$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa File: 65b1ad36-cbe9-3771-9c96-e700744e68f2.roa (raw, json) Hash identifier: 8CZR30WPtgMbF2L3RJnyDGxKnDAYS8+jqZRmrF+Y/ro= Subject key identifier: 13:4F:2F:7B:1A:D1:99:90:09:5F:FC:5A:B2:41:7C:C2:B8:CF:1A:76 Certificate issuer: /CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Certificate serial: 010D0C9F4328584F3FAD3C574F5BA2CDA664CE40 Authority key identifier: FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 21902 IP address blocks: 64.110.16.0/21 maxlen: 21 108.163.68.0/22 maxlen: 22 216.189.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:3c:57:4f:5b:a2:cd:a6:64:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1e8ecad-d5af-414e-8573-f698bbb23263 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=1fe35c8d-ae43-41f7-8572-d36922ee419d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:81:e3:9f:0d:78:e2:0c:5d:64:3c:96:5d: ab:24:2d:28:cc:4b:0c:70:bc:db:ec:e6:ab:3c:4e: 24:dc:4f:e9:1e:43:e6:27:a9:f1:77:19:af:2f:a4: 50:94:13:69:62:aa:90:25:5e:7e:a2:56:93:9c:0c: bd:2a:1a:a5:a3:b8:b9:d5:40:07:71:17:1e:f7:59: 32:77:32:56:db:85:2a:26:5d:1b:14:6e:1f:7e:fe: 4d:c4:b5:b4:ef:a7:58:53:2e:70:4b:6c:63:ee:0b: 2b:50:6f:fa:e0:d7:6d:57:0c:bf:8b:2e:ef:7f:2a: ad:c1:fa:41:eb:3d:1c:2f:b3:b5:6a:17:1a:f0:71: 1a:80:7b:47:93:ac:b0:03:41:11:75:b5:0e:63:de: d0:36:9d:26:59:78:37:8f:a1:ec:50:c2:92:bd:41: 21:d6:34:99:1e:36:83:ab:93:32:19:0f:26:99:82: d0:73:b6:bc:41:0c:f0:d7:d8:0f:56:33:29:ef:b0: 43:ad:9a:5f:c2:c5:00:42:f4:79:c5:7f:be:95:82: a3:ab:30:2b:b3:6c:18:bf:bb:28:eb:bc:96:f6:4f: f9:b6:89:fd:6e:29:3f:2f:6e:f9:b2:e1:1a:17:f8: 00:a3:af:37:14:5d:4d:ac:c8:f7:48:d3:97:88:53: 64:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4F:2F:7B:1A:D1:99:90:09:5F:FC:5A:B2:41:7C:C2:B8:CF:1A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/65b1ad36-cbe9-3771-9c96-e700744e68f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263/a1e8ecad-d5af-414e-8573-f698bbb23263.crl X509v3 Authority Key Identifier: keyid:FE:90:EE:79:8B:35:2E:08:3B:AE:AC:67:F0:01:CC:A7:C6:FB:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1e8ecad-d5af-414e-8573-f698bbb23263.cer sbgp-ipAddrBlock: critical IPv4: 64.110.16.0/21 108.163.68.0/22 216.189.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4d:e2:94:bc:e0:66:aa:30:bb:44:9c:72:0d:9d:bd:8c:71: 25:bd:73:8a:b5:09:05:63:aa:a8:70:1f:9d:b1:60:af:ee:14: d8:74:d7:92:5c:86:94:87:56:d8:a2:18:fb:31:83:95:7d:c4: 86:90:14:cf:2a:e6:bc:31:4f:4c:39:82:7b:a8:db:12:4d:5a: ee:79:c1:6a:bf:d1:c3:4a:65:b1:4f:5f:d4:b2:25:5f:8e:48: 62:e2:0d:65:8f:c3:b4:d3:9c:9e:e1:67:f2:0a:89:5d:e6:95: bc:df:fb:93:8e:66:b9:1a:81:7c:21:a6:47:02:c8:ce:da:ee: 9e:e6:a1:4b:bc:7a:fe:0f:11:5c:e6:cf:29:55:9c:1f:25:f6: 8e:79:59:30:7f:44:eb:44:a3:c3:7a:82:70:4a:b1:f4:50:e2: 8a:d4:73:9a:5d:12:01:84:b9:ef:e2:26:d2:46:92:12:c0:c6: c4:c3:66:48:21:2c:d0:bc:91:6a:04:bb:21:43:6c:b2:09:24: 8e:7f:6a:01:9f:bb:3c:15:fe:d1:ca:d8:0c:9d:c3:a1:ce:72: 09:e9:5d:cf:90:7f:71:32:58:ee:cc:9f:6f:f1:46:a5:91:7c: 4c:ab:77:e0:02:ff:31:12:cc:9f:52:b7:6c:f9:23:39:16:60: 12:35:1e:3a -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE8/rTxXT1uizaZkzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlOGVjYWQtZDVhZi00MTRlLTg1NzMtZjY5OGJiYjIz MjYzMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MWZlMzVjOGQtYWU0My00MWY3LTg1NzItZDM2OTIyZWU0MTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjSB458NeOIMXWQ8ll2rJC0ozEsMcLzb7Oar PE4k3E/pHkPmJ6nxdxmvL6RQlBNpYqqQJV5+olaTnAy9Khqlo7i51UAHcRce91ky dzJW24UqJl0bFG4ffv5NxLW076dYUy5wS2xj7gsrUG/64NdtVwy/iy7vfyqtwfpB 6z0cL7O1ahca8HEagHtHk6ywA0ERdbUOY97QNp0mWXg3j6HsUMKSvUEh1jSZHjaD q5MyGQ8mmYLQc7a8QQzw19gPVjMp77BDrZpfwsUAQvR5xX++lYKjqzArs2wYv7so 67yW9k/5ton9bik/L275suEaF/gAo683FF1NrMj3SNOXiFNkWQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBNPL3sa0ZmQCV/8WrJBfMK4zxp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4 ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4YmJiMjMyNjMvNjViMWFkMzYtY2JlOS0z NzcxLTljOTYtZTcwMDc0NGU2OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTFlOGVjYWQtZDVhZi00MTRlLTg1 NzMtZjY5OGJiYjIzMjYzL2ExZThlY2FkLWQ1YWYtNDE0ZS04NTczLWY2OThiYmIy MzI2My5jcmwwHwYDVR0jBBgwFoAU/pDueYs1Lgg7rqxn8AHMp8b7B5kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMWU4ZWNhZC1kNWFmLTQxNGUtODU3My1mNjk4 YmJiMjMyNjMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDQG4QAwQC bKNEAwQE2L2AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFJN4pS84GaqMLtEnHINnb2McSW9c4q1CQVjqqhw H52xYK/uFNh015JchpSHVtiiGPsxg5V9xIaQFM8q5rwxT0w5gnuo2xJNWu55wWq/ 0cNKZbFPX9SyJV+OSGLiDWWPw7TTnJ7hZ/IKiV3mlbzf+5OOZrkagXwhpkcCyM7a 7p7moUu8ev4PEVzmzylVnB8l9o55WTB/ROtEo8N6gnBKsfRQ4orUc5pdEgGEue/i JtJGkhLAxsTDZkghLNC8kWoEuyFDbLIJJI5/agGfuzwV/tHK2Aydw6HOcgnpXc+Q f3EyWO7Mn2/xRqWRfEyrd+AC/zESzJ9St2z5IzkWYBI1Hjo= -----END CERTIFICATE-----Generated at Sat Oct 10 02:55:57 2026 by rpki-client