$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa File: 0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa (raw, json) Hash identifier: baJb4fEnubUt4yuvnwz/GwkGGIn9CrGDWq43y7RKf/4= Subject key identifier: 50:7A:D0:5E:A2:32:BE:67:C3:F1:4A:55:CE:AD:84:FB:AB:2E:C1:D5 Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Certificate serial: 010D0C9F4328584F5A32DC2C9547BC0D8AF7ED80 Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 63062 IP address blocks: 67.44.0.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:dc:2c:95:47:bc:0d:8a:f7:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=9b0fdcef-bce9-4b0b-95b8-e761f7aadbe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e6:fc:b3:9c:58:7a:da:d6:fb:8c:ef:9f:38: 06:8f:03:1c:48:ce:5e:93:e2:72:f3:9a:26:a8:80: ad:7b:8c:10:20:2e:20:d0:99:3d:d0:2a:6d:d9:ea: 34:ae:18:96:04:60:72:40:8f:50:a7:e6:d6:0e:e5: 32:91:71:34:60:93:37:e2:e6:04:e7:12:24:1c:05: 8f:15:30:df:8f:e1:1b:33:11:d1:ff:46:85:45:32: ce:ab:c9:1a:c7:a0:4d:83:e9:bd:c8:32:3e:5d:75: 11:06:0d:a5:2f:6f:d2:cf:b6:55:24:17:17:41:9e: fd:33:ed:ae:e9:50:d6:35:b7:47:be:92:a2:d7:f6: a0:b9:be:1f:7b:47:d1:e1:4f:24:db:f1:8b:ff:f2: fd:ae:ff:0b:e4:ec:62:3e:80:1d:71:51:29:c4:b0: 45:9a:2e:a8:65:1b:f7:cc:81:0e:95:88:be:ab:98: fd:a9:eb:00:8e:e3:47:34:ad:b4:a3:2e:da:0e:44: af:87:56:b7:61:8f:6f:a8:ee:0f:96:37:1d:54:18: c0:75:0a:fb:59:61:30:fc:ec:a7:d2:e3:83:51:b2: bc:87:9e:f1:35:c8:67:c3:ea:54:69:a5:15:b1:d4: 68:51:f5:48:25:0a:71:7c:0f:9c:9d:02:ef:4c:7a: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7A:D0:5E:A2:32:BE:67:C3:F1:4A:55:CE:AD:84:FB:AB:2E:C1:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/0ca08e19-e6f9-3adf-a8ed-3d06a212ac9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl X509v3 Authority Key Identifier: keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer sbgp-ipAddrBlock: critical IPv4: 67.44.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d3:59:47:32:41:04:ce:ad:84:2c:03:a6:b0:fd:b5:e7:7a: c7:8f:2a:58:fd:bd:72:8a:63:26:08:83:94:68:41:5d:1c:d7: c1:97:a4:fd:95:5d:f4:a5:ba:95:b0:08:42:a6:a6:76:31:f2: d6:e4:3e:33:68:12:8e:9b:7f:f3:af:2a:0e:44:02:57:b9:e3: 10:14:0c:d6:69:09:1c:f5:98:35:b6:72:23:03:6e:08:d6:b2: f9:24:be:4c:45:ac:62:1b:0d:05:25:34:1a:1e:29:38:2a:9f: e9:4c:48:3f:7d:f0:bc:77:ba:ea:fa:86:75:cc:db:b3:8b:cb: 99:6f:9b:7a:68:c7:43:2c:1c:88:29:af:09:12:06:2d:96:12: 3d:d9:1a:4e:36:3d:ac:84:0e:84:98:1d:bb:08:de:e1:e2:cb: 1d:32:c8:36:1c:d0:a2:c3:ef:a3:e8:12:9e:51:fb:25:14:bf: 4c:cb:94:7f:3c:06:84:93:15:e6:e7:e5:4c:3c:c0:ac:d6:f3: 59:8a:b9:0a:39:b5:44:c9:25:c3:2b:98:bc:d7:5b:b6:77:56: 40:c4:b7:4c:42:a4:2d:d0:4f:94:bd:42:b7:d0:f4:20:0f:72: 7e:65:3b:a9:b4:f9:a2:ee:46:3e:53:ea:67:56:e8:96:bc:ab: 5d:85:12:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtwslUe8DYr37YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmODg2ZGYtNmM1OC00ZWE3LTlkMWYtMDY1OWUyMzI0 NDYwMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OWIwZmRjZWYtYmNlOS00YjBiLTk1YjgtZTc2MWY3YWFkYmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ob8s5xYetrW+4zvnzgGjwMcSM5ek+Jy85om qICte4wQIC4g0Jk90Cpt2eo0rhiWBGByQI9Qp+bWDuUykXE0YJM34uYE5xIkHAWP FTDfj+EbMxHR/0aFRTLOq8kax6BNg+m9yDI+XXURBg2lL2/Sz7ZVJBcXQZ79M+2u 6VDWNbdHvpKi1/agub4fe0fR4U8k2/GL//L9rv8L5OxiPoAdcVEpxLBFmi6oZRv3 zIEOlYi+q5j9qesAjuNHNK20oy7aDkSvh1a3YY9vqO4PljcdVBjAdQr7WWEw/Oyn 0uODUbK8h57xNchnw+pUaaUVsdRoUfVIJQpxfA+cnQLvTHo+6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB60F6iMr5nw/FKVc6thPurLsHVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4 ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5ZTIzMjQ0NjAvMGNhMDhlMTktZTZmOS0z YWRmLWE4ZWQtM2QwNmEyMTJhYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDFmODg2ZGYtNmM1OC00ZWE3LTlk MWYtMDY1OWUyMzI0NDYwL2QxZjg4NmRmLTZjNTgtNGVhNy05ZDFmLTA2NTllMjMy NDQ2MC5jcmwwHwYDVR0jBBgwFoAU3hZRIFaD1ggT5kJFjv0WcO6Hb7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMWY4ODZkZi02YzU4LTRlYTctOWQxZi0wNjU5 ZTIzMjQ0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQywAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/TWUcyQQTOrYQsA6aw/bXnesePKlj9vXKKYyYIg5RoQV0c18GXpP2V XfSlupWwCEKmpnYx8tbkPjNoEo6bf/OvKg5EAle54xAUDNZpCRz1mDW2ciMDbgjW svkkvkxFrGIbDQUlNBoeKTgqn+lMSD998Lx3uur6hnXM27OLy5lvm3pox0MsHIgp rwkSBi2WEj3ZGk42PayEDoSYHbsI3uHiyx0yyDYc0KLD76PoEp5R+yUUv0zLlH88 BoSTFebn5Uw8wKzW81mKuQo5tUTJJcMrmLzXW7Z3VkDEt0xCpC3QT5S9QrfQ9CAP cn5lO6m0+aLuRj5T6mdW6Ja8q12FEnE= -----END CERTIFICATE-----Generated at Thu Oct 8 15:43:00 2026 by rpki-client