$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2e4bbb74-ccbc-356e-8f35-e95f620c1c91.roa File: 2e4bbb74-ccbc-356e-8f35-e95f620c1c91.roa (raw, json) Hash identifier: H14LpkQ1HWPOnLmvZNluJHQ8w3M/bQXPoGfBPaRX6C4= Subject key identifier: 30:D0:09:B6:8C:C2:92:07:C0:E7:1C:C9:23:80:A0:75:55:09:79:22 Certificate issuer: /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Certificate serial: 010D0C9F4328584F4975F4B4AED6E4849C1A4C00 Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2e4bbb74-ccbc-356e-8f35-e95f620c1c91.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396905 IP address blocks: 64.72.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:f4:b4:ae:d6:e4:84:9c:1a:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0e6a6311-a22d-49af-8618-e3d95b02b8fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1d:8c:51:9c:5d:a5:2b:53:47:31:e9:6d:c2: ef:e6:17:97:a6:e0:d3:b1:2a:99:2d:20:31:14:d2: 63:95:f0:dd:ae:7e:7c:c0:88:e6:43:1a:73:0f:84: 5a:85:97:8f:4a:51:93:d2:fa:9d:11:1a:e2:d3:a8: 7c:f1:97:c5:fc:fa:e6:c4:d4:06:41:d5:72:31:74: 61:ac:6d:3b:44:e5:83:1b:a7:3e:3a:95:fa:72:45: 40:d6:d8:58:00:d8:6b:04:3d:21:e0:b2:5d:4d:c3: 7e:ea:06:20:c8:ed:f2:34:7f:8a:2d:07:9b:a4:b5: 65:a8:53:19:94:98:31:3f:c5:c1:fb:80:d7:f6:7a: 62:07:45:fa:ff:0b:e1:b7:a5:27:92:bd:ec:6b:d5: e0:d0:f0:50:11:19:1b:c0:87:3b:f0:30:52:f9:fa: 60:d0:7d:7f:bc:fe:b6:00:75:5a:ba:68:ce:8b:75: 22:f5:d0:1e:b5:3e:bc:3c:62:c1:a7:04:a2:a5:5e: ca:2b:fe:5e:9b:cd:f2:e3:bd:b7:0d:d0:bb:78:56: 57:d4:23:40:36:00:ec:49:ec:40:1e:ba:71:f6:d5: 70:16:24:1e:6d:54:cb:f2:87:87:02:f1:f9:6e:e6: 91:40:6c:2f:42:12:67:03:98:0c:5f:ce:4a:c3:d8: c9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D0:09:B6:8C:C2:92:07:C0:E7:1C:C9:23:80:A0:75:55:09:79:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2e4bbb74-ccbc-356e-8f35-e95f620c1c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl X509v3 Authority Key Identifier: keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer sbgp-ipAddrBlock: critical IPv4: 64.72.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:8d:58:8d:a0:a7:b0:c0:f7:2f:10:a1:de:be:52:3e:c8:98: a3:b5:1c:6e:c1:9b:a7:6a:80:c6:64:29:40:b8:5d:f7:3a:b8: 83:03:89:1c:4a:aa:28:86:54:a5:8c:76:cb:8b:b6:3d:63:44: 04:5c:3f:44:8b:a0:4f:20:a6:be:52:7a:92:7a:d5:07:b5:8c: 6e:eb:c0:9a:8e:52:55:66:ab:36:33:d8:e7:d8:46:f7:91:a8: dd:24:da:67:aa:64:68:c6:5a:98:ac:d4:0e:6a:85:e9:86:0f: ba:06:a1:77:aa:ec:ee:93:05:b9:96:4d:fe:8c:2f:5a:41:8c: b8:98:2a:90:3d:e3:d4:84:64:8c:86:d9:b8:9d:32:0a:13:80: 2b:8a:8c:a6:de:b4:65:3c:e9:9f:78:fb:8c:0f:cf:f1:32:60: 26:38:6a:e9:53:93:f2:67:59:2b:d4:29:9b:13:c5:e8:f8:22: 40:04:8d:96:7a:79:f8:a5:ff:9a:62:b9:b1:92:e6:53:b5:40: f4:b4:d5:a7:8c:21:49:49:dd:ed:5a:f0:c3:1c:99:bb:35:5e: 41:d3:4b:88:f0:df:ad:6b:f7:8d:40:65:e0:ae:87:e5:52:50: 8c:bc:52:5d:89:7c:09:f9:07:6e:a3:0f:1e:74:83:3d:a7:92: 51:90:29:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdfS0rtbkhJwaTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0 MTc1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGU2YTYzMTEtYTIyZC00OWFmLTg2MTgtZTNkOTViMDJiOGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB2MUZxdpStTRzHpbcLv5heXpuDTsSqZLSAx FNJjlfDdrn58wIjmQxpzD4RahZePSlGT0vqdERri06h88ZfF/PrmxNQGQdVyMXRh rG07ROWDG6c+OpX6ckVA1thYANhrBD0h4LJdTcN+6gYgyO3yNH+KLQebpLVlqFMZ lJgxP8XB+4DX9npiB0X6/wvht6Unkr3sa9Xg0PBQERkbwIc78DBS+fpg0H1/vP62 AHVaumjOi3Ui9dAetT68PGLBpwSipV7KK/5em83y4723DdC7eFZX1CNANgDsSexA Hrpx9tVwFiQebVTL8oeHAvH5buaRQGwvQhJnA5gMX85Kw9jJuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDQCbaMwpIHwOccySOAoHVVCXkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvMmU0YmJiNzQtY2NiYy0z NTZlLThmMzUtZTk1ZjYyMGMxYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0 NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1 Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQEigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICNWI2gp7DA9y8Qod6+Uj7ImKO1HG7Bm6dqgMZkKUC4Xfc6uIMDiRxK qiiGVKWMdsuLtj1jRARcP0SLoE8gpr5SepJ61Qe1jG7rwJqOUlVmqzYz2OfYRveR qN0k2meqZGjGWpis1A5qhemGD7oGoXeq7O6TBbmWTf6ML1pBjLiYKpA949SEZIyG 2bidMgoTgCuKjKbetGU86Z94+4wPz/EyYCY4aulTk/JnWSvUKZsTxej4IkAEjZZ6 efil/5piubGS5lO1QPS01aeMIUlJ3e1a8MMcmbs1XkHTS4jw361r941AZeCuh+VS UIy8Ul2JfAn5B26jDx50gz2nklGQKbk= -----END CERTIFICATE-----Generated at Sun Sep 27 00:30:38 2026 by rpki-client