$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa File: d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa (raw, json) Hash identifier: hHsBxeioaplcZZNF//ibGJPqYY8Ch0Zyjb1haS9vMM4= Subject key identifier: 13:4F:C6:CB:0C:19:A0:5C:09:98:F6:39:0B:62:27:3B:B9:24:2D:3D Certificate issuer: /CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Certificate serial: 010D0C9F4328584F49756F5839385630DB8CA820 Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396998 IP address blocks: 64.68.192.0/24 maxlen: 24 2620:49:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:6f:58:39:38:56:30:db:8c:a8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e842ef59-5d23-4791-9b75-774802edadf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:db:12:f2:ad:01:13:ac:e5:d7:b5:cb:b6:33: 23:b6:8b:0e:b4:50:15:8b:7e:a3:d0:c9:5c:74:5e: 53:f5:44:4f:c5:ed:fd:30:de:19:7d:00:b3:11:9b: a1:6c:40:59:78:c5:b5:c9:af:48:e2:e2:84:7e:27: 8d:3e:64:a0:9b:4c:89:21:8b:66:f4:c2:06:69:57: c9:51:7e:54:03:5b:33:77:55:7a:2f:ff:80:11:0f: 54:b2:81:34:a3:12:49:fa:6f:97:ca:3d:10:90:4f: d7:28:fc:a6:90:62:b0:6a:1b:b5:39:a3:9a:96:df: 0e:63:51:38:b2:c2:32:ef:a9:c9:37:c7:88:09:51: 45:18:69:47:0c:c7:e6:3c:13:c1:bd:f4:d8:35:36: f5:c6:f4:5c:86:97:3e:4d:63:37:a0:25:9d:bf:81: ff:29:9a:c9:9a:50:e5:31:87:92:00:b4:03:4e:b0: f8:8b:c3:70:08:c7:80:19:25:9c:15:ef:47:cf:99: a9:6f:b4:c8:ed:04:42:89:b8:9d:01:25:ed:af:11: ab:c0:a1:f4:6a:dd:0b:88:0d:d0:a2:4b:ec:16:b9: 30:28:97:6a:f4:58:12:75:ee:7a:9e:96:20:9a:0a: 80:45:c6:75:0d:4c:50:73:53:99:09:7d:64:5d:a4: 45:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4F:C6:CB:0C:19:A0:5C:09:98:F6:39:0B:62:27:3B:B9:24:2D:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d9f3bf20-4c0b-30a3-9d98-83fda0346614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl X509v3 Authority Key Identifier: keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer sbgp-ipAddrBlock: critical IPv4: 64.68.192.0/24 IPv6: 2620:49:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:47:4e:f6:87:95:8f:7f:be:06:3a:27:0f:75:e7:bc:94:8e: 12:42:1c:e3:70:a3:7c:ca:06:ab:52:13:bc:00:b8:7d:cc:fe: 17:67:69:cf:b6:d1:8f:f8:11:c9:6b:06:38:85:cf:0a:25:e2: c7:06:ed:8c:d2:b2:98:9c:a0:ec:43:e6:63:a4:ba:bf:d0:13: a8:2b:a2:86:5e:55:8e:bd:e2:63:4f:3f:00:92:84:d1:98:98: 29:e8:ce:ed:fe:9c:e0:00:7a:2b:c8:9f:4c:04:a2:6a:1c:f1: be:89:0e:47:5c:ed:e4:c9:0b:d3:ef:3e:cb:a4:8b:80:0f:7f: e3:64:a3:02:cc:5c:14:83:b0:b7:71:4b:3d:1c:80:46:90:f3: 69:2e:d1:02:cb:3e:61:ee:81:4d:ab:59:ad:a9:c3:1c:10:df: 77:0e:23:31:b2:3b:29:e9:9e:b4:d7:bd:0e:63:f0:6c:d9:9b: ce:98:46:f2:c3:30:6e:58:73:f8:bd:fc:b6:45:58:e3:46:2a: d9:1d:96:00:84:7c:46:bd:68:ba:ac:b8:77:90:6c:43:0d:cb: a3:ff:e5:5c:a1:85:7e:05:ff:f4:82:9e:fe:a7:25:90:4e:58: a0:39:40:0b:2b:6d:7b:81:d3:70:a2:bf:98:12:b2:ae:52:44: 74:78:7d:a5 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9JdW9YOThWMNuMqCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdm MzEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTg0MmVmNTktNWQyMy00NzkxLTliNzUtNzc0ODAyZWRhZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidsS8q0BE6zl17XLtjMjtosOtFAVi36j0Mlc dF5T9URPxe39MN4ZfQCzEZuhbEBZeMW1ya9I4uKEfieNPmSgm0yJIYtm9MIGaVfJ UX5UA1szd1V6L/+AEQ9UsoE0oxJJ+m+Xyj0QkE/XKPymkGKwahu1OaOalt8OY1E4 ssIy76nJN8eICVFFGGlHDMfmPBPBvfTYNTb1xvRchpc+TWM3oCWdv4H/KZrJmlDl MYeSALQDTrD4i8NwCMeAGSWcFe9Hz5mpb7TI7QRCibidASXtrxGrwKH0at0LiA3Q okvsFrkwKJdq9FgSde56npYgmgqARcZ1DUxQc1OZCX1kXaRFCQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBNPxssMGaBcCZj2OQtiJzu5JC09MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3 NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvZDlmM2JmMjAtNGMwYi0z MGEzLTlkOTgtODNmZGEwMzQ2NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDAwNzQ5ZWQtNzBlZi00NDdjLWIx N2MtZGE2YmU4ZDdmMzEyL2QwMDc0OWVkLTcwZWYtNDQ3Yy1iMTdjLWRhNmJlOGQ3 ZjMxMi5jcmwwHwYDVR0jBBgwFoAU9SAVhzNYxRJ4ZGbzsONdivR4eXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZi ZThkN2YzMTIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQETAMA8E AgACMAkDBwAmIABJAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKEdO9oeVj3++BjonD3XnvJSOEkIc43Cj fMoGq1ITvAC4fcz+F2dpz7bRj/gRyWsGOIXPCiXixwbtjNKymJyg7EPmY6S6v9AT qCuihl5Vjr3iY08/AJKE0ZiYKejO7f6c4AB6K8ifTASiahzxvokOR1zt5MkL0+8+ y6SLgA9/42SjAsxcFIOwt3FLPRyARpDzaS7RAss+Ye6BTatZranDHBDfdw4jMbI7 KemetNe9DmPwbNmbzphG8sMwblhz+L38tkVY40Yq2R2WAIR8Rr1ouqy4d5BsQw3L o//lXKGFfgX/9IKe/qclkE5YoDlACytte4HTcKK/mBKyrlJEdHh9pQ== -----END CERTIFICATE-----Generated at Fri Sep 25 05:51:44 2026 by rpki-client