$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/11da201d-99ff-3ae0-9b80-4e0f1704663b.roa File: 11da201d-99ff-3ae0-9b80-4e0f1704663b.roa (raw, json) Hash identifier: ae5TMm52tYkko5j3hlSEgDOaECQgs4eFJVdfztTaMW4= Subject key identifier: FF:DF:F6:04:08:0A:25:F6:31:8B:3A:F4:06:D8:AD:DC:AC:EA:29:1A Certificate issuer: /CN=807e0353-894a-4214-89b5-40ce5ac7089f Certificate serial: 010D0C9F4328584F2527A546543C1206B9DA6780 Authority key identifier: FD:E4:AC:FE:9C:7E:84:7E:48:69:97:5C:79:14:E2:56:5B:BB:BB:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/11da201d-99ff-3ae0-9b80-4e0f1704663b.roa Signing time: Sat 12 Sep 2026 01:00:12 +0000 ROA not before: Sat 12 Sep 2026 01:00:12 +0000 ROA not after: Fri 11 Dec 2026 02:00:12 +0000 asID: 400494 IP address blocks: 64.70.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:25:27:a5:46:54:3c:12:06:b9:da:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=807e0353-894a-4214-89b5-40ce5ac7089f Validity Not Before: Sep 12 01:00:12 2026 GMT Not After : Dec 11 02:00:12 2026 GMT Subject: CN=d30b1e6b-c630-43ce-95e5-b3a0c4ae70c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3c:59:08:0b:1e:d5:da:20:b8:ae:a9:0f:27: 92:50:85:a6:85:da:22:a7:10:c4:da:58:1f:6f:27: af:b1:9a:32:87:e0:85:f8:12:b0:c4:0d:04:c4:77: 58:de:6d:60:7f:67:cf:c1:85:29:f3:9b:06:41:74: b9:11:2c:a1:00:58:62:d5:99:06:32:2f:d3:9a:99: 95:16:1c:97:c7:b1:81:0e:92:1a:8a:96:6e:c7:dd: 17:6b:b0:9c:e2:7a:71:eb:37:1f:b7:92:7f:22:0a: bf:5e:62:95:80:60:38:10:c9:65:3b:3f:93:57:2b: ba:6d:b5:dd:82:08:b6:bd:11:a8:7e:bc:a4:01:98: 8f:d9:3f:9c:ab:97:ad:c2:48:09:7f:bd:16:01:5f: 74:6d:ff:18:19:dd:65:b7:16:33:05:78:a5:2b:14: cc:c3:7f:80:fb:4c:69:0c:02:13:21:78:98:0f:77: 8e:1c:97:ca:59:34:b4:ae:43:41:70:e9:bb:0a:20: fe:a2:c3:19:51:74:fe:3f:29:8b:02:96:ab:c0:68: 64:0e:6e:54:14:e2:72:42:b0:d4:f9:6b:ac:cb:e6: dd:14:93:8a:3b:a6:34:1d:8b:37:7a:48:2f:6d:fd: 77:dd:85:42:b4:cb:33:b1:2f:e7:15:8b:d0:e6:85: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DF:F6:04:08:0A:25:F6:31:8B:3A:F4:06:D8:AD:DC:AC:EA:29:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/11da201d-99ff-3ae0-9b80-4e0f1704663b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f/807e0353-894a-4214-89b5-40ce5ac7089f.crl X509v3 Authority Key Identifier: keyid:FD:E4:AC:FE:9C:7E:84:7E:48:69:97:5C:79:14:E2:56:5B:BB:BB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/807e0353-894a-4214-89b5-40ce5ac7089f.cer sbgp-ipAddrBlock: critical IPv4: 64.70.