$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa File: 7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa (raw, json) Hash identifier: mcaq9qEZxsSW/VOqltvnQSmLRGBDYN7fULUzhUCrj5k= Subject key identifier: D8:88:29:ED:88:27:34:DF:95:42:41:96:1E:26:21:40:62:77:83:C3 Certificate issuer: /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Certificate serial: 010D0C9F4328584F4974A43507D79C011F470980 Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13876 IP address blocks: 64.186.128.0/20 maxlen: 24 66.102.224.0/20 maxlen: 24 67.204.0.0/19 maxlen: 24 158.41.16.0/21 maxlen: 24 2607:8300::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:a4:35:07:d7:9c:01:1f:47:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=283d08e8-e552-4236-9ba5-9c1f789e68c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2e:57:54:5c:99:89:f0:2f:16:af:b2:1d:7e: e6:c9:7f:bc:ad:15:a7:3c:1e:cb:cc:42:b2:b3:96: d0:95:f4:03:74:d7:b2:2c:ab:f6:c8:ea:1e:59:e6: 24:14:30:d5:40:7c:d5:93:45:e6:68:df:3f:b0:e4: 12:c7:6d:09:8e:20:a5:eb:96:a0:ee:4a:9d:3b:14: f7:92:17:5d:f7:53:80:81:c3:23:c9:e3:9c:9f:fe: 08:6b:d5:f8:f4:ff:c3:7e:2f:e7:1d:bb:95:39:b5: 5b:68:c4:98:67:6f:36:1d:12:1f:d6:d8:4d:4d:02: d6:05:65:da:d5:40:b2:88:8b:de:39:a6:d2:33:1a: 79:e9:72:aa:4a:db:5d:6f:62:65:17:a8:c3:bc:fc: 26:d0:63:ab:22:8b:74:33:ab:2c:69:59:bc:8b:01: f1:37:20:57:ab:0b:fd:2f:6d:ce:38:3d:61:ad:ad: b3:25:8a:e5:99:81:78:59:ec:11:0b:88:b5:ca:31: 5a:06:de:9c:f4:95:65:f9:90:b6:a7:1f:73:e8:46: d7:73:88:75:f6:50:84:ba:57:a0:70:b9:d2:a2:ac: 0f:46:be:31:cd:69:53:b8:90:90:7b:ed:96:a1:e0: 6e:89:d0:90:e4:d4:85:cb:55:25:aa:b7:e1:a2:b8: 3b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:88:29:ED:88:27:34:DF:95:42:41:96:1E:26:21:40:62:77:83:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl X509v3 Authority Key Identifier: keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer sbgp-ipAddrBlock: critical IPv4: 64.186.128.0/20 66.102.224.0/20 67.204.0.0/19 158.41.16.0/21 IPv6: 2607:8300::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b1:97:f3:78:8b:0b:90:ec:f9:fd:64:14:54:77:3d:cb:b7: 50:04:8e:d7:2f:dc:5c:d8:90:92:0b:a3:07:50:cf:1e:c2:f0: 4d:25:fb:f6:81:c9:c6:09:6f:82:1b:10:93:bd:de:4e:5e:c7: b0:26:0b:d2:94:20:d3:be:21:a1:92:e9:a2:7f:10:96:f9:ab: de:e6:5f:ab:12:d1:19:ad:8c:3f:f4:69:97:36:8a:ce:fe:53: 31:43:85:29:8d:7c:24:79:d6:b1:81:0d:6a:d9:1f:74:e2:9b: a0:46:17:68:cf:0c:82:16:4d:ab:af:cc:9a:87:fa:ea:9d:7e: 16:e4:c4:c8:9f:6e:a0:ec:06:00:c2:05:23:8f:8f:02:a0:4b: fd:3f:fd:09:f7:14:f8:e1:7f:39:b7:42:60:74:b0:ed:9c:88: 09:d8:de:f5:87:b1:41:05:dd:c1:2f:22:a3:af:95:34:31:ca: 20:14:9f:5d:a4:ca:7f:35:ae:65:2b:51:9c:7e:cf:df:75:c1: 8d:74:00:6a:78:da:07:5c:88:33:bb:36:ec:61:65:a0:d1:c1: 76:4e:81:02:2e:01:ab:e1:b3:88:58:4d:49:c6:dc:62:81:0f: 2f:0b:e3:86:6e:b6:a5:77:f5:c1:17:20:b0:a1:c3:65:bc:79: 89:31:71:92 -----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE9JdKQ1B9ecAR9HCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4 YjdkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjgzZDA4ZTgtZTU1Mi00MjM2LTliYTUtOWMxZjc4OWU2OGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC5XVFyZifAvFq+yHX7myX+8rRWnPB7LzEKy s5bQlfQDdNeyLKv2yOoeWeYkFDDVQHzVk0XmaN8/sOQSx20JjiCl65ag7kqdOxT3 khdd91OAgcMjyeOcn/4Ia9X49P/Dfi/nHbuVObVbaMSYZ282HRIf1thNTQLWBWXa 1UCyiIveOabSMxp56XKqSttdb2JlF6jDvPwm0GOrIot0M6ssaVm8iwHxNyBXqwv9 L23OOD1hra2zJYrlmYF4WewRC4i1yjFaBt6c9JVl+ZC2px9z6EbXc4h19lCEuleg cLnSoqwPRr4xzWlTuJCQe+2WoeBuidCQ5NSFy1Ulqrfhorg7NQIDAQABo4IDdjCC A3IwHQYDVR0OBBYEFNiIKe2IJzTflUJBlh4mIUBid4PDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvN2YzN2Q4MzgtN2ZmNi0z ZDFmLWFkYTktNjU5NjVmYzdhNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0 OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4 ZjIwZDhiN2QuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEQLqAAwQE QmbgAwQFQ8wAAwQDnikQMA0EAgACMAcDBQAmB4MAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHSxl/N4iwuQ 7Pn9ZBRUdz3Lt1AEjtcv3FzYkJILowdQzx7C8E0l+/aBycYJb4IbEJO93k5ex7Am C9KUINO+IaGS6aJ/EJb5q97mX6sS0RmtjD/0aZc2is7+UzFDhSmNfCR51rGBDWrZ H3Tim6BGF2jPDIIWTauvzJqH+uqdfhbkxMifbqDsBgDCBSOPjwKgS/0//Qn3FPjh fzm3QmB0sO2ciAnY3vWHsUEF3cEvIqOvlTQxyiAUn12kyn81rmUrUZx+z991wY10 AGp42gdciDO7NuxhZaDRwXZOgQIuAavhs4hYTUnG3GKBDy8L44ZutqV39cEXILCh w2W8eYkxcZI= -----END CERTIFICATE-----Generated at Mon Sep 28 01:07:45 2026 by rpki-client