$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e42d91f9-9804-3d76-af94-8d44f01a2d24.roa File: e42d91f9-9804-3d76-af94-8d44f01a2d24.roa (raw, json) Hash identifier: Qnkz7Q3xWX8so/iM391h8FR5v6rVsBOujE7I3xtsOiA= Subject key identifier: EE:C5:2B:E5:D7:3F:2B:4F:C7:2A:48:4B:19:10:38:44:86:45:FC:D3 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584F4C3D9DE480F9205DB70D6E40 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e42d91f9-9804-3d76-af94-8d44f01a2d24.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 36492 IP address blocks: 64.9.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:9d:e4:80:f9:20:5d:b7:0d:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=486c63c1-2add-4fe7-8c05-e676460064cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:e6:3c:67:d8:7a:e2:ed:6a:65:56:b2:f1: d2:e2:b2:9c:a3:74:5c:03:33:e0:8e:9a:c3:bf:4a: a5:fe:14:9d:01:11:25:24:ef:ab:03:5a:6e:5c:e7: 3e:42:19:87:63:d1:b2:7f:15:ce:79:55:14:04:15: 51:33:b0:35:f7:2a:2d:a4:57:80:0e:07:2a:b2:5a: 27:41:c6:02:f9:ed:c7:b4:8f:11:5c:1f:29:47:0e: 42:7e:80:71:95:d7:7b:ec:23:17:6c:d5:64:e8:3d: 10:0b:12:8f:4f:ce:0e:04:c7:a7:f4:66:36:57:2b: fc:65:07:02:91:a0:fb:c5:62:aa:e9:9e:83:a6:a2: 0e:ab:04:1a:56:31:1d:0f:de:3b:64:db:ab:06:98: 5e:89:0c:4b:f3:10:fb:26:57:a1:3e:d5:5a:13:bd: 84:22:56:93:7d:4b:62:25:47:54:89:c8:a7:15:c7: b7:14:a1:00:1d:cd:d3:52:61:9b:c0:65:28:1f:c1: 21:26:4b:d7:82:24:ae:36:fd:26:35:ef:fe:ce:b8: 46:6e:b7:33:45:a2:56:96:c9:d5:51:12:ba:db:f1: cf:1f:da:50:e6:20:0d:09:11:11:35:45:0a:12:c3: e7:d5:64:d0:5d:f7:f8:8f:7c:84:3f:fd:72:e8:d1: a8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C5:2B:E5:D7:3F:2B:4F:C7:2A:48:4B:19:10:38:44:86:45:FC:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/e42d91f9-9804-3d76-af94-8d44f01a2d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 64.9.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:fc:05:e3:08:ab:0e:17:a6:70:51:d1:5d:8e:b8:10:c5:26: 11:76:ad:e0:3f:75:23:e1:ad:4f:43:45:61:5d:d0:54:a7:25: 64:92:cc:61:b4:c6:f9:9d:66:f8:91:c0:78:6b:9d:73:6b:d9: 93:cc:04:6d:d3:24:59:9f:6e:9e:de:1b:0c:09:4a:21:c0:4b: 09:aa:b3:ab:38:c1:ad:52:86:a2:0d:52:00:05:38:3b:1a:3f: 97:f2:05:d5:8c:27:ac:37:8c:23:5e:20:a5:f1:87:04:5f:01: d4:3d:84:77:31:1f:42:a5:14:62:d6:19:40:0c:6e:a4:9b:c0: c5:64:5e:22:7f:56:ba:57:3e:c7:8f:1b:09:dd:fc:be:eb:7b: aa:65:20:d0:46:15:25:c4:be:63:f0:5e:4b:9c:09:b6:6d:c9: 35:72:9e:7e:fd:23:05:af:72:d4:30:ef:d7:bd:7e:a5:7b:31: ca:fe:a8:d7:9f:49:27:4b:b8:e1:e7:21:98:26:d8:cc:88:1b: 56:6e:24:a6:f7:bf:2e:56:0b:6f:55:d1:6e:4e:d1:d3:9a:84: f1:7b:f9:70:f6:1e:94:33:40:50:1d:ff:e6:80:1d:2e:7d:21: 44:46:7f:bb:ce:4a:c9:72:fd:77:f5:e4:d9:e4:c7:8a:2e:b3: 64:e1:d1:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPZ3kgPkgXbcNbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NDg2YzYzYzEtMmFkZC00ZmU3LThjMDUtZTY3NjQ2MDA2NGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCDmPGfYeuLtamVWsvHS4rKco3RcAzPgjprD v0ql/hSdARElJO+rA1puXOc+QhmHY9GyfxXOeVUUBBVRM7A19yotpFeADgcqslon QcYC+e3HtI8RXB8pRw5CfoBxldd77CMXbNVk6D0QCxKPT84OBMen9GY2Vyv8ZQcC kaD7xWKq6Z6DpqIOqwQaVjEdD947ZNurBpheiQxL8xD7JlehPtVaE72EIlaTfUti JUdUicinFce3FKEAHc3TUmGbwGUoH8EhJkvXgiSuNv0mNe/+zrhGbrczRaJWlsnV URK62/HPH9pQ5iANCRERNUUKEsPn1WTQXff4j3yEP/1y6NGokwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7FK+XXPytPxypISxkQOESGRfzTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZTQyZDkxZjktOTgwNC0z ZDc2LWFmOTQtOGQ0NGYwMWEyZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAntMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr8BeMIqw4XpnBR0V2OuBDFJhF2reA/dSPhrU9DRWFd0FSnJWSSzGG0 xvmdZviRwHhrnXNr2ZPMBG3TJFmfbp7eGwwJSiHASwmqs6s4wa1ShqINUgAFODsa P5fyBdWMJ6w3jCNeIKXxhwRfAdQ9hHcxH0KlFGLWGUAMbqSbwMVkXiJ/VrpXPseP Gwnd/L7re6plINBGFSXEvmPwXkucCbZtyTVynn79IwWvctQw79e9fqV7Mcr+qNef SSdLuOHnIZgm2MyIG1ZuJKb3vy5WC29V0W5O0dOahPF7+XD2HpQzQFAd/+aAHS59 IURGf7vOSsly/Xf15Nnkx4ous2Th0aM= -----END CERTIFICATE-----Generated at Sat Sep 26 13:45:16 2026 by rpki-client