$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8a3b1a68-acad-37ca-8924-b4808e524d34.roa File: 8a3b1a68-acad-37ca-8924-b4808e524d34.roa (raw, json) Hash identifier: hg3HcxYcao3/tcgxQA5a6M5juYZElHOpIoEBlSnqRZk= Subject key identifier: 85:76:E4:2D:2C:92:42:5D:0D:7F:0D:E6:25:3A:D0:22:06:09:7B:9B Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584F46A7DC1B8E72EB64428D9180 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8a3b1a68-acad-37ca-8924-b4808e524d34.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 25645 IP address blocks: 64.92.92.0/24 maxlen: 24 137.239.206.0/24 maxlen: 24 2605:8300:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:dc:1b:8e:72:eb:64:42:8d:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=2cb54f2c-07a5-42f6-b343-7ef0a9b08bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7f:f5:f0:a8:7e:45:2b:df:c3:53:c3:5d:9a: 6d:f6:0d:2d:98:4d:66:08:8d:4c:80:3e:e2:71:7c: 64:76:c1:f6:71:a9:cf:c3:1e:39:8d:1e:a8:7e:85: c0:a4:67:32:f2:cd:69:c5:81:f8:fa:6c:c9:9a:99: dc:d1:b4:6f:e0:78:da:b0:2d:8d:2c:f8:3e:40:af: 92:00:24:c1:88:06:28:a4:99:3d:80:9a:e9:81:96: cb:54:c7:32:e9:12:90:ab:9b:63:56:e1:98:22:76: 3d:10:97:ff:b3:87:37:ef:70:fc:4f:9c:65:48:0d: 47:d4:bf:85:eb:38:0b:6d:68:b9:07:b4:ab:b8:d6: ec:8e:0c:0c:49:3f:84:19:22:2f:ff:77:ae:00:88: 91:14:ae:d4:0e:cf:10:70:c1:9f:26:da:4c:d5:ea: 60:b5:f8:01:85:65:8f:ee:ba:6b:32:eb:3b:b8:48: 7a:93:4b:78:eb:f5:56:32:00:93:c4:f1:47:93:0d: c1:d6:8b:93:1c:76:fe:73:c9:72:8d:a1:6e:0d:6e: fc:41:51:9b:f6:0a:a2:bf:30:8c:9a:42:f0:31:b5: 82:2b:5e:4d:b5:40:e9:f3:da:f5:be:2d:e6:be:ce: 30:a2:68:c9:62:cf:17:5c:97:5e:20:60:12:79:8e: 54:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:76:E4:2D:2C:92:42:5D:0D:7F:0D:E6:25:3A:D0:22:06:09:7B:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/8a3b1a68-acad-37ca-8924-b4808e524d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 64.92.92.0/24 137.239.206.0/24 IPv6: 2605:8300:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b3:68:74:ae:de:5b:de:6d:9b:b9:ac:1e:1e:e4:11:d2:13: 49:08:77:b9:b4:ba:2f:ed:31:c7:a7:19:3c:92:ca:69:47:56: 0d:79:db:ac:59:9d:8b:bb:8a:e4:5e:47:79:47:c9:01:8e:66: 9e:6e:33:c7:d8:0d:b2:d8:80:76:cf:12:f3:4d:b8:72:b9:89: 3a:a6:91:e6:4c:f1:bd:8c:15:61:99:d8:fa:4e:e8:af:f1:f8: ae:0c:8e:2b:73:0f:7b:a6:8c:97:a7:eb:d3:5b:51:05:31:96: e3:10:33:e3:8d:42:49:3c:28:b8:bc:a6:33:08:c2:64:30:05: 56:df:e6:26:27:fb:cd:65:e0:9b:bc:d8:7f:39:58:a0:f7:06: 83:af:97:cd:43:fd:43:30:f3:3d:9b:90:34:48:d9:7f:fd:d8: ad:e9:c9:22:8e:04:a8:58:cb:91:0e:24:45:5d:27:f2:f7:63: d9:1e:c5:31:6e:b6:90:68:e2:3c:76:20:9a:a5:6b:cc:ab:4e: ae:cd:28:a7:9d:80:71:fa:64:61:26:b4:b4:f9:4f:69:79:f1: 09:97:52:a5:f4:e6:02:db:28:b4:d1:b1:fe:bb:42:c0:64:a7: 23:26:45:f4:72:41:2c:fb:c1:d8:a2:fe:3b:cf:44:53:3e:06: 12:73:70:ac -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWE9Gp9wbjnLrZEKNkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MmNiNTRmMmMtMDdhNS00MmY2LWIzNDMtN2VmMGE5YjA4YmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH/18Kh+RSvfw1PDXZpt9g0tmE1mCI1MgD7i cXxkdsH2canPwx45jR6ofoXApGcy8s1pxYH4+mzJmpnc0bRv4HjasC2NLPg+QK+S ACTBiAYopJk9gJrpgZbLVMcy6RKQq5tjVuGYInY9EJf/s4c373D8T5xlSA1H1L+F 6zgLbWi5B7SruNbsjgwMST+EGSIv/3euAIiRFK7UDs8QcMGfJtpM1epgtfgBhWWP 7rprMus7uEh6k0t46/VWMgCTxPFHkw3B1ouTHHb+c8lyjaFuDW78QVGb9gqivzCM mkLwMbWCK15NtUDp89r1vi3mvs4womjJYs8XXJdeIGASeY5U4wIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFIV25C0skkJdDX8N5iU60CIGCXubMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvOGEzYjFhNjgtYWNhZC0z N2NhLTg5MjQtYjQ4MDhlNTI0ZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAQFxcAwQA ie/OMA8EAgACMAkDBwAmBYMAABIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWrNodK7eW95tm7msHh7kEdIT SQh3ubS6L+0xx6cZPJLKaUdWDXnbrFmdi7uK5F5HeUfJAY5mnm4zx9gNstiAds8S 8024crmJOqaR5kzxvYwVYZnY+k7or/H4rgyOK3MPe6aMl6fr01tRBTGW4xAz441C STwouLymMwjCZDAFVt/mJif7zWXgm7zYfzlYoPcGg6+XzUP9QzDzPZuQNEjZf/3Y renJIo4EqFjLkQ4kRV0n8vdj2R7FMW62kGjiPHYgmqVrzKtOrs0op52AcfpkYSa0 tPlPaXnxCZdSpfTmAtsotNGx/rtCwGSnIyZF9HJBLPvB2KL+O89EUz4GEnNwrA== -----END CERTIFICATE-----Generated at Fri Sep 25 05:23:56 2026 by rpki-client