$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4af76320-999a-3cd7-a897-27c3287ae51b.roa File: 4af76320-999a-3cd7-a897-27c3287ae51b.roa (raw, json) Hash identifier: BFAFN7+HNtL20dpg6fkocX6GSVOQqsymQ1QgncIP/3U= Subject key identifier: 2D:A0:D3:52:E8:FA:A6:FF:7B:CF:78:97:73:4F:9C:C7:DB:F9:CC:25 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584F4973CA8F58C73A24B9886C80 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4af76320-999a-3cd7-a897-27c3287ae51b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32181 IP address blocks: 64.224.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ca:8f:58:c7:3a:24:b9:88:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4fbe27ab-3af8-4a44-b0b4-f88820473eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:48:ef:05:fb:b7:4b:f2:e0:1c:a6:4d:2a: ac:bc:c6:3f:a0:35:e3:87:09:a6:77:a7:b7:85:ff: 69:a2:71:c4:41:6b:0f:55:e9:4b:7c:3c:02:e8:09: 3a:92:0c:56:ec:17:b4:6f:c8:b7:c6:aa:d0:90:42: ea:93:42:cd:84:6a:8f:05:62:fb:25:08:f8:cb:3f: 4c:c1:be:5b:42:dd:25:78:1d:81:94:5f:08:3f:db: c9:18:49:04:b6:01:85:b9:a5:4a:9a:df:71:5b:e1: 47:c3:98:38:02:b3:d0:8f:8d:6a:9a:f2:50:3c:8d: 48:d3:68:d6:61:9e:85:86:b5:2f:2e:de:1c:c9:c5: f8:7e:44:11:8f:9d:0d:96:d4:c9:f1:ec:31:35:86: f6:d6:13:64:80:89:40:d5:31:05:50:c2:69:cd:a8: ce:45:08:11:b3:77:62:7c:4e:96:f3:97:6f:16:72: 53:dc:f8:7c:34:82:60:c0:7a:c8:2e:1c:a4:dd:03: 42:b0:91:52:8b:73:ce:a9:fb:2a:29:fa:70:65:dc: a5:72:4c:3f:13:f3:89:1c:47:c5:47:3a:b2:bb:fa: 4d:0b:cd:ad:14:58:47:39:23:17:54:3b:9f:f8:96: a2:82:60:eb:1f:14:77:24:22:42:5c:cf:29:2c:34: 29:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A0:D3:52:E8:FA:A6:FF:7B:CF:78:97:73:4F:9C:C7:DB:F9:CC:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/4af76320-999a-3cd7-a897-27c3287ae51b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 64.224.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:46:6e:1e:54:26:fd:9d:d6:9b:e1:8c:e2:7a:af:de:1b:61: d1:9d:ee:a5:74:2b:90:5d:dd:e4:86:2e:74:28:99:04:42:a8: 21:4f:e8:ff:b7:be:a8:f7:74:cc:2a:0a:dd:c3:17:ec:6e:48: e1:0c:d6:bc:dc:e1:e5:68:3b:e1:5e:17:b7:18:ae:26:7a:bc: cb:66:71:cf:36:a1:d1:9d:06:9d:e0:a9:53:5c:0f:cc:cc:a1: cf:7d:50:a7:03:d2:40:88:9f:75:7a:8b:cd:71:9c:47:47:f9: a1:e5:d4:ba:67:d8:1f:07:f2:4c:3f:d6:17:ed:23:b8:34:fa: ea:8e:98:81:7a:b4:82:91:7d:2b:d4:4b:e6:56:ef:bc:f2:95: f1:dc:37:1f:95:88:d8:3f:e9:09:ad:7a:d3:d8:fd:f1:ce:8d: e4:42:ba:6b:0a:0f:f3:0c:5c:24:ec:e6:c6:77:37:16:00:50: 40:77:47:ef:00:2f:b7:34:7e:98:77:e6:c2:12:54:2a:f2:41: 2f:79:e4:14:14:1b:2e:37:10:a2:29:d2:81:35:04:08:b1:dd: 0e:9f:8f:c0:f3:d0:32:be:34:3d:e4:24:c2:37:58:3a:92:be: 9b:ae:f4:15:6f:c6:65:60:b2:b1:28:af:1d:af:4c:e4:43:84: e8:f7:3f:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc8qPWMc6JLmIbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGZiZTI3YWItM2FmOC00YTQ0LWIwYjQtZjg4ODIwNDczZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqtI7wX7t0vy4BymTSqsvMY/oDXjhwmmd6e3 hf9ponHEQWsPVelLfDwC6Ak6kgxW7Be0b8i3xqrQkELqk0LNhGqPBWL7JQj4yz9M wb5bQt0leB2BlF8IP9vJGEkEtgGFuaVKmt9xW+FHw5g4ArPQj41qmvJQPI1I02jW YZ6FhrUvLt4cycX4fkQRj50NltTJ8ewxNYb21hNkgIlA1TEFUMJpzajORQgRs3di fE6W85dvFnJT3Ph8NIJgwHrILhyk3QNCsJFSi3POqfsqKfpwZdylckw/E/OJHEfF Rzqyu/pNC82tFFhHOSMXVDuf+JaigmDrHxR3JCJCXM8pLDQpWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2g01Lo+qb/e894l3NPnMfb+cwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNGFmNzYzMjAtOTk5YS0z Y2Q3LWE4OTctMjdjMzI4N2FlNTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOATMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVGbh5UJv2d1pvhjOJ6r94bYdGd7qV0K5Bd3eSGLnQomQRCqCFP6P+3 vqj3dMwqCt3DF+xuSOEM1rzc4eVoO+FeF7cYriZ6vMtmcc82odGdBp3gqVNcD8zM oc99UKcD0kCIn3V6i81xnEdH+aHl1Lpn2B8H8kw/1hftI7g0+uqOmIF6tIKRfSvU S+ZW77zylfHcNx+ViNg/6QmtetPY/fHOjeRCumsKD/MMXCTs5sZ3NxYAUEB3R+8A L7c0fph35sISVCryQS955BQUGy43EKIp0oE1BAix3Q6fj8Dz0DK+ND3kJMI3WDqS vpuu9BVvxmVgsrEorx2vTORDhOj3Px4= -----END CERTIFICATE-----Generated at Sat Sep 26 07:43:39 2026 by rpki-client