$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/17063732-949a-3fe9-b294-49965e4df87a.roa File: 17063732-949a-3fe9-b294-49965e4df87a.roa (raw, json) Hash identifier: nuXL8eM2NLTTWpcJzShJkXbFLfmAZ8wlkfDCDv6uyDs= Subject key identifier: 51:70:0D:5B:6B:D1:3D:3C:63:91:7B:55:6E:A6:E5:80:75:30:3B:70 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584F2D87B82412AC77CB010A4700 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/17063732-949a-3fe9-b294-49965e4df87a.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 13414 IP address blocks: 64.63.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:b8:24:12:ac:77:cb:01:0a:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=c9e47949-1576-4a2e-bf0e-c45bbc800e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:95:ac:5d:40:ff:47:21:f8:63:ba:65:7f:a5: 3d:e0:80:d9:6b:29:0d:cd:2a:5d:85:48:51:b3:14: 71:e5:72:5d:8a:6d:e4:38:55:05:bb:f8:4a:17:1e: 44:55:b7:e5:06:d4:5f:f9:7d:6b:df:c3:bb:68:fa: a3:92:5e:06:20:d6:08:86:bd:58:ac:f4:ab:7f:91: 22:df:e7:6a:8d:a2:7a:14:72:67:0e:bb:61:71:37: d0:a5:b9:04:d4:e4:ce:f5:6a:d0:b2:fc:47:21:f0: e3:75:ec:77:ce:0a:41:ad:b3:c3:1f:ff:f1:b3:c7: 7c:8d:db:bb:d7:bf:49:e9:c1:e5:d2:a6:b8:12:c4: 13:2d:75:52:1b:5c:fe:4a:3b:1f:17:54:db:f4:ec: 34:14:ae:6c:09:4d:7e:d1:fa:b8:52:35:c9:7b:ac: ed:09:f4:76:77:5e:da:33:a3:8d:23:67:0f:23:45: 65:46:c6:98:d1:17:6c:2d:94:c4:4a:ab:c5:6b:3a: 81:44:65:47:71:01:3b:3f:a8:64:b0:23:ae:51:5c: 18:4d:d2:f5:3c:56:c3:7b:a0:c7:81:c2:a2:f9:7b: 0b:32:3e:b7:7b:33:d4:df:cb:88:31:2e:1f:da:b3: 0a:7a:09:f1:cb:4a:a8:18:2c:da:15:0e:f8:db:09: 89:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:70:0D:5B:6B:D1:3D:3C:63:91:7B:55:6E:A6:E5:80:75:30:3B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/17063732-949a-3fe9-b294-49965e4df87a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:25:17:a4:d7:60:5a:d2:54:d2:e1:93:82:7f:a0:52:ca:3b: a9:10:52:f9:72:ee:06:70:76:b2:f8:c5:af:e7:e8:b4:57:b3: a6:0b:d1:33:8b:9d:e4:ac:f4:d8:82:70:d2:0b:50:3d:51:72: a0:a4:47:20:3e:7c:4f:9a:c5:e4:c0:2a:08:4b:fb:8d:2a:32: c0:1a:ba:56:30:ec:7d:89:e3:11:9a:15:e7:c2:ae:7b:4f:bf: ee:2d:76:51:c3:6d:60:63:04:9a:f1:41:56:0c:f8:f7:f3:17: 19:ba:69:3a:1b:7a:99:4f:e3:f8:3e:98:03:d7:60:d3:96:6f: 9a:68:93:b4:c9:5e:7a:a7:f6:67:70:05:54:f4:32:e5:cf:88: cc:8a:04:4a:04:1b:78:93:92:b3:e4:3e:3e:5b:7a:8d:0b:7c: e1:1b:ab:d7:36:b5:a8:a4:21:66:49:f5:6f:d9:c8:0a:f0:4f: 6f:34:54:04:85:17:05:ce:81:69:2a:76:42:5f:58:8c:e7:af: e0:e0:6c:9b:25:c4:94:4f:34:67:7c:49:b6:2d:44:32:7f:1d: e1:52:dc:3b:78:cc:ff:83:1b:a8:ae:24:41:99:73:41:25:a1: 11:f0:53:99:81:df:b7:6d:c8:83:d8:3a:86:75:55:e3:30:12: e2:56:b4:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th7gkEqx3ywEKRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk YzllNDc5NDktMTU3Ni00YTJlLWJmMGUtYzQ1YmJjODAwZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJWsXUD/RyH4Y7plf6U94IDZaykNzSpdhUhR sxRx5XJdim3kOFUFu/hKFx5EVbflBtRf+X1r38O7aPqjkl4GINYIhr1YrPSrf5Ei 3+dqjaJ6FHJnDrthcTfQpbkE1OTO9WrQsvxHIfDjdex3zgpBrbPDH//xs8d8jdu7 179J6cHl0qa4EsQTLXVSG1z+SjsfF1Tb9Ow0FK5sCU1+0fq4UjXJe6ztCfR2d17a M6ONI2cPI0VlRsaY0RdsLZTESqvFazqBRGVHcQE7P6hksCOuUVwYTdL1PFbDe6DH gcKi+XsLMj63ezPU38uIMS4f2rMKegnxy0qoGCzaFQ742wmJhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFFwDVtr0T08Y5F7VW6m5YB1MDtwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvMTcwNjM3MzItOTQ5YS0z ZmU5LWIyOTQtNDk5NjVlNGRmODdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD8cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJolF6TXYFrSVNLhk4J/oFLKO6kQUvly7gZwdrL4xa/n6LRXs6YL0TOL neSs9NiCcNILUD1RcqCkRyA+fE+axeTAKghL+40qMsAaulYw7H2J4xGaFefCrntP v+4tdlHDbWBjBJrxQVYM+PfzFxm6aTobeplP4/g+mAPXYNOWb5pok7TJXnqn9mdw BVT0MuXPiMyKBEoEG3iTkrPkPj5beo0LfOEbq9c2taikIWZJ9W/ZyArwT280VASF FwXOgWkqdkJfWIznr+DgbJslxJRPNGd8SbYtRDJ/HeFS3Dt4zP+DG6iuJEGZc0El oRHwU5mB37dtyIPYOoZ1VeMwEuJWtCs= -----END CERTIFICATE-----Generated at Sat Sep 26 20:54:53 2026 by rpki-client