$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa File: a468cae4-4d9c-382f-8572-d90d29d27e8c.roa (raw, json) Hash identifier: sb9X+B6TY+x/Ox2JThMuzqNrcFH9aMJKgt/Cr+UW1x4= Subject key identifier: C6:06:41:01:7E:9B:2B:CC:0A:B8:EA:3F:7C:C0:40:6E:86:40:B3:15 Certificate issuer: /CN=6c0836c5-0c38-41a2-917d-c9df009f1a31 Certificate serial: 010D0C9F4328584F348277632917C65081374680 Authority key identifier: 8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 26277 IP address blocks: 64.235.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:77:63:29:17:c6:50:81:37:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c0836c5-0c38-41a2-917d-c9df009f1a31 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=29978a23-e8c0-479c-91f7-5bc7e0816355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9f:55:09:48:03:f3:e0:fb:b5:df:2f:bb:5d: 9f:75:dc:07:70:d6:17:d2:91:06:c9:d2:21:eb:fa: 2f:23:a4:47:ab:16:2a:aa:70:b9:cb:f4:36:a3:28: f9:10:4c:b4:10:d7:22:f7:9b:4b:16:30:1a:9c:70: 70:7e:10:15:13:bb:79:e9:86:0e:a8:95:cb:27:74: 78:47:64:04:06:c8:7e:91:ac:4a:2b:c5:70:c7:e2: f6:a9:3a:f4:9f:3f:52:55:dd:16:bd:59:f8:89:ea: b1:19:0a:20:bb:7d:3d:b5:99:8f:7b:8e:d3:e4:a0: 30:99:86:c8:bb:08:b2:12:eb:31:7d:97:7f:dc:24: 94:1e:d7:33:b7:ab:3b:19:57:46:bc:31:00:58:1b: a6:c7:12:10:fe:aa:b3:75:42:a8:0b:a9:36:88:54: 21:1f:31:2f:44:9c:88:c9:05:84:86:28:23:32:32: 89:63:d6:09:ae:7e:f5:c8:14:cc:d4:d0:54:88:68: 2e:c1:6a:26:cb:d0:7d:37:bf:52:49:11:a8:1a:47: 0b:fe:3d:43:91:2c:6e:2e:bc:06:e8:48:66:00:d7: c1:a5:3d:4b:81:e1:15:ea:dd:d5:ce:d9:b9:5d:52: 13:88:6b:18:1b:0f:fc:c4:54:d8:69:1b:fd:74:fa: b4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:06:41:01:7E:9B:2B:CC:0A:B8:EA:3F:7C:C0:40:6E:86:40:B3:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/a468cae4-4d9c-382f-8572-d90d29d27e8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31/6c0836c5-0c38-41a2-917d-c9df009f1a31.crl X509v3 Authority Key Identifier: keyid:8E:80:0D:8E:4D:40:B5:8B:65:6F:70:EE:C6:05:6F:BB:47:39:00:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6c0836c5-0c38-41a2-917d-c9df009f1a31.cer sbgp-ipAddrBlock: critical IPv4: 64.235.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2b:4f:6d:cb:f1:b8:94:a4:3a:a1:30:16:1d:18:1d:db:d8: 40:a9:86:95:01:16:69:75:13:22:cf:0a:70:e0:b5:e4:74:85: 78:8e:a0:1b:09:f6:ea:82:bb:db:08:69:a8:5c:bb:e1:5c:cc: 23:86:14:70:00:2a:11:86:21:6d:b8:a8:ee:1a:70:ce:0d:ae: ee:22:c8:55:23:c0:df:2d:d1:6e:8f:c6:a4:65:2a:14:f3:a0: aa:71:2d:a1:81:9e:15:67:ca:ee:32:27:d6:63:ec:59:17:2d: 80:bc:03:77:3b:16:58:a3:0d:f3:eb:2f:8f:c8:04:15:71:06: c3:77:e3:11:01:5d:11:c9:89:c1:52:36:12:80:10:88:a5:ec: 17:7a:a0:76:77:ef:be:36:7d:27:eb:a8:be:32:44:ae:05:3b: 04:17:b0:9e:0d:5b:83:ce:96:d7:d7:87:73:62:be:6b:97:d4: 1a:1e:4c:04:f9:ce:96:c2:24:52:42:80:8a:c0:ae:e0:c8:9c: 47:98:9d:37:27:f5:0c:cc:09:31:d0:c3:43:e8:66:8c:d3:d3: f7:f7:df:88:ce:51:73:de:a4:1a:36:04:e5:96:e3:3d:d7:81: 1b:ba:fd:a9:1b:6a:1a:91:e6:9a:16:4c:6e:6c:dd:6d:e6:fb: a3:3c:42:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gndjKRfGUIE3RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmMwODM2YzUtMGMzOC00MWEyLTkxN2QtYzlkZjAwOWYx YTMxMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk Mjk5NzhhMjMtZThjMC00NzljLTkxZjctNWJjN2UwODE2MzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ9VCUgD8+D7td8vu12fddwHcNYX0pEGydIh 6/ovI6RHqxYqqnC5y/Q2oyj5EEy0ENci95tLFjAanHBwfhAVE7t56YYOqJXLJ3R4 R2QEBsh+kaxKK8Vwx+L2qTr0nz9SVd0WvVn4ieqxGQogu309tZmPe47T5KAwmYbI uwiyEusxfZd/3CSUHtczt6s7GVdGvDEAWBumxxIQ/qqzdUKoC6k2iFQhHzEvRJyI yQWEhigjMjKJY9YJrn71yBTM1NBUiGguwWomy9B9N79SSRGoGkcL/j1DkSxuLrwG 6EhmANfBpT1LgeEV6t3Vztm5XVITiGsYGw/8xFTYaRv9dPq0rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYGQQF+myvMCrjqP3zAQG6GQLMVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82YzA4 MzZjNS0wYzM4LTQxYTItOTE3ZC1jOWRmMDA5ZjFhMzEvYTQ2OGNhZTQtNGQ5Yy0z ODJmLTg1NzItZDkwZDI5ZDI3ZThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmMwODM2YzUtMGMzOC00MWEyLTkx N2QtYzlkZjAwOWYxYTMxLzZjMDgzNmM1LTBjMzgtNDFhMi05MTdkLWM5ZGYwMDlm MWEzMS5jcmwwHwYDVR0jBBgwFoAUjoANjk1AtYtlb3DuxgVvu0c5AJowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82YzA4MzZjNS0wYzM4LTQxYTItOTE3ZC1jOWRm MDA5ZjFhMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQOsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYrT23L8biUpDqhMBYdGB3b2ECphpUBFml1EyLPCnDgteR0hXiOoBsJ 9uqCu9sIaahcu+FczCOGFHAAKhGGIW24qO4acM4Nru4iyFUjwN8t0W6PxqRlKhTz oKpxLaGBnhVnyu4yJ9Zj7FkXLYC8A3c7FlijDfPrL4/IBBVxBsN34xEBXRHJicFS NhKAEIil7Bd6oHZ37742fSfrqL4yRK4FOwQXsJ4NW4POltfXh3NivmuX1BoeTAT5 zpbCJFJCgIrAruDInEeYnTcn9QzMCTHQw0PoZozT0/f334jOUXPepBo2BOWW4z3X gRu6/akbahqR5poWTG5s3W3m+6M8QhQ= -----END CERTIFICATE-----Generated at Fri Sep 25 17:51:42 2026 by rpki-client