:a6:d6:ac:32:79:1e:43: 2b:cb:14:27:c7:3d:a0:1a:54:75:2d:a2:1f:18:ab: 3d:e2:9e:a3:c1:fe:9d:22:ec:e7:07:88:41:49:93: 5b:ff:26:33:1e:08:4a:e7:81:f9:69:51:c9:f1:ad: 36:99:0c:4c:8c:37:68:42:77:78:96:d8:bf:97:18: 89:8f:dd:2e:31:75:d9:6d:95:ec:7f:dd:6d:e7:47: 07:95:61:e8:65:34:36:38:b4:a9:f2:85:b7:63:d0: f5:d3:c0:02:54:06:6d:71:25:02:8e:49:88:bc:06: d5:28:e4:db:e3:10:50:e1:dc:54:d1:ea:e0:7e:84: bb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D8:E1:F6:D3:9C:0B:22:F1:D0:69:22:03:1B:B9:48:C2:F9:80:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/db9f9283-9f59-3943-9b5d-414b64f0037f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl X509v3 Authority Key Identifier: keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer sbgp-ipAddrBlock: critical IPv4: 64.255.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:96:a8:e2:8b:de:1f:a5:58:86:78:f7:d4:3e:74:25:4d:ab: c9:9a:f3:16:61:9c:cd:e3:8b:f3:32:08:4c:dc:68:f8:c7:79: c8:54:9a:f2:92:c3:b7:a9:a0:91:5d:41:d2:64:db:f3:b8:de: fd:11:66:ce:4d:e3:90:55:2b:ca:ca:f8:22:82:06:bf:d4:cf: e2:02:00:aa:a9:c8:74:76:3f:fa:6b:f8:a9:18:71:eb:b4:48: 26:a5:6a:99:55:72:8d:d5:bd:36:9e:85:5d:ec:f0:92:48:3c: bc:4f:ee:22:24:64:57:a8:8c:64:ff:f6:00:51:1b:45:99:57: 45:97:52:0b:ba:94:15:db:36:35:b2:dd:2f:8d:f9:4b:2f:71: a6:d5:af:c3:60:0d:63:d4:3a:68:a2:7e:9b:03:9f:bf:ea:5a: 6f:55:4c:ef:0b:90:68:cc:c9:52:b9:de:66:39:07:7a:7c:4e: 77:97:d3:22:74:2d:ff:79:66:a1:c6:44:b0:21:87:27:65:9a: 5d:50:72:f5:52:c2:d2:1b:4a:f1:a6:99:1e:25:6c:ea:fc:9a: c9:2a:cf:7e:6f:5f:71:0d:32:42:63:0a:14:03:94:f7:23:0e: 2b:48:8f:6c:39:93:f6:18:81:a1:2b:be:b1:1c:54:42:c3:da: 3a:5a:c4:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPLmF4YorfjghKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0 MjZmMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk YjE3MTkxZmYtNjQ1ZS00ZGY1LTkzZjgtYjUzZDk0NThjMTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApictFE4kyPLZ9QcAWOM9BIScMGEAb+VIDsES LxXaY/t2nXScxBUENCAROrckNBPBdY6lWVYk3XBeMQJ3g4YCd/zZ3qK0YCeXv5N5 wfsa0N4+MNd7Gt7JNyxpQ4Eodv/8n0QOY71//hMYa0Biq1gxrtCwX+tWOCGMzrqJ ZPrbIqbWrDJ5HkMryxQnxz2gGlR1LaIfGKs94p6jwf6dIuznB4hBSZNb/yYzHghK 54H5aVHJ8a02mQxMjDdoQnd4lti/lxiJj90uMXXZbZXsf91t50cHlWHoZTQ2OLSp 8oW3Y9D108ACVAZtcSUCjkmIvAbVKOTb4xBQ4dxU0ergfoS70wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInY4fbTnAsi8dBpIgMbuUjC+YDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvZGI5ZjkyODMtOWY1OS0z OTQzLTliNWQtNDE0YjY0ZjAwMzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQP8vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGWqOKL3h+lWIZ499Q+dCVNq8ma8xZhnM3ji/MyCEzcaPjHechUmvKS w7epoJFdQdJk2/O43v0RZs5N45BVK8rK+CKCBr/Uz+ICAKqpyHR2P/pr+KkYceu0 SCalaplVco3VvTaehV3s8JJIPLxP7iIkZFeojGT/9gBRG0WZV0WXUgu6lBXbNjWy 3S+N+UsvcabVr8NgDWPUOmiifpsDn7/qWm9VTO8LkGjMyVK53mY5B3p8TneX0yJ0 Lf95ZqHGRLAhhydlml1QcvVSwtIbSvGmmR4lbOr8mskqz35vX3ENMkJjChQDlPcj DitIj2w5k/YYgaErvrEcVELD2jpaxIU= -----END CERTIFICATE-----Generated at Fri Sep 11 17:54:43 2026 by rpki-client