$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/0f94adce-ee08-3d1f-952e-320e490ab5fe.roa File: 0f94adce-ee08-3d1f-952e-320e490ab5fe.roa (raw, json) Hash identifier: SsfR0naui4S2vCLOoCLIkyBOJB6PQY/HWHfXM1wsCRQ= Subject key identifier: A9:65:F2:B5:0E:3B:AF:DB:93:D2:13:44:1D:DF:03:94:99:AF:99:C3 Certificate issuer: /CN=5dcf6139-5993-4941-a803-3ff450a6149e Certificate serial: 010D0C9F4328584F3E47E58370EC79047BC98180 Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/0f94adce-ee08-3d1f-952e-320e490ab5fe.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 134176 IP address blocks: 64.113.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e5:83:70:ec:79:04:7b:c9:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=d8db7f30-4bbc-41d4-bb9d-3af2910dabcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:b7:2c:93:8e:af:ad:e3:22:c4:c4:2c:5d: 04:bd:b1:ba:9e:25:62:3a:94:cf:0e:89:81:cf:53: 01:39:c7:d7:4b:cf:0e:3d:96:54:4a:79:9a:92:bf: 17:7e:48:fe:48:6a:c3:ba:a0:cf:73:f5:c7:7a:a6: 40:08:4b:ac:f7:eb:72:d8:b0:06:65:71:c0:15:0f: 12:f5:98:cc:54:c6:7a:be:20:f2:75:9d:3c:b3:73: c5:76:c8:af:00:63:fc:ed:90:b2:63:21:e8:98:27: 34:3a:b7:1b:32:7c:a4:d9:f6:b3:b3:0f:96:14:20: 27:1d:5b:92:16:39:86:7f:32:12:dd:a8:1a:0b:11: d1:fd:d6:be:4c:5d:ce:db:47:a8:4a:e6:a7:44:44: 01:0c:e4:0b:61:36:71:92:09:89:7b:d1:58:56:54: ee:44:41:14:f3:a3:0e:a5:d7:a2:75:21:03:0c:ef: d7:91:04:db:e5:a6:c8:c8:f2:de:bd:c8:e7:cf:02: 31:77:54:13:2e:5c:93:f3:9f:85:12:a3:ff:37:d6: 0b:b0:f0:af:c0:75:9b:85:e4:ae:77:33:4c:c4:06: 9b:ec:65:3e:de:b7:dc:3f:8a:da:15:87:cb:7c:d5: eb:7d:f3:af:e4:df:e1:cb:f6:54:26:81:98:15:df: 96:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:65:F2:B5:0E:3B:AF:DB:93:D2:13:44:1D:DF:03:94:99:AF:99:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/0f94adce-ee08-3d1f-952e-320e490ab5fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl X509v3 Authority Key Identifier: keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer sbgp-ipAddrBlock: critical IPv4: 64.113.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:7c:94:d8:b5:0b:a5:18:bf:a2:b3:27:b0:25:08:bb:6a:94: a2:51:b2:03:ac:d7:93:a9:9d:0a:ce:50:19:86:d0:a7:2b:f0: 69:73:70:4d:ba:79:d0:3a:80:03:76:12:8f:ad:89:7e:07:31: 24:47:27:72:01:bc:8b:e6:f9:17:82:01:91:f1:64:ad:4e:e2: f3:39:6f:da:c7:d4:48:bb:61:f9:80:d5:78:e1:5f:10:e5:63: 70:13:c0:cf:68:db:2b:3e:19:68:1f:b7:77:d7:bd:8a:78:13: dd:4d:2a:f7:ad:d7:26:e8:38:06:5d:67:8f:84:9b:1e:e4:72: 1b:f5:6a:5f:ab:90:71:66:fd:8a:d8:61:35:70:6b:27:d8:6e: df:5e:83:21:18:d5:3e:08:57:b5:33:c4:f1:97:f9:41:f1:b6: d0:b2:3b:60:75:69:5f:ac:d9:0d:d3:0f:2b:59:51:dd:8c:4f: 42:dc:d0:b2:22:16:e1:5b:67:fd:41:77:9a:79:72:68:46:c1: 2c:7c:3f:72:d4:0f:0f:41:4a:0a:de:cc:b8:29:2e:76:e5:4b: 8d:76:82:0e:d4:84:ec:49:2f:82:92:cb:14:79:25:cf:db:7d: ec:71:0e:ad:03:06:89:2c:8f:8b:da:6c:1a:56:e1:e9:11:76: 2e:82:08:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+WDcOx5BHvJgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx NDllMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZDhkYjdmMzAtNGJiYy00MWQ0LWJiOWQtM2FmMjkxMGRhYmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2i3LJOOr63jIsTELF0EvbG6niViOpTPDomB z1MBOcfXS88OPZZUSnmakr8Xfkj+SGrDuqDPc/XHeqZACEus9+ty2LAGZXHAFQ8S 9ZjMVMZ6viDydZ08s3PFdsivAGP87ZCyYyHomCc0OrcbMnyk2fazsw+WFCAnHVuS FjmGfzIS3agaCxHR/da+TF3O20eoSuanREQBDOQLYTZxkgmJe9FYVlTuREEU86MO pdeidSEDDO/XkQTb5abIyPLevcjnzwIxd1QTLlyT85+FEqP/N9YLsPCvwHWbheSu dzNMxAab7GU+3rfcP4raFYfLfNXrffOv5N/hy/ZUJoGYFd+WoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKll8rUOO6/bk9ITRB3fA5SZr5nDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvMGY5NGFkY2UtZWUwOC0z ZDFmLTk1MmUtMzIwZTQ5MGFiNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4 MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2 MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0 NTBhNjE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHELMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV8lNi1C6UYv6KzJ7AlCLtqlKJRsgOs15OpnQrOUBmG0Kcr8GlzcE26 edA6gAN2Eo+tiX4HMSRHJ3IBvIvm+ReCAZHxZK1O4vM5b9rH1Ei7YfmA1XjhXxDl Y3ATwM9o2ys+GWgft3fXvYp4E91NKvet1yboOAZdZ4+Emx7kchv1al+rkHFm/YrY YTVwayfYbt9egyEY1T4IV7UzxPGX+UHxttCyO2B1aV+s2Q3TDytZUd2MT0Lc0LIi FuFbZ/1Bd5p5cmhGwSx8P3LUDw9BSgrezLgpLnblS412gg7UhOxJL4KSyxR5Jc/b fexxDq0DBoksj4vabBpW4ekRdi6CCA0= -----END CERTIFICATE-----Generated at Thu Sep 24 23:22:52 2026 by rpki-client