$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/3c531f86-93ab-3895-9a5b-924845a382d9.roa File: 3c531f86-93ab-3895-9a5b-924845a382d9.roa (raw, json) Hash identifier: z9Xe5PrOlL+wwl/WrE5z3cXoilG6mhQnrxlUBQnW19M= Subject key identifier: CF:83:99:22:9C:E3:95:85:1C:9E:CD:45:ED:4A:0E:95:E2:FF:B3:85 Certificate issuer: /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Certificate serial: 010D0C9F4328584F498C2CD64034F7E8C369A9C0 Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/3c531f86-93ab-3895-9a5b-924845a382d9.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63073 IP address blocks: 64.186.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:2c:d6:40:34:f7:e8:c3:69:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=965aa43e-57a2-4ae6-b831-0b223d801a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:cc:b1:0f:13:84:ec:4e:88:38:3e:cd:0f: a7:f8:04:ce:3d:24:1f:9c:75:3e:2b:52:92:85:d3: d9:a4:cd:0f:11:2b:20:45:cc:a4:88:8d:18:80:81: c5:d2:9d:bf:8f:ec:6d:50:f7:bb:20:77:13:45:f8: d0:e4:7e:f7:12:9f:9c:ae:5c:28:3f:d9:e8:2f:18: 97:66:12:73:14:28:aa:e1:b3:4f:ad:bf:5e:99:88: 6d:b5:ba:37:b6:72:98:3f:09:f7:0b:cc:48:ed:d2: 0c:63:07:a8:93:7d:61:f5:bf:98:14:65:87:37:c5: 38:1d:51:95:6e:e0:b3:13:c5:f8:75:96:8d:80:5a: 4f:1f:57:0e:7c:df:13:59:c5:1e:46:fd:03:95:83: 1a:0e:6c:2a:61:bc:ff:a7:9b:1d:d1:d0:0d:37:3a: 38:d1:80:aa:1c:6d:af:95:2a:4f:b9:d2:ea:30:2d: 92:38:91:c3:50:98:62:ba:cd:b5:e4:2f:8b:a1:a0: 16:fc:5e:83:87:ca:1a:b4:5f:59:c0:4b:fd:a2:89: e1:77:16:76:cc:aa:cd:a5:06:4a:14:5e:cf:f2:23: 8a:27:0c:ba:df:5c:9e:77:d7:5c:7b:7b:44:da:09: d4:d1:75:ee:cb:26:3f:a8:74:da:33:31:a0:99:53: d0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:83:99:22:9C:E3:95:85:1C:9E:CD:45:ED:4A:0E:95:E2:FF:B3:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/3c531f86-93ab-3895-9a5b-924845a382d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl X509v3 Authority Key Identifier: keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer sbgp-ipAddrBlock: critical IPv4: 64.186.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:53:16:f0:ad:0e:d2:16:20:7e:21:a5:c3:0d:8c:e6:51:36: 9f:07:42:e7:25:77:d5:04:fa:32:e4:58:44:eb:ca:1a:75:6e: b3:ee:44:76:7c:82:e5:73:d6:e9:4e:c6:73:87:96:a3:5f:f9: bc:0d:8a:9e:42:95:24:65:b2:a8:1f:0b:c5:ed:e0:92:1a:40: 7d:fe:fc:ba:ec:42:9a:73:54:a2:f0:4a:cc:6a:7d:41:f5:7b: c2:7c:cd:4c:9d:d9:e7:6b:81:ac:ce:72:69:03:4f:d3:13:54: 10:e6:7c:45:9f:49:b1:c4:f3:76:8d:29:75:dd:05:4e:96:f2: a9:c7:f2:6a:c1:2d:8c:2e:6a:3c:e0:48:31:6c:53:d1:12:40: 61:f8:1f:8a:3f:b1:c8:a8:20:5c:5e:96:17:15:2a:31:be:27: 1a:d8:b4:35:55:fa:4b:20:63:10:08:08:e8:3d:08:1a:a7:c6: 60:42:9e:99:4a:d4:cc:77:82:2c:b6:ce:1c:72:83:7a:16:e9: 59:d0:8c:a7:e5:8c:25:6d:81:e6:17:fc:91:00:ab:2a:c8:35: 2f:2e:2b:06:82:da:b1:f5:60:31:28:60:5b:70:4d:43:32:eb: 96:fa:67:95:ba:bf:e0:e3:d9:ab:17:38:88:ac:b3:36:8e:5f: 61:74:64:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjCzWQDT36MNpqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4 YjdkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTY1YWE0M2UtNTdhMi00YWU2LWI4MzEtMGIyMjNkODAxYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvfMsQ8ThOxOiDg+zQ+n+ATOPSQfnHU+K1KS hdPZpM0PESsgRcykiI0YgIHF0p2/j+xtUPe7IHcTRfjQ5H73Ep+crlwoP9noLxiX ZhJzFCiq4bNPrb9emYhttbo3tnKYPwn3C8xI7dIMYweok31h9b+YFGWHN8U4HVGV buCzE8X4dZaNgFpPH1cOfN8TWcUeRv0DlYMaDmwqYbz/p5sd0dANNzo40YCqHG2v lSpPudLqMC2SOJHDUJhius215C+LoaAW/F6Dh8oatF9ZwEv9oonhdxZ2zKrNpQZK FF7P8iOKJwy631yed9dce3tE2gnU0XXuyyY/qHTaMzGgmVPQ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+DmSKc45WFHJ7NRe1KDpXi/7OFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvM2M1MzFmODYtOTNhYi0z ODk1LTlhNWItOTI0ODQ1YTM4MmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0 OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4 ZjIwZDhiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLqHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRTFvCtDtIWIH4hpcMNjOZRNp8HQucld9UE+jLkWETryhp1brPuRHZ8 guVz1ulOxnOHlqNf+bwNip5ClSRlsqgfC8Xt4JIaQH3+/LrsQppzVKLwSsxqfUH1 e8J8zUyd2edrgazOcmkDT9MTVBDmfEWfSbHE83aNKXXdBU6W8qnH8mrBLYwuajzg SDFsU9ESQGH4H4o/scioIFxelhcVKjG+JxrYtDVV+ksgYxAICOg9CBqnxmBCnplK 1Mx3giy2zhxyg3oW6VnQjKfljCVtgeYX/JEAqyrINS8uKwaC2rH1YDEoYFtwTUMy 65b6Z5W6v+Dj2asXOIisszaOX2F0ZE0= -----END CERTIFICATE-----Generated at Fri Sep 25 20:08:06 2026 by rpki-client