$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a420750c-a5d8-3043-b838-9eefcf7cad52.roa File: a420750c-a5d8-3043-b838-9eefcf7cad52.roa (raw, json) Hash identifier: O125c22jQArB3PVKAyL+TDNUvp6FXNmqDX8/xO/bW3M= Subject key identifier: 20:C2:0E:4F:DF:FB:30:5D:FF:DC:02:4F:44:46:85:FC:2A:1E:64:39 Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Certificate serial: 010D0C9F4328584F2D87BD0CA9DCCF45BC882C00 Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a420750c-a5d8-3043-b838-9eefcf7cad52.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 13414 IP address blocks: 64.63.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:bd:0c:a9:dc:cf:45:bc:88:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=56fcafdb-84eb-4170-ad87-aaf0a197efbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e1:66:9a:3c:03:eb:c8:a1:73:8b:58:c1:8a: 13:17:29:65:06:a7:9e:99:11:54:39:51:9c:32:52: 92:c8:20:7d:3a:fd:80:d9:fe:f9:66:62:d8:87:f3: ff:ab:40:eb:fb:0b:63:56:be:00:91:ba:db:7b:29: 10:36:06:26:12:40:64:40:3f:41:87:c5:02:68:79: a2:2d:90:6a:5e:3a:61:8e:86:4e:e8:13:4b:5a:3a: 36:64:22:21:65:55:59:aa:b9:b3:2a:ab:d8:a4:2c: 0d:a7:b6:ca:1b:62:aa:b4:d9:10:dc:8f:2a:c3:2d: b3:c4:68:98:56:90:ef:85:0a:ac:89:c6:93:b1:35: 34:1a:e0:13:81:5f:0b:fd:ea:84:39:f2:da:f6:64: 4f:3e:18:2c:9d:92:07:6d:08:66:f9:da:79:88:8c: cc:29:64:c9:a0:16:f9:46:eb:02:c4:d7:26:74:e7: 40:1f:7c:6f:36:02:e8:4e:8e:29:69:be:3d:d5:14: d6:be:8e:78:c4:b7:ad:a6:e1:bd:ad:3d:3e:c5:b5: 1a:88:33:98:f1:57:2f:16:fb:4f:a1:e1:b4:b8:1c: 0a:98:6e:8c:8c:c1:49:72:bc:65:19:ad:12:ca:b9: d3:f1:3c:af:c9:d6:65:25:6c:db:27:ce:eb:b2:5e: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C2:0E:4F:DF:FB:30:5D:FF:DC:02:4F:44:46:85:FC:2A:1E:64:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/a420750c-a5d8-3043-b838-9eefcf7cad52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl X509v3 Authority Key Identifier: keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer sbgp-ipAddrBlock: critical IPv4: 64.63.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:24:be:a6:7c:0c:1a:17:38:60:c3:da:3a:db:70:9a:50:54: fb:bb:a8:20:96:77:24:59:40:ee:de:07:d8:08:27:56:9a:ca: 22:75:a4:b0:0e:58:1c:8c:bf:66:55:d6:fd:5c:42:a7:b0:d0: e2:ee:14:a1:69:00:98:cc:69:63:27:aa:31:42:58:d1:35:91: 0e:58:26:2f:17:45:4d:2f:da:cb:7e:24:17:b9:37:bc:80:a2: 24:80:4e:f2:00:b0:f1:ed:92:bb:d9:e0:13:4a:24:a2:6a:f4: 05:37:ab:34:35:7e:ee:d2:8b:f6:bf:70:88:fb:2d:c2:11:55: 6d:a5:6f:f6:c5:ac:81:44:e8:f8:13:0e:19:9b:37:cb:d3:69: 67:87:df:56:79:ab:16:b4:35:6e:78:fc:98:75:bb:f2:7a:b1: cc:6c:99:4b:84:ff:b7:04:46:f1:4d:6f:3f:26:2c:36:c5:74: 40:cc:62:af:2c:d9:c4:96:86:a5:34:65:71:d6:b0:90:f2:e0: 50:48:8b:35:57:ea:85:e9:b4:b3:72:27:47:e5:38:4c:b0:83: e1:87:68:25:29:9c:de:63:e6:3f:68:18:99:c1:1a:0e:8f:2f: 79:3a:f3:c4:74:9a:79:76:7b:57:73:08:d8:33:22:4a:15:08: a0:b0:c6:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th70MqdzPRbyILAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy NTc2MB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk NTZmY2FmZGItODRlYi00MTcwLWFkODctYWFmMGExOTdlZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+FmmjwD68ihc4tYwYoTFyllBqeemRFUOVGc MlKSyCB9Ov2A2f75ZmLYh/P/q0Dr+wtjVr4AkbrbeykQNgYmEkBkQD9Bh8UCaHmi LZBqXjphjoZO6BNLWjo2ZCIhZVVZqrmzKqvYpCwNp7bKG2KqtNkQ3I8qwy2zxGiY VpDvhQqsicaTsTU0GuATgV8L/eqEOfLa9mRPPhgsnZIHbQhm+dp5iIzMKWTJoBb5 RusCxNcmdOdAH3xvNgLoTo4pab491RTWvo54xLetpuG9rT0+xbUaiDOY8VcvFvtP oeG0uBwKmG6MjMFJcrxlGa0SyrnT8TyvydZlJWzbJ87rsl6IHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDCDk/f+zBd/9wCT0RGhfwqHmQ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3 YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvYTQyMDc1MGMtYTVkOC0z MDQzLWI4MzgtOWVlZmNmN2NhZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3 YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQD82MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUkvqZ8DBoXOGDD2jrbcJpQVPu7qCCWdyRZQO7eB9gIJ1aayiJ1pLAO WByMv2ZV1v1cQqew0OLuFKFpAJjMaWMnqjFCWNE1kQ5YJi8XRU0v2st+JBe5N7yA oiSATvIAsPHtkrvZ4BNKJKJq9AU3qzQ1fu7Si/a/cIj7LcIRVW2lb/bFrIFE6PgT DhmbN8vTaWeH31Z5qxa0NW54/Jh1u/J6scxsmUuE/7cERvFNbz8mLDbFdEDMYq8s 2cSWhqU0ZXHWsJDy4FBIizVX6oXptLNyJ0flOEywg+GHaCUpnN5j5j9oGJnBGg6P L3k688R0mnl2e1dzCNgzIkoVCKCwxsQ= -----END CERTIFICATE-----Generated at Sun Sep 27 04:49:29 2026 by rpki-client