$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4dc04fe-8de4-443f-8539-12b24e976fe6/f52ef986-d90f-3dfd-9a92-975eca75bc7f.roa File: f52ef986-d90f-3dfd-9a92-975eca75bc7f.roa (raw, json) Hash identifier: EBjk+OFG1Jcr0ks1fh5NkZ+tq/i0FE3zt7g1fSs2+XU= Subject key identifier: C8:29:35:7F:17:93:4E:86:4A:C3:41:FE:E1:4E:73:64:1B:88:13:FD Certificate issuer: /CN=e4dc04fe-8de4-443f-8539-12b24e976fe6 Certificate serial: 010D0C9F4328584F49732B0112E41198200C9728 Authority key identifier: 8F:66:05:1A:0B:13:16:33:F3:6D:BF:5A:40:07:C1:42:7E:1C:E3:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4dc04fe-8de4-443f-8539-12b24e976fe6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4dc04fe-8de4-443f-8539-12b24e976fe6/f52ef986-d90f-3dfd-9a92-975eca75bc7f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 26522 IP address blocks: 64.89.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4dc04fe-8de4-443f-8539-12b24e976fe6/e4dc04fe-8de4-443f-8539-12b24e976fe6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4dc04fe-8de4-443f-8539-12b24e976fe6/e4dc04fe-8de4-443f-8539-12b24e976fe6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4dc04fe-8de4-443f-8539-12b24e976fe6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:2b:01:12:e4:11:98:20:0c:97:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4dc04fe-8de4-443f-8539-12b24e976fe6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d5f3fc20-f86f-4682-a3e6-53f0b42cd1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:29:80:69:af:b1:f4:97:48:86:9c:d3:c8:21: 2e:b5:18:20:72:b9:3d:90:2a:d9:48:f2:43:81:3b: 1e:43:1b:9c:28:0d:95:61:04:41:55:79:49:4e:4d: 07:9c:bb:fd:1c:51:e3:4b:a9:77:bb:32:73:63:04: d4:85:58:b8:c0:13:13:4b:ba:d1:97:39:f3:75:2c: 2e:4c:e9:e8:ef:51:5f:c4:39:93:78:b8:82:e4:a3: 4d:fd:9f:1e:a6:0c:8c:94:d7:77:b2:13:6b:9c:d2: 88:6b:09:94:e0:0f:7d:ee:86:cf:ec:46:fb:ce:75: 56:f0:bd:9d:d5:33:97:51:c6:76:0c:f9:17:5f:62: 1a:38:ec:5e:0c:ae:e0:03:b7:6e:b2:9a:e0:cf:4f: 93:f9:ad:5e:f7:94:1f:00:b6:b1:ff:3d:23:d9:4c: 0a:d1:5c:06:5a:fd:1e:0c:e3:3a:29:48:d7:34:aa: 6e:bc:1c:e9:09:dc:e1:6b:78:6c:a8:2b:23:da:f8: 1f:08:69:bb:15:c6:2f:17:e7:c1:b0:2c:e1:96:6f: e4:7e:4c:c8:f2:f2:37:97:cc:07:69:f3:c4:b5:f3: 0a:e0:b4:b2:a1:53:46:a7:f5:43:2a:48:b9:f8:73: d2:6a:1c:2f:75:1d:23:d8:d3:e8:6d:01:f9:3d:52: 7f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:29:35:7F:17:93:4E:86:4A:C3:41:FE:E1:4E:73:64:1B:88:13:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4dc04fe-8de4-443f-8539-12b24e976fe6/f52ef986-d90f-3dfd-9a92-975eca75bc7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4dc04fe-8de4-443f-8539-12b24e976fe6/e4dc04fe-8de4-443f-8539-12b24e976fe6.crl X509v3 Authority Key Identifier: keyid:8F:66:05:1A:0B:13:16:33:F3:6D:BF:5A:40:07:C1:42:7E:1C:E3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e4dc04fe-8de4-443f-8539-12b24e976fe6.cer sbgp-ipAddrBlock: critical IPv4: 64.89.