$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/0d74cd73-03a2-35b6-95c7-6c13cb878937.roa File: 0d74cd73-03a2-35b6-95c7-6c13cb878937.roa (raw, json) Hash identifier: PoinlvN8BtMeyd3EbVim84ofFcQoR8oGU7FS8+KLGYg= Subject key identifier: 03:C4:72:62:8D:A6:E7:76:DE:5C:B5:AA:FE:B0:86:11:CE:E4:7B:64 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584F43DD29F1980BB3876DB08C50 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/0d74cd73-03a2-35b6-95c7-6c13cb878937.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 16276 IP address blocks: 64.112.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:29:f1:98:0b:b3:87:6d:b0:8c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=b9f73877-c569-404b-a7e1-5d1a8c5fcc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1c:22:c3:c7:1c:dd:2b:c2:54:66:b4:94:8e: 57:76:61:1e:a7:9b:ac:98:30:ce:01:c9:b0:40:26: 16:2e:66:00:68:39:d4:a8:4e:61:5b:2e:3b:30:12: 94:5f:4f:84:3c:67:0e:10:56:2a:e4:93:a4:7c:3c: 6f:09:d8:5f:42:7a:5f:b8:af:20:65:69:50:88:59: d6:63:a7:bf:6f:75:d2:d1:ef:a1:cb:9d:4c:3d:88: 92:5c:3d:33:ba:ac:27:6a:49:ac:6f:ba:41:85:f3: 04:1a:7e:dd:a1:95:c4:0c:48:b7:21:e1:94:50:95: 05:9f:69:b6:4e:0c:e6:4e:98:9e:0f:35:4a:7b:6f: be:71:8e:2c:78:1c:99:be:82:95:0f:6d:4a:96:62: dc:3b:12:f0:66:48:57:e6:36:50:19:e6:92:bb:ee: 31:21:8a:f3:62:73:b0:32:63:e0:dc:81:c6:df:dc: 21:ce:b0:8f:7c:42:ed:07:bc:27:fd:7d:55:34:d8: d9:76:5a:a6:4e:00:09:4d:3d:e2:b8:75:e0:f3:7d: ac:dd:1c:5d:f1:2e:e6:ba:b1:25:14:e3:4e:fc:f4: 55:de:62:40:9d:06:d2:06:d4:93:e0:44:ed:89:3d: 8e:9b:ac:78:c0:eb:7d:27:9c:ea:9a:35:f0:b5:3f: f1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C4:72:62:8D:A6:E7:76:DE:5C:B5:AA:FE:B0:86:11:CE:E4:7B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/0d74cd73-03a2-35b6-95c7-6c13cb878937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 64.112.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a7:80:93:96:a2:6c:65:69:ce:6e:ab:17:e3:eb:c7:75:f6: c3:5b:27:7d:cd:c3:71:5c:e9:94:35:c5:36:61:13:4a:b4:c3: fe:15:53:84:a4:32:9d:a6:c3:f0:e6:8e:91:d3:84:c5:3a:47: 25:33:0c:6b:01:ad:8f:df:69:fb:3a:55:eb:6e:d0:ce:0a:e9: bf:00:f5:0a:f7:ab:60:f3:f5:31:c6:be:a9:89:be:bb:01:67: db:78:29:c0:06:78:4d:bb:6a:a6:52:4b:23:2e:4f:a6:ba:88: 29:78:b7:99:5e:53:54:6d:1b:93:bc:a6:02:90:b9:69:14:15: 2d:07:45:c1:e0:f1:dd:ba:24:8a:e2:fe:b1:7e:c2:00:fb:39: 4b:1c:e1:a0:d6:cb:7d:65:f5:89:1f:0a:2a:01:ee:26:f2:d0: b8:f2:d5:5f:03:d7:c3:6b:99:54:b7:da:0d:6d:b4:2a:ad:18: db:d8:8d:54:0b:56:9f:3a:72:cd:86:80:0f:6e:50:fa:40:6d: 03:89:ac:61:f7:5a:01:3c:24:3f:a8:50:14:47:33:ec:35:12: 35:ac:45:99:70:47:db:86:1d:77:6f:4f:84:7d:cc:63:b1:da: 71:f7:14:56:91:9d:c9:e6:46:c1:56:9a:a2:2d:5b:34:64:b5: 63:68:ff:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3SnxmAuzh22wjFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk YjlmNzM4NzctYzU2OS00MDRiLWE3ZTEtNWQxYThjNWZjYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhwiw8cc3SvCVGa0lI5XdmEep5usmDDOAcmw QCYWLmYAaDnUqE5hWy47MBKUX0+EPGcOEFYq5JOkfDxvCdhfQnpfuK8gZWlQiFnW Y6e/b3XS0e+hy51MPYiSXD0zuqwnakmsb7pBhfMEGn7doZXEDEi3IeGUUJUFn2m2 TgzmTpieDzVKe2++cY4seByZvoKVD21KlmLcOxLwZkhX5jZQGeaSu+4xIYrzYnOw MmPg3IHG39whzrCPfELtB7wn/X1VNNjZdlqmTgAJTT3iuHXg832s3Rxd8S7murEl FONO/PRV3mJAnQbSBtST4ETtiT2Om6x4wOt9J5zqmjXwtT/x9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPEcmKNpud23ly1qv6whhHO5HtkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvMGQ3NGNkNzMtMDNhMi0z NWI2LTk1YzctNmMxM2NiODc4OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmngJOWomxlac5uqxfj68d19sNbJ33Nw3Fc6ZQ1xTZhE0q0w/4VU4Sk Mp2mw/DmjpHThMU6RyUzDGsBrY/fafs6Vetu0M4K6b8A9Qr3q2Dz9THGvqmJvrsB Z9t4KcAGeE27aqZSSyMuT6a6iCl4t5leU1RtG5O8pgKQuWkUFS0HRcHg8d26JIri /rF+wgD7OUsc4aDWy31l9YkfCioB7iby0Ljy1V8D18NrmVS32g1ttCqtGNvYjVQL Vp86cs2GgA9uUPpAbQOJrGH3WgE8JD+oUBRHM+w1EjWsRZlwR9uGHXdvT4R9zGOx 2nH3FFaRncnmRsFWmqItWzRktWNo/wI= -----END CERTIFICATE-----Generated at Thu Sep 24 18:18:30 2026 by rpki-client