$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa File: 9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa (raw, json) Hash identifier: qOY5b7m8pKt8LEo7eY8aUGEKcCPP/9UXDse+nxo8iRU= Subject key identifier: E7:BE:55:26:CB:47:D4:50:4B:85:0E:BD:11:24:60:98:38:0A:78:28 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584EF87CBD6F8FEEFEF4B4F7E540 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 209 IP address blocks: 64.213.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:bd:6f:8f:ee:fe:f4:b4:f7:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=7f86136d-5072-43d9-8c45-cabb8ee4a7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:35:3f:6a:4b:cb:4a:53:dd:8a:d2:33:19: 4d:d9:33:cb:62:6f:61:59:00:3b:45:95:98:01:ca: b5:4f:27:b1:a9:4c:f8:bb:2d:0f:52:c1:90:a3:7b: cd:12:4d:07:1b:1b:c1:51:c8:4b:33:46:ba:c6:0e: 0d:3e:a9:0d:9d:d1:a5:ec:b3:2a:e0:59:56:aa:e1: e9:b2:5e:e2:3a:62:62:f5:88:5f:98:80:0d:04:46: 41:71:a0:f7:7a:9e:a5:8e:b9:99:d3:5b:fc:ca:30: 68:09:bc:e3:14:ca:5c:7d:e1:2d:79:7e:c1:0d:ef: 82:75:8a:c8:62:48:7d:0f:db:55:22:ed:e4:b7:d6: 13:1c:4c:d4:52:f5:db:8d:22:f4:81:3e:08:5e:1c: fe:ea:cd:88:e3:02:9f:b2:88:59:3d:e4:42:6a:38: 49:2a:b9:4f:27:ef:ba:56:16:52:1d:7c:2c:f4:df: 0c:ac:8f:94:0a:80:13:57:89:f9:8c:3e:89:40:d2: af:08:bd:02:9a:1c:8a:7f:59:e5:68:cc:95:48:fe: 11:ea:76:73:14:64:83:b6:a8:3f:02:bf:bd:e8:dc: 87:3d:0c:4c:6a:b8:46:fa:43:59:d6:98:aa:d0:fa: 55:cf:70:ce:9b:79:0d:28:51:b5:f7:07:00:b3:9b: 8d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BE:55:26:CB:47:D4:50:4B:85:0E:BD:11:24:60:98:38:0A:78:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/9bec768c-da8a-394a-9c6f-2cee7025dd7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 64.213.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:61:1a:f7:6f:68:64:a7:39:34:f6:de:56:6b:49:1b:a4:78: bf:7f:a0:91:1c:49:2b:e3:3d:ca:9a:37:32:5e:b2:99:cf:09: 61:86:a3:68:32:8f:ab:80:e6:3c:5a:21:6b:3c:de:ad:73:60: 25:5b:2b:22:de:72:b3:da:cc:1e:7e:5c:f5:cc:7f:c1:07:b1: 08:e1:e6:a1:ee:e1:7e:b4:89:7d:81:7c:9b:7d:f5:11:3c:b9: cd:e8:be:86:0e:5b:c4:4a:44:04:be:23:29:d9:89:89:8b:6b: 85:7e:b9:31:ba:c7:36:31:20:4a:98:a5:db:5f:25:41:7f:d3: 02:89:3b:c9:dd:eb:00:d8:a7:7e:cb:48:e7:a7:e1:80:6f:06: cc:15:ac:0c:77:76:1e:f6:65:e5:ea:d2:65:79:c3:6a:a6:3d: 57:1f:ed:59:e4:51:e2:5d:13:b3:a9:2c:a2:ec:48:f4:ee:91: ed:49:58:bf:2b:5b:b8:e1:89:a9:38:aa:fb:cb:a1:a5:7f:c0: 57:2c:d7:b9:2c:2e:48:0e:82:99:98:1c:50:aa:22:11:8d:b6: bd:07:86:48:ae:eb:4b:e8:5b:ce:8a:db:27:f1:64:08:82:2b: 4c:a0:a1:f7:6c:87:85:49:ac:62:46:18:d8:da:19:a9:12:4a: c6:bc:d1:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fL1vj+7+9LT35UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk N2Y4NjEzNmQtNTA3Mi00M2Q5LThjNDUtY2FiYjhlZTRhN2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvM1P2pLy0pT3YrSMxlN2TPLYm9hWQA7RZWY Acq1TyexqUz4uy0PUsGQo3vNEk0HGxvBUchLM0a6xg4NPqkNndGl7LMq4FlWquHp sl7iOmJi9YhfmIANBEZBcaD3ep6ljrmZ01v8yjBoCbzjFMpcfeEteX7BDe+CdYrI Ykh9D9tVIu3kt9YTHEzUUvXbjSL0gT4IXhz+6s2I4wKfsohZPeRCajhJKrlPJ++6 VhZSHXws9N8MrI+UCoATV4n5jD6JQNKvCL0CmhyKf1nlaMyVSP4R6nZzFGSDtqg/ Ar+96NyHPQxMarhG+kNZ1piq0PpVz3DOm3kNKFG19wcAs5uNuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOe+VSbLR9RQS4UOvREkYJg4CngoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvOWJlYzc2OGMtZGE4YS0z OTRhLTljNmYtMmNlZTcwMjVkZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQNVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGthGvdvaGSnOTT23lZrSRukeL9/oJEcSSvjPcqaNzJespnPCWGGo2gy j6uA5jxaIWs83q1zYCVbKyLecrPazB5+XPXMf8EHsQjh5qHu4X60iX2BfJt99RE8 uc3ovoYOW8RKRAS+IynZiYmLa4V+uTG6xzYxIEqYpdtfJUF/0wKJO8nd6wDYp37L SOen4YBvBswVrAx3dh72ZeXq0mV5w2qmPVcf7VnkUeJdE7OpLKLsSPTuke1JWL8r W7jhiak4qvvLoaV/wFcs17ksLkgOgpmYHFCqIhGNtr0Hhkiu60voW86K2yfxZAiC K0ygofdsh4VJrGJGGNjaGakSSsa80U4= -----END CERTIFICATE-----Generated at Sun Sep 27 05:36:59 2026 by rpki-client