$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9df4c3a6-9de6-3577-bfb6-ce4b8baedc0c.roa File: 9df4c3a6-9de6-3577-bfb6-ce4b8baedc0c.roa (raw, json) Hash identifier: gnrG1krQte9IA3f/b7n5OtQl+AlPo+5i6m6QcPSMIWI= Subject key identifier: 70:13:E0:C2:B8:49:CA:E5:BC:8A:3B:45:F3:00:0F:B7:73:95:06:1C Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584F4C3D8E17E882A036362C8E80 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9df4c3a6-9de6-3577-bfb6-ce4b8baedc0c.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 36492 IP address blocks: 64.9.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:8e:17:e8:82:a0:36:36:2c:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d1027e37-66b0-47d7-88d4-4ce3ba5ad2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:71:d1:a3:df:5a:50:27:b6:b0:8d:80:da:34: 5c:72:6c:32:9a:7a:06:af:a2:b4:aa:d2:44:51:45: 22:28:36:1b:57:66:f3:ec:08:18:50:64:b2:cb:03: 6b:74:90:c4:0c:7c:6b:90:b7:f8:20:59:ec:75:2e: 0b:f0:e0:f6:f8:53:61:36:82:ab:4d:bb:cf:a3:7d: 01:17:5d:bd:f7:57:01:20:67:b4:f8:7d:95:b0:73: d5:58:1f:d6:5a:ba:71:23:2a:32:a5:10:42:88:ba: 3a:14:49:33:b3:18:fb:9c:e5:0b:e5:6d:c3:12:72: 20:c8:ac:4b:89:0a:a7:ef:b8:72:d0:b8:87:eb:be: 36:25:20:bf:2a:7c:ed:fc:03:4b:c3:99:08:6a:ae: 2c:9b:36:87:70:9a:fa:c6:9f:9c:21:63:31:07:71: 4c:c9:0b:16:47:18:0d:c8:69:38:30:bf:61:e3:2f: 22:bc:5d:aa:ba:72:65:a3:55:c3:c7:45:2f:59:29: 75:05:e3:f2:dc:0e:f7:e8:b1:5f:95:2b:d5:c6:31: 0b:98:b3:c2:ec:7d:14:f7:86:d7:10:fe:70:92:09: 74:b9:e9:56:c1:dd:4d:1b:75:ba:d2:e9:5b:f7:4e: f6:c6:62:cd:29:4d:b8:b3:ef:fc:30:bb:4d:de:b9: df:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:13:E0:C2:B8:49:CA:E5:BC:8A:3B:45:F3:00:0F:B7:73:95:06:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/9df4c3a6-9de6-3577-bfb6-ce4b8baedc0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 64.9.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fe:a3:0e:4c:52:4a:4f:89:04:c7:88:16:15:00:ee:0e:8f: 70:f0:8e:05:91:8f:6b:f8:9a:3e:67:bb:95:30:bd:0e:4e:d4: b7:9f:63:c1:e2:4b:57:cf:5b:2b:57:4e:28:51:8e:f4:d1:60: fe:b1:79:ca:39:2a:fc:25:ee:76:57:85:8a:63:1f:f6:3f:cc: c0:b2:86:8a:ce:92:8f:c1:65:d0:2a:99:30:1f:e9:dd:5b:c0: 2c:a3:3d:26:e0:6b:9e:c1:39:4d:c0:28:1a:6c:cc:86:c1:b1: 0a:8d:36:51:80:54:38:e5:61:82:47:5e:0c:63:c5:32:bc:07: 03:1b:d2:fe:0d:4a:ff:a0:f1:5d:1d:f1:9c:b0:15:a4:e8:04: 5a:25:90:e4:4d:97:9a:b5:0d:8f:3f:24:37:5a:74:2a:c4:3e: 2a:5a:31:29:cd:fa:e3:01:bb:2d:79:8e:e3:b3:c4:40:63:6a: 5f:25:9d:50:ce:10:e3:95:36:bb:b4:2a:59:1d:f1:4b:41:a7: d6:c7:4b:eb:68:94:e4:3f:8d:68:eb:c0:7f:48:1d:c8:39:ca: da:74:f9:e9:76:22:b9:9c:48:f8:df:d4:fe:e3:da:0e:59:d3: 50:15:b1:95:08:b8:53:10:a5:e7:20:95:dc:e5:56:db:16:83: 54:37:bc:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPY4X6IKgNjYsjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDEwMjdlMzctNjZiMC00N2Q3LTg4ZDQtNGNlM2JhNWFkMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnHRo99aUCe2sI2A2jRccmwymnoGr6K0qtJE UUUiKDYbV2bz7AgYUGSyywNrdJDEDHxrkLf4IFnsdS4L8OD2+FNhNoKrTbvPo30B F12991cBIGe0+H2VsHPVWB/WWrpxIyoypRBCiLo6FEkzsxj7nOUL5W3DEnIgyKxL iQqn77hy0LiH6742JSC/Knzt/ANLw5kIaq4smzaHcJr6xp+cIWMxB3FMyQsWRxgN yGk4ML9h4y8ivF2qunJlo1XDx0UvWSl1BePy3A736LFflSvVxjELmLPC7H0U94bX EP5wkgl0uelWwd1NG3W60ulb9072xmLNKU24s+/8MLtN3rnfRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAT4MK4ScrlvIo7RfMAD7dzlQYcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvOWRmNGMzYTYtOWRlNi0z NTc3LWJmYjYtY2U0YjhiYWVkYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAn3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX+ow5MUkpPiQTHiBYVAO4Oj3DwjgWRj2v4mj5nu5UwvQ5O1LefY8Hi S1fPWytXTihRjvTRYP6xeco5Kvwl7nZXhYpjH/Y/zMCyhorOko/BZdAqmTAf6d1b wCyjPSbga57BOU3AKBpszIbBsQqNNlGAVDjlYYJHXgxjxTK8BwMb0v4NSv+g8V0d 8ZywFaToBFolkORNl5q1DY8/JDdadCrEPipaMSnN+uMBuy15juOzxEBjal8lnVDO EOOVNru0Klkd8UtBp9bHS+tolOQ/jWjrwH9IHcg5ytp0+el2IrmcSPjf1P7j2g5Z 01AVsZUIuFMQpecgldzlVtsWg1Q3vJc= -----END CERTIFICATE-----Generated at Sat Sep 26 09:03:42 2026 by rpki-client