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:02:21:d1:a3:c2:a7:41:57:1e:19:42:fd:84:4d:6a:2d:48: bb:46:17:fd:35:81:fe:e7:98:88:e3:39:34:de:a2:28:a4:e4: 83:00:f0:a8:01:01:34:56:c6:0d:17:49:7b:47:18:bc:67:2a: 20:86:06:e1:a7:c4:4b:ad:c4:f3:a0:0f:b3:cd:e4:b5:79:8f: 2d:5c:af:74:5e:13:6d:dc:00:62:4f:2d:63:fc:fc:6b:e4:cd: 34:d3:7c:f6:c3:fe:1f:25:b1:c6:87:77:58:98:9d:99:28:ce: 3f:0d:8d:d6:f1:3c:e3:76:67:d3:7a:8a:30:2a:d1:fc:69:5d: 2e:12:f2:a9:2d:41:2a:a9:cf:5c:b3:e8:40:a9:e7:94:68:ed: 91:94:c3:7d:66:e6:37:c4:71:d0:cc:5f:ae:66:b0:ab:8c:1d: 2c:87:ef:94:a8:ae:34:fd:43:c8:ef:92:3c:4e:0a:12:fb:48: 7a:d9:fe:cf:26:d9:97:99:ed:c6:66:08:af:1e:91:d6:23:4a: 99:35:6a:5d:c3:b2:e2:8d:da:19:fc:42:4e:81:f1:bb:9c:a2: 98:11:dd:68:00:a2:d5:81:51:af:fb:1b:33:96:4c:99:8f:93: 38:61:b3:98:1c:30:0a:8a:fa:73:ab:f7:16:e1:dd:48:92:33: 96:67:eb:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcysBEuQRmCAMlygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRkYzA0ZmUtOGRlNC00NDNmLTg1MzktMTJiMjRlOTc2 ZmU2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDVmM2ZjMjAtZjg2Zi00NjgyLWEzZTYtNTNmMGI0MmNkMWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSmAaa+x9JdIhpzTyCEutRggcrk9kCrZSPJD gTseQxucKA2VYQRBVXlJTk0HnLv9HFHjS6l3uzJzYwTUhVi4wBMTS7rRlznzdSwu TOno71FfxDmTeLiC5KNN/Z8epgyMlNd3shNrnNKIawmU4A997obP7Eb7znVW8L2d 1TOXUcZ2DPkXX2IaOOxeDK7gA7dusprgz0+T+a1e95QfALax/z0j2UwK0VwGWv0e DOM6KUjXNKpuvBzpCdzha3hsqCsj2vgfCGm7FcYvF+fBsCzhlm/kfkzI8vI3l8wH afPEtfMK4LSyoVNGp/VDKki5+HPSahwvdR0j2NPobQH5PVJ/0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgpNX8Xk06GSsNB/uFOc2QbiBP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lNGRj MDRmZS04ZGU0LTQ0M2YtODUzOS0xMmIyNGU5NzZmZTYvZjUyZWY5ODYtZDkwZi0z ZGZkLTlhOTItOTc1ZWNhNzViYzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZTRkYzA0ZmUtOGRlNC00NDNmLTg1 MzktMTJiMjRlOTc2ZmU2L2U0ZGMwNGZlLThkZTQtNDQzZi04NTM5LTEyYjI0ZTk3 NmZlNi5jcmwwHwYDVR0jBBgwFoAUj2YFGgsTFjPzbb9aQAfBQn4c428wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lNGRjMDRmZS04ZGU0LTQ0M2YtODUzOS0xMmIy NGU5NzZmZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFmkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkCIdGjwqdBVx4ZQv2ETWotSLtGF/01gf7nmIjjOTTeoiik5IMA8KgB ATRWxg0XSXtHGLxnKiCGBuGnxEutxPOgD7PN5LV5jy1cr3ReE23cAGJPLWP8/Gvk zTTTfPbD/h8lscaHd1iYnZkozj8NjdbxPON2Z9N6ijAq0fxpXS4S8qktQSqpz1yz 6ECp55Ro7ZGUw31m5jfEcdDMX65msKuMHSyH75SorjT9Q8jvkjxOChL7SHrZ/s8m 2ZeZ7cZmCK8ekdYjSpk1al3DsuKN2hn8Qk6B8bucopgR3WgAotWBUa/7GzOWTJmP kzhhs5gcMAqK+nOr9xbh3UiSM5Zn67g= -----END CERTIFICATE-----Generated at Fri Sep 25 16:32:41 2026 by rpki-client