$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa File: dd732f92-179e-33d5-9832-59f3b948cc7c.roa (raw, json) Hash identifier: z3ZYrF2alP/llgO7DMPmWGtBzGl+XocdtYHDymVczoY= Subject key identifier: E3:4B:B1:EA:EC:93:51:05:FF:37:23:A4:43:F7:C6:3C:58:73:9B:13 Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b Certificate serial: 010D0C9F4328584F43DD4EFB7FC59F52094CCE80 Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 67.20.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:4e:fb:7f:c5:9f:52:09:4c:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=7fe321a1-340d-4d96-9347-afcbffe2ba36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7a:5b:97:7d:8e:21:8b:73:b9:19:f9:97:71: 93:e3:53:a2:55:14:b7:0b:b2:1e:e9:9c:4b:62:24: 2c:53:9c:91:6f:35:aa:fb:f5:4b:a0:4b:1b:ea:84: 52:b3:4c:35:93:69:69:15:9a:2b:38:41:c5:6f:8c: b5:0c:a8:8b:07:44:6a:d3:17:9d:2a:c4:ea:97:7d: fd:33:d4:dd:1f:a4:20:30:1a:89:ba:95:30:ab:85: 7a:01:ed:40:f1:1e:83:8f:1a:8c:36:21:46:18:25: 0a:21:0d:b5:42:88:06:80:c7:4c:04:bf:65:c3:68: 43:60:5a:81:6d:38:cb:d2:5b:09:14:27:29:39:22: b4:10:29:5d:af:91:58:ca:ed:c4:3d:55:af:3a:76: 2a:46:b6:57:c3:6f:11:84:2c:b4:89:ac:96:1d:a5: 82:6f:50:a3:a0:c3:8f:3b:9d:84:fb:d6:40:bc:0f: ae:8b:03:cd:75:7f:5d:18:2d:ba:36:c4:57:d3:df: 61:bd:a1:b0:b4:1f:b4:e6:00:c7:94:4b:92:62:d7: bf:d7:c3:ec:2d:e9:e9:18:23:9b:65:4c:c7:60:d7: d9:22:8d:af:4f:ff:2f:7b:0e:73:45:34:4f:2a:f7: 66:14:b0:69:ee:5c:f3:ca:90:14:51:91:c3:ba:7d: a1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4B:B1:EA:EC:93:51:05:FF:37:23:A4:43:F7:C6:3C:58:73:9B:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl X509v3 Authority Key Identifier: keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer sbgp-ipAddrBlock: critical IPv4: 67.20.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3d:ba:48:6a:03:38:65:b0:ee:56:fe:b8:fb:4d:27:d3:70: 5d:19:27:24:ca:88:ca:fa:fd:1d:a1:f7:5d:a5:16:e2:56:46: cd:f5:55:1e:21:da:0a:70:db:c7:fd:a7:d2:46:51:ea:0a:10: ce:62:7e:92:22:f9:e1:b7:3f:e6:34:25:48:f7:8d:29:8d:68: 3d:a8:15:2d:b8:a8:87:fa:49:03:f0:6f:ae:b7:a0:a2:2b:7f: 0f:07:fe:f4:d1:7d:8b:45:9d:13:a5:a4:ad:72:07:31:07:b5: a3:52:c7:ae:15:20:35:0d:f0:85:21:ba:e0:14:0f:56:1b:58: a8:64:3e:aa:c6:f7:fb:c3:46:87:ab:6c:84:2f:59:c8:3c:8c: c1:3a:b8:9e:54:37:69:20:48:95:f3:72:fa:2e:7d:3d:73:4e: 75:c4:24:c9:f9:b9:61:9b:92:ca:f5:6f:ed:3c:0a:95:39:eb: 47:d1:04:ac:a4:e7:bf:d6:d3:db:65:24:9d:ed:33:35:49:bd: 14:9b:3a:08:b3:e0:4f:fa:54:3c:66:8e:d7:f7:12:aa:49:07: 2a:37:27:70:86:ec:05:96:30:4d:29:f9:0d:10:81:b2:c5:b0: aa:1d:22:8e:63:f1:a6:7f:cf:85:fe:6b:46:d7:36:82:35:1a: f1:12:b7:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3U77f8WfUglMzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi OTFiMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk N2ZlMzIxYTEtMzQwZC00ZDk2LTkzNDctYWZjYmZmZTJiYTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3pbl32OIYtzuRn5l3GT41OiVRS3C7Ie6ZxL YiQsU5yRbzWq+/VLoEsb6oRSs0w1k2lpFZorOEHFb4y1DKiLB0Rq0xedKsTql339 M9TdH6QgMBqJupUwq4V6Ae1A8R6DjxqMNiFGGCUKIQ21QogGgMdMBL9lw2hDYFqB bTjL0lsJFCcpOSK0ECldr5FYyu3EPVWvOnYqRrZXw28RhCy0iayWHaWCb1CjoMOP O52E+9ZAvA+uiwPNdX9dGC26NsRX099hvaGwtB+05gDHlEuSYte/18PsLenpGCOb ZUzHYNfZIo2vT/8vew5zRTRPKvdmFLBp7lzzypAUUZHDun2hwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONLsersk1EF/zcjpEP3xjxYc5sTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvZGQ3MzJmOTItMTc5ZS0z M2Q1LTk4MzItNTlmM2I5NDhjYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0 MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl ZDM0YWI5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQxRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE9ukhqAzhlsO5W/rj7TSfTcF0ZJyTKiMr6/R2h912lFuJWRs31VR4h 2gpw28f9p9JGUeoKEM5ifpIi+eG3P+Y0JUj3jSmNaD2oFS24qIf6SQPwb663oKIr fw8H/vTRfYtFnROlpK1yBzEHtaNSx64VIDUN8IUhuuAUD1YbWKhkPqrG9/vDRoer bIQvWcg8jME6uJ5UN2kgSJXzcvoufT1zTnXEJMn5uWGbksr1b+08CpU560fRBKyk 57/W09tlJJ3tMzVJvRSbOgiz4E/6VDxmjtf3EqpJByo3J3CG7AWWME0p+Q0QgbLF sKodIo5j8aZ/z4X+a0bXNoI1GvESt9c= -----END CERTIFICATE-----Generated at Sun Oct 11 08:48:46 2026 by rpki-client