$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/2300a0f9-42c7-306b-9f5a-b212fb621d3e.roa File: 2300a0f9-42c7-306b-9f5a-b212fb621d3e.roa (raw, json) Hash identifier: kRPOBd1ZRIrA2D0e8zK6pFrpZTtplwKRH+fN6pvNNs0= Subject key identifier: AD:05:12:22:07:21:53:02:08:D3:66:CE:81:29:79:8E:FB:F0:00:80 Certificate issuer: /CN=1f1cee84-663d-43bc-bc24-3b0050eff749 Certificate serial: 010D0C9F4328584F498B5F217CB2C56E44AADF80 Authority key identifier: D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/2300a0f9-42c7-306b-9f5a-b212fb621d3e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13977 IP address blocks: 64.222.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:5f:21:7c:b2:c5:6e:44:aa:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f1cee84-663d-43bc-bc24-3b0050eff749 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e1131ceb-082a-42ce-8fff-d55c28ec319a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:46:ea:21:e0:43:07:9b:5d:45:52:f1:d5:de: 45:89:f3:05:32:6d:28:c6:77:53:e5:84:93:3c:2c: 6a:b6:83:fd:ac:25:bf:bd:fd:33:8c:3d:5a:8e:fb: dc:79:31:08:23:f5:88:e4:34:5d:9c:0e:36:63:18: da:2a:25:33:b1:6c:36:4f:4e:11:21:20:90:77:da: 92:c0:72:d3:d1:77:87:15:87:25:3c:47:02:fb:11: bc:47:c5:3c:de:6c:7c:d7:ac:a8:2a:a5:5f:ce:48: 5b:3a:0d:a2:73:ad:9e:6c:8d:08:42:03:49:c5:2e: 92:6b:71:5d:92:b9:17:5f:8e:bc:6c:03:df:7e:09: ee:f3:82:1d:0e:a8:9e:ea:c5:71:9f:8c:17:43:3e: 86:9a:87:74:be:9d:01:cf:00:fa:27:6d:81:86:eb: 15:57:f7:b0:18:87:a0:aa:8d:d0:56:3c:8d:c4:e1: 0f:3c:36:41:b7:00:a5:6f:14:cf:b9:bc:2b:eb:29: f3:22:ce:78:e2:b1:fd:46:1d:77:f5:38:cc:f8:87: a6:b4:44:58:5a:fd:c7:a1:ef:c7:66:9e:1e:9a:5d: 91:17:8f:dc:ae:d2:b6:a5:aa:2a:9f:a3:45:29:46: 46:95:bb:8e:28:d4:ba:e9:c9:f4:d2:39:ee:8a:0f: f0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:05:12:22:07:21:53:02:08:D3:66:CE:81:29:79:8E:FB:F0:00:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/2300a0f9-42c7-306b-9f5a-b212fb621d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749/1f1cee84-663d-43bc-bc24-3b0050eff749.crl X509v3 Authority Key Identifier: keyid:D8:F8:E0:3D:15:39:A4:54:75:EE:EB:12:37:10:EB:7B:19:BA:C6:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f1cee84-663d-43bc-bc24-3b0050eff749.cer sbgp-ipAddrBlock: critical IPv4: 64.222.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:7e:22:e1:ad:ef:0f:69:21:eb:b7:91:92:e6:bd:78:9a:8e: 4c:22:1c:a3:8e:ae:fd:f1:b0:ac:df:f5:e3:3a:09:16:6b:7c: 6e:fb:0e:ba:6f:d4:cf:28:f4:fb:75:5c:28:c3:1c:96:70:75: af:31:fa:95:49:1c:d6:fa:02:16:50:0c:3d:bd:c4:c3:8a:56: a0:13:68:42:5e:63:35:6b:3e:c2:5a:63:4b:a1:e3:9e:b6:3c: 77:dd:a4:cb:c2:bb:01:49:a1:b6:03:22:b2:3a:a6:fd:32:c6: 2d:57:11:71:c3:f7:d7:25:58:b5:9b:dd:73:b7:44:31:ec:94: 3e:92:ce:2f:cc:f3:84:e9:f7:ed:c2:ed:03:ca:fb:3c:75:bc: ae:37:ea:08:db:d8:75:c1:5d:30:40:b7:2b:00:0d:cb:77:90: e2:fc:42:43:1c:d5:3a:7b:d4:01:ff:59:0f:32:d1:f3:a1:d2: bc:65:1f:53:0f:07:a5:e2:58:37:29:05:fd:85:58:8b:52:80: 5e:25:b6:f9:61:b4:41:ea:82:a3:15:f2:f9:7d:7e:78:e9:a3: ef:27:ab:18:0e:16:92:83:f0:dc:17:14:25:31:02:7d:00:de: a5:6b:69:88:a0:25:a6:52:e6:61:5e:a0:a2:bb:e6:2c:56:40: 79:b2:d7:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji18hfLLFbkSq34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYxY2VlODQtNjYzZC00M2JjLWJjMjQtM2IwMDUwZWZm NzQ5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTExMzFjZWItMDgyYS00MmNlLThmZmYtZDU1YzI4ZWMzMTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkbqIeBDB5tdRVLx1d5FifMFMm0oxndT5YST PCxqtoP9rCW/vf0zjD1ajvvceTEII/WI5DRdnA42YxjaKiUzsWw2T04RISCQd9qS wHLT0XeHFYclPEcC+xG8R8U83mx816yoKqVfzkhbOg2ic62ebI0IQgNJxS6Sa3Fd krkXX468bAPffgnu84IdDqie6sVxn4wXQz6Gmod0vp0BzwD6J22BhusVV/ewGIeg qo3QVjyNxOEPPDZBtwClbxTPubwr6ynzIs544rH9Rh139TjM+IemtERYWv3Hoe/H Zp4eml2RF4/crtK2paoqn6NFKUZGlbuOKNS66cn00jnuig/wxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0FEiIHIVMCCNNmzoEpeY778ACAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZjFj ZWU4NC02NjNkLTQzYmMtYmMyNC0zYjAwNTBlZmY3NDkvMjMwMGEwZjktNDJjNy0z MDZiLTlmNWEtYjIxMmZiNjIxZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWYxY2VlODQtNjYzZC00M2JjLWJj MjQtM2IwMDUwZWZmNzQ5LzFmMWNlZTg0LTY2M2QtNDNiYy1iYzI0LTNiMDA1MGVm Zjc0OS5jcmwwHwYDVR0jBBgwFoAU2PjgPRU5pFR17usSNxDrexm6xtowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZjFjZWU4NC02NjNkLTQzYmMtYmMyNC0zYjAw NTBlZmY3NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQN7+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR+IuGt7w9pIeu3kZLmvXiajkwiHKOOrv3xsKzf9eM6CRZrfG77Drpv 1M8o9Pt1XCjDHJZwda8x+pVJHNb6AhZQDD29xMOKVqATaEJeYzVrPsJaY0uh4562 PHfdpMvCuwFJobYDIrI6pv0yxi1XEXHD99clWLWb3XO3RDHslD6Szi/M84Tp9+3C 7QPK+zx1vK436gjb2HXBXTBAtysADct3kOL8QkMc1Tp71AH/WQ8y0fOh0rxlH1MP B6XiWDcpBf2FWItSgF4ltvlhtEHqgqMV8vl9fnjpo+8nqxgOFpKD8NwXFCUxAn0A 3qVraYigJaZS5mFeoKK75ixWQHmy12M= -----END CERTIFICATE-----Generated at Sun Sep 27 10:13:39 2026 by rpki-client