$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3968f910-af41-3783-af18-bdf2a9af734d.roa File: 3968f910-af41-3783-af18-bdf2a9af734d.roa (raw, json) Hash identifier: dUZBNkXNHh8C9HiT4aBSHAjw/Z0DIoTtG5MoIRBGbbc= Subject key identifier: 2D:76:BE:0F:22:42:73:51:53:4C:E1:56:7D:A3:E3:18:3B:FE:25:7D Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584F4C3DBF3BDE4F70FD10B6C460 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3968f910-af41-3783-af18-bdf2a9af734d.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 36492 IP address blocks: 64.9.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:bf:3b:de:4f:70:fd:10:b6:c4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=e79f060c-2bbc-4c47-af16-a506dbacca67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b6:f6:0f:ba:68:07:95:ca:1c:1c:c8:ae:f2: 70:8c:ef:af:2a:35:22:a8:3d:1b:71:f4:a8:5b:ab: de:9c:e4:37:2a:60:52:e0:47:6e:a4:1e:7e:83:02: 20:e5:14:8e:84:63:68:3d:dc:e3:9a:52:b6:cb:d9: 4a:ec:d8:0f:7d:a1:7b:68:6c:b2:7a:2f:47:e7:58: 08:96:9d:37:cd:f7:7c:5e:a0:e9:57:df:f1:4d:71: ec:e0:e8:3c:e7:e6:2d:a0:6f:91:bf:e5:76:39:12: bc:f3:95:a0:9d:6d:8a:df:34:81:b0:17:da:a7:a6: b5:8e:7b:73:63:96:c5:bd:68:04:f8:da:ea:7c:86: 62:6d:3f:aa:30:34:48:9d:be:44:d1:b3:37:ec:12: 24:39:d6:12:7f:0c:84:3e:cc:2b:7a:68:09:f4:91: c6:06:6e:67:18:d7:b5:36:db:0a:07:3b:3e:e1:d1: cd:2c:da:ed:dd:b0:1b:e0:db:b4:26:7a:52:1c:60: 14:d1:9d:3e:13:ef:e4:0b:9f:7d:d8:28:fc:5a:64: e2:38:1b:95:77:ca:8d:4e:6b:dd:44:08:e8:0b:b2: 99:de:5c:f1:76:44:c0:37:e7:43:0d:e2:07:bf:a1: d9:cf:01:4a:5d:7b:87:6d:17:85:76:52:ea:7a:7f: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:76:BE:0F:22:42:73:51:53:4C:E1:56:7D:A3:E3:18:3B:FE:25:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/3968f910-af41-3783-af18-bdf2a9af734d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 64.9.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:5c:27:8e:60:a4:2b:db:37:d2:0d:96:a7:d0:13:66:79:e8: 9c:e2:a0:80:65:c6:22:56:c6:23:bc:b8:47:2c:ce:2f:46:cb: 63:93:7f:70:24:bb:70:74:e3:e2:1e:69:86:68:00:71:08:74: 5f:6e:c6:b5:ce:9e:82:9c:cf:e6:08:95:82:8f:e3:29:5d:7a: b4:d9:7a:0f:c9:bf:02:61:cd:ad:fc:d1:86:84:0d:ce:76:b5: be:42:48:80:b6:03:2a:b6:ca:e2:f7:35:86:6a:e1:f3:ea:b4: a1:ff:da:ae:83:71:bf:db:85:81:06:13:da:21:fd:76:de:c6: 9b:e6:4b:90:a4:12:42:26:9e:e2:03:9f:90:fc:10:bd:99:0b: 35:25:44:04:0f:f2:5d:19:05:5a:10:50:8b:87:00:a4:bb:9b: 0f:bc:df:27:3e:09:da:05:26:dc:03:98:29:b1:ab:a8:4d:13: 42:27:d4:fe:94:69:f7:76:a2:b4:ec:98:eb:f0:05:b5:14:bc: 85:7c:58:fd:b4:e9:e0:cd:23:fa:2f:11:76:a5:a2:04:02:19: 61:96:b3:62:c6:19:d6:da:5a:5f:58:45:79:90:83:7e:96:2c: f3:d1:f7:94:aa:ed:67:f7:4d:c5:4e:56:51:2e:f7:01:37:8a: f1:2c:12:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPb873k9w/RC2xGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZTc5ZjA2MGMtMmJiYy00YzQ3LWFmMTYtYTUwNmRiYWNjYTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07b2D7poB5XKHBzIrvJwjO+vKjUiqD0bcfSo W6venOQ3KmBS4EdupB5+gwIg5RSOhGNoPdzjmlK2y9lK7NgPfaF7aGyyei9H51gI lp03zfd8XqDpV9/xTXHs4Og85+YtoG+Rv+V2ORK885WgnW2K3zSBsBfap6a1jntz Y5bFvWgE+NrqfIZibT+qMDRInb5E0bM37BIkOdYSfwyEPswremgJ9JHGBm5nGNe1 NtsKBzs+4dHNLNrt3bAb4Nu0JnpSHGAU0Z0+E+/kC5992Cj8WmTiOBuVd8qNTmvd RAjoC7KZ3lzxdkTAN+dDDeIHv6HZzwFKXXuHbReFdlLqen/OiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC12vg8iQnNRU0zhVn2j4xg7/iV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMzk2OGY5MTAtYWY0MS0z NzgzLWFmMTgtYmRmMmE5YWY3MzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAnhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpcJ45gpCvbN9INlqfQE2Z56JzioIBlxiJWxiO8uEcszi9Gy2OTf3Ak u3B04+IeaYZoAHEIdF9uxrXOnoKcz+YIlYKP4ylderTZeg/JvwJhza380YaEDc52 tb5CSIC2Ayq2yuL3NYZq4fPqtKH/2q6Dcb/bhYEGE9oh/XbexpvmS5CkEkImnuID n5D8EL2ZCzUlRAQP8l0ZBVoQUIuHAKS7mw+83yc+CdoFJtwDmCmxq6hNE0In1P6U afd2orTsmOvwBbUUvIV8WP206eDNI/ovEXalogQCGWGWs2LGGdbaWl9YRXmQg36W LPPR95Sq7Wf3TcVOVlEu9wE3ivEsEm4= -----END CERTIFICATE-----Generated at Sun Sep 27 12:25:32 2026 by rpki-client