$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/ca0c0d25-dab4-3bcb-9fb6-141f586a3018.roa File: ca0c0d25-dab4-3bcb-9fb6-141f586a3018.roa (raw, json) Hash identifier: 3ffZlDdU8CNjHX4Syk9vk1X/FYGMi5woOmWWv6cjgxg= Subject key identifier: 43:20:96:10:04:34:D5:99:F2:F3:EC:53:51:A0:21:E3:CF:AD:35:26 Certificate issuer: /CN=8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214 Certificate serial: 010D0C9F4328584F497627DEE8DB8EC4AE48E0A0 Authority key identifier: 31:8E:71:9B:0A:30:15:07:51:FB:F3:8A:41:46:F4:AC:E5:D5:83:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/ca0c0d25-dab4-3bcb-9fb6-141f586a3018.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 210008 IP address blocks: 64.226.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:27:de:e8:db:8e:c4:ae:48:e0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c5cb8593-998a-4f3b-a037-40518c4fd6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5a:e0:b1:3a:22:f0:54:6d:8a:a2:f1:bb:54: f2:6d:f7:ee:3f:f7:80:2b:5d:ee:8b:1c:e3:04:3b: 0c:79:34:de:6d:f7:68:d6:2c:08:ef:bc:98:92:09: 44:12:1d:a4:b1:ef:0c:61:92:01:ba:f9:1b:2e:88: 37:04:99:fd:01:1a:fe:40:61:6d:e1:c8:b8:be:11: ae:6d:b2:96:40:d0:a3:41:69:f5:cb:9f:19:f5:c8: 1d:4a:9e:95:2e:22:ce:40:62:23:f0:58:46:32:a7: b5:54:28:97:8e:c7:00:8d:22:78:59:c5:a4:e2:35: b4:98:31:9f:ea:38:ce:cc:5c:2a:5f:21:e4:70:6d: 64:f9:4b:2e:39:ce:66:c6:2e:c1:65:53:71:ae:99: 2d:63:de:19:a9:68:01:5c:63:c7:9b:ce:f3:18:e3: 9e:da:65:ac:6f:a7:fc:ac:97:46:de:34:d6:a9:89: c5:35:4f:ac:72:f0:82:70:32:3f:6a:9a:2d:d2:3f: 2c:fc:f3:1c:f0:f5:5f:f4:67:93:52:18:1c:07:30: be:33:05:e7:02:a9:ec:89:b4:dc:7d:40:fd:76:29: 64:5e:bc:d4:28:be:28:9c:a1:a1:5a:68:6a:55:df: b7:b0:49:d9:44:b9:67:13:d3:87:c1:4e:dd:d8:80: 2f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:20:96:10:04:34:D5:99:F2:F3:EC:53:51:A0:21:E3:CF:AD:35:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/ca0c0d25-dab4-3bcb-9fb6-141f586a3018.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.crl X509v3 Authority Key Identifier: keyid:31:8E:71:9B:0A:30:15:07:51:FB:F3:8A:41:46:F4:AC:E5:D5:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c92b8fc-b3cb-4c16-9a60-c49ab9e6e214.cer sbgp-ipAddrBlock: critical IPv4: 64.226.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:db:9a:6d:37:b8:20:bd:7d:28:66:92:ce:be:e2:40:33:33: 9a:59:f6:b1:3c:a9:c1:5e:4e:f8:63:28:af:80:b4:4b:a2:bd: 7d:cb:80:52:a4:8d:9a:e7:de:0f:28:7e:0a:78:74:d0:5c:58: 34:c8:2d:18:44:6a:92:3a:47:78:8d:24:9f:65:aa:6d:60:b0: 70:1d:64:b0:55:9b:3e:8e:01:ea:29:34:f6:82:da:fe:5d:21: 14:5b:85:55:b6:c8:23:19:8f:b1:e9:d3:bf:49:16:29:6b:4a: 4f:61:a5:a9:59:31:2b:cc:c5:c2:cf:dd:f5:30:d1:4a:fe:00: 6b:4e:cb:99:6f:ae:76:89:34:21:02:06:c0:ca:78:a6:cc:85: 60:6b:e1:7a:06:6e:f5:cf:91:de:5f:79:26:f6:f1:11:30:5e: c7:27:0e:55:a4:fb:00:78:57:66:12:dd:63:1e:e4:53:df:ec: 09:a6:b3:ea:f0:93:2c:d6:37:c5:b9:51:9f:a5:ec:80:37:f1: a8:cb:97:38:ed:ad:aa:f4:7e:4d:35:00:38:0a:fd:7e:37:0e: b9:cc:e0:c5:f2:e0:e4:b5:43:c1:b4:82:1b:09:09:e3:6b:78: e9:5e:29:32:56:3d:d0:6d:70:3c:b2:03:0a:78:d0:d0:ad:2b: 27:d0:0b:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdife6NuOxK5I4KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM5MmI4ZmMtYjNjYi00YzE2LTlhNjAtYzQ5YWI5ZTZl MjE0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzVjYjg1OTMtOTk4YS00ZjNiLWEwMzctNDA1MThjNGZkNmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylrgsToi8FRtiqLxu1TybffuP/eAK13uixzj BDsMeTTebfdo1iwI77yYkglEEh2kse8MYZIBuvkbLog3BJn9ARr+QGFt4ci4vhGu bbKWQNCjQWn1y58Z9cgdSp6VLiLOQGIj8FhGMqe1VCiXjscAjSJ4WcWk4jW0mDGf 6jjOzFwqXyHkcG1k+UsuOc5mxi7BZVNxrpktY94ZqWgBXGPHm87zGOOe2mWsb6f8 rJdG3jTWqYnFNU+scvCCcDI/apot0j8s/PMc8PVf9GeTUhgcBzC+MwXnAqnsibTc fUD9dilkXrzUKL4onKGhWmhqVd+3sEnZRLlnE9OHwU7d2IAvRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMglhAENNWZ8vPsU1GgIePPrTUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Yzky YjhmYy1iM2NiLTRjMTYtOWE2MC1jNDlhYjllNmUyMTQvY2EwYzBkMjUtZGFiNC0z YmNiLTlmYjYtMTQxZjU4NmEzMDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGM5MmI4ZmMtYjNjYi00YzE2LTlh NjAtYzQ5YWI5ZTZlMjE0LzhjOTJiOGZjLWIzY2ItNGMxNi05YTYwLWM0OWFiOWU2 ZTIxNC5jcmwwHwYDVR0jBBgwFoAUMY5xmwowFQdR+/OKQUb0rOXVg8IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84YzkyYjhmYy1iM2NiLTRjMTYtOWE2MC1jNDlh YjllNmUyMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOIxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTbmm03uCC9fShmks6+4kAzM5pZ9rE8qcFeTvhjKK+AtEuivX3LgFKk jZrn3g8ofgp4dNBcWDTILRhEapI6R3iNJJ9lqm1gsHAdZLBVmz6OAeopNPaC2v5d IRRbhVW2yCMZj7Hp079JFilrSk9hpalZMSvMxcLP3fUw0Ur+AGtOy5lvrnaJNCEC BsDKeKbMhWBr4XoGbvXPkd5feSb28REwXscnDlWk+wB4V2YS3WMe5FPf7Amms+rw kyzWN8W5UZ+l7IA38ajLlzjtrar0fk01ADgK/X43DrnM4MXy4OS1Q8G0ghsJCeNr eOleKTJWPdBtcDyyAwp40NCtKyfQCyc= -----END CERTIFICATE-----Generated at Fri Sep 25 05:48:48 2026 by rpki-client