$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/a47b5e49-65b6-3462-9339-eadddedba7ea.roa File: a47b5e49-65b6-3462-9339-eadddedba7ea.roa (raw, json) Hash identifier: NvRhMRTkBpE8VYlAYXJGDpKlv4ZRtnn8jUdmkXIBG+M= Subject key identifier: C0:71:2E:2B:B2:3B:F5:5F:8A:EA:1B:97:9C:99:2A:80:A6:8C:28:A0 Certificate issuer: /CN=5dcf6139-5993-4941-a803-3ff450a6149e Certificate serial: 010D0C9F4328584F4974559CED139486D44F47A0 Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/a47b5e49-65b6-3462-9339-eadddedba7ea.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 64.113.12.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:55:9c:ed:13:94:86:d4:4f:47:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4d718e9a-660e-44cb-bcf1-33c0fd961b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:1c:ff:95:fe:d6:5f:c5:0c:73:e2:a8:15: ca:82:62:3c:67:5b:6b:ac:66:d3:22:7b:61:d0:66: c3:95:16:9b:f9:eb:11:43:b0:fc:6f:0a:ca:48:a1: 6d:9e:b3:26:a0:15:0f:6d:a9:9a:56:86:26:34:c1: 79:c7:fa:24:e9:63:a4:78:ad:01:c7:4c:50:47:1e: 58:59:af:db:97:59:f8:e4:08:29:6d:1e:33:36:c1: ca:4f:91:b1:17:a0:a4:55:b1:27:e9:ee:1c:43:28: 54:c3:6f:05:b2:f1:d8:d2:ec:6f:82:5e:ab:e9:4d: 86:8f:47:88:f3:c7:dc:c0:fe:34:70:48:f1:ba:e0: 0a:f4:68:89:fa:ea:75:ce:3d:c0:35:ec:36:73:4d: bc:18:f8:fd:60:99:94:99:0c:88:0e:73:ea:c1:eb: e4:34:ca:4e:dd:0c:92:94:04:e9:b3:42:09:13:14: 4b:ca:ad:6b:04:97:18:f6:23:c6:1c:60:6e:2e:70: 09:ab:03:bb:71:d8:8c:95:42:82:dd:75:cb:98:5d: 7c:38:74:90:d3:0e:10:da:31:d4:f5:de:8d:ad:b2: 84:98:03:3c:60:aa:a7:60:2a:9d:d4:cf:0e:5b:16: 45:7b:f1:10:72:11:fd:3f:54:24:cf:74:63:28:23: c6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:71:2E:2B:B2:3B:F5:5F:8A:EA:1B:97:9C:99:2A:80:A6:8C:28:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/a47b5e49-65b6-3462-9339-eadddedba7ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl X509v3 Authority Key Identifier: keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer sbgp-ipAddrBlock: critical IPv4: 64.113.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:38:13:55:79:f7:59:10:be:22:6c:c8:12:87:32:45:51:a4: 88:9e:36:f5:87:72:8e:c0:62:c1:4e:91:fc:2d:88:32:6b:8a: ad:0a:fa:f5:07:4a:08:0c:db:5a:3f:fe:27:c5:60:90:6d:67: 6e:9e:df:dc:8c:c6:88:5f:48:84:a6:0f:08:de:45:6f:e4:14: 31:03:56:cd:ee:7a:f5:7b:4f:62:7f:c6:b0:18:2d:49:6b:37: 85:82:6b:ca:57:21:fb:ec:5b:ef:44:dd:d1:85:e5:a0:9a:f5: fe:3b:a4:f8:12:cc:99:5d:41:2e:0b:49:dc:50:ad:ec:03:de: 71:83:1b:05:ea:41:d4:8b:1b:9d:10:08:3d:9f:5b:ed:fb:3b: 8a:b9:43:a8:99:38:f8:fa:4c:4c:a5:c5:a5:44:41:f0:9f:0b: 15:6a:77:09:01:75:f5:96:c8:79:7b:a5:c8:8d:ca:58:4d:0c: dd:4c:48:e5:3b:d3:1c:4f:f0:a5:f6:52:0e:e1:9d:c6:aa:ef: 83:ae:d0:a9:fe:de:92:7a:28:e1:19:6d:87:48:f1:d3:1d:93: c2:dc:5e:1a:f7:1f:ec:90:d6:34:c5:0f:90:80:9a:2c:d0:af: 54:de:e3:76:c5:8c:31:7f:eb:a2:26:9f:42:68:65:ab:b8:b4: 68:eb:66:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdFWc7ROUhtRPR6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZjYxMzktNTk5My00OTQxLWE4MDMtM2ZmNDUwYTYx NDllMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGQ3MThlOWEtNjYwZS00NGNiLWJjZjEtMzNjMGZkOTYxYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpgc/5X+1l/FDHPiqBXKgmI8Z1trrGbTInth 0GbDlRab+esRQ7D8bwrKSKFtnrMmoBUPbamaVoYmNMF5x/ok6WOkeK0Bx0xQRx5Y Wa/bl1n45AgpbR4zNsHKT5GxF6CkVbEn6e4cQyhUw28FsvHY0uxvgl6r6U2Gj0eI 88fcwP40cEjxuuAK9GiJ+up1zj3ANew2c028GPj9YJmUmQyIDnPqwevkNMpO3QyS lATps0IJExRLyq1rBJcY9iPGHGBuLnAJqwO7cdiMlUKC3XXLmF18OHSQ0w4Q2jHU 9d6NrbKEmAM8YKqnYCqd1M8OWxZFe/EQchH9P1Qkz3RjKCPGIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBxLiuyO/Vfiuobl5yZKoCmjCigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNm NjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0NTBhNjE0OWUvYTQ3YjVlNDktNjViNi0z NDYyLTkzMzktZWFkZGRlZGJhN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWRjZjYxMzktNTk5My00OTQxLWE4 MDMtM2ZmNDUwYTYxNDllLzVkY2Y2MTM5LTU5OTMtNDk0MS1hODAzLTNmZjQ1MGE2 MTQ5ZS5jcmwwHwYDVR0jBBgwFoAULLflCxT6PZa8DBcX1K4/3yZtZm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ZGNmNjEzOS01OTkzLTQ5NDEtYTgwMy0zZmY0 NTBhNjE0OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQHEMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEk4E1V591kQviJsyBKHMkVRpIieNvWHco7AYsFOkfwtiDJriq0K+vUH SggM21o//ifFYJBtZ26e39yMxohfSISmDwjeRW/kFDEDVs3uevV7T2J/xrAYLUlr N4WCa8pXIfvsW+9E3dGF5aCa9f47pPgSzJldQS4LSdxQrewD3nGDGwXqQdSLG50Q CD2fW+37O4q5Q6iZOPj6TEylxaVEQfCfCxVqdwkBdfWWyHl7pciNylhNDN1MSOU7 0xxP8KX2Ug7hncaq74Ou0Kn+3pJ6KOEZbYdI8dMdk8LcXhr3H+yQ1jTFD5CAmizQ r1Te43bFjDF/66Imn0JoZau4tGjrZmo= -----END CERTIFICATE-----Generated at Fri Sep 25 19:46:14 2026 by rpki-client