$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa File: 0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa (raw, json) Hash identifier: 2V9cnoiJTQBqreMb0bXV9WXtjOu4wBvhN9q8LV1byo8= Subject key identifier: 02:9A:2F:67:45:15:B5:AB:5C:0F:1A:14:56:93:05:83:48:7C:6B:5C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584FA2C87FDBB9620D9CADCD1C80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 30036 IP address blocks: 64.237.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:7f:db:b9:62:0d:9c:ad:cd:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=6c50c3b4-de20-4848-97f6-c129d5a40952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:63:8e:32:dc:cd:d8:c5:0f:fd:71:27:f2:2b: 01:72:39:d3:f5:17:13:15:d9:44:dc:e2:98:47:a8: 5f:b7:15:f7:94:51:c8:c7:4b:a6:bb:da:98:e8:0d: 3a:c4:47:a9:cf:72:97:8b:3c:96:1e:67:76:f6:90: f2:72:11:91:5b:3d:a5:19:e2:7b:6c:c5:de:43:27: 42:07:bb:1c:2c:8d:bc:9c:1e:36:54:e0:8f:bc:42: 32:f3:d2:67:e7:2a:6c:4d:be:90:4e:fe:c4:ec:00: d4:08:06:33:7f:d3:86:a7:72:75:46:4f:a5:b7:64: 34:f0:10:31:09:37:c6:7d:53:28:2a:f9:75:4c:57: 68:af:5a:b8:87:cc:91:12:a2:55:63:a2:cb:07:2c: 51:6c:13:a3:3c:21:7b:ed:d2:bd:85:1b:2c:e9:79: e2:c8:bc:0e:15:26:bd:b2:d3:cc:d6:30:72:ff:00: 5a:75:dc:e3:d9:f1:00:e8:f6:97:e2:02:d0:b8:c8: 84:c1:fd:af:d7:65:92:fb:25:a2:5b:63:a0:ba:03: b4:53:f4:97:90:5a:51:4a:28:bf:c7:2c:dc:14:39: 64:24:fb:0e:56:ea:b7:36:5f:be:03:40:a9:ff:90: 5a:a4:06:b6:84:a4:d4:da:b5:19:f6:ec:3f:7a:1e: 1d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9A:2F:67:45:15:B5:AB:5C:0F:1A:14:56:93:05:83:48:7C:6B:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0fb8a8db-dfd8-3f36-af87-3ccc97778ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 64.237.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:66:dd:08:f2:dc:9c:a9:86:47:04:3c:fb:60:47:82:d0:b7: cc:d1:28:6a:5c:0e:6b:40:29:d6:27:2e:55:34:94:12:f1:4d: 0b:ab:da:04:9a:af:6c:3b:fa:12:2e:44:64:36:7e:57:40:45: 5f:03:6c:80:d5:68:c1:af:3d:cd:9a:11:89:fa:e5:0e:16:ab: 8f:68:d0:e1:19:4a:d2:fc:3d:aa:51:8e:5c:38:af:17:c9:67: af:f5:61:02:33:de:a5:91:55:b0:0c:47:70:eb:ce:ec:85:d2: 93:05:f4:3c:a4:4f:37:77:41:d1:4a:5c:3b:54:2f:25:e1:9d: 53:78:7c:ba:cb:31:57:a9:0c:9a:a4:fa:70:4f:86:53:3e:5b: 84:73:2b:7f:89:75:44:40:6b:d4:00:89:6c:10:cc:5a:96:b5: 07:db:a3:de:55:b8:ee:2d:35:d1:20:fb:14:7e:3b:a1:1c:48: df:37:49:e6:bf:41:35:81:07:0e:9f:89:cb:25:39:e1:00:50: 05:88:a9:7a:e0:88:9e:ea:2c:b5:8a:81:ac:c8:24:3a:14:60: e5:e8:e0:18:10:4b:71:b6:52:db:f6:3f:22:5e:3b:88:80:95: ca:39:6c:15:0b:2e:f4:d0:0a:e5:03:6d:eb:b3:ce:f4:81:9f: eb:08:8a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+iyH/buWINnK3NHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk NmM1MGMzYjQtZGUyMC00ODQ4LTk3ZjYtYzEyOWQ1YTQwOTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGOOMtzN2MUP/XEn8isBcjnT9RcTFdlE3OKY R6hftxX3lFHIx0umu9qY6A06xEepz3KXizyWHmd29pDychGRWz2lGeJ7bMXeQydC B7scLI28nB42VOCPvEIy89Jn5ypsTb6QTv7E7ADUCAYzf9OGp3J1Rk+lt2Q08BAx CTfGfVMoKvl1TFdor1q4h8yREqJVY6LLByxRbBOjPCF77dK9hRss6XniyLwOFSa9 stPM1jBy/wBaddzj2fEA6PaX4gLQuMiEwf2v12WS+yWiW2OgugO0U/SXkFpRSii/ xyzcFDlkJPsOVuq3Nl++A0Cp/5BapAa2hKTU2rUZ9uw/eh4dbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKaL2dFFbWrXA8aFFaTBYNIfGtcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGZiOGE4ZGItZGZkOC0z ZjM2LWFmODctM2NjYzk3Nzc4ZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQO0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNm3Qjy3JyphkcEPPtgR4LQt8zRKGpcDmtAKdYnLlU0lBLxTQur2gSa r2w7+hIuRGQ2fldARV8DbIDVaMGvPc2aEYn65Q4Wq49o0OEZStL8PapRjlw4rxfJ Z6/1YQIz3qWRVbAMR3DrzuyF0pMF9DykTzd3QdFKXDtULyXhnVN4fLrLMVepDJqk +nBPhlM+W4RzK3+JdURAa9QAiWwQzFqWtQfbo95VuO4tNdEg+xR+O6EcSN83Sea/ QTWBBw6ficslOeEAUAWIqXrgiJ7qLLWKgazIJDoUYOXo4BgQS3G2Utv2PyJeO4iA lco5bBULLvTQCuUDbeuzzvSBn+sIinA= -----END CERTIFICATE-----Generated at Sun Nov 15 18:44:04 2026 by rpki-client