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:8e:e9:b9:15:48:28:87:af:01:ae:0a:86:88:f6:a1:a4:2c: ee:49:d5:5f:76:ac:e4:81:13:93:21:3f:ab:a8:eb:82:f9:fb: b9:5e:00:f5:e6:a4:90:69:b4:0a:00:2b:6d:94:78:1a:14:81: e1:40:99:93:0d:db:37:ce:aa:5f:95:e4:9c:ef:cc:1e:10:8b: 5a:c7:66:4c:8f:44:85:06:7e:62:29:16:58:e4:f7:a8:8e:ec: 6c:a7:1b:ff:29:06:7e:e3:38:50:7f:d4:09:d1:30:98:85:fe: db:02:e0:38:bf:1b:91:13:5e:41:2a:11:e3:46:e4:49:9a:8a: b7:20:91:fe:a6:e7:fa:4e:47:ef:e3:01:39:ab:56:18:88:d8: bf:65:52:0e:49:fa:15:59:5a:f3:bb:b2:c4:44:0a:e7:22:1b: e3:ee:e5:1a:38:e6:84:e4:b3:ca:73:41:2d:8b:1a:10:f1:97: cf:32:03:d9:fe:35:8d:ff:5a:2e:2f:05:7c:b3:46:d8:de:79: cc:f7:13:df:07:94:87:35:5b:e6:2e:b1:ff:c1:d2:6b:5a:15: bf:14:1c:23:60:17:37:50:57:d6:3e:57:ba:b2:e8:0c:0e:80: 6b:ee:5b:84:da:65:1e:da:4c:20:f8:94:5c:df:e0:e0:1c:ec: c2:7c:3b:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8lJ6VGVDwSBrnaZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODA3ZTAzNTMtODk0YS00MjE0LTg5YjUtNDBjZTVhYzcw ODlmMB4XDTI2MDkxMjAxMDAxMloXDTI2MTIxMTAyMDAxMlowLzEtMCsGA1UEAxMk ZDMwYjFlNmItYzYzMC00M2NlLTk1ZTUtYjNhMGM0YWU3MGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zxZCAse1doguK6pDyeSUIWmhdoipxDE2lgf byevsZoyh+CF+BKwxA0ExHdY3m1gf2fPwYUp85sGQXS5ESyhAFhi1ZkGMi/TmpmV FhyXx7GBDpIaipZux90Xa7Cc4npx6zcft5J/Igq/XmKVgGA4EMllOz+TVyu6bbXd ggi2vRGofrykAZiP2T+cq5etwkgJf70WAV90bf8YGd1ltxYzBXilKxTMw3+A+0xp DAITIXiYD3eOHJfKWTS0rkNBcOm7CiD+osMZUXT+PymLAparwGhkDm5UFOJyQrDU +Wusy+bdFJOKO6Y0HYs3ekgvbf133YVCtMszsS/nFYvQ5oUj7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/f9gQICiX2MYs69AbYrdys6ikaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84MDdl MDM1My04OTRhLTQyMTQtODliNS00MGNlNWFjNzA4OWYvMTFkYTIwMWQtOTlmZi0z YWUwLTliODAtNGUwZjE3MDQ2NjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODA3ZTAzNTMtODk0YS00MjE0LTg5 YjUtNDBjZTVhYzcwODlmLzgwN2UwMzUzLTg5NGEtNDIxNC04OWI1LTQwY2U1YWM3 MDg5Zi5jcmwwHwYDVR0jBBgwFoAU/eSs/px+hH5IaZdceRTiVlu7u5YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84MDdlMDM1My04OTRhLTQyMTQtODliNS00MGNl NWFjNzA4OWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQEZ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOO6bkVSCiHrwGuCoaI9qGkLO5J1V92rOSBE5MhP6uo64L5+7leAPXm pJBptAoAK22UeBoUgeFAmZMN2zfOql+V5JzvzB4Qi1rHZkyPRIUGfmIpFljk96iO 7GynG/8pBn7jOFB/1AnRMJiF/tsC4Di/G5ETXkEqEeNG5Emaircgkf6m5/pOR+/j ATmrVhiI2L9lUg5J+hVZWvO7ssRECuciG+Pu5Ro45oTks8pzQS2LGhDxl88yA9n+ NY3/Wi4vBXyzRtjeecz3E98HlIc1W+Yusf/B0mtaFb8UHCNgFzdQV9Y+V7qy6AwO gGvuW4TaZR7aTCD4lFzf4OAc7MJ8O98= -----END CERTIFICATE-----Generated at Mon Oct 12 09:53:38 2026 by rpki-client