$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1e5fa889-5751-3c0c-b6f3-59dfdda37a6c.roa File: 1e5fa889-5751-3c0c-b6f3-59dfdda37a6c.roa (raw, json) Hash identifier: NTJDth+HoU4P4F4vq5CPKQ5Vd+wB9e6NHMaOHMZviEs= Subject key identifier: 13:BF:C5:92:B5:6C:72:B0:95:0B:5D:B0:0F:46:B0:B5:A8:9D:66:0E Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584F497595C7EB8AE214A4215000 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1e5fa889-5751-3c0c-b6f3-59dfdda37a6c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13768 IP address blocks: 64.226.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:95:c7:eb:8a:e2:14:a4:21:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=53f2b04b-28cf-4eec-9eef-040026f4b877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0f:63:46:1a:f3:d9:2b:0a:20:3b:fb:4e:af: 13:81:f9:31:a8:b2:10:bf:64:5d:5e:5b:11:cd:42: ec:eb:b4:2c:ce:42:c5:dc:b9:bf:d0:d9:08:b2:b9: 11:ab:b8:2f:63:11:6d:2c:ec:5d:af:ba:fb:c7:22: fa:f9:ed:14:af:1e:c5:28:c1:e8:16:56:f9:51:e9: 18:53:56:52:09:47:32:da:95:0c:01:3d:b3:83:dd: f5:13:5b:35:b0:e4:a8:f2:6e:7f:2f:e5:d8:8a:ea: f4:9f:58:3a:ce:b1:f4:f2:83:a1:b9:e0:25:30:c0: ec:73:77:a0:60:9d:a4:38:72:64:11:22:16:a5:7a: 18:7b:5a:1e:08:72:3e:7d:63:3e:41:27:93:fa:1d: 43:59:c0:48:8d:9c:f9:c3:23:8f:e9:5e:9f:cf:cb: 38:24:3a:76:e2:ba:5d:d6:b9:82:e7:ad:d5:f2:8c: 5c:b7:2c:f8:f2:43:f6:81:d8:5d:c0:89:e8:7d:5d: 99:b1:a0:78:02:3c:be:e6:a0:ee:2c:09:0d:d3:ba: 8b:25:b4:f6:fe:39:3b:45:b7:8d:6f:80:42:bc:56: 24:22:76:4c:e1:a3:6a:58:6b:ea:97:be:e1:ab:ea: 84:c3:cd:77:91:08:8d:b7:e4:b3:93:bb:6e:71:b4: ff:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BF:C5:92:B5:6C:72:B0:95:0B:5D:B0:0F:46:B0:B5:A8:9D:66:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/1e5fa889-5751-3c0c-b6f3-59dfdda37a6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.226.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:38:58:62:76:bc:bb:1e:ae:7e:9a:ea:85:d5:fa:d6:7c:5a: c2:fa:db:8f:f8:12:eb:fb:f4:7a:2f:df:b3:36:67:28:aa:bc: 47:f9:47:69:e5:89:c5:f5:46:30:3e:6e:25:22:d0:e4:00:42: 17:78:93:dc:b1:b7:52:1f:16:e1:d5:1f:9d:25:4c:cb:6c:8c: 17:86:07:10:18:b5:0d:19:ff:3d:2f:cc:83:98:9c:27:fb:b0: 36:3b:22:51:31:c9:be:84:6d:22:71:a0:a0:07:1e:da:2b:f8: e1:81:b6:7c:a6:f5:b8:f1:d0:2c:84:21:1c:57:e4:c7:0f:99: 15:8b:b4:c0:30:d5:47:ae:83:25:0c:d7:39:dc:ae:e4:8c:d5: 7b:2e:f6:44:de:cb:b5:4c:b4:65:28:1c:2a:fc:8a:5a:0b:f9: 98:ba:99:f0:2b:84:f7:96:19:3d:34:7a:04:af:4a:ca:c3:45: 3f:b3:ff:cc:e0:31:d8:0c:91:e0:3b:00:5b:ec:94:f6:aa:b9: cc:bc:48:3e:75:cc:7e:68:9f:ea:a7:a8:d7:7f:4d:b8:eb:e4: a5:4e:39:76:0a:01:ba:fd:c4:75:b2:54:b6:b0:86:e9:4a:98: 98:07:fa:57:40:1b:6e:35:c6:31:31:0d:fd:8b:f6:fa:5f:8b: 46:b9:2d:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdZXH64riFKQhUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTNmMmIwNGItMjhjZi00ZWVjLTllZWYtMDQwMDI2ZjRiODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg9jRhrz2SsKIDv7Tq8TgfkxqLIQv2RdXlsR zULs67QszkLF3Lm/0NkIsrkRq7gvYxFtLOxdr7r7xyL6+e0Urx7FKMHoFlb5UekY U1ZSCUcy2pUMAT2zg931E1s1sOSo8m5/L+XYiur0n1g6zrH08oOhueAlMMDsc3eg YJ2kOHJkESIWpXoYe1oeCHI+fWM+QSeT+h1DWcBIjZz5wyOP6V6fz8s4JDp24rpd 1rmC563V8oxctyz48kP2gdhdwInofV2ZsaB4Ajy+5qDuLAkN07qLJbT2/jk7RbeN b4BCvFYkInZM4aNqWGvql77hq+qEw813kQiNt+Szk7tucbT/mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBO/xZK1bHKwlQtdsA9GsLWonWYOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMWU1ZmE4ODktNTc1MS0z YzBjLWI2ZjMtNTlkZmRkYTM3YTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQOL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH04WGJ2vLsern6a6oXV+tZ8WsL624/4Euv79Hov37M2ZyiqvEf5R2nl icX1RjA+biUi0OQAQhd4k9yxt1IfFuHVH50lTMtsjBeGBxAYtQ0Z/z0vzIOYnCf7 sDY7IlExyb6EbSJxoKAHHtor+OGBtnym9bjx0CyEIRxX5McPmRWLtMAw1UeugyUM 1zncruSM1Xsu9kTey7VMtGUoHCr8iloL+Zi6mfArhPeWGT00egSvSsrDRT+z/8zg MdgMkeA7AFvslPaqucy8SD51zH5on+qnqNd/Tbjr5KVOOXYKAbr9xHWyVLawhulK mJgH+ldAG241xjExDf2L9vpfi0a5LXE= -----END CERTIFICATE-----Generated at Sun Nov 15 13:31:51 2026 by rpki-client