$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/0ecb879e-98c9-3896-bc6d-f8030a714e58.roa File: 0ecb879e-98c9-3896-bc6d-f8030a714e58.roa (raw, json) Hash identifier: OQet8L1HhNVhsVm92brhOgRCjRunCsLytNjPrFGr9rQ= Subject key identifier: 13:1F:FE:82:FD:F0:05:DD:64:1B:E5:B2:20:CC:48:08:E0:C9:E5:52 Certificate issuer: /CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Certificate serial: 010D0C9F4328584F146796F68395D802F4C3C540 Authority key identifier: D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/0ecb879e-98c9-3896-bc6d-f8030a714e58.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 7311 IP address blocks: 67.21.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:96:f6:83:95:d8:02:f4:c3:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44ce5f4-28a9-4c1f-b029-cc35b3e3950e Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=8fc0a371-161b-4215-9cf6-0282966fbd35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d9:5f:6c:b4:77:16:07:8d:e7:54:c1:6a:a8: 9d:eb:c6:b6:12:da:bf:a4:45:31:c8:47:d7:73:3a: 9e:aa:15:29:09:27:82:6f:8a:38:f4:a9:e2:2c:9c: 5f:6d:d1:a1:4c:89:2d:3b:0b:2f:01:93:c5:96:ea: b2:35:51:65:5e:9e:27:e2:79:2e:06:99:2f:15:63: db:58:77:1e:b8:98:2a:93:de:27:15:3e:14:04:80: 63:ff:6d:ba:db:d9:24:f2:17:c8:a7:23:43:33:2c: 01:7b:67:e7:fa:c1:80:80:a8:2b:9d:f6:13:4d:88: 90:14:b2:ab:fb:d6:fc:1f:31:12:90:e0:ae:52:7f: e8:62:31:b1:9d:cf:4d:59:57:10:9b:93:32:f9:bf: 6d:da:d1:4f:bd:ee:97:98:52:e0:d6:19:ff:bc:c1: db:e1:40:3c:f2:a9:a4:00:11:6e:8d:a2:97:7d:90: 96:47:ea:27:f0:80:92:56:72:87:83:fa:c8:fe:27: 2e:ca:4b:0d:93:76:f0:8e:1c:cc:c6:37:e9:4d:ca: 5b:ad:e4:36:b7:bb:3d:8b:59:52:b5:7b:d2:61:57: a6:70:4a:95:06:86:c3:e1:ad:06:53:be:5e:72:1b: 56:50:c7:ea:13:78:46:76:67:14:c8:9a:cd:2d:43: 0d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1F:FE:82:FD:F0:05:DD:64:1B:E5:B2:20:CC:48:08:E0:C9:E5:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/0ecb879e-98c9-3896-bc6d-f8030a714e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.crl X509v3 Authority Key Identifier: keyid:D2:70:53:AA:1E:41:4B:CD:A4:FF:3C:F8:BC:B0:DC:1C:2B:B6:0C:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d44ce5f4-28a9-4c1f-b029-cc35b3e3950e.cer sbgp-ipAddrBlock: critical IPv4: 67.21.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c7:ca:e9:5c:a4:1b:83:2a:d0:4a:bc:7d:4f:ea:3d:60:66: fd:01:34:7b:f9:86:ae:8e:08:95:d1:27:b9:5a:7a:7a:97:3b: d7:ca:b6:30:e4:da:c1:1c:ab:27:09:96:fa:7f:02:4b:8f:7f: 65:bc:04:f9:b5:cd:e8:da:73:0f:6b:d0:f7:d9:60:3d:d8:df: a4:31:65:9a:08:34:f2:fa:90:7b:e7:70:9f:ca:2b:c4:c5:13: eb:ba:c4:c7:e2:d4:cd:43:9a:1c:1f:20:95:97:bd:ce:44:d5: e4:d4:14:33:a7:c2:9d:d6:15:e8:3f:60:91:e7:73:1e:67:e0: 95:08:53:3f:62:a1:96:67:7b:b9:f0:a0:7f:fc:76:e0:04:f4: ce:e7:15:fa:29:e8:5c:a1:20:65:53:a9:e5:6b:fa:19:cd:c6: 9e:3b:f9:e9:91:ba:4c:90:8b:7b:2f:85:55:80:11:bd:f4:e3: ed:86:03:06:82:8c:74:3d:f7:98:2b:f2:42:3b:c0:4c:cf:92: 34:da:8f:cf:bf:83:e3:1d:c0:ac:96:aa:1b:5f:c8:a7:7c:7f: 88:7b:4c:80:fc:1d:1b:47:20:28:56:e2:23:78:c9:65:1a:d9: ad:29:e7:cf:ce:a0:8c:5a:18:82:73:29:43:d5:ae:f0:b2:a2: d6:9a:bb:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5b2g5XYAvTDxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ0Y2U1ZjQtMjhhOS00YzFmLWIwMjktY2MzNWIzZTM5 NTBlMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk OGZjMGEzNzEtMTYxYi00MjE1LTljZjYtMDI4Mjk2NmZiZDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NlfbLR3FgeN51TBaqid68a2Etq/pEUxyEfX czqeqhUpCSeCb4o49KniLJxfbdGhTIktOwsvAZPFluqyNVFlXp4n4nkuBpkvFWPb WHceuJgqk94nFT4UBIBj/22629kk8hfIpyNDMywBe2fn+sGAgKgrnfYTTYiQFLKr +9b8HzESkOCuUn/oYjGxnc9NWVcQm5My+b9t2tFPve6XmFLg1hn/vMHb4UA88qmk ABFujaKXfZCWR+on8ICSVnKHg/rI/icuyksNk3bwjhzMxjfpTcpbreQ2t7s9i1lS tXvSYVemcEqVBobD4a0GU75echtWUMfqE3hGdmcUyJrNLUMNvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMf/oL98AXdZBvlsiDMSAjgyeVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRj ZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1YjNlMzk1MGUvMGVjYjg3OWUtOThjOS0z ODk2LWJjNmQtZjgwMzBhNzE0ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDQ0Y2U1ZjQtMjhhOS00YzFmLWIw MjktY2MzNWIzZTM5NTBlL2Q0NGNlNWY0LTI4YTktNGMxZi1iMDI5LWNjMzViM2Uz OTUwZS5jcmwwHwYDVR0jBBgwFoAU0nBTqh5BS82k/zz4vLDcHCu2DFIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNDRjZTVmNC0yOGE5LTRjMWYtYjAyOS1jYzM1 YjNlMzk1MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQxWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPHyulcpBuDKtBKvH1P6j1gZv0BNHv5hq6OCJXRJ7laenqXO9fKtjDk 2sEcqycJlvp/AkuPf2W8BPm1zejacw9r0PfZYD3Y36QxZZoINPL6kHvncJ/KK8TF E+u6xMfi1M1DmhwfIJWXvc5E1eTUFDOnwp3WFeg/YJHncx5n4JUIUz9ioZZne7nw oH/8duAE9M7nFfop6FyhIGVTqeVr+hnNxp47+emRukyQi3svhVWAEb304+2GAwaC jHQ995gr8kI7wEzPkjTaj8+/g+MdwKyWqhtfyKd8f4h7TID8HRtHIChW4iN4yWUa 2a0p58/OoIxaGIJzKUPVrvCyotaau1o= -----END CERTIFICATE-----Generated at Tue Sep 29 02:40:23 2026 by rpki-client