$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa File: 33d66f77-23e9-3fba-a372-f0a2d74a3921.roa (raw, json) Hash identifier: pSL5lSvEDGcAWeiMdAbQ+2iRkUBgfspET+KVRbCzeSc= Subject key identifier: 11:D7:A9:24:8F:EF:70:BE:43:CF:CE:38:4C:8C:D7:EA:80:8A:D8:D4 Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Certificate serial: 010D0C9F4328584F497596437D042E9D2E328BA0 Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13768 IP address blocks: 64.227.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:96:43:7d:04:2e:9d:2e:32:8b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d8329b45-625f-4caf-bfd7-7f7991302f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:c3:fe:84:f9:19:8a:f0:2d:f4:f7:1e:e5: 7d:31:4b:fa:bc:fc:77:64:66:88:09:0d:03:1a:db: 92:e1:bf:4f:8e:8f:b0:f5:82:e4:3b:a6:53:08:a5: 98:4f:e3:bb:1d:8f:6f:48:ce:8e:8b:3e:52:2d:e3: ce:6d:dd:42:fe:b8:cd:9c:7e:72:d9:08:66:61:38: 5a:93:b4:27:49:c0:22:16:e1:4d:cb:f0:c7:72:99: 4a:dd:bf:46:0f:ae:d4:11:ef:de:e9:0a:bc:dc:4b: 26:77:95:77:cb:eb:61:99:c3:6e:96:5b:ce:50:8a: ed:0f:63:98:59:ec:3c:75:02:7d:87:73:9b:30:13: 40:30:76:89:67:06:4a:00:20:02:a3:54:d1:14:c0: 44:b7:99:fe:1e:a9:8e:49:4a:ac:df:1e:71:a9:59: c8:96:d6:02:a2:57:eb:3f:a5:3e:95:44:56:26:e5: cf:df:01:24:8a:da:c8:c7:4e:9b:29:f6:49:ad:97: 94:c3:c4:5d:1c:22:af:f7:5b:22:48:d3:e3:57:e4: 9c:43:af:8e:9c:06:e6:c5:41:99:79:50:89:71:61: 1f:96:d0:28:d8:94:7f:ce:38:e1:f6:45:ef:7f:7f: a6:84:b8:51:a4:81:a5:6e:db:5f:3f:7a:4b:b4:40: 30:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D7:A9:24:8F:EF:70:BE:43:CF:CE:38:4C:8C:D7:EA:80:8A:D8:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/33d66f77-23e9-3fba-a372-f0a2d74a3921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl X509v3 Authority Key Identifier: keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer sbgp-ipAddrBlock: critical IPv4: 64.227.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:f1:c3:7d:e6:37:b3:c0:da:62:12:7c:13:7f:dd:5f:ec:83: 98:2a:42:7e:c8:de:71:ce:4b:82:0e:cb:e9:8e:83:c3:24:ea: 13:f5:09:63:1d:40:07:39:ce:eb:23:6e:7f:ac:ea:a0:d8:15: ef:38:d8:4e:c0:0a:aa:8e:dc:00:d9:26:a8:ba:90:f5:84:4c: fc:85:fe:62:2c:ac:09:7d:ff:6d:03:31:b5:6a:7c:8c:e7:1a: 79:4d:56:a4:b3:ef:95:ae:1d:00:d6:04:f9:73:3d:6e:6f:cf: df:4d:06:25:a5:e9:f8:db:c9:45:30:53:6d:43:3a:61:14:43: 5b:66:dc:00:48:70:89:12:f5:d6:47:67:d6:9f:7f:db:f2:8b: 88:cd:ce:89:22:bf:5d:8a:b4:0b:4d:74:28:89:95:20:a2:3e: bc:69:f4:3a:1e:0a:a5:8c:c5:63:28:9c:9e:d0:1b:fd:a8:ea: 89:da:61:18:61:58:a9:d5:68:e1:d7:c7:ce:bb:3f:35:cf:bb: 15:9a:85:84:0f:d5:ad:30:9c:f1:1e:1a:d8:34:02:44:12:24: b7:8e:b8:91:92:ee:9d:4e:55:bc:bc:da:ee:c9:92:ad:ef:d5: 33:29:9f:17:53:47:f8:b8:05:d5:22:fe:8b:64:0c:e8:98:ec: 98:5c:d7:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdZZDfQQunS4yi6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk YjEwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDgzMjliNDUtNjI1Zi00Y2FmLWJmZDctN2Y3OTkxMzAyZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW/D/oT5GYrwLfT3HuV9MUv6vPx3ZGaICQ0D GtuS4b9Pjo+w9YLkO6ZTCKWYT+O7HY9vSM6Oiz5SLePObd1C/rjNnH5y2QhmYTha k7QnScAiFuFNy/DHcplK3b9GD67UEe/e6Qq83Esmd5V3y+thmcNullvOUIrtD2OY Wew8dQJ9h3ObMBNAMHaJZwZKACACo1TRFMBEt5n+HqmOSUqs3x5xqVnIltYColfr P6U+lURWJuXP3wEkitrIx06bKfZJrZeUw8RdHCKv91siSNPjV+ScQ6+OnAbmxUGZ eVCJcWEfltAo2JR/zjjh9kXvf3+mhLhRpIGlbttfP3pLtEAwtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHXqSSP73C+Q8/OOEyM1+qAitjUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3 OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMzNkNjZmNzctMjNlOS0z ZmJhLWEzNzItZjBhMmQ3NGEzOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0 YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1 ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQOPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvxw33mN7PA2mISfBN/3V/sg5gqQn7I3nHOS4IOy+mOg8Mk6hP1CWMd QAc5zusjbn+s6qDYFe842E7ACqqO3ADZJqi6kPWETPyF/mIsrAl9/20DMbVqfIzn GnlNVqSz75WuHQDWBPlzPW5vz99NBiWl6fjbyUUwU21DOmEUQ1tm3ABIcIkS9dZH Z9aff9vyi4jNzokiv12KtAtNdCiJlSCiPrxp9DoeCqWMxWMonJ7QG/2o6onaYRhh WKnVaOHXx867PzXPuxWahYQP1a0wnPEeGtg0AkQSJLeOuJGS7p1OVby82u7Jkq3v 1TMpnxdTR/i4BdUi/otkDOiY7Jhc10Y= -----END CERTIFICATE-----Generated at Fri Sep 25 20:07:18 2026 by rpki